Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: D6S5mrPlG0VGkvKwCgB9bWMf7Ba5TByixXefN6ODnQc=
Subject key identifier: 74:A4:92:38:91:12:46:88:03:59:3F:65:76:28:44:60:83:72:9A:A1
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 0199FDDA25A3293A632A3392912719593E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:35 +0000
Manifest this update: Sun 19 Oct 2025 19:02:35 +0000
Manifest next update: Mon 20 Oct 2025 19:02:35 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: JSEj+ht/h7+ixTQqhjKxpS4xcBRj0rym6dXmxuMb1i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:25:a3:29:3a:63:2a:33:92:91:27:19:59:3e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Oct 19 19:02:35 2025 GMT
Not After : Oct 20 19:02:35 2025 GMT
Subject: CN=74a492389112468803593f657628446083729aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:61:92:30:f4:5f:79:ce:0c:c0:26:e9:85:
59:fd:f0:0c:c7:41:9d:32:a4:28:63:7c:a0:b1:6c:
ce:dd:fa:f9:a5:57:55:6d:84:fd:21:3e:fb:3d:28:
0b:9a:a6:99:0e:89:68:6b:29:b4:2b:ca:21:30:2c:
84:e9:6b:b4:b4:eb:f3:0e:84:59:b1:6f:f0:68:f1:
d2:d7:0e:6f:d8:2c:a9:c1:f9:40:77:be:60:51:04:
8c:3f:d0:c9:28:5d:a2:b8:8f:bd:6f:bb:4c:f0:0c:
6a:b9:51:2d:d8:5d:55:91:7e:e6:30:8c:9f:b4:6e:
4b:7d:f8:ba:76:a9:74:f7:5e:58:9d:43:a5:47:f2:
b9:b4:47:bd:69:ac:6c:30:5b:ac:c1:29:6a:8b:f8:
e0:b5:d3:2c:f4:70:65:28:4c:ca:ce:33:d4:1c:13:
39:a4:57:d0:d1:2c:1c:89:c7:2c:65:da:f0:28:bf:
b0:ac:fa:6c:36:91:9a:fd:a2:f7:78:c4:ee:79:be:
84:07:73:06:7e:61:de:c6:23:02:63:dd:84:4c:48:
0d:9c:41:68:c3:16:5f:6d:98:2b:a5:2b:42:f1:f9:
3e:c7:2c:0b:79:28:17:1e:2b:92:9e:d3:0d:27:53:
2c:62:d5:4f:46:65:ae:53:a1:5d:97:af:e9:4e:3b:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A4:92:38:91:12:46:88:03:59:3F:65:76:28:44:60:83:72:9A:A1
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:99:84:e7:0d:a4:a1:91:0a:20:4e:3d:64:6c:de:7f:17:c8:
85:d0:e7:45:6e:86:dd:89:21:1f:d8:d6:21:03:52:fb:1f:c1:
2a:a3:34:80:c0:08:67:0d:51:09:c0:fb:3b:33:76:0c:67:66:
52:be:75:61:86:34:00:4c:17:76:04:30:62:50:32:f1:43:40:
d0:ff:ed:01:65:fd:82:6a:c2:f9:04:0b:c9:63:c2:4e:fc:e1:
b9:33:7a:78:ba:8c:47:d1:b8:15:92:e8:e9:34:ec:8a:6d:f0:
50:26:12:44:40:9c:b5:e1:e8:7a:4e:e9:16:6e:ea:92:72:ba:
12:96:ac:87:43:29:45:bc:99:44:76:a7:13:c3:37:2a:fb:f3:
e3:b9:b3:da:78:1e:1a:93:79:2f:e4:8d:a1:30:1f:6f:f0:ff:
b8:8b:f9:05:07:81:f6:b0:b9:a3:48:bf:35:6e:d2:c4:f5:09:
a3:6b:fa:72:e1:da:a1:09:22:be:ab:77:ca:b4:81:cd:92:cf:
85:c7:3c:d4:47:81:48:00:72:28:3e:44:cb:48:10:d1:3a:c9:
31:fb:e4:79:09:0c:5c:2a:57:3e:10:6d:a3:01:50:f5:fb:e5:
a9:0a:61:aa:ca:fb:42:11:8c:de:a7:7b:eb:80:71:d3:8a:ed:
fc:54:03:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92iWjKTpjKjOSkScZWT5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5N2RjNmQ4ZGY1ZDA4NGU5MjMwNjM0ODhkMzdkM2FlMDEx
NDc3N2IwHhcNMjUxMDE5MTkwMjM1WhcNMjUxMDIwMTkwMjM1WjAzMTEwLwYDVQQD
Eyg3NGE0OTIzODkxMTI0Njg4MDM1OTNmNjU3NjI4NDQ2MDgzNzI5YWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcphkjD0X3nODMAm6YVZ/fAMx0Gd
MqQoY3ygsWzO3fr5pVdVbYT9IT77PSgLmqaZDoloaym0K8ohMCyE6Wu0tOvzDoRZ
sW/waPHS1w5v2CypwflAd75gUQSMP9DJKF2iuI+9b7tM8AxquVEt2F1VkX7mMIyf
tG5Lffi6dql0915YnUOlR/K5tEe9aaxsMFuswSlqi/jgtdMs9HBlKEzKzjPUHBM5
pFfQ0SwciccsZdrwKL+wrPpsNpGa/aL3eMTueb6EB3MGfmHexiMCY92ETEgNnEFo
wxZfbZgrpStC8fk+xywLeSgXHiuSntMNJ1MsYtVPRmWuU6Fdl6/pTjudSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSkkjiREkaIA1k/ZXYoRGCDcpqhMB8GA1UdIwQY
MBaAFMl9xtjfXQhOkjBjSI03064BFHd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYt
MmE2YmMzODMyYTBhLzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYtMmE2YmMzODMyYTBh
LzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpmE5w2k
oZEKIE49ZGzefxfIhdDnRW6G3YkhH9jWIQNS+x/BKqM0gMAIZw1RCcD7OzN2DGdm
Ur51YYY0AEwXdgQwYlAy8UNA0P/tAWX9gmrC+QQLyWPCTvzhuTN6eLqMR9G4FZLo
6TTsim3wUCYSRECcteHoek7pFm7qknK6Epash0MpRbyZRHanE8M3Kvvz47mz2nge
GpN5L+SNoTAfb/D/uIv5BQeB9rC5o0i/NW7SxPUJo2v6cuHaoQkivqt3yrSBzZLP
hcc81EeBSAByKD5Ey0gQ0TrJMfvkeQkMXCpXPhBtowFQ9fvlqQphqsr7QhGM3qd7
64Bx04rt/FQDjw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:54:44 2025 by rpki-client