Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
File: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft (raw, json)
Hash identifier: PyVCO5NYxkbvlZxtvSQiyVaCayZuQu4GNLc6De4pC+8=
Subject key identifier: D1:E2:24:7A:2E:7F:75:43:A1:ED:FC:89:BA:72:FA:0F:09:06:34:9B
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Certificate issuer: /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial: 0199FC21CAE688AE516D525A7B7AA47693BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:37 +0000
Manifest this update: Sun 19 Oct 2025 11:01:37 +0000
Manifest next update: Mon 20 Oct 2025 11:01:37 +0000
Files and hashes: 1: 27P-M6RaZradAhI02XRCxNJRajc.roa (hash: tTsvmnH5D7n+aX14SSx07+7ZXmYT0c1J8AfGLOoiThg=)
2: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl (hash: 4k5XaNoqRIfgqbgb0zT9rMY5VMB/faBP96xOYMODBY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ca:e6:88:ae:51:6d:52:5a:7b:7a:a4:76:93:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Validity
Not Before: Oct 19 11:01:37 2025 GMT
Not After : Oct 20 11:01:37 2025 GMT
Subject: CN=d1e2247a2e7f7543a1edfc89ba72fa0f0906349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:35:e9:70:3e:41:87:d5:d2:49:f4:0a:a3:
31:91:51:ab:7e:9e:f3:3f:4f:c8:9f:02:a4:2a:62:
bf:9a:cf:c4:1a:69:26:49:5c:b3:ce:56:b0:f0:9a:
63:79:81:cc:a9:f0:88:2c:51:5f:c0:25:fe:01:36:
22:5c:64:40:ef:ec:64:ce:f5:96:52:cd:94:c2:67:
91:6c:13:18:9d:00:8f:4b:02:f7:4b:3b:fd:38:58:
80:67:02:fc:d7:54:db:e1:11:02:1a:16:aa:76:06:
8b:7e:d2:47:2a:6f:f0:4b:1a:fa:ee:a9:64:10:63:
55:20:94:4e:00:21:c5:ee:1e:8d:8c:2c:fb:de:29:
32:6b:75:b9:0c:55:fc:38:4b:52:09:fd:52:27:8b:
be:08:6d:7a:aa:db:f4:5b:13:72:af:44:55:61:36:
ce:e7:5a:cf:74:f4:cd:09:3c:e9:6b:17:80:92:c1:
d3:90:84:d4:3c:91:d0:80:69:4d:d3:04:34:e4:37:
9a:7c:b2:d6:b1:58:f9:02:90:ab:50:6f:d4:61:20:
42:ab:fc:bd:44:cb:be:2c:23:a6:2d:34:1d:39:ac:
7f:03:0b:83:18:a8:ef:0b:98:09:d5:96:2c:f4:5c:
fb:6c:02:b9:f3:8b:0e:ea:68:97:81:47:b4:6f:c5:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E2:24:7A:2E:7F:75:43:A1:ED:FC:89:BA:72:FA:0F:09:06:34:9B
X509v3 Authority Key Identifier:
keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ca:ce:76:8d:8d:89:d2:21:d2:df:e6:46:02:8f:a5:f1:0b:
f9:9b:a4:ab:68:44:f5:08:27:e9:fb:7f:e7:c4:aa:ea:89:5c:
26:77:b8:db:0d:1e:77:4d:be:ed:e9:3f:92:a5:6e:fc:a4:4b:
15:f4:38:e2:b0:43:3e:eb:bd:f0:32:12:0e:c4:38:c2:8c:38:
82:08:79:61:3c:a3:10:1e:e9:65:ee:4c:f9:62:7d:b0:38:f2:
9e:b1:bc:35:8c:51:99:26:3f:f8:46:44:9f:ab:4e:46:7d:d8:
52:26:a3:b3:f1:90:4e:8e:99:37:1e:25:10:41:bc:5d:22:d7:
5d:24:07:78:c1:00:2d:f4:01:30:03:87:d4:b4:c3:75:47:55:
fa:d0:4b:ba:62:24:64:b6:61:d2:78:df:5b:17:82:36:a3:01:
43:03:4b:1b:d2:6d:bd:20:5e:d2:a9:0c:d4:9e:16:a2:ef:21:
7b:1d:34:87:1d:0c:d8:4c:1f:14:f4:27:27:f0:32:63:63:a1:
96:46:f8:6b:af:8d:4c:7f:3e:a4:04:46:8e:66:74:63:f5:bb:
cc:37:ea:b5:67:d8:84:37:a7:e9:73:54:71:68:6e:8a:82:40:
77:92:7e:3d:fb:5f:5f:28:19:4e:4c:0f:e9:18:4c:4d:7d:00:
73:94:48:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IcrmiK5RbVJae3qkdpO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYjAzZjYwYzJjNDg3YjU2YjNlZWYzZDNlZDY3OTEwMWU0
ODdkYjcwHhcNMjUxMDE5MTEwMTM3WhcNMjUxMDIwMTEwMTM3WjAzMTEwLwYDVQQD
EyhkMWUyMjQ3YTJlN2Y3NTQzYTFlZGZjODliYTcyZmEwZjA5MDYzNDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwQ16XA+QYfV0kn0CqMxkVGrfp7z
P0/InwKkKmK/ms/EGmkmSVyzzlaw8JpjeYHMqfCILFFfwCX+ATYiXGRA7+xkzvWW
Us2UwmeRbBMYnQCPSwL3Szv9OFiAZwL811Tb4RECGhaqdgaLftJHKm/wSxr67qlk
EGNVIJROACHF7h6NjCz73ikya3W5DFX8OEtSCf1SJ4u+CG16qtv0WxNyr0RVYTbO
51rPdPTNCTzpaxeAksHTkITUPJHQgGlN0wQ05DeafLLWsVj5ApCrUG/UYSBCq/y9
RMu+LCOmLTQdOax/AwuDGKjvC5gJ1ZYs9Fz7bAK584sO6miXgUe0b8X2LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHiJHouf3VDoe38ibpy+g8JBjSbMB8GA1UdIwQY
MBaAFA6wP2DCxIe1az7vPT7WeRAeSH23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJBX1lNTEVoN1ZyUHU4OVB0WjVFQjVJZmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjBiOTctNDMwNy00ZWNmLWE5ODct
MzY4NzEyNzc2ZjRjLzEvRHJBX1lNTEVoN1ZyUHU4OVB0WjVFQjVJZmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hYjBiOTctNDMwNy00ZWNmLWE5ODctMzY4NzEyNzc2ZjRj
LzEvRHJBX1lNTEVoN1ZyUHU4OVB0WjVFQjVJZmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsrOdo2N
idIh0t/mRgKPpfEL+Zukq2hE9Qgn6ft/58Sq6olcJne42w0ed02+7ek/kqVu/KRL
FfQ44rBDPuu98DISDsQ4wow4ggh5YTyjEB7pZe5M+WJ9sDjynrG8NYxRmSY/+EZE
n6tORn3YUiajs/GQTo6ZNx4lEEG8XSLXXSQHeMEALfQBMAOH1LTDdUdV+tBLumIk
ZLZh0njfWxeCNqMBQwNLG9JtvSBe0qkM1J4Wou8hex00hx0M2EwfFPQnJ/AyY2Oh
lkb4a6+NTH8+pARGjmZ0Y/W7zDfqtWfYhDen6XNUcWhuioJAd5J+PftfXygZTkwP
6RhMTX0Ac5RIoQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:58:10 2025 by rpki-client