Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: m18u/RxbgX8cpvD1noIxSdZmWcRQc5sCczBPnKGKB6c=
Subject key identifier: 1A:1C:1D:E2:39:91:3E:3C:84:F7:16:BB:45:39:69:A6:FF:11:3D:C9
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 0199FBB37741FAED4AF89791F6AA8181711E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 09:01:06 +0000
Manifest this update: Sun 19 Oct 2025 09:01:06 +0000
Manifest next update: Mon 20 Oct 2025 09:01:06 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: aP4WFUIbM6Tv282G8Jbyv976Yp8g0UWCmozP9iIY6ao=)
2: Tl33p-h-oYWG4k1AAbZ0b7tAMuc.roa (hash: HuarYU0/JApAedHcUrTI8IFeZjSh+Z57prgHfyI1KYc=)
3: e59o4nflKfkRbUwhU4WwMTxJI_Y.roa (hash: qghzj0Mw1zkJvf6+G2QT/sr1eaEcjZizZylknw1LbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:77:41:fa:ed:4a:f8:97:91:f6:aa:81:81:71:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Oct 19 09:01:06 2025 GMT
Not After : Oct 20 09:01:06 2025 GMT
Subject: CN=1a1c1de239913e3c84f716bb453969a6ff113dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:73:3b:59:91:78:60:61:cf:e2:25:a7:41:
b8:a1:e7:c8:66:d8:54:24:7e:ab:1e:59:22:6e:90:
2e:9d:2f:bb:00:94:00:9e:a2:97:86:d3:e8:98:a9:
e8:44:18:71:c8:c6:ef:4c:57:03:e2:6b:ba:08:00:
c6:38:5b:37:a3:a8:b4:36:fc:7c:0b:f0:80:32:1c:
87:dd:2f:c7:92:cf:a3:e3:ea:dd:c1:27:59:e8:88:
dc:ac:7e:e0:16:ff:ca:93:a9:6e:9a:ea:f6:fd:69:
13:75:8b:f8:1e:6a:35:50:8b:c1:f8:15:88:32:ad:
64:8d:36:07:de:8e:2b:d0:46:9e:81:c5:14:70:35:
a5:aa:a2:e2:11:f1:a5:93:91:fb:91:ce:45:09:43:
33:1b:7f:07:43:cd:0b:39:0d:22:a6:b2:1e:ff:74:
df:45:de:5b:ad:35:28:e1:e6:d2:4b:0e:f4:f7:60:
e9:66:04:5e:e3:68:af:b8:37:95:df:b8:13:32:9b:
1b:ae:9f:b6:9d:1d:34:6f:88:bc:33:27:4e:4f:8e:
1b:0d:6d:93:75:26:79:37:b4:77:cc:2f:7b:24:86:
f7:ba:9d:1d:66:0d:02:d6:16:04:e6:76:d3:21:b7:
08:df:68:b1:e0:4f:87:40:95:20:fd:bb:6f:a3:02:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1C:1D:E2:39:91:3E:3C:84:F7:16:BB:45:39:69:A6:FF:11:3D:C9
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8a:d4:2c:86:50:c4:ca:c3:be:c4:f0:65:99:46:87:b7:3e:
4b:14:e3:76:29:dd:fd:7f:92:e7:b8:89:13:7b:bd:7a:2a:d8:
19:77:3d:fd:7f:02:db:ee:99:cd:da:41:7c:7f:90:44:85:31:
4e:9f:65:bb:af:8c:1c:84:67:08:03:2a:84:94:43:c7:2c:31:
58:f5:a3:b5:c1:1a:46:04:4a:2f:94:9a:ec:95:8d:df:fe:a6:
fe:58:1f:c2:5b:dc:d1:9b:a9:12:6a:e8:d1:2d:5d:d3:37:6d:
67:7c:ba:11:21:bc:80:c1:8b:ee:c9:b9:72:25:a7:37:2f:07:
78:d3:49:6b:49:ed:2f:42:dd:ee:5f:28:72:7c:9e:f3:2d:15:
06:61:15:a5:c9:d4:5b:aa:43:4c:bb:98:7d:e2:61:da:a5:b9:
73:ad:48:62:0c:96:c5:9a:92:d0:9d:5e:a6:c3:68:b9:6b:33:
b4:5d:f9:87:32:ac:49:3f:19:69:db:3c:8d:b2:0d:a7:dc:53:
4a:5e:c3:44:29:24:c2:21:4d:21:a3:b5:69:f4:b3:8f:89:a4:
cc:70:c8:d1:38:2c:0a:b5:5d:86:b9:1f:ce:02:19:d3:5f:b1:
48:8b:28:9e:74:4c:73:80:53:97:b2:04:77:f0:0a:4a:fc:13:
cd:37:a8:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s3dB+u1K+JeR9qqBgXEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODdkNGM5OGIzZWQ4YTcxN2M3ZDZlNDU1NTRkMzUzZWEz
ZTA1Y2EwHhcNMjUxMDE5MDkwMTA2WhcNMjUxMDIwMDkwMTA2WjAzMTEwLwYDVQQD
EygxYTFjMWRlMjM5OTEzZTNjODRmNzE2YmI0NTM5NjlhNmZmMTEzZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf1zO1mReGBhz+Ilp0G4oefIZthU
JH6rHlkibpAunS+7AJQAnqKXhtPomKnoRBhxyMbvTFcD4mu6CADGOFs3o6i0Nvx8
C/CAMhyH3S/Hks+j4+rdwSdZ6IjcrH7gFv/Kk6lumur2/WkTdYv4Hmo1UIvB+BWI
Mq1kjTYH3o4r0EaegcUUcDWlqqLiEfGlk5H7kc5FCUMzG38HQ80LOQ0iprIe/3Tf
Rd5brTUo4ebSSw7092DpZgRe42ivuDeV37gTMpsbrp+2nR00b4i8MydOT44bDW2T
dSZ5N7R3zC97JIb3up0dZg0C1hYE5nbTIbcI32ix4E+HQJUg/btvowK9fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBocHeI5kT48hPcWu0U5aab/ET3JMB8GA1UdIwQY
MBaAFNGH1MmLPtinF8fW5FVU01PqPgXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMt
NTAyOTY3ZGZjYzQ4LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMtNTAyOTY3ZGZjYzQ4
LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYrULIZQ
xMrDvsTwZZlGh7c+SxTjdind/X+S57iJE3u9eirYGXc9/X8C2+6ZzdpBfH+QRIUx
Tp9lu6+MHIRnCAMqhJRDxywxWPWjtcEaRgRKL5Sa7JWN3/6m/lgfwlvc0ZupEmro
0S1d0zdtZ3y6ESG8gMGL7sm5ciWnNy8HeNNJa0ntL0Ld7l8ocnye8y0VBmEVpcnU
W6pDTLuYfeJh2qW5c61IYgyWxZqS0J1epsNouWsztF35hzKsST8Zads8jbINp9xT
Sl7DRCkkwiFNIaO1afSzj4mkzHDI0TgsCrVdhrkfzgIZ01+xSIsonnRMc4BTl7IE
d/AKSvwTzTeo/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:30 2025 by rpki-client