Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File: yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier: dxI1YZMGFyBmO3c5oHLzBUerMnguWAsU1IcAjEpDsRM=
Subject key identifier: 6A:81:82:E1:88:6D:32:37:4D:BD:F0:63:87:01:86:6D:01:B7:C9:40
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 0199FF228429BDA74DA87ECDC866D338FC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number: 09E0
Signing time: Mon 20 Oct 2025 01:01:16 +0000
Manifest this update: Mon 20 Oct 2025 01:01:16 +0000
Manifest next update: Tue 21 Oct 2025 01:01:16 +0000
Files and hashes: 1: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=)
2: 95UXEF21gZ7flq3LIhzoSnMGHMI.roa (hash: G69a8tnacaWcTDuPydYIocEgi7cgOBN1HbyOI50NXo4=)
3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=)
4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=)
5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=)
6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: lMQJzO79rXyCTCLX+7uoEvwn+svS5Q+dq0ay/QnExs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:84:29:bd:a7:4d:a8:7e:cd:c8:66:d3:38:fc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Oct 20 01:01:16 2025 GMT
Not After : Oct 21 01:01:16 2025 GMT
Subject: CN=6a8182e1886d32374dbdf0638701866d01b7c940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8b:47:e2:11:59:01:2c:0f:d3:51:b9:dc:69:
e1:45:c3:6c:83:c2:e3:7b:1d:bd:b3:a8:b1:63:be:
38:75:a2:13:b3:48:bb:08:44:69:06:ab:99:59:89:
4e:48:b9:19:16:75:ba:b6:f4:f0:11:ae:75:5a:cc:
1b:cc:89:91:a8:7a:b7:8b:1d:43:04:0a:55:20:c7:
95:ea:ff:9b:10:5a:84:7c:aa:06:b4:f3:ed:6e:62:
29:3b:a8:08:9f:95:4c:cc:88:9f:ee:83:3b:bb:f6:
67:e5:cc:d4:0b:d1:ce:1f:f0:d0:01:30:1c:e2:40:
7c:3c:ab:e0:73:b1:5a:05:7d:57:96:8c:7b:c7:17:
40:42:ba:1e:7a:3d:ed:0a:e6:5e:d7:78:11:e1:28:
c4:21:15:e1:b1:f6:b4:39:6b:08:37:1e:a8:97:1b:
b2:f4:e4:2e:2d:06:10:dd:e5:b5:d6:8e:11:83:0f:
7b:c8:bc:b5:78:5f:31:b1:72:37:ad:98:37:30:98:
47:f7:df:ae:e1:16:96:09:b0:59:ab:3f:c1:ec:56:
d0:b2:00:f1:57:d0:87:08:ed:04:3f:ee:6d:bc:cf:
a1:44:d5:0c:83:42:e5:63:82:31:db:06:f4:27:e2:
69:59:5a:17:9f:a9:8f:d0:b7:55:14:1d:32:3c:89:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:81:82:E1:88:6D:32:37:4D:BD:F0:63:87:01:86:6D:01:B7:C9:40
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:68:d6:6f:87:48:9e:37:32:fb:3d:63:e4:06:5c:2c:02:92:
c8:cf:d9:d4:7f:6f:9a:0d:c4:bc:d9:96:b7:11:d6:ad:a7:89:
33:40:fe:bb:75:aa:bd:b5:1b:19:55:dc:17:3f:d8:1e:80:13:
95:ce:8b:89:c6:d8:6d:98:a7:41:39:fa:62:3e:7d:21:70:f6:
eb:ab:14:10:3a:3b:38:e8:33:a0:1d:78:5c:09:b6:b9:00:fc:
e7:c1:57:8b:47:1e:bc:76:78:a5:d2:b5:d0:c7:d9:35:ec:e1:
83:22:42:16:a6:59:2a:2f:a1:ad:9e:ac:1f:74:60:05:2c:7b:
bf:51:94:fd:b9:a6:48:9d:48:6b:2a:de:05:b1:77:43:66:8c:
13:07:07:67:7b:f6:6c:68:19:36:d6:21:f4:86:01:37:03:19:
1c:8f:74:07:12:e3:07:3f:12:e4:2c:20:3b:23:2a:56:9c:07:
76:37:90:f6:66:11:93:e2:37:b8:bf:2f:70:6d:bc:a3:78:68:
67:08:3b:d2:9f:49:90:90:e0:ee:43:0f:4d:52:a8:6c:56:d8:
d9:85:74:36:fd:3c:ff:ec:c4:44:3a:6b:e8:74:a1:3e:98:81:
3f:bc:03:15:5e:74:5c:47:39:70:87:fc:26:ed:52:f1:09:e0:
40:9b:19:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IoQpvadNqH7NyGbTOPwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj
M2M1MmMwHhcNMjUxMDIwMDEwMTE2WhcNMjUxMDIxMDEwMTE2WjAzMTEwLwYDVQQD
Eyg2YTgxODJlMTg4NmQzMjM3NGRiZGYwNjM4NzAxODY2ZDAxYjdjOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74tH4hFZASwP01G53GnhRcNsg8Lj
ex29s6ixY744daITs0i7CERpBquZWYlOSLkZFnW6tvTwEa51WswbzImRqHq3ix1D
BApVIMeV6v+bEFqEfKoGtPPtbmIpO6gIn5VMzIif7oM7u/Zn5czUC9HOH/DQATAc
4kB8PKvgc7FaBX1Xlox7xxdAQroeej3tCuZe13gR4SjEIRXhsfa0OWsINx6olxuy
9OQuLQYQ3eW11o4Rgw97yLy1eF8xsXI3rZg3MJhH99+u4RaWCbBZqz/B7FbQsgDx
V9CHCO0EP+5tvM+hRNUMg0LlY4Ix2wb0J+JpWVoXn6mP0LdVFB0yPInkqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqBguGIbTI3Tb3wY4cBhm0Bt8lAMB8GA1UdIwQY
MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt
Yjc2MmMwMTc1ZjI3LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3
LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2jWb4dI
njcy+z1j5AZcLAKSyM/Z1H9vmg3EvNmWtxHWraeJM0D+u3WqvbUbGVXcFz/YHoAT
lc6LicbYbZinQTn6Yj59IXD266sUEDo7OOgzoB14XAm2uQD858FXi0cevHZ4pdK1
0MfZNezhgyJCFqZZKi+hrZ6sH3RgBSx7v1GU/bmmSJ1IayreBbF3Q2aMEwcHZ3v2
bGgZNtYh9IYBNwMZHI90BxLjBz8S5CwgOyMqVpwHdjeQ9mYRk+I3uL8vcG28o3ho
Zwg70p9JkJDg7kMPTVKobFbY2YV0Nv08/+zERDpr6HShPpiBP7wDFV50XEc5cIf8
Ju1S8QngQJsZug==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:32 2025 by rpki-client