Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: oE6m7H0gyoq5ec8QcmTxWa5DujRDLHaRw1jFZJfMwCQ=
Subject key identifier: B5:D6:83:34:30:32:14:A8:E7:6C:B3:34:F4:D5:86:B9:59:04:81:55
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 0199FC587D073E2C2767D4D4409E6B9D7410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: EwMUoWYW4dc0tRkkx15ciptmQak.roa (hash: IxyoruIJ2PWmvP6nW1K1qsmgYgo96Vwp6Gm5YCkQlWE=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: WLaCWURZ8IinIEM1yUMe/I08prxO/nNAvaDWoLpITiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7d:07:3e:2c:27:67:d4:d4:40:9e:6b:9d:74:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=b5d68334303214a8e76cb334f4d586b959048155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:e3:12:df:54:88:4a:17:34:d8:b0:74:fe:
c1:c3:74:d0:e8:c8:2c:d7:a3:81:ad:f4:25:3b:ae:
f6:c4:49:cc:ca:dd:45:14:7b:0f:a5:36:82:86:b1:
a4:94:55:d7:d3:45:65:9f:c7:4b:e1:04:00:a1:88:
6c:b1:54:60:05:2f:7f:24:92:c3:4f:f3:14:17:26:
b7:8b:c3:a0:af:12:e4:5e:07:57:6b:0e:f1:88:f6:
89:e7:15:8f:4e:4b:e6:9d:09:3f:0e:d1:ce:61:f6:
ba:79:1f:55:c9:97:fc:a6:88:f9:73:34:27:f7:30:
54:56:e3:fb:bf:08:fd:b6:e2:c1:02:1d:34:da:a9:
e3:cd:07:ac:1d:38:a8:27:08:2f:85:31:08:bd:2c:
2e:f2:43:40:39:45:cd:c5:87:43:87:0a:3c:0a:4b:
c6:d9:93:c5:25:2e:53:eb:84:2d:05:4b:46:38:94:
f6:d8:2f:5d:27:6b:ac:3c:e5:96:fa:6e:88:25:c9:
1d:4e:42:3e:51:cf:0c:eb:bc:76:f1:72:0c:5c:d3:
14:b8:e9:fe:e0:75:e1:bd:e2:5a:8f:45:bc:bb:92:
b0:44:b1:9f:a5:44:b6:39:5a:3d:fa:74:99:2d:87:
9d:f3:ea:ed:52:f5:14:ff:1a:35:02:01:8c:df:6a:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D6:83:34:30:32:14:A8:E7:6C:B3:34:F4:D5:86:B9:59:04:81:55
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a6:78:5e:a4:e3:a3:57:6a:2a:4c:45:1e:25:47:78:37:86:
79:10:99:27:db:7a:ae:3d:a9:5c:eb:ac:e8:db:47:b5:89:4a:
8b:93:56:90:bf:a7:0c:e5:f7:72:68:ca:c9:ba:9c:a7:6e:bc:
be:88:86:29:eb:0e:01:7f:e8:c7:a5:42:80:be:ef:68:7e:39:
a1:f9:71:c0:ab:58:a0:04:f8:65:0d:70:5d:12:ea:21:79:21:
89:77:4a:c3:97:71:90:f5:23:bb:6d:d5:3a:77:c3:b9:ce:5a:
53:7f:df:a0:ff:29:eb:57:06:75:88:72:86:34:0b:33:44:62:
50:ee:d5:64:73:d3:51:0d:0b:eb:d2:4f:44:c3:85:3c:a2:27:
e7:0e:02:15:10:7f:ac:52:34:b8:f1:ae:9f:4e:5f:3a:0e:8d:
c2:1a:b3:ab:0d:9c:a4:1d:38:68:76:84:5b:e7:c2:38:93:ff:
50:00:02:63:fe:03:ed:f4:27:14:88:46:2d:c6:d5:0f:25:8a:
da:da:af:a5:31:0e:88:25:a0:e4:16:fb:30:24:24:8b:1d:84:
f9:e8:ef:3b:6c:98:50:c7:25:70:d5:9a:93:10:1c:55:6f:a5:
97:68:51:08:d5:9a:cf:b7:e0:94:60:89:f9:e8:b8:4d:e7:e6:
c9:e8:07:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WH0HPiwnZ9TUQJ5rnXQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDQxMTIxY2NjNmU2NWQ5MzM5NjFmZDU3MmQ1OWUyNjFm
MjFhMzEwHhcNMjUxMDE5MTIwMTIxWhcNMjUxMDIwMTIwMTIxWjAzMTEwLwYDVQQD
EyhiNWQ2ODMzNDMwMzIxNGE4ZTc2Y2IzMzRmNGQ1ODZiOTU5MDQ4MTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEfjEt9UiEoXNNiwdP7Bw3TQ6Mgs
16OBrfQlO672xEnMyt1FFHsPpTaChrGklFXX00Vln8dL4QQAoYhssVRgBS9/JJLD
T/MUFya3i8OgrxLkXgdXaw7xiPaJ5xWPTkvmnQk/DtHOYfa6eR9VyZf8poj5czQn
9zBUVuP7vwj9tuLBAh002qnjzQesHTioJwgvhTEIvSwu8kNAOUXNxYdDhwo8CkvG
2ZPFJS5T64QtBUtGOJT22C9dJ2usPOWW+m6IJckdTkI+Uc8M67x28XIMXNMUuOn+
4HXhveJaj0W8u5KwRLGfpUS2OVo9+nSZLYed8+rtUvUU/xo1AgGM32pN3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXWgzQwMhSo52yzNPTVhrlZBIFVMB8GA1UdIwQY
MBaAFGEEESHMxuZdkzlh/VctWeJh8hoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEt
ZGJhNmQ3NTk0YzE5LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEtZGJhNmQ3NTk0YzE5
LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqZ4XqTj
o1dqKkxFHiVHeDeGeRCZJ9t6rj2pXOus6NtHtYlKi5NWkL+nDOX3cmjKybqcp268
voiGKesOAX/ox6VCgL7vaH45oflxwKtYoAT4ZQ1wXRLqIXkhiXdKw5dxkPUju23V
OnfDuc5aU3/foP8p61cGdYhyhjQLM0RiUO7VZHPTUQ0L69JPRMOFPKIn5w4CFRB/
rFI0uPGun05fOg6Nwhqzqw2cpB04aHaEW+fCOJP/UAACY/4D7fQnFIhGLcbVDyWK
2tqvpTEOiCWg5Bb7MCQkix2E+ejvO2yYUMclcNWakxAcVW+ll2hRCNWaz7fglGCJ
+ei4TefmyegHmA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:40 2025 by rpki-client