Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
File: y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft (raw, json)
Hash identifier: 4olW4ecwVB/1iB2+LRL59imsntY5iZt3kADmSa0Dv+Y=
Subject key identifier: 52:CF:88:03:89:EC:76:0B:58:B1:95:21:79:B4:FE:D6:A5:49:A5:1F
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial: 0199FE46D295A38BE56EBF0483FD812C6648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
Manifest number: 13FD
Signing time: Sun 19 Oct 2025 21:01:18 +0000
Manifest this update: Sun 19 Oct 2025 21:01:18 +0000
Manifest next update: Mon 20 Oct 2025 21:01:18 +0000
Files and hashes: 1: 01CdWbGh7Iblu72TWh19DMuKsTg.roa (hash: UMhszvGboz7Q5LH0CKudFHnP8+S6bLFVIG5m3eTTe34=)
2: BRkboOx_3fEjuYhSpVsqCaav6Nw.roa (hash: mmNeus1/l5cYym/HIYOW1rRfvqENuE8CN24AevBAmxw=)
3: y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl (hash: DWkqdPLSVtH+aKW+x+V5/+crhvubTRSbjbwDnJOGZ/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d2:95:a3:8b:e5:6e:bf:04:83:fd:81:2c:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Validity
Not Before: Oct 19 21:01:18 2025 GMT
Not After : Oct 20 21:01:18 2025 GMT
Subject: CN=52cf880389ec760b58b1952179b4fed6a549a51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:5d:a5:3c:0f:38:63:8d:5f:57:cc:68:a6:
8a:a8:6e:d3:6a:1e:13:5e:4b:3d:7d:0c:31:2b:0c:
ad:e5:ce:78:b1:6b:2a:c5:fe:32:6b:69:1b:84:4d:
8f:d2:9e:37:f6:f3:ce:3c:95:d5:9a:bb:82:75:82:
b0:d6:c1:da:35:35:87:6a:64:aa:b4:aa:3d:58:aa:
f4:57:1a:cb:40:73:b5:f0:56:cf:d0:95:d9:39:6b:
fa:3e:d6:72:73:c4:db:21:82:ce:68:70:b9:1a:8e:
d1:21:04:24:da:0b:67:29:16:94:69:ac:3c:2d:6a:
e9:dd:24:30:12:73:1e:46:75:7d:36:94:8c:f1:8d:
f9:c8:cb:11:85:8f:22:4b:68:a7:e3:ac:d8:0b:1c:
df:92:da:0c:8c:1c:ed:9e:29:a4:c7:96:dc:cf:b9:
4b:ad:5e:08:35:34:be:e5:13:c0:2c:6a:02:bd:05:
37:91:c7:91:c1:b8:dc:d1:db:cf:51:ca:d2:b4:92:
80:92:01:69:d9:0b:c9:8f:4f:09:b7:f1:ed:88:b2:
f7:96:20:68:80:b9:50:54:57:83:af:93:96:3e:75:
e8:85:aa:d0:c7:44:a8:c3:4b:88:52:5f:ff:d0:c7:
46:05:5c:b8:f1:73:26:1b:6e:fa:8b:53:30:6f:09:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CF:88:03:89:EC:76:0B:58:B1:95:21:79:B4:FE:D6:A5:49:A5:1F
X509v3 Authority Key Identifier:
keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:94:02:48:79:0a:0d:9a:df:54:64:da:8a:78:6b:4f:a1:03:
ff:5b:0d:6b:9c:4b:07:5f:ed:b6:e5:2a:37:88:4b:1d:50:ff:
39:74:41:14:9e:a4:95:03:93:8c:60:a7:d3:83:0d:34:18:32:
5d:58:92:ab:01:a3:e6:d8:00:78:08:75:6e:e2:0c:bf:85:66:
fe:f0:9b:81:46:62:5d:cc:a7:1c:81:cd:3b:fc:9c:99:18:7f:
06:6b:c2:ac:b8:33:01:51:ff:02:36:a0:4f:a0:d1:40:68:d3:
de:31:04:e1:b1:44:5b:5f:db:7e:1a:6a:b5:4a:47:4c:98:eb:
ec:6d:dd:05:7c:0e:63:e1:a4:c3:7c:ae:89:ac:81:61:c0:6b:
cc:2c:fa:93:1b:c1:d5:9a:89:d3:34:45:e9:64:e8:a0:49:57:
b1:c1:56:79:1a:fc:90:33:8c:d9:cd:f4:27:25:a1:fc:1a:d2:
43:f1:9f:7b:31:83:26:cb:16:e5:9a:bd:80:42:47:34:6d:da:
e1:ea:0b:2c:2d:e8:97:ea:79:62:09:9e:ca:3c:64:06:4a:b5:
d7:e7:f6:3b:d2:1f:09:a8:c2:29:5d:7b:88:40:7f:7d:33:36:
88:fa:e7:60:5c:b8:c4:04:d0:f0:c2:de:9d:8d:de:0d:96:bb:
c0:c8:0e:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RtKVo4vlbr8Eg/2BLGZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmJmMmI4OTU4NGVjOTYwODAwNDhkYzNmZGMyZTM5ODNj
Mjc3ZjMwHhcNMjUxMDE5MjEwMTE4WhcNMjUxMDIwMjEwMTE4WjAzMTEwLwYDVQQD
Eyg1MmNmODgwMzg5ZWM3NjBiNThiMTk1MjE3OWI0ZmVkNmE1NDlhNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJddpTwPOGONX1fMaKaKqG7Tah4T
Xks9fQwxKwyt5c54sWsqxf4ya2kbhE2P0p439vPOPJXVmruCdYKw1sHaNTWHamSq
tKo9WKr0VxrLQHO18FbP0JXZOWv6PtZyc8TbIYLOaHC5Go7RIQQk2gtnKRaUaaw8
LWrp3SQwEnMeRnV9NpSM8Y35yMsRhY8iS2in46zYCxzfktoMjBztnimkx5bcz7lL
rV4INTS+5RPALGoCvQU3kceRwbjc0dvPUcrStJKAkgFp2QvJj08Jt/HtiLL3liBo
gLlQVFeDr5OWPnXoharQx0Sow0uIUl//0MdGBVy48XMmG276i1MwbwkkaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLPiAOJ7HYLWLGVIXm0/talSaUfMB8GA1UdIwQY
MBaAFMtr8riVhOyWCABI3D/cLjmDwnfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2Qt
MTBmZGZjZTk0NTEzLzEveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2QtMTBmZGZjZTk0NTEz
LzEveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZQCSHkK
DZrfVGTainhrT6ED/1sNa5xLB1/ttuUqN4hLHVD/OXRBFJ6klQOTjGCn04MNNBgy
XViSqwGj5tgAeAh1buIMv4Vm/vCbgUZiXcynHIHNO/ycmRh/BmvCrLgzAVH/Ajag
T6DRQGjT3jEE4bFEW1/bfhpqtUpHTJjr7G3dBXwOY+Gkw3yuiayBYcBrzCz6kxvB
1ZqJ0zRF6WTooElXscFWeRr8kDOM2c30JyWh/BrSQ/GfezGDJssW5Zq9gEJHNG3a
4eoLLC3ol+p5YgmeyjxkBkq11+f2O9IfCajCKV17iEB/fTM2iPrnYFy4xATQ8MLe
nY3eDZa7wMgOAA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:33 2025 by rpki-client