Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
File: Y6wkfmJx8GSRY3K1If3IZJslTFU.mft (raw, json)
Hash identifier: j/JmXiCvcOGU3lFKhKrMqBHqV8+jxaDvYbANsltbrgU=
Subject key identifier: 84:F1:F9:75:B9:8F:21:67:19:C4:2F:36:F1:33:C3:8E:7A:3B:6D:AF
Authority key identifier: 63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55
Certificate issuer: /CN=63ac247e6271f064916372b521fdc8649b254c55
Certificate serial: 0199FB7CD6CA0505FC8CE83E06F28C224716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
Manifest number: CC
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: HXhAt88aYTtYDdQLdLWbknoSgT0.roa (hash: azbswWmtD7ITOZIhHbYMzJSZrhSqw/iil9iMk48paVs=)
2: Y6wkfmJx8GSRY3K1If3IZJslTFU.crl (hash: JhGG+eJRzLlnGJnBXygBYSvuimbkmgpvCD5ffrVhScQ=)
3: vlxgwnsrxTB2IrKODmYZkh1eLKk.roa (hash: IINnobAEpyO+WbS5D8S+J3jsTeuhfNz2pRNchm53DWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d6:ca:05:05:fc:8c:e8:3e:06:f2:8c:22:47:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ac247e6271f064916372b521fdc8649b254c55
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=84f1f975b98f216719c42f36f133c38e7a3b6daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:b0:4a:b9:d7:a7:83:a0:c0:e6:17:ab:0a:
74:f5:9f:4d:87:1b:2e:19:1d:a7:d6:12:ac:83:dc:
78:69:46:33:44:42:f6:c9:7b:84:4c:c2:06:fb:7f:
54:9c:8d:cd:10:d4:77:aa:e7:f9:15:17:22:ad:9e:
bc:d3:3c:2c:bf:69:e2:0d:50:ec:0f:e8:50:1d:94:
24:42:ae:7a:d1:6c:87:ee:d5:4a:0a:ff:7f:6b:e2:
b1:3f:f9:78:fc:96:b2:bf:dc:63:cd:1d:0a:88:bf:
1c:81:8b:a3:b3:1d:8f:d9:79:bb:9f:57:32:00:c2:
f7:cf:35:d9:db:47:e4:6a:13:84:54:d4:2c:37:af:
8f:30:68:09:03:a7:24:50:f5:e0:eb:1d:6b:9b:4a:
87:7f:4d:70:48:0c:83:86:80:06:23:65:ef:b3:54:
62:fb:77:08:fc:ac:ca:51:eb:4b:0b:00:bc:47:f7:
8c:bc:23:ba:69:8b:56:0c:09:cb:38:8d:d8:a0:06:
e0:04:7c:dc:b9:db:14:26:16:34:92:bf:3c:46:94:
f3:49:0c:dd:9b:5b:45:88:5c:d1:60:d6:44:44:5d:
56:91:63:5c:b9:b9:e8:6d:c4:c5:ae:80:76:96:53:
90:40:2d:70:a4:38:f0:5f:23:91:6f:ac:de:80:d0:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F1:F9:75:B9:8F:21:67:19:C4:2F:36:F1:33:C3:8E:7A:3B:6D:AF
X509v3 Authority Key Identifier:
keyid:63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e4:53:08:b5:f9:17:0e:69:08:66:46:e6:fe:e3:98:87:74:
29:cd:49:84:5f:f5:c6:d5:3f:6a:90:8e:32:c4:97:7d:47:78:
ce:04:a5:53:55:83:5c:f6:02:05:51:ce:1d:2d:bb:a4:76:fc:
4e:77:8a:fa:59:58:ab:2a:57:10:b8:f8:eb:3a:f6:52:d0:98:
df:f8:ff:12:8c:6e:a1:f7:23:49:94:b0:a6:57:32:b0:da:b6:
2c:7b:9a:26:55:35:c0:76:16:45:d4:03:ee:7e:ba:fb:4e:f6:
13:fd:d8:48:85:bb:8c:d0:77:44:ea:c6:76:46:7f:93:16:5b:
a8:c8:ef:7d:d0:72:84:76:79:78:c7:b4:8a:3a:83:35:2d:29:
99:65:3a:4f:52:02:55:60:58:42:a4:e8:4a:07:90:c8:ed:04:
ce:29:63:72:97:21:9f:96:ba:b1:d7:2a:58:b8:b3:8c:63:1f:
51:23:1d:a0:ea:0e:8b:b6:4b:f3:71:cc:e3:5f:fc:53:8b:b8:
da:82:76:a6:e6:df:6c:3a:51:e0:02:d9:18:12:2a:33:34:c7:
67:de:bd:0f:31:e8:fe:be:c7:41:19:68:a9:af:2e:17:66:b5:
a8:72:bf:de:4b:71:9b:e2:43:37:22:06:9c:be:06:22:8f:bd:
a7:5b:20:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNbKBQX8jOg+BvKMIkcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYWMyNDdlNjI3MWYwNjQ5MTYzNzJiNTIxZmRjODY0OWIy
NTRjNTUwHhcNMjUxMDE5MDgwMTI2WhcNMjUxMDIwMDgwMTI2WjAzMTEwLwYDVQQD
Eyg4NGYxZjk3NWI5OGYyMTY3MTljNDJmMzZmMTMzYzM4ZTdhM2I2ZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiuwSrnXp4OgwOYXqwp09Z9Nhxsu
GR2n1hKsg9x4aUYzREL2yXuETMIG+39UnI3NENR3quf5FRcirZ680zwsv2niDVDs
D+hQHZQkQq560WyH7tVKCv9/a+KxP/l4/Jayv9xjzR0KiL8cgYujsx2P2Xm7n1cy
AML3zzXZ20fkahOEVNQsN6+PMGgJA6ckUPXg6x1rm0qHf01wSAyDhoAGI2Xvs1Ri
+3cI/KzKUetLCwC8R/eMvCO6aYtWDAnLOI3YoAbgBHzcudsUJhY0kr88RpTzSQzd
m1tFiFzRYNZERF1WkWNcubnobcTFroB2llOQQC1wpDjwXyORb6zegNDMOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITx+XW5jyFnGcQvNvEzw456O22vMB8GA1UdIwQY
MBaAFGOsJH5icfBkkWNytSH9yGSbJUxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zYWQ1ZTYtNDQwYi00NTNjLWEyOWIt
NmZiNjdkOWI4NjA5LzEvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zYWQ1ZTYtNDQwYi00NTNjLWEyOWItNmZiNjdkOWI4NjA5
LzEvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGORTCLX5
Fw5pCGZG5v7jmId0Kc1JhF/1xtU/apCOMsSXfUd4zgSlU1WDXPYCBVHOHS27pHb8
TneK+llYqypXELj46zr2UtCY3/j/EoxuofcjSZSwplcysNq2LHuaJlU1wHYWRdQD
7n66+072E/3YSIW7jNB3ROrGdkZ/kxZbqMjvfdByhHZ5eMe0ijqDNS0pmWU6T1IC
VWBYQqToSgeQyO0Eziljcpchn5a6sdcqWLizjGMfUSMdoOoOi7ZL83HM41/8U4u4
2oJ2pubfbDpR4ALZGBIqMzTHZ969DzHo/r7HQRloqa8uF2a1qHK/3ktxm+JDNyIG
nL4GIo+9p1sgJQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:30 2025 by rpki-client