Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
File: yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json)
Hash identifier: QJCckt1d0koS/DdvWoHPq4VZnyrsgORYmkq2f3na9uU=
Subject key identifier: 13:F2:DE:B7:35:5A:88:4F:2D:9F:F5:D5:01:E6:88:20:E3:31:5D:7F
Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
Certificate issuer: /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Certificate serial: 0199FC8F23C57D4500539B7DAC2A6A33521F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: rYX5OSjisXVBgIC77wXTzITcbqs.roa (hash: SPnPR9xhnE7+gAosfCHCqCDCEcNhjAT2MXJYL+lu5nM=)
2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: MQKILRcbrtVbo0EDPaApMAI1ZfZbctZmJzx0y0pf1xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:23:c5:7d:45:00:53:9b:7d:ac:2a:6a:33:52:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=13f2deb7355a884f2d9ff5d501e68820e3315d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:6b:f2:53:c8:94:58:50:d3:a0:74:2f:c5:
d2:fa:70:b0:ad:70:0e:36:1f:bd:50:6a:6f:7a:90:
55:cd:88:ad:e8:4c:17:3b:6d:50:42:3e:b4:36:69:
4a:0c:de:cb:09:12:df:a5:5c:22:33:9c:fe:17:7a:
2b:53:9b:03:31:7c:12:4e:1d:40:2f:37:b3:c9:96:
7c:d8:48:81:9c:46:8c:20:3c:44:8b:37:f0:89:da:
ba:88:5b:55:76:b4:7a:fd:00:7f:89:6b:24:11:06:
2d:53:f3:72:f4:a8:e4:36:5a:29:71:02:af:c9:47:
86:36:47:29:d9:f0:cf:a3:00:e9:55:d6:ca:0f:58:
75:28:41:fd:00:61:30:44:5c:ef:87:f8:f1:f3:db:
47:b1:32:bc:be:25:42:96:4b:3b:85:86:66:a7:69:
55:f9:ea:c3:57:7a:a7:e6:cc:14:46:cd:7f:a0:b4:
d8:20:43:88:e6:d7:09:7d:93:10:13:0a:7b:6b:04:
39:ee:94:cb:3d:76:d7:7d:7c:e0:05:6e:83:4a:a0:
a4:8b:be:8e:32:a1:23:32:49:b3:d3:ff:be:c8:73:
fd:4c:21:05:09:c4:90:71:c1:0e:bc:94:12:6d:50:
03:af:72:79:6c:ec:a3:56:79:56:53:e9:58:19:12:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F2:DE:B7:35:5A:88:4F:2D:9F:F5:D5:01:E6:88:20:E3:31:5D:7F
X509v3 Authority Key Identifier:
keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:75:61:83:75:a7:f8:86:6e:38:38:db:d0:19:e8:90:7e:c9:
7c:a1:9b:ad:48:3e:c6:6b:23:fa:6a:91:a5:eb:cd:ef:53:50:
90:15:47:ce:62:a2:a8:1d:cb:7d:bc:a9:26:25:87:cf:3f:93:
6a:59:73:39:35:3d:a5:f5:4b:3a:42:57:ea:e3:07:a8:c9:71:
23:35:f5:1c:09:2d:a2:24:6e:a1:45:2a:90:01:12:70:7e:11:
a8:b5:05:88:cf:07:f0:88:da:55:91:19:b2:f3:4d:7e:77:79:
fb:c9:6c:06:dc:90:59:6e:e4:00:2a:e0:a7:f7:e8:7a:47:29:
7c:b3:96:7b:73:0f:3e:92:62:7f:6c:82:8c:65:9a:34:73:1f:
93:8d:ce:fd:c3:b3:da:45:f7:b9:1d:e5:b1:0c:17:fe:5f:f6:
b3:52:f6:80:00:20:10:ee:99:5f:62:08:71:e2:3d:6e:50:68:
06:15:f0:a9:29:ef:69:19:a6:21:33:80:4b:11:7a:98:9f:af:
a2:1a:62:10:92:1f:0e:6c:15:6c:97:7a:94:49:33:1c:61:7c:
f8:46:1a:d6:9e:ef:bf:fe:7d:02:26:9e:e6:b0:32:71:c5:3e:
8d:73:b9:4d:1b:aa:06:1a:6a:a2:06:2b:60:2c:41:57:18:84:
d0:aa:84:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jyPFfUUAU5t9rCpqM1IfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMmNjN2NlNDJlNzljMzUxYWM3ZDI4ZjY0NWRlN2Y1OTM4
YWNjOWMwHhcNMjUxMDE5MTMwMTAzWhcNMjUxMDIwMTMwMTAzWjAzMTEwLwYDVQQD
EygxM2YyZGViNzM1NWE4ODRmMmQ5ZmY1ZDUwMWU2ODgyMGUzMzE1ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwNr8lPIlFhQ06B0L8XS+nCwrXAO
Nh+9UGpvepBVzYit6EwXO21QQj60NmlKDN7LCRLfpVwiM5z+F3orU5sDMXwSTh1A
LzezyZZ82EiBnEaMIDxEizfwidq6iFtVdrR6/QB/iWskEQYtU/Ny9KjkNlopcQKv
yUeGNkcp2fDPowDpVdbKD1h1KEH9AGEwRFzvh/jx89tHsTK8viVClks7hYZmp2lV
+erDV3qn5swURs1/oLTYIEOI5tcJfZMQEwp7awQ57pTLPXbXfXzgBW6DSqCki76O
MqEjMkmz0/++yHP9TCEFCcSQccEOvJQSbVADr3J5bOyjVnlWU+lYGRKExQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPy3rc1WohPLZ/11QHmiCDjMV1/MB8GA1UdIwQY
MBaAFMssx85C55w1GsfSj2Rd5/WTisycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTct
NzgxZDhmYjFkMmZiLzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTctNzgxZDhmYjFkMmZi
LzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnVhg3Wn
+IZuODjb0BnokH7JfKGbrUg+xmsj+mqRpevN71NQkBVHzmKiqB3LfbypJiWHzz+T
allzOTU9pfVLOkJX6uMHqMlxIzX1HAktoiRuoUUqkAEScH4RqLUFiM8H8IjaVZEZ
svNNfnd5+8lsBtyQWW7kACrgp/foekcpfLOWe3MPPpJif2yCjGWaNHMfk43O/cOz
2kX3uR3lsQwX/l/2s1L2gAAgEO6ZX2IIceI9blBoBhXwqSnvaRmmITOASxF6mJ+v
ohpiEJIfDmwVbJd6lEkzHGF8+EYa1p7vv/59Aiae5rAyccU+jXO5TRuqBhpqogYr
YCxBVxiE0KqEvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:43 2025 by rpki-client