Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
File: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json)
Hash identifier: Ll8bcqA7JKEPkAp+19uYqhArtsTaD0c9SQGs+QGysx4=
Subject key identifier: 38:BA:CC:E8:00:76:93:50:D8:4C:8D:B1:60:70:7F:86:6B:21:63:BF
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 0199FBEC330A0A32C9301F4D5D5989F26678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:03:04 +0000
Manifest this update: Sun 19 Oct 2025 10:03:04 +0000
Manifest next update: Mon 20 Oct 2025 10:03:04 +0000
Files and hashes: 1: GsgBqUerkRLRUcbs_Ls-LQF-79g.roa (hash: o+byKU/lMI3gKI/hl2xDgwzjDY3NcVCYFP3p/RabszM=)
2: K6zGiisfyNDOI3oc313yAhjD4A0.roa (hash: 6AQQYPpSiTsTvRjFcFVlDWIfwUUDTzHtOyOPf+oYlEE=)
3: h9M-qa9tzN77x6y4M9oRvv0zAZo.roa (hash: Wom6OpKhUIS6gHUXQCwVqaaK67yLypV+CPblB+/oGcM=)
4: ozhROBFdVytrD3TpvGqAgnW-fDw.roa (hash: 4VtjPfNgZjp68d8isA/cFQEHicpTsWLTQUKQfDvxm2Y=)
5: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: bulwChfqFDk7rruJZeEERmi9zXn4VrQkdu3X+PhymUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:33:0a:0a:32:c9:30:1f:4d:5d:59:89:f2:66:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Oct 19 10:03:04 2025 GMT
Not After : Oct 20 10:03:04 2025 GMT
Subject: CN=38bacce800769350d84c8db160707f866b2163bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:f0:b3:92:5c:4a:ae:1b:ea:c6:0a:cb:78:
a2:48:d0:cc:75:90:2c:88:94:0a:9b:20:7f:5e:47:
2f:d1:e6:1f:82:44:25:fe:89:2c:1d:ae:22:08:9d:
be:97:01:cd:b3:7b:06:59:02:a7:6f:48:ae:30:ca:
3a:92:dd:38:22:6e:db:04:50:48:9d:73:65:b0:56:
a0:22:93:d4:24:17:23:ec:a1:af:30:02:c7:ed:dc:
05:a6:53:3e:e6:f9:34:2c:41:9e:16:b3:e1:32:04:
d7:fb:aa:74:42:4e:c3:81:8a:11:07:9f:6f:a0:9f:
18:de:ff:43:b4:17:69:5f:b2:aa:43:88:3f:aa:e4:
f5:18:28:c2:a1:c2:f0:e0:70:54:fb:b1:67:cd:62:
2b:5d:4b:1d:7e:48:46:6f:8a:5a:ee:67:b9:a1:cc:
89:ce:72:bd:e5:51:0a:ee:4f:e4:e2:37:b5:7a:61:
37:c2:0f:35:bc:83:c7:50:3f:0e:bd:62:3f:bd:6a:
dd:01:25:d9:a1:2c:ec:27:e7:e4:60:4d:44:b3:48:
95:fb:a7:e9:61:44:b9:c2:4d:59:6d:ba:da:35:33:
ad:ef:90:40:02:6c:83:4d:11:be:6a:35:65:3b:ae:
48:b3:8d:11:7d:44:d8:63:07:18:ea:54:30:75:14:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BA:CC:E8:00:76:93:50:D8:4C:8D:B1:60:70:7F:86:6B:21:63:BF
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e0:8e:cc:3a:2f:6e:3e:53:39:f6:ee:78:01:07:c5:18:2d:
bf:30:e7:ad:73:53:9c:43:a9:5a:1a:14:22:8f:91:64:8a:1b:
eb:71:c3:81:f7:83:1a:cc:81:e5:a5:63:bd:5e:3f:33:1e:46:
cb:1c:b6:e4:db:f6:3c:cf:47:63:2b:e5:80:0a:59:b1:f2:91:
1f:ec:ff:36:20:e9:9f:c6:46:c1:c4:79:91:bb:72:35:b7:f8:
94:cb:a3:0a:22:31:ed:ea:de:cd:b4:87:a2:0f:1b:5d:a3:29:
78:19:c9:a9:3d:12:03:4f:10:b0:2d:9d:61:b5:ef:ba:1f:27:
fc:52:37:8e:4e:41:4a:98:39:8a:ff:35:8e:7a:63:b2:74:77:
15:4f:f0:ed:3b:ed:02:55:59:e0:d7:51:fc:f7:49:57:0f:2d:
a5:25:6c:c9:e8:3e:2d:49:24:c3:e6:32:97:eb:f5:d8:b4:d4:
87:ef:61:4a:83:ea:64:aa:83:26:8b:e1:19:7d:ea:15:20:10:
e3:04:be:15:c6:e9:21:c5:47:dd:b5:12:94:00:c9:35:24:05:
9c:cd:f8:3c:8d:59:50:d2:67:84:57:15:3b:10:29:5f:d8:bf:
11:67:1f:ee:ed:30:93:35:d4:87:2b:51:e2:cb:f0:21:cf:1a:
fd:2e:9c:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77DMKCjLJMB9NXVmJ8mZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw
MGM0YzIwHhcNMjUxMDE5MTAwMzA0WhcNMjUxMDIwMTAwMzA0WjAzMTEwLwYDVQQD
EygzOGJhY2NlODAwNzY5MzUwZDg0YzhkYjE2MDcwN2Y4NjZiMjE2M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCbws5JcSq4b6sYKy3iiSNDMdZAs
iJQKmyB/Xkcv0eYfgkQl/oksHa4iCJ2+lwHNs3sGWQKnb0iuMMo6kt04Im7bBFBI
nXNlsFagIpPUJBcj7KGvMALH7dwFplM+5vk0LEGeFrPhMgTX+6p0Qk7DgYoRB59v
oJ8Y3v9DtBdpX7KqQ4g/quT1GCjCocLw4HBU+7FnzWIrXUsdfkhGb4pa7me5ocyJ
znK95VEK7k/k4je1emE3wg81vIPHUD8OvWI/vWrdASXZoSzsJ+fkYE1Es0iV+6fp
YUS5wk1ZbbraNTOt75BAAmyDTRG+ajVlO65Is40RfUTYYwcY6lQwdRR7IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi6zOgAdpNQ2EyNsWBwf4ZrIWO/MB8GA1UdIwQY
MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt
MDQwNTIzNGFiM2YxLzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx
LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeCOzDov
bj5TOfbueAEHxRgtvzDnrXNTnEOpWhoUIo+RZIob63HDgfeDGsyB5aVjvV4/Mx5G
yxy25Nv2PM9HYyvlgApZsfKRH+z/NiDpn8ZGwcR5kbtyNbf4lMujCiIx7erezbSH
og8bXaMpeBnJqT0SA08QsC2dYbXvuh8n/FI3jk5BSpg5iv81jnpjsnR3FU/w7Tvt
AlVZ4NdR/PdJVw8tpSVsyeg+LUkkw+Yyl+v12LTUh+9hSoPqZKqDJovhGX3qFSAQ
4wS+FcbpIcVH3bUSlADJNSQFnM34PI1ZUNJnhFcVOxApX9i/EWcf7u0wkzXUhytR
4svwIc8a/S6cmg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:53 2025 by rpki-client