Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: hERX/O/xh38YDnT62KmJUr00dGA920npUq1bgVBcDD8=
Subject key identifier: 99:3D:76:48:93:5C:97:BB:D6:E5:77:65:94:43:3D:D6:67:C5:6C:3F
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 0199FAA10E92C540E3408D063B774B4CD34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 1422
Signing time: Sun 19 Oct 2025 04:01:22 +0000
Manifest this update: Sun 19 Oct 2025 04:01:22 +0000
Manifest next update: Mon 20 Oct 2025 04:01:22 +0000
Files and hashes: 1: 4shZBDKZZPGnSQMfuQiOImBHql8.roa (hash: Jfoq3n1s/kyNKvCWlVGyWbHUx4CSO8/9+CCCYgnc/Us=)
2: FA2h5OHRpegZzdAFMMwkYVBg-BM.roa (hash: 9GzazJbnHKp6+I1Ph8x2q38kHV8Nlnih0rihfAr5aBo=)
3: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: JQ5p+hK07GODJTinQHUGHOTSIEM2nX/+m0Itcxy5mTg=)
4: ZEOW67E73LjGkhRbjT8p8HAuQ7g.roa (hash: 3byQhC85THLNsX/WfVA4T3mVllKuuMpO1Ynx6g/Ksak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:0e:92:c5:40:e3:40:8d:06:3b:77:4b:4c:d3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Oct 19 04:01:22 2025 GMT
Not After : Oct 20 04:01:22 2025 GMT
Subject: CN=993d7648935c97bbd6e5776594433dd667c56c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9a:2a:14:78:0b:3b:2a:61:ed:5a:51:0e:ed:
9b:f2:a6:2f:7f:a7:39:ff:ad:3c:1b:07:b8:d5:86:
52:be:a5:ae:86:45:ab:54:4c:35:48:a6:33:9c:e0:
bb:d5:b6:40:53:e7:11:05:32:3d:68:64:e3:6d:7d:
40:ef:ce:93:11:fe:9b:49:b9:61:90:c0:41:28:12:
bc:6e:ed:01:c6:2f:2b:ea:d4:42:59:d6:77:b0:8e:
47:43:e6:f9:9d:6e:14:fc:a6:04:2b:ee:b6:09:47:
59:bf:0c:12:ba:3c:b6:48:b4:70:cb:41:1f:87:8f:
8a:e6:0f:a1:6f:02:b6:d0:24:1d:01:86:20:7f:65:
4a:60:14:f7:1a:8f:f7:6b:bf:af:ba:fd:3c:bd:6e:
5b:b7:12:da:ce:c7:c6:3e:86:39:b5:4a:e6:bf:66:
0c:b8:f9:2c:06:66:52:12:5f:89:59:24:a8:e4:0b:
70:64:d2:cd:d1:3f:07:da:65:5b:3d:2d:34:44:de:
7c:28:7a:60:90:3d:cb:44:df:a8:4e:b5:e1:4f:d5:
f1:c1:e3:e0:af:65:3d:81:ea:87:66:9c:ac:95:4c:
95:c7:9a:55:92:3e:7d:f0:7f:e9:8f:c1:57:1e:dc:
f4:71:31:f5:26:bf:90:fe:02:55:f7:6a:35:1e:ba:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3D:76:48:93:5C:97:BB:D6:E5:77:65:94:43:3D:D6:67:C5:6C:3F
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:06:12:0f:08:9c:76:1b:10:2c:e3:5b:28:c2:fa:ff:8a:ef:
5b:a2:eb:d5:e6:8b:83:87:24:eb:ed:e1:48:41:ed:6e:65:ef:
b3:90:fa:b9:a7:17:59:d9:49:44:29:99:3e:d0:80:6d:36:13:
24:e5:70:e5:5b:4a:22:4a:f5:15:9e:77:4d:30:fd:0a:c7:e7:
83:f3:aa:7d:dd:d5:03:e3:32:85:23:33:22:52:5d:58:18:a2:
19:23:92:ff:8a:42:24:93:07:c6:66:d6:c7:03:6d:1a:f9:33:
6c:cd:af:2b:35:0b:7a:ee:87:8e:83:bd:0b:78:45:81:df:d2:
16:15:20:41:68:a4:fc:03:54:99:1f:1e:e2:96:9d:59:22:8b:
53:00:a7:ba:89:21:b8:b4:84:5e:3e:54:6f:a6:c4:c2:4c:5d:
4f:95:fa:a8:2f:52:d2:1c:d7:b1:46:83:ef:ff:63:23:64:59:
29:6a:70:17:b0:5b:37:84:32:c0:dc:a6:e6:84:f6:09:be:b2:
e1:5a:6b:21:c4:36:86:0d:d3:0b:62:ec:85:27:b6:73:99:19:
e8:5f:a5:b8:14:c9:a7:e6:62:4c:d3:7f:68:a0:46:90:e4:31:
42:3d:f3:ac:be:aa:e4:ae:cb:a8:b2:31:06:24:fa:07:64:f8:
09:24:01:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oQ6SxUDjQI0GO3dLTNNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOTI3YjM2YjEzOGYwODYzNTg5MzhlM2FjZmRhNDYzOGU1
NmE3OTIwHhcNMjUxMDE5MDQwMTIyWhcNMjUxMDIwMDQwMTIyWjAzMTEwLwYDVQQD
Eyg5OTNkNzY0ODkzNWM5N2JiZDZlNTc3NjU5NDQzM2RkNjY3YzU2YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85oqFHgLOyph7VpRDu2b8qYvf6c5
/608Gwe41YZSvqWuhkWrVEw1SKYznOC71bZAU+cRBTI9aGTjbX1A786TEf6bSblh
kMBBKBK8bu0Bxi8r6tRCWdZ3sI5HQ+b5nW4U/KYEK+62CUdZvwwSujy2SLRwy0Ef
h4+K5g+hbwK20CQdAYYgf2VKYBT3Go/3a7+vuv08vW5btxLazsfGPoY5tUrmv2YM
uPksBmZSEl+JWSSo5AtwZNLN0T8H2mVbPS00RN58KHpgkD3LRN+oTrXhT9XxwePg
r2U9geqHZpyslUyVx5pVkj598H/pj8FXHtz0cTH1Jr+Q/gJV92o1HrpZ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk9dkiTXJe71uV3ZZRDPdZnxWw/MB8GA1UdIwQY
MBaAFGKSezaxOPCGNYk446z9pGOOVqeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEt
YTk5YzdlZTVjMjg0LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEtYTk5YzdlZTVjMjg0
LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAYSDwic
dhsQLONbKML6/4rvW6Lr1eaLg4ck6+3hSEHtbmXvs5D6uacXWdlJRCmZPtCAbTYT
JOVw5VtKIkr1FZ53TTD9Csfng/Oqfd3VA+MyhSMzIlJdWBiiGSOS/4pCJJMHxmbW
xwNtGvkzbM2vKzULeu6HjoO9C3hFgd/SFhUgQWik/ANUmR8e4padWSKLUwCnuokh
uLSEXj5Ub6bEwkxdT5X6qC9S0hzXsUaD7/9jI2RZKWpwF7BbN4QywNym5oT2Cb6y
4VprIcQ2hg3TC2LshSe2c5kZ6F+luBTJp+ZiTNN/aKBGkOQxQj3zrL6q5K7LqLIx
BiT6B2T4CSQB+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:41 2025 by rpki-client