Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: 539nyoiDeBMmHd3gYab49BIBlgmAqGm6Me7XD0j/JhU=
Subject key identifier: F0:F8:57:FF:B3:5A:C7:47:52:96:3D:28:C6:F9:CC:E5:23:17:D4:A1
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 0199FE7DA849B7D9D2586876F7D5CCF599D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 16CC
Signing time: Sun 19 Oct 2025 22:01:11 +0000
Manifest this update: Sun 19 Oct 2025 22:01:11 +0000
Manifest next update: Mon 20 Oct 2025 22:01:11 +0000
Files and hashes: 1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: +NBHLkmBq/2YX/pqIgFveHzDROJnoIOGItJPJvukR+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:a8:49:b7:d9:d2:58:68:76:f7:d5:cc:f5:99:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Oct 19 22:01:11 2025 GMT
Not After : Oct 20 22:01:11 2025 GMT
Subject: CN=f0f857ffb35ac74752963d28c6f9cce52317d4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:62:0f:a1:6c:a4:13:0c:13:50:59:e7:13:
04:b9:65:a2:a7:ad:8e:b7:38:c2:a3:a7:aa:cb:d6:
56:2a:f6:a5:c3:2f:2b:54:2e:78:2c:3e:98:58:22:
b7:e5:52:d8:fe:82:08:d7:e3:92:0e:2a:2a:fa:15:
70:01:76:1d:12:3a:d8:80:d0:14:39:09:59:e9:65:
7b:c1:23:62:aa:6c:76:7a:5b:ed:16:ca:b3:c5:5f:
a8:85:d0:9e:52:2c:a1:dc:7e:62:d3:c8:e5:f2:85:
b7:4b:31:9f:46:e5:5b:67:7b:b4:8f:3f:7d:f3:a4:
5e:a2:12:f9:48:a4:d0:ea:fa:81:e0:3f:e1:a7:f9:
88:ad:20:cc:2d:e8:8c:d9:9c:a9:da:72:01:b1:ba:
92:e1:d8:5a:ed:c8:33:69:3e:85:86:28:2c:9a:fa:
a5:5b:b3:03:9e:bf:78:4a:94:f9:c8:68:09:2e:8d:
a8:c6:5f:e1:1f:b4:55:02:d9:eb:bf:72:bc:f5:84:
1a:e1:df:50:70:96:a5:5f:a4:cc:57:0c:8a:f6:8c:
d0:60:a4:80:a0:47:78:8d:b2:ec:19:40:95:40:53:
20:0c:9b:79:73:03:24:9a:32:41:ef:13:e4:3f:c7:
a6:00:88:0a:62:2a:5b:70:81:5f:e9:f0:c0:54:f5:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F8:57:FF:B3:5A:C7:47:52:96:3D:28:C6:F9:CC:E5:23:17:D4:A1
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:01:3d:8f:6a:32:2b:4e:aa:a5:2e:72:29:65:c1:be:33:f2:
ef:36:f6:8b:1f:17:f3:39:fb:3c:54:3b:06:51:5e:5f:7c:e4:
e0:71:bf:fe:75:22:2c:91:d9:de:4b:94:b2:42:37:4e:91:bb:
7e:f5:5b:94:b3:e9:29:0a:ef:c8:93:77:84:0c:41:b6:2f:dd:
9f:39:8b:0f:9f:da:e8:f0:bd:2a:c8:82:c8:06:90:11:76:6b:
a5:65:1c:8f:4b:51:0b:70:46:ae:bc:19:f7:09:7c:52:d9:11:
21:5c:bc:dc:81:76:0f:f1:35:03:73:3a:3f:b0:9d:5e:eb:5e:
34:f5:0f:3a:d0:d8:33:31:31:83:44:35:02:4d:34:95:7c:ac:
49:0a:ee:e2:91:31:cf:1b:01:b2:f5:d7:88:ae:86:e0:56:36:
83:91:4b:2e:02:11:0b:99:e4:1b:cd:97:35:0c:4b:77:07:0e:
e1:0f:56:46:84:d4:8a:09:57:33:09:90:9f:4e:c7:f4:6f:94:
34:0f:0e:e4:2c:e0:12:ff:f9:ac:0f:52:25:26:89:f5:2e:9f:
aa:9a:f4:e2:f0:d7:98:3d:47:94:8b:4d:69:b1:18:0d:7a:6c:
38:7c:bd:eb:39:18:8b:dc:96:a4:30:f8:6f:dc:a5:88:ac:14:
41:ce:d2:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fahJt9nSWGh299XM9ZnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OGM1M2I0NzdjM2JmYTcwYjYxZjQyN2I0Nzk5NGMyZDE3
ODM0NTgwHhcNMjUxMDE5MjIwMTExWhcNMjUxMDIwMjIwMTExWjAzMTEwLwYDVQQD
EyhmMGY4NTdmZmIzNWFjNzQ3NTI5NjNkMjhjNmY5Y2NlNTIzMTdkNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mRiD6FspBMME1BZ5xMEuWWip62O
tzjCo6eqy9ZWKvalwy8rVC54LD6YWCK35VLY/oII1+OSDioq+hVwAXYdEjrYgNAU
OQlZ6WV7wSNiqmx2elvtFsqzxV+ohdCeUiyh3H5i08jl8oW3SzGfRuVbZ3u0jz99
86ReohL5SKTQ6vqB4D/hp/mIrSDMLeiM2Zyp2nIBsbqS4dha7cgzaT6Fhigsmvql
W7MDnr94SpT5yGgJLo2oxl/hH7RVAtnrv3K89YQa4d9QcJalX6TMVwyK9ozQYKSA
oEd4jbLsGUCVQFMgDJt5cwMkmjJB7xPkP8emAIgKYipbcIFf6fDAVPVRrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD4V/+zWsdHUpY9KMb5zOUjF9ShMB8GA1UdIwQY
MBaAFMiMU7R3w7+nC2H0J7R5lMLReDRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYt
YjA2NDY2MGY3MDRmLzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYtYjA2NDY2MGY3MDRm
LzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAE9j2oy
K06qpS5yKWXBvjPy7zb2ix8X8zn7PFQ7BlFeX3zk4HG//nUiLJHZ3kuUskI3TpG7
fvVblLPpKQrvyJN3hAxBti/dnzmLD5/a6PC9KsiCyAaQEXZrpWUcj0tRC3BGrrwZ
9wl8UtkRIVy83IF2D/E1A3M6P7CdXuteNPUPOtDYMzExg0Q1Ak00lXysSQru4pEx
zxsBsvXXiK6G4FY2g5FLLgIRC5nkG82XNQxLdwcO4Q9WRoTUiglXMwmQn07H9G+U
NA8O5CzgEv/5rA9SJSaJ9S6fqpr04vDXmD1HlItNabEYDXpsOHy96zkYi9yWpDD4
b9yliKwUQc7SlQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:28 2025 by rpki-client