Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: 8CJ05knQXc575EbG1YIupwKdaMivtZgn108nZNVDR2A=
Subject key identifier: EE:E0:29:C2:C9:8F:98:B9:00:84:AA:E6:96:72:17:BF:F3:D2:D8:90
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 0199FC583C3C8D654B945E6B8372AA9B35EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 12E8
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: kkv0Nb4Dn+Pndgjnl6nUnxzAZxL9TAxm4XAWW2IqXik=)
2: yueP6aik06BPwcnmsnEIlj3ek5g.roa (hash: ouDcttk3dQ7QbY0vNsL4yJQH9X2H2u4pj98A+2ZbC4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3c:3c:8d:65:4b:94:5e:6b:83:72:aa:9b:35:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=eee029c2c98f98b90084aae6967217bff3d2d890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:d8:f3:43:d1:98:80:16:98:27:3b:3f:24:
6c:fd:53:15:17:ea:98:f5:98:e9:99:df:89:78:98:
12:df:54:ef:a7:a9:1c:7e:1e:9d:12:f5:16:be:74:
3e:e9:c4:5a:ec:eb:7b:3f:f4:c1:f0:4d:ee:95:86:
9f:2c:77:92:6d:c6:6e:dd:bf:01:77:8b:4f:f2:e9:
f5:7a:6c:db:c3:7d:44:0b:6b:4c:d4:a0:a2:5e:07:
ce:75:c1:53:69:90:04:e5:d7:16:2b:be:81:85:f7:
be:4a:19:fd:9c:a1:f1:bb:95:80:d1:b9:a5:a9:db:
3c:52:19:78:19:aa:ad:e4:31:97:0e:92:75:f1:0b:
4a:d1:c2:66:9b:68:bf:b9:0e:78:84:b6:cb:6f:38:
c9:34:f0:f4:a5:fe:cc:a4:d3:37:8a:f8:cb:ba:77:
52:c4:3b:6f:fd:0f:5b:80:f6:8f:54:de:f0:ac:e4:
b6:57:03:51:70:36:84:ad:9a:0b:6c:08:03:2f:2e:
a9:49:19:47:6c:17:b6:d2:eb:a0:57:61:7e:96:62:
b5:69:0a:69:2b:7a:ce:cb:ce:bc:a0:16:ec:91:f2:
6b:e2:7e:d2:3b:6f:7d:d9:cf:c7:50:f2:dd:b4:56:
b6:97:dd:9a:f4:eb:c1:6a:f5:54:ea:e6:dd:ba:75:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:29:C2:C9:8F:98:B9:00:84:AA:E6:96:72:17:BF:F3:D2:D8:90
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:05:59:97:92:0c:65:34:3c:f3:1c:7b:73:b8:b8:10:04:bc:
37:bc:15:4a:fb:76:57:62:31:8a:fd:3d:f2:d1:f2:01:78:88:
8a:65:0b:75:2a:26:75:07:30:20:a1:3b:78:8c:e2:dd:4a:8d:
76:2d:31:fd:50:39:75:aa:4c:4b:87:b9:cb:cf:09:c5:d4:90:
11:10:fc:bb:cf:ba:b0:60:fb:06:1a:83:53:b6:8b:96:05:2d:
14:62:08:6f:d8:0d:96:45:ab:5e:6a:64:4c:bf:e3:58:bc:1d:
fa:f3:4a:b7:0c:02:05:dc:5e:80:7f:5e:04:52:05:5e:88:68:
4d:7e:11:d2:db:a5:a0:71:11:c5:06:d4:8e:28:61:98:82:f2:
08:a7:bd:93:a9:85:32:87:f7:ba:ae:2c:45:e7:92:97:29:8e:
25:4a:b1:ca:81:03:73:d4:31:31:e1:cd:e1:b6:89:52:13:23:
e6:ce:88:f1:20:38:77:db:18:f8:c8:16:06:5b:3d:a0:87:f3:
b3:b3:f2:d1:8b:ed:07:86:c6:34:14:86:7f:87:8b:fa:b0:b3:
70:d1:49:fa:69:06:26:f1:13:36:4d:9c:94:9b:dd:37:da:a0:
7e:89:7c:0d:6c:97:df:3c:f6:8f:f7:1d:cb:18:aa:7a:6a:42:
b3:be:06:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WDw8jWVLlF5rg3KqmzXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzYzYzUyNGU1NWRmMzRiZjc1ODI4Mjc3NTNlNzdhNzY5
OWM3YTIwHhcNMjUxMDE5MTIwMTA0WhcNMjUxMDIwMTIwMTA0WjAzMTEwLwYDVQQD
EyhlZWUwMjljMmM5OGY5OGI5MDA4NGFhZTY5NjcyMTdiZmYzZDJkODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXrY80PRmIAWmCc7PyRs/VMVF+qY
9Zjpmd+JeJgS31Tvp6kcfh6dEvUWvnQ+6cRa7Ot7P/TB8E3ulYafLHeSbcZu3b8B
d4tP8un1emzbw31EC2tM1KCiXgfOdcFTaZAE5dcWK76Bhfe+Shn9nKHxu5WA0bml
qds8Uhl4Gaqt5DGXDpJ18QtK0cJmm2i/uQ54hLbLbzjJNPD0pf7MpNM3ivjLundS
xDtv/Q9bgPaPVN7wrOS2VwNRcDaErZoLbAgDLy6pSRlHbBe20uugV2F+lmK1aQpp
K3rOy868oBbskfJr4n7SO2992c/HUPLdtFa2l92a9OvBavVU6ubdunXKywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7gKcLJj5i5AISq5pZyF7/z0tiQMB8GA1UdIwQY
MBaAFP7GPFJOVd80v3WCgndT53p2mceiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDIt
YjMxZGY3MTE3NzE1LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDItYjMxZGY3MTE3NzE1
LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgVZl5IM
ZTQ88xx7c7i4EAS8N7wVSvt2V2Ixiv098tHyAXiIimULdSomdQcwIKE7eIzi3UqN
di0x/VA5dapMS4e5y88JxdSQERD8u8+6sGD7BhqDU7aLlgUtFGIIb9gNlkWrXmpk
TL/jWLwd+vNKtwwCBdxegH9eBFIFXohoTX4R0tuloHERxQbUjihhmILyCKe9k6mF
Mof3uq4sReeSlymOJUqxyoEDc9QxMeHN4baJUhMj5s6I8SA4d9sY+MgWBls9oIfz
s7Py0YvtB4bGNBSGf4eL+rCzcNFJ+mkGJvETNk2clJvdN9qgfol8DWyX3zz2j/cd
yxiqempCs74GHg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:37 2025 by rpki-client