Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: dMUoS6nBWiQBknbPRlU2trU4fQ+KRPbMslQuEmZsTb0=
Subject key identifier: FD:1F:2A:FC:81:AB:7C:3A:02:C1:39:06:4A:11:1A:BD:FB:B3:8F:60
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 0199FBEA798E41C405A51CB61B63902B39B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: KIZf3g6BxHWuddUFtFyyD/1QdHDsYyGEyJaBLSp2KyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:79:8e:41:c4:05:a5:1c:b6:1b:63:90:2b:39:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=fd1f2afc81ab7c3a02c139064a111abdfbb38f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:cd:6f:6d:ca:e8:33:34:7c:be:48:dc:92:
59:63:a8:ee:6c:d7:39:6f:ef:f7:a9:9d:53:fd:bc:
8f:65:6a:01:28:cb:30:87:5c:2f:6b:7c:ef:b5:b8:
65:61:af:48:57:0f:e4:c4:13:d4:bc:a6:47:f1:18:
2b:18:5c:e7:da:83:3e:4a:86:ac:e1:e8:e0:48:dd:
ba:06:a2:4e:58:8c:54:c3:39:b5:05:1a:aa:73:94:
22:fe:ae:9b:d4:0a:23:87:6a:8a:48:89:88:53:e8:
b3:f5:63:87:39:84:7e:12:e6:08:cb:6d:28:de:92:
8f:cc:f8:c0:11:98:16:2f:2a:45:bb:bb:de:62:9e:
28:a6:ee:62:f0:a9:4b:8e:38:59:a2:c4:aa:d3:8d:
5c:54:84:43:51:bc:0b:a9:74:d7:35:0e:8c:f6:b9:
92:b4:ec:ce:a8:9d:1f:86:67:5a:33:97:71:ec:21:
7b:56:3c:5f:9a:d5:90:d8:cc:01:37:8e:fd:1b:b4:
e8:08:ac:83:53:df:b9:3f:c8:58:4f:ca:2e:01:08:
20:65:ed:3e:b3:dd:d4:92:c0:d7:3c:81:ea:79:49:
d3:27:fe:42:13:e0:10:86:df:73:39:15:4c:cd:85:
1c:bd:37:8f:22:9c:2c:48:cf:b8:e4:7d:e1:c7:ed:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:2A:FC:81:AB:7C:3A:02:C1:39:06:4A:11:1A:BD:FB:B3:8F:60
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:31:bb:5a:f7:e9:77:73:27:f5:6a:d5:a6:96:22:28:f0:fa:
16:b0:3c:6d:01:c2:97:e3:76:1e:6c:b0:d0:e2:7d:b3:b5:0a:
b3:c9:4f:a6:a6:90:c7:13:7d:5c:2e:47:36:fd:43:f8:b1:98:
d3:5c:e8:18:10:a6:63:00:20:3d:2b:78:93:48:66:61:96:00:
f5:2a:66:84:57:a6:f9:85:0d:4c:6a:1c:08:b4:42:cc:5f:2f:
bd:26:75:15:ab:2f:78:dd:d4:db:68:b3:e4:0e:f5:75:3d:9a:
04:6b:44:ef:96:19:65:45:b4:3e:96:c5:fd:fd:a4:e9:fe:a9:
53:33:f9:73:b7:a1:17:a1:4b:ff:eb:8c:f4:ab:cc:5b:e5:33:
51:d1:fe:d9:43:71:40:d2:34:96:48:6d:29:82:ee:7b:8e:0a:
28:60:13:7b:30:ba:27:f7:02:6b:18:e6:db:fe:ab:10:73:02:
c6:7f:e1:86:f0:b6:45:54:76:98:c6:0b:26:5a:3b:e7:e7:28:
3b:6e:4d:96:4e:38:2b:8a:2e:d4:8a:63:49:2a:85:22:c8:d2:
75:b0:95:99:da:b7:b7:35:3c:74:13:c1:c2:29:b2:97:da:13:
06:24:95:2c:3a:00:ed:92:4a:41:65:57:38:0a:c0:8a:f0:4f:
d8:27:4b:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76nmOQcQFpRy2G2OQKzmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZWQ0NDNmODVkMGVlYzY2MzY0Y2Q3NTM2ZjE4ODg4YWMx
Zjk5ZTMwHhcNMjUxMDE5MTAwMTExWhcNMjUxMDIwMTAwMTExWjAzMTEwLwYDVQQD
EyhmZDFmMmFmYzgxYWI3YzNhMDJjMTM5MDY0YTExMWFiZGZiYjM4ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVDNb23K6DM0fL5I3JJZY6jubNc5
b+/3qZ1T/byPZWoBKMswh1wva3zvtbhlYa9IVw/kxBPUvKZH8RgrGFzn2oM+Soas
4ejgSN26BqJOWIxUwzm1BRqqc5Qi/q6b1Aojh2qKSImIU+iz9WOHOYR+EuYIy20o
3pKPzPjAEZgWLypFu7veYp4opu5i8KlLjjhZosSq041cVIRDUbwLqXTXNQ6M9rmS
tOzOqJ0fhmdaM5dx7CF7VjxfmtWQ2MwBN479G7ToCKyDU9+5P8hYT8ouAQggZe0+
s93UksDXPIHqeUnTJ/5CE+AQht9zORVMzYUcvTePIpwsSM+45H3hx+28YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0fKvyBq3w6AsE5BkoRGr37s49gMB8GA1UdIwQY
MBaAFMjtRD+F0O7GY2TNdTbxiIisH5njMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYt
NmQwNDMxMGUzNDJiLzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYtNmQwNDMxMGUzNDJi
LzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDG7Wvfp
d3Mn9WrVppYiKPD6FrA8bQHCl+N2Hmyw0OJ9s7UKs8lPpqaQxxN9XC5HNv1D+LGY
01zoGBCmYwAgPSt4k0hmYZYA9SpmhFem+YUNTGocCLRCzF8vvSZ1FasveN3U22iz
5A71dT2aBGtE75YZZUW0PpbF/f2k6f6pUzP5c7ehF6FL/+uM9KvMW+UzUdH+2UNx
QNI0lkhtKYLue44KKGATezC6J/cCaxjm2/6rEHMCxn/hhvC2RVR2mMYLJlo75+co
O25Nlk44K4ou1IpjSSqFIsjSdbCVmdq3tzU8dBPBwimyl9oTBiSVLDoA7ZJKQWVX
OArAivBP2CdLvA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:22 2025 by rpki-client