
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: Sfq/sMnO+oZuLvzCikbEjtYoX8ZFo4QMBOlco/jVBqQ=
Subject key identifier: 60:05:0D:93:A5:1B:7D:D4:C1:E1:57:1B:5E:1F:0A:82:5F:A2:08:6C
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 0199FFC8C22F83892F263CF4852B361578E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 04:02:50 +0000
Manifest this update: Mon 20 Oct 2025 04:02:50 +0000
Manifest next update: Tue 21 Oct 2025 04:02:50 +0000
Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=)
2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: 3jQNiubtxtyH7OF7KNpO/bGAXyFz6e+gpe/lV36u67c=)
3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c2:2f:83:89:2f:26:3c:f4:85:2b:36:15:78:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Oct 20 04:02:50 2025 GMT
Not After : Oct 21 04:02:50 2025 GMT
Subject: CN=60050d93a51b7dd4c1e1571b5e1f0a825fa2086c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:35:03:a9:7d:b7:63:b8:f9:2a:a6:42:b0:
aa:e9:8b:9c:d1:8a:31:ce:55:24:6d:ec:4d:02:ca:
29:b7:92:f7:bb:d1:8b:50:d5:79:43:e1:b7:29:8a:
2a:a8:22:7b:90:1e:61:cb:29:85:15:bd:e9:2d:eb:
50:78:ff:78:ef:01:8c:a2:e8:16:99:f4:30:a0:b1:
72:d3:ce:5d:5e:53:05:c6:46:c1:5c:84:04:7f:02:
b9:62:e8:ec:91:f5:03:9f:c7:cd:9c:dd:dd:7a:df:
6e:db:26:72:dc:1c:e2:e5:a9:4d:f6:36:8a:3a:33:
c6:2a:e2:23:21:79:0e:58:62:6f:85:4e:6d:38:53:
c3:01:3d:25:9e:d1:01:8e:f3:06:41:10:e5:66:9a:
c9:14:75:8f:18:24:53:c2:4e:67:0a:fd:30:3a:30:
c4:95:bc:45:76:1d:e5:c9:29:39:a5:d4:da:fb:e3:
fb:dc:19:3d:3c:17:b6:d2:f7:04:3f:70:80:2c:6b:
3b:4e:88:50:71:00:b3:73:c8:03:4c:f5:02:a0:e7:
1d:70:93:3b:5a:09:e2:a6:7a:c6:cc:0c:da:af:ea:
33:67:f2:12:67:51:55:bc:bb:2c:91:5f:e8:12:b1:
0b:29:5b:95:8a:97:42:ab:bf:1b:9f:7f:65:46:49:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:0D:93:A5:1B:7D:D4:C1:E1:57:1B:5E:1F:0A:82:5F:A2:08:6C
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:07:58:cf:87:b9:b3:72:de:bd:02:27:52:62:a5:c2:f0:87:
56:0a:5c:ad:95:4b:a6:43:b7:e9:f4:04:40:38:7a:d9:05:6b:
fa:90:7d:2f:8a:ba:11:62:96:a2:fa:ea:40:63:67:1c:b0:21:
b9:4b:f0:a2:ab:e9:95:85:da:8a:93:c0:b0:6e:e9:cf:f7:c8:
03:9f:b4:e3:3f:9a:4d:d8:62:45:f3:b3:92:d0:91:65:88:62:
50:65:8d:37:66:4f:07:c1:25:44:d8:13:d3:72:e4:37:a9:64:
f3:02:6a:4a:92:ba:bf:32:b7:65:26:e5:95:89:a6:1b:9e:6c:
03:93:01:38:c2:93:04:66:f5:49:af:8b:af:4c:76:64:79:2f:
71:1f:0b:ec:bf:08:c3:a1:db:2d:16:33:62:ce:6d:b6:d5:c8:
39:6e:ab:b1:0c:da:c9:bb:26:42:aa:f8:ac:a7:39:00:14:43:
90:8f:af:9b:f8:f5:29:29:ba:ab:d8:a4:95:a8:3c:83:45:f0:
bd:8d:39:05:f5:cf:be:40:b4:dc:18:83:7a:1d:66:bd:b4:db:
86:6c:c1:70:a2:d5:df:a0:66:26:5b:5c:90:9c:4c:ea:18:d9:
2e:32:ab:ed:19:42:b7:e8:84:51:5e:cf:ab:b6:a5:00:19:60:
04:25:32:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yMIvg4kvJjz0hSs2FXjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm
ZjQ5YjQwHhcNMjUxMDIwMDQwMjUwWhcNMjUxMDIxMDQwMjUwWjAzMTEwLwYDVQQD
Eyg2MDA1MGQ5M2E1MWI3ZGQ0YzFlMTU3MWI1ZTFmMGE4MjVmYTIwODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XU1A6l9t2O4+SqmQrCq6Yuc0Yox
zlUkbexNAsopt5L3u9GLUNV5Q+G3KYoqqCJ7kB5hyymFFb3pLetQeP947wGMougW
mfQwoLFy085dXlMFxkbBXIQEfwK5YujskfUDn8fNnN3det9u2yZy3Bzi5alN9jaK
OjPGKuIjIXkOWGJvhU5tOFPDAT0lntEBjvMGQRDlZprJFHWPGCRTwk5nCv0wOjDE
lbxFdh3lySk5pdTa++P73Bk9PBe20vcEP3CALGs7TohQcQCzc8gDTPUCoOcdcJM7
WgnipnrGzAzar+ozZ/ISZ1FVvLsskV/oErELKVuVipdCq78bn39lRkneyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAFDZOlG33UweFXG14fCoJfoghsMB8GA1UdIwQY
MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It
MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk
LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgdYz4e5
s3LevQInUmKlwvCHVgpcrZVLpkO36fQEQDh62QVr+pB9L4q6EWKWovrqQGNnHLAh
uUvwoqvplYXaipPAsG7pz/fIA5+04z+aTdhiRfOzktCRZYhiUGWNN2ZPB8ElRNgT
03LkN6lk8wJqSpK6vzK3ZSbllYmmG55sA5MBOMKTBGb1Sa+Lr0x2ZHkvcR8L7L8I
w6HbLRYzYs5tttXIOW6rsQzaybsmQqr4rKc5ABRDkI+vm/j1KSm6q9iklag8g0Xw
vY05BfXPvkC03BiDeh1mvbTbhmzBcKLV36BmJltckJxM6hjZLjKr7RlCt+iEUV7P
q7alABlgBCUyeQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:00:47 2025 by rpki-client