Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
File: y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft (raw, json)
Hash identifier: pR+iPLsBuCQTV/dfaDomcRM3rF+0fg0yPzd477j7eJM=
Subject key identifier: 62:67:4F:AD:BF:62:7B:5D:22:38:94:8C:EC:F4:5A:CD:FD:D5:ED:58
Authority key identifier: CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
Certificate issuer: /CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Certificate serial: 0199FC584DC3D38A5E35552A7CB76789B8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
Manifest number: 0111
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl (hash: t6Y/UXnIPaE9AGzMH+4sQHbbffllIYGHRiZUyCquAds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4d:c3:d3:8a:5e:35:55:2a:7c:b7:67:89:b8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=62674fadbf627b5d2238948cecf45acdfdd5ed58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:9f:29:18:37:05:17:31:9e:13:d0:6e:f7:
90:67:11:63:13:cd:17:ef:6d:21:92:d4:3a:88:b1:
6d:cb:e0:a9:62:bd:11:c7:34:cd:e6:9f:96:4e:d7:
70:b6:c0:38:c9:cc:da:9b:59:1e:ef:f9:54:bc:b5:
28:57:2a:4a:61:83:35:53:9b:c4:5b:17:04:d3:80:
87:25:56:97:e3:2a:fe:c5:b2:5b:06:d6:47:37:f2:
4a:c9:40:dc:6e:70:96:91:da:7d:96:b8:92:92:6e:
52:8e:5c:74:b4:04:a5:13:b5:15:68:54:b8:45:56:
1f:11:6c:4a:41:b9:04:3f:6e:4f:2a:69:a6:cf:fe:
53:6e:7c:9d:f7:5f:28:f6:d8:7a:3f:9a:c6:6c:52:
20:61:6d:92:b8:98:3e:f8:32:f5:76:97:45:65:7c:
c0:9a:92:32:0f:63:cd:b0:90:70:86:d6:8b:c0:c3:
71:89:97:f4:50:b5:33:34:42:c1:d1:c7:8b:ca:18:
75:51:ae:7e:74:3b:2a:dd:15:e3:61:ba:33:71:ce:
b1:25:7f:5b:a3:6a:61:cd:e0:32:80:6d:90:3b:d9:
38:fd:64:21:79:d2:1d:a7:5b:4a:52:bf:8d:80:a6:
02:f0:c2:16:25:0e:d4:c3:4d:79:5e:7c:55:e3:f2:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:67:4F:AD:BF:62:7B:5D:22:38:94:8C:EC:F4:5A:CD:FD:D5:ED:58
X509v3 Authority Key Identifier:
keyid:CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:76:2e:b6:ff:33:19:3f:3d:63:5b:df:0d:fb:0e:7b:87:57:
e6:b3:e6:e0:b0:18:07:f7:09:38:df:ec:2a:d3:9d:dc:0e:91:
e3:af:f3:88:ad:c5:fc:12:e3:68:f7:a7:8b:65:05:59:cd:cc:
43:74:fc:1f:16:b9:1f:70:0a:e8:dd:ca:a2:37:1b:74:b7:69:
54:ed:c4:30:3a:ce:af:8e:da:e9:4c:cd:f8:f4:41:2f:dd:21:
24:f4:22:83:ed:8a:10:08:45:f0:5e:6b:d8:2d:d8:80:52:e4:
87:d1:7b:73:4d:9c:2b:93:56:21:0d:70:3d:4e:4c:75:fd:56:
4b:df:b6:3e:dc:e3:c7:35:6d:da:24:be:d2:f8:b6:10:f2:53:
08:e4:fc:e9:ef:90:ba:f6:2d:ee:0a:7a:c2:b8:53:bb:19:71:
2e:b6:17:74:36:25:34:97:51:0f:af:32:7c:86:74:b9:5f:6c:
bb:66:4c:e5:5d:63:cd:97:6a:84:32:18:3f:db:25:bf:0d:22:
3d:49:1f:41:d1:76:2e:0d:3a:d0:fc:b1:90:ff:40:3b:e6:04:
48:0d:4a:46:3d:85:df:d1:e1:d7:d0:71:83:f1:5e:1c:94:7f:
43:13:6c:04:02:86:43:9a:33:50:ca:2a:79:95:92:e0:71:57:
1a:ee:31:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WE3D04peNVUqfLdnibihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDc5NzNiNmEzYzMyMmU3MTk0NmU3ZGE3MDBmZmJkM2Iw
YTA5N2UwHhcNMjUxMDE5MTIwMTA5WhcNMjUxMDIwMTIwMTA5WjAzMTEwLwYDVQQD
Eyg2MjY3NGZhZGJmNjI3YjVkMjIzODk0OGNlY2Y0NWFjZGZkZDVlZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCifKRg3BRcxnhPQbveQZxFjE80X
720hktQ6iLFty+CpYr0RxzTN5p+WTtdwtsA4yczam1ke7/lUvLUoVypKYYM1U5vE
WxcE04CHJVaX4yr+xbJbBtZHN/JKyUDcbnCWkdp9lriSkm5Sjlx0tASlE7UVaFS4
RVYfEWxKQbkEP25PKmmmz/5Tbnyd918o9th6P5rGbFIgYW2SuJg++DL1dpdFZXzA
mpIyD2PNsJBwhtaLwMNxiZf0ULUzNELB0ceLyhh1Ua5+dDsq3RXjYbozcc6xJX9b
o2phzeAygG2QO9k4/WQhedIdp1tKUr+NgKYC8MIWJQ7Uw015XnxV4/LyFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJnT62/YntdIjiUjOz0Ws391e1YMB8GA1UdIwQY
MBaAFMvXlztqPDIucZRufacA/707Cgl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWQ1MjAtYmIxYS00MDAxLTkyYmQt
MGRhZWQ5ODRlODQ5LzEveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYWQ1MjAtYmIxYS00MDAxLTkyYmQtMGRhZWQ5ODRlODQ5
LzEveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXYutv8z
GT89Y1vfDfsOe4dX5rPm4LAYB/cJON/sKtOd3A6R46/ziK3F/BLjaPeni2UFWc3M
Q3T8Hxa5H3AK6N3KojcbdLdpVO3EMDrOr47a6UzN+PRBL90hJPQig+2KEAhF8F5r
2C3YgFLkh9F7c02cK5NWIQ1wPU5Mdf1WS9+2PtzjxzVt2iS+0vi2EPJTCOT86e+Q
uvYt7gp6wrhTuxlxLrYXdDYlNJdRD68yfIZ0uV9su2ZM5V1jzZdqhDIYP9slvw0i
PUkfQdF2Lg060PyxkP9AO+YESA1KRj2F39Hh19Bxg/FeHJR/QxNsBAKGQ5ozUMoq
eZWS4HFXGu4xRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:51 2025 by rpki-client