Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier: mpgDhwuDEeyyEm82sSPMs69kSkruV9FMlcAC4FNgAfI=
Subject key identifier: 76:6B:84:66:6D:6C:B7:B5:30:EF:0E:A4:D4:F2:82:41:45:00:9D:A8
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 0199FD345437556DEB94FE175C7493AD8EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: lptqaGP2K3IajTjAMIjoIh/b9ouy3IUCK5p/p3lAuzU=)
2: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (hash: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:54:37:55:6d:eb:94:fe:17:5c:74:93:ad:8e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=766b84666d6cb7b530ef0ea4d4f2824145009da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:67:13:76:13:3a:0c:07:b7:5f:5b:13:17:
9d:5a:e8:ed:1b:8f:1b:dd:73:db:d0:3b:c5:ed:bb:
ca:9f:b8:17:9b:e5:19:9a:fe:07:a8:6c:36:a2:68:
f0:17:5e:f7:f3:6e:09:a3:e0:d6:75:a3:58:3f:22:
28:6a:0d:7b:6c:3c:b9:6c:96:ca:2d:b6:84:48:97:
79:c8:1a:b4:62:8c:57:f9:22:21:da:91:f4:71:4e:
de:68:51:dc:bb:5e:ef:c0:dd:81:0a:2d:1c:97:72:
35:d5:59:ef:4f:63:da:43:a4:5d:a8:db:e9:38:77:
52:9e:7c:ba:8e:cc:6f:ae:ef:4d:b3:84:8c:a8:81:
5f:18:e4:48:d4:fb:da:ca:fc:7b:57:7e:3c:4e:fd:
4a:3d:34:ce:c0:99:87:83:a4:bc:d8:3d:8b:20:89:
4d:d7:92:a0:cc:a5:1f:ba:e8:56:1e:3a:3d:ed:bc:
b3:23:ab:bb:c6:2e:1a:20:0f:a8:cf:ba:53:fc:40:
8b:8e:b1:a5:cd:14:cf:07:93:ed:f6:c8:e1:78:15:
25:32:65:63:25:6e:58:b2:d3:bf:7b:8a:d5:e3:7d:
1e:15:dc:84:ac:7a:dc:af:14:72:5a:8e:32:e2:a0:
28:c9:7d:1d:3a:60:8f:d0:53:f6:a0:02:3e:3a:ea:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6B:84:66:6D:6C:B7:B5:30:EF:0E:A4:D4:F2:82:41:45:00:9D:A8
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3c:6a:63:04:4a:1b:d6:3f:91:a4:4e:62:d4:90:8a:81:77:
ac:de:02:9e:e3:38:fb:18:d8:df:7d:b6:b4:73:25:04:45:e7:
94:29:69:a0:db:9b:d5:6c:0c:f3:1f:88:99:56:42:32:d7:4b:
5b:f8:87:3e:db:59:14:99:28:65:67:b7:8d:37:7e:3a:8b:4b:
20:48:06:86:1f:6f:ab:a8:08:c1:ff:ef:b1:fa:39:07:4b:e9:
e4:6c:9a:5f:3f:1d:4f:18:bd:0e:93:32:24:ac:b4:a6:a4:5b:
a7:c1:d1:9a:2d:01:8c:ab:ca:7c:d5:5b:0e:67:bc:f0:8b:77:
0f:3d:b2:df:d3:0b:dc:3d:f6:08:a3:d3:5b:14:2f:ab:a3:ff:
83:e4:25:49:d4:1d:14:15:e8:98:20:f9:ac:53:b1:7a:7f:7b:
25:d2:b8:1e:c3:c6:b7:86:26:67:b3:65:d8:ed:c6:5d:36:ba:
7c:ac:29:a1:38:26:09:00:ed:5d:d2:b9:a6:f0:8b:9a:c2:1f:
70:50:af:f1:58:00:b9:38:fe:7d:40:a5:29:65:84:be:46:e5:
b0:10:df:5f:fe:2f:40:c5:cb:60:e4:d5:0d:e4:16:46:c2:c0:
e2:4c:69:16:17:03:3d:bd:7d:a2:e0:73:6e:ad:ac:72:3d:63:
24:3a:21:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFQ3VW3rlP4XXHSTrY7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODFmNzIwODJlMzEyMDY5ZDgzZDlhZjRmMzE5Y2YwYWY4
MDM2NDcwHhcNMjUxMDE5MTYwMTI5WhcNMjUxMDIwMTYwMTI5WjAzMTEwLwYDVQQD
Eyg3NjZiODQ2NjZkNmNiN2I1MzBlZjBlYTRkNGYyODI0MTQ1MDA5ZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EVnE3YTOgwHt19bExedWujtG48b
3XPb0DvF7bvKn7gXm+UZmv4HqGw2omjwF173824Jo+DWdaNYPyIoag17bDy5bJbK
LbaESJd5yBq0YoxX+SIh2pH0cU7eaFHcu17vwN2BCi0cl3I11VnvT2PaQ6RdqNvp
OHdSnny6jsxvru9Ns4SMqIFfGORI1Pvayvx7V348Tv1KPTTOwJmHg6S82D2LIIlN
15KgzKUfuuhWHjo97byzI6u7xi4aIA+oz7pT/ECLjrGlzRTPB5Pt9sjheBUlMmVj
JW5YstO/e4rV430eFdyErHrcrxRyWo4y4qAoyX0dOmCP0FP2oAI+Ouo9xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZrhGZtbLe1MO8OpNTygkFFAJ2oMB8GA1UdIwQY
MBaAFGOB9yCC4xIGnYPZr08xnPCvgDZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAt
MjBlZjQyYzliYzM4LzEvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAtMjBlZjQyYzliYzM4
LzEvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzxqYwRK
G9Y/kaROYtSQioF3rN4CnuM4+xjY3322tHMlBEXnlClpoNub1WwM8x+ImVZCMtdL
W/iHPttZFJkoZWe3jTd+OotLIEgGhh9vq6gIwf/vsfo5B0vp5GyaXz8dTxi9DpMy
JKy0pqRbp8HRmi0BjKvKfNVbDme88It3Dz2y39ML3D32CKPTWxQvq6P/g+QlSdQd
FBXomCD5rFOxen97JdK4HsPGt4YmZ7Nl2O3GXTa6fKwpoTgmCQDtXdK5pvCLmsIf
cFCv8VgAuTj+fUClKWWEvkblsBDfX/4vQMXLYOTVDeQWRsLA4kxpFhcDPb19ouBz
bq2scj1jJDoh+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:23 2025 by rpki-client