Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: lx/RN/H6/ZCEQKDPYUfJIp2LYvj8P0+NlwiwSwf5ep0=
Subject key identifier: 1B:90:94:CC:F4:3A:4E:1D:E4:81:B3:5D:15:17:BD:F2:55:7C:05:78
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 0199FBEC037524BC02FC1CC90B9BF1AB710B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: ViKbvRd6QuFfY2qiYEkvFifETVcJlUa+IfSxR3WNJQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:03:75:24:bc:02:fc:1c:c9:0b:9b:f1:ab:71:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=1b9094ccf43a4e1de481b35d1517bdf2557c0578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:3c:08:f7:b6:66:33:57:76:65:cf:d2:d7:
07:53:4f:47:30:90:8d:bf:f8:66:72:05:8f:33:98:
b5:ae:fe:98:99:dd:64:37:e9:93:f6:27:9f:40:77:
e1:ea:b1:51:47:f4:31:00:48:4e:2f:a0:c1:55:8b:
56:53:d7:4e:5e:9b:7a:b6:d2:9a:1f:56:b2:05:75:
dc:11:14:fe:a3:f0:19:50:48:c4:de:c9:cc:d0:1f:
d2:3a:6b:ee:ba:93:79:f8:21:fb:2e:bf:43:29:f9:
60:53:9d:6d:fe:d1:12:78:63:8c:38:b6:1e:3e:46:
22:f5:7b:53:91:ff:20:ab:49:36:5e:22:57:5c:c8:
e4:33:8d:ea:ed:c9:a2:7c:a6:9a:fa:13:b5:5e:64:
ab:59:9b:ef:63:72:e1:a3:92:5d:00:7b:c7:d1:64:
3e:a0:f0:ae:72:6b:bc:ef:7c:a4:17:31:32:a1:bd:
c3:5a:9e:62:1f:69:eb:d7:33:88:29:da:05:ce:89:
8f:0d:81:95:e3:5c:2b:4c:73:23:bf:0b:9d:3d:9e:
a9:d7:c3:70:57:34:64:c3:ac:cf:92:96:a6:e2:a8:
32:2c:d1:59:ea:a6:fa:36:f2:bd:3b:9e:ca:7b:99:
28:03:54:da:4e:a2:0d:ad:a0:32:be:eb:5b:93:d3:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:94:CC:F4:3A:4E:1D:E4:81:B3:5D:15:17:BD:F2:55:7C:05:78
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e6:de:fa:f9:1c:fc:9c:d0:46:2e:09:ce:90:05:5d:91:b2:
8b:45:34:23:f9:25:94:dc:e0:0d:de:e9:87:0a:ea:dd:0f:4d:
c0:e2:59:ed:74:29:41:86:37:2c:38:4f:ff:76:4c:f6:ee:29:
f1:a2:d6:43:05:6a:5c:00:cf:1d:2e:93:09:7d:54:8f:59:a3:
77:7e:72:7c:de:e9:a9:e1:15:07:02:fd:9e:f1:e4:d0:c6:22:
f4:43:9b:23:94:e9:e0:9a:a1:5d:93:c2:51:dd:73:89:38:b9:
c8:05:ff:74:d2:c0:ef:09:36:53:16:ba:de:c4:e6:a7:52:ad:
46:86:5b:3e:90:ac:42:65:23:db:23:f3:1d:d3:a6:f7:4c:2b:
16:bb:04:39:c0:e3:b1:d0:60:88:43:6d:91:2a:6c:2c:44:85:
42:f1:3d:8b:38:bc:ab:9d:81:e4:4d:f4:76:7f:12:e3:6f:28:
5d:6b:2f:2a:6f:a7:47:92:ed:ed:86:9d:93:b0:02:71:05:20:
f5:98:8a:95:0e:d2:96:af:43:cf:0d:03:b6:f5:98:7b:c7:1c:
4d:f1:cc:a9:c6:6b:a7:92:bb:6b:3a:77:bd:93:80:e0:da:8c:
1e:67:9a:64:4e:85:9a:b6:f9:0c:9c:cb:df:fa:1e:67:1c:13:
9a:3b:2b:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77AN1JLwC/BzJC5vxq3ELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODBkMTY1NjliYjI0YTMyOGUyN2I0N2Y3ZDc1MTY1OTcy
NWRlZmIwHhcNMjUxMDE5MTAwMjUyWhcNMjUxMDIwMTAwMjUyWjAzMTEwLwYDVQQD
EygxYjkwOTRjY2Y0M2E0ZTFkZTQ4MWIzNWQxNTE3YmRmMjU1N2MwNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1388CPe2ZjNXdmXP0tcHU09HMJCN
v/hmcgWPM5i1rv6Ymd1kN+mT9iefQHfh6rFRR/QxAEhOL6DBVYtWU9dOXpt6ttKa
H1ayBXXcERT+o/AZUEjE3snM0B/SOmvuupN5+CH7Lr9DKflgU51t/tESeGOMOLYe
PkYi9XtTkf8gq0k2XiJXXMjkM43q7cmifKaa+hO1XmSrWZvvY3Lho5JdAHvH0WQ+
oPCucmu873ykFzEyob3DWp5iH2nr1zOIKdoFzomPDYGV41wrTHMjvwudPZ6p18Nw
VzRkw6zPkpam4qgyLNFZ6qb6NvK9O57Ke5koA1TaTqINraAyvutbk9MpTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuQlMz0Ok4d5IGzXRUXvfJVfAV4MB8GA1UdIwQY
MBaAFHWA0WVpuySjKOJ7R/fXUWWXJd77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xYTE4ZGUtZWZiZC00MWI1LWIzMzYt
NzlmYmQzODVhNTUwLzEvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xYTE4ZGUtZWZiZC00MWI1LWIzMzYtNzlmYmQzODVhNTUw
LzEvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdObe+vkc
/JzQRi4JzpAFXZGyi0U0I/kllNzgDd7phwrq3Q9NwOJZ7XQpQYY3LDhP/3ZM9u4p
8aLWQwVqXADPHS6TCX1Uj1mjd35yfN7pqeEVBwL9nvHk0MYi9EObI5Tp4JqhXZPC
Ud1ziTi5yAX/dNLA7wk2Uxa63sTmp1KtRoZbPpCsQmUj2yPzHdOm90wrFrsEOcDj
sdBgiENtkSpsLESFQvE9izi8q52B5E30dn8S428oXWsvKm+nR5Lt7Yadk7ACcQUg
9ZiKlQ7Slq9Dzw0DtvWYe8ccTfHMqcZrp5K7azp3vZOA4NqMHmeaZE6Fmrb5DJzL
3/oeZxwTmjsrnQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:40 2025 by rpki-client