Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: GOj7jO6rpwvU4fRFYKMfAKYDxEY/EgbJV6gJ8NIGIBQ=
Subject key identifier: 81:13:44:FE:8B:E7:38:D2:63:95:22:28:7D:EC:6F:7E:5F:41:5C:20
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 0199FD343E71848B3FC550C8ED9D8B0F222F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0F50
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: rsfaVnXugLdZgrouNaXHQR6GyUvcHaoYnfFWTMkyy8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3e:71:84:8b:3f:c5:50:c8:ed:9d:8b:0f:22:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=811344fe8be738d2639522287dec6f7e5f415c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:b6:90:70:52:91:72:d6:8e:9d:bf:7c:f2:
be:0f:4d:ce:c2:c8:d7:dd:19:74:3d:a6:b2:74:09:
b7:94:07:28:d0:e9:e0:e6:c1:c7:77:c9:12:f4:8a:
90:54:79:21:91:8a:dc:74:d6:f7:e9:9e:3d:c6:16:
09:a4:89:e4:c5:a1:07:59:75:da:2a:93:48:c1:6c:
ef:04:b7:44:48:83:45:b4:d3:5b:13:7c:22:23:a0:
f3:31:24:e1:7a:34:23:69:a5:ac:dd:a5:bd:e8:db:
48:0c:95:cb:40:84:05:92:11:cf:d8:00:42:4a:ac:
39:b6:8b:03:b0:28:bb:25:dd:44:b9:18:79:0f:d8:
09:3d:0a:89:39:13:8e:98:e1:ba:c9:78:d1:c6:64:
c1:80:51:e4:05:83:cf:4c:5b:f1:49:6b:db:a8:6c:
cc:ad:88:88:c2:25:4a:5d:59:88:53:e1:00:ab:0e:
72:13:63:e2:27:97:f1:8f:ec:c9:6e:c2:11:dd:ca:
13:86:28:ee:6f:19:c7:f3:60:36:d3:0b:f6:fc:db:
c2:ef:3d:c5:c3:00:45:6a:84:b6:7c:4c:0a:bd:8e:
86:02:0e:81:f0:3a:4a:b5:a7:a0:db:b6:30:76:cd:
54:1b:9f:cb:fd:35:5d:90:55:1f:b3:ca:44:bb:a4:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:13:44:FE:8B:E7:38:D2:63:95:22:28:7D:EC:6F:7E:5F:41:5C:20
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:74:7b:fc:e5:3d:7f:bb:99:de:f0:94:86:5b:51:fd:f9:6c:
a0:58:10:02:84:89:2f:8c:fa:84:cd:0c:b9:4d:1d:ac:0f:82:
a5:2f:6a:87:66:a4:32:55:8b:96:68:d2:ce:1a:23:a3:71:d9:
46:c4:0e:ce:ef:e6:62:a7:b3:3d:4f:a9:39:53:69:8d:be:f8:
c4:84:74:ef:6f:76:c2:18:65:bd:84:8b:4c:52:a9:f6:58:c2:
4f:6f:a6:dc:55:b3:06:95:67:e8:75:9f:35:80:e3:a3:77:8d:
1e:a7:5e:54:d1:b7:3d:b2:3e:32:9a:dc:72:b5:ca:56:ad:f4:
03:6e:db:bb:a0:7e:55:ed:24:64:28:05:eb:7f:6d:63:b1:cd:
87:5f:11:25:23:1b:33:c7:a9:76:d8:ae:a8:ba:ef:da:7c:b4:
b7:0e:70:92:a3:40:d7:79:a6:1f:2d:01:87:a7:d7:d0:7b:fd:
34:07:35:53:e5:bc:25:20:0c:02:8a:b1:fe:0a:1c:90:83:eb:
b2:02:bd:8c:96:30:c1:78:85:12:7c:7e:3d:1a:5d:d8:49:f5:
49:27:01:bc:2a:f0:b1:9b:18:cc:dc:b2:e5:60:17:4c:2a:e8:
3c:6f:3d:e3:f5:d7:41:f9:62:6f:89:ef:cd:00:6d:30:57:60:
0b:56:cb:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ND5xhIs/xVDI7Z2LDyIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDMzNTA0MTcxOGIxODgzMGIxZjU4YzE1ZDM1MTg1MTBm
ZTYxMTgwHhcNMjUxMDE5MTYwMTIzWhcNMjUxMDIwMTYwMTIzWjAzMTEwLwYDVQQD
Eyg4MTEzNDRmZThiZTczOGQyNjM5NTIyMjg3ZGVjNmY3ZTVmNDE1YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvy2kHBSkXLWjp2/fPK+D03OwsjX
3Rl0PaaydAm3lAco0Ong5sHHd8kS9IqQVHkhkYrcdNb36Z49xhYJpInkxaEHWXXa
KpNIwWzvBLdESINFtNNbE3wiI6DzMSThejQjaaWs3aW96NtIDJXLQIQFkhHP2ABC
Sqw5tosDsCi7Jd1EuRh5D9gJPQqJOROOmOG6yXjRxmTBgFHkBYPPTFvxSWvbqGzM
rYiIwiVKXVmIU+EAqw5yE2PiJ5fxj+zJbsIR3coThijubxnH82A20wv2/NvC7z3F
wwBFaoS2fEwKvY6GAg6B8DpKtaeg27Ywds1UG5/L/TVdkFUfs8pEu6S6vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIETRP6L5zjSY5UiKH3sb35fQVwgMB8GA1UdIwQY
MBaAFMjTNQQXGLGIMLH1jBXTUYUQ/mEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQt
YTllODQ2ODcxMGEzLzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQtYTllODQ2ODcxMGEz
LzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXR7/OU9
f7uZ3vCUhltR/flsoFgQAoSJL4z6hM0MuU0drA+CpS9qh2akMlWLlmjSzhojo3HZ
RsQOzu/mYqezPU+pOVNpjb74xIR07292whhlvYSLTFKp9ljCT2+m3FWzBpVn6HWf
NYDjo3eNHqdeVNG3PbI+MprccrXKVq30A27bu6B+Ve0kZCgF639tY7HNh18RJSMb
M8epdtiuqLrv2ny0tw5wkqNA13mmHy0Bh6fX0Hv9NAc1U+W8JSAMAoqx/gockIPr
sgK9jJYwwXiFEnx+PRpd2En1SScBvCrwsZsYzNyy5WAXTCroPG894/XXQflib4nv
zQBtMFdgC1bLSQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:30 2025 by rpki-client