Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json)
Hash identifier: CcVEKA6R5sCGZLEIFB3c30aQ7yrmCfcvTPV/dre6iJE=
Subject key identifier: C4:0A:FD:8A:53:8E:2B:47:A1:C3:DE:4E:56:0D:B3:9D:2A:7B:9F:A8
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 0199FCC685EFCB9E2993929A16075FE39FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:32 +0000
Manifest this update: Sun 19 Oct 2025 14:01:32 +0000
Manifest next update: Mon 20 Oct 2025 14:01:32 +0000
Files and hashes: 1: b88Rl7W3m-ZgN433QwmekbZFP6o.roa (hash: NoA21W8ly2WxwAuP2zZWwmclSVAV10KXOOvNxpP+/rg=)
2: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: LCNAfvQsPJqT/bo6/B9cgUP1FFJ1hxerOVH2Swb/K0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:85:ef:cb:9e:29:93:92:9a:16:07:5f:e3:9f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Oct 19 14:01:32 2025 GMT
Not After : Oct 20 14:01:32 2025 GMT
Subject: CN=c40afd8a538e2b47a1c3de4e560db39d2a7b9fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:38:2b:81:be:1d:89:f7:db:1a:89:68:c2:
61:03:03:3b:dd:5c:36:50:fd:ce:ab:ee:8b:8b:d0:
df:9a:8a:85:e6:e5:fc:7b:c1:8f:82:a9:6d:f0:ab:
ec:89:f7:c5:2f:bc:cd:0e:f0:74:88:3e:a3:17:e2:
15:78:c8:fd:09:1e:de:f8:6a:95:bb:af:74:04:ab:
cd:b0:0b:e8:1d:27:3b:d0:4a:a3:2f:a0:dc:e4:7c:
3a:9d:58:9f:69:25:85:5f:8f:ca:ff:e6:6f:3f:90:
ca:1d:ac:0c:24:6a:ac:fc:f7:0c:b3:f9:d8:38:76:
b9:13:25:35:a4:d5:31:e1:72:c5:bb:ef:9b:ad:b2:
ab:3e:30:53:2e:4a:fb:3b:8c:12:fb:a4:82:92:6e:
1b:80:2f:59:5c:46:20:53:7a:4c:fe:cd:73:dc:dc:
43:3c:6c:0c:f5:a0:4d:79:c5:86:b5:42:81:15:b5:
50:bb:1f:a5:8e:13:a8:22:a2:16:7e:0c:ef:18:b7:
43:d4:4c:77:e6:a3:93:b5:b3:8d:b0:fc:2a:d2:26:
58:26:36:24:f9:1e:cb:a8:5b:2c:80:9a:57:ea:01:
4e:62:b4:62:f0:4a:e5:82:70:84:7e:0e:ac:fa:84:
11:8b:e5:47:cc:08:32:d1:01:e0:f4:27:9d:c5:71:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0A:FD:8A:53:8E:2B:47:A1:C3:DE:4E:56:0D:B3:9D:2A:7B:9F:A8
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:aa:a0:13:10:62:ba:fc:2d:1b:ed:26:36:ea:c5:d4:d4:e5:
8a:6b:76:6d:7b:0e:21:3e:55:f6:f5:9f:16:dc:d4:8e:be:6a:
0b:c1:d7:60:11:e5:45:bc:0d:46:8a:f3:48:30:64:2b:29:97:
38:ae:ab:6a:bf:41:e9:cb:5c:7a:fd:64:52:00:ab:3a:cf:ad:
96:01:42:e0:08:ae:3e:da:3a:0b:4d:9f:dc:5e:a6:9d:f3:42:
e7:e0:0f:f3:2b:23:ef:71:2b:a4:82:7a:98:0c:ab:ff:f1:59:
d8:48:c1:65:cd:ee:80:68:15:61:5b:c8:4d:fa:96:72:35:8b:
45:23:e6:52:65:42:61:1d:de:9d:b5:8a:68:63:be:34:da:c6:
30:d9:ae:14:78:c6:5c:34:89:66:10:ae:8c:27:a7:09:37:c2:
13:48:dc:55:99:84:d0:57:68:57:9a:fe:7c:fe:e2:2a:5c:0d:
04:9d:1e:2d:b8:7e:05:da:1a:d4:ca:05:fc:b3:c2:9d:3c:91:
f1:b3:f8:e1:56:5c:fc:9a:26:ad:dd:67:45:1d:9a:65:d4:28:
f1:a9:89:78:b0:2e:4a:e7:dc:70:3d:18:b6:60:29:a0:a3:a6:
8f:a8:af:ab:ee:ec:1d:b5:cd:7d:38:f3:14:81:fd:78:c5:52:
17:b6:75:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xoXvy54pk5KaFgdf45+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxODZlNjRiNTgyM2M0YzYxMjg3ODU4ZDk3NzBjNzBkZjcw
NmIwY2MwHhcNMjUxMDE5MTQwMTMyWhcNMjUxMDIwMTQwMTMyWjAzMTEwLwYDVQQD
EyhjNDBhZmQ4YTUzOGUyYjQ3YTFjM2RlNGU1NjBkYjM5ZDJhN2I5ZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5s4K4G+HYn32xqJaMJhAwM73Vw2
UP3Oq+6Li9DfmoqF5uX8e8GPgqlt8KvsiffFL7zNDvB0iD6jF+IVeMj9CR7e+GqV
u690BKvNsAvoHSc70EqjL6Dc5Hw6nVifaSWFX4/K/+ZvP5DKHawMJGqs/PcMs/nY
OHa5EyU1pNUx4XLFu++brbKrPjBTLkr7O4wS+6SCkm4bgC9ZXEYgU3pM/s1z3NxD
PGwM9aBNecWGtUKBFbVQux+ljhOoIqIWfgzvGLdD1Ex35qOTtbONsPwq0iZYJjYk
+R7LqFssgJpX6gFOYrRi8ErlgnCEfg6s+oQRi+VHzAgy0QHg9CedxXEoPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQK/YpTjitHocPeTlYNs50qe5+oMB8GA1UdIwQY
MBaAFHGG5ktYI8TGEoeFjZdwxw33BrDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMjA5NjMtZmFkNy00ZTM0LWJmMWUt
NjU4YjgwMGE1ZDYxLzEvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hMjA5NjMtZmFkNy00ZTM0LWJmMWUtNjU4YjgwMGE1ZDYx
LzEvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKqgExBi
uvwtG+0mNurF1NTlimt2bXsOIT5V9vWfFtzUjr5qC8HXYBHlRbwNRorzSDBkKymX
OK6rar9B6ctcev1kUgCrOs+tlgFC4AiuPto6C02f3F6mnfNC5+AP8ysj73ErpIJ6
mAyr//FZ2EjBZc3ugGgVYVvITfqWcjWLRSPmUmVCYR3enbWKaGO+NNrGMNmuFHjG
XDSJZhCujCenCTfCE0jcVZmE0FdoV5r+fP7iKlwNBJ0eLbh+Bdoa1MoF/LPCnTyR
8bP44VZc/Jomrd1nRR2aZdQo8amJeLAuSufccD0YtmApoKOmj6ivq+7sHbXNfTjz
FIH9eMVSF7Z1qw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:39 2025 by rpki-client