Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json)
Hash identifier: EWhlnDXSMtb8w8VC8tZfPfjtddVD7U+GWbD2rnIH9xM=
Subject key identifier: A6:54:CA:16:F5:AC:3A:E0:4A:FD:E4:A9:B9:E2:95:51:11:57:A5:DC
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial: 0199FA6A87BD057B7D6F071BCF3B42D8E563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
Manifest number: 7B
Signing time: Sun 19 Oct 2025 03:01:49 +0000
Manifest this update: Sun 19 Oct 2025 03:01:49 +0000
Manifest next update: Mon 20 Oct 2025 03:01:49 +0000
Files and hashes: 1: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: WDzgWo5ZSEqx8cjrVydz+GtpAJszq3mTj5B47aT+ypU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:87:bd:05:7b:7d:6f:07:1b:cf:3b:42:d8:e5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Validity
Not Before: Oct 19 03:01:49 2025 GMT
Not After : Oct 20 03:01:49 2025 GMT
Subject: CN=a654ca16f5ac3ae04afde4a9b9e295511157a5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:22:d7:65:c4:63:f2:a3:8f:28:df:fe:93:37:
4e:b1:1e:14:5d:40:21:cd:70:5d:7a:6e:91:c8:55:
23:e2:26:46:a7:c1:46:bf:3c:c3:65:b8:ff:4e:e3:
dc:97:9c:f9:ad:78:91:bc:56:b1:e9:c6:b7:07:3d:
d7:56:79:a8:fe:d1:22:01:8c:9d:ba:6c:a9:76:9b:
2f:5f:37:d0:f5:9d:69:4b:c9:38:7e:46:af:22:62:
57:eb:4c:79:79:e3:2d:ce:8f:66:dc:31:c6:74:5d:
c5:a2:9c:0b:1e:bb:7c:7b:dc:f1:9b:e3:a9:fb:f2:
71:2d:b9:ac:cf:a7:f6:3f:c5:eb:33:99:66:8f:eb:
22:6d:65:37:74:bc:79:8d:f1:57:67:45:bf:61:33:
63:6a:3b:39:0c:5b:3c:2c:4c:70:6a:8f:3b:fc:12:
2d:e0:ea:4e:c6:66:74:5e:db:8a:7b:51:8c:56:ae:
d2:3f:d2:57:e1:f8:e7:48:90:c3:37:f2:72:b4:ad:
ba:da:64:5c:50:2d:bb:09:4b:21:21:f3:4a:59:f3:
21:21:2e:d7:6a:42:5c:b1:c2:a8:9d:de:ae:79:84:
c3:9f:41:ce:5b:60:66:d3:1f:8e:c1:ad:f2:42:fb:
b5:8d:fc:95:ba:14:ad:5b:19:db:7b:8a:9d:a0:9c:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:54:CA:16:F5:AC:3A:E0:4A:FD:E4:A9:B9:E2:95:51:11:57:A5:DC
X509v3 Authority Key Identifier:
keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6c:8d:ee:00:39:fc:53:a4:9a:1a:00:07:04:40:9a:87:5f:
91:b5:9f:07:47:de:c2:0b:98:87:1e:c8:e9:35:0b:18:1b:bc:
36:9c:24:1b:04:28:ac:bf:f8:2e:74:19:ad:50:4a:dc:58:a9:
2c:1b:14:e7:61:41:6e:64:d6:3a:b6:ed:74:68:94:cf:28:aa:
7a:b2:c8:79:e8:66:0a:96:1f:5d:73:0e:7b:f6:12:eb:07:ee:
78:99:a1:c3:f2:10:11:6e:d9:e2:db:b6:86:be:83:19:ad:6f:
be:78:2c:bb:da:ff:07:0a:95:00:cf:25:2b:c3:91:fb:f3:92:
dc:ea:d6:87:09:7a:fd:f3:01:70:f1:aa:19:82:9a:9b:44:2d:
19:32:a1:cb:8b:0c:af:b7:90:8d:8b:6c:5b:ef:ef:22:ab:79:
e4:60:b5:2e:1c:6c:e5:23:40:d1:4f:68:39:cb:7a:91:1c:4e:
c2:2b:ad:e4:2f:ca:2f:a7:6d:ca:9d:bd:e2:5d:62:ef:06:45:
aa:44:a1:cf:1d:d1:f3:93:9e:a0:4b:23:dd:8d:d3:31:2e:08:
ec:3f:f7:ea:dd:87:d2:45:a1:14:bb:85:b2:05:d4:62:e2:40:
04:c4:22:c4:a3:ee:1a:9f:19:84:4c:32:c3:a1:e8:5a:3f:49:
f2:30:ac:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6aoe9BXt9bwcbzztC2OVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYzhjMDY0NmViNmNiZjI2OThiYjBhNzYwNTAzYmNkYjkx
ZjFhNWMwHhcNMjUxMDE5MDMwMTQ5WhcNMjUxMDIwMDMwMTQ5WjAzMTEwLwYDVQQD
EyhhNjU0Y2ExNmY1YWMzYWUwNGFmZGU0YTliOWUyOTU1MTExNTdhNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SLXZcRj8qOPKN/+kzdOsR4UXUAh
zXBdem6RyFUj4iZGp8FGvzzDZbj/TuPcl5z5rXiRvFax6ca3Bz3XVnmo/tEiAYyd
umypdpsvXzfQ9Z1pS8k4fkavImJX60x5eeMtzo9m3DHGdF3FopwLHrt8e9zxm+Op
+/JxLbmsz6f2P8XrM5lmj+sibWU3dLx5jfFXZ0W/YTNjajs5DFs8LExwao87/BIt
4OpOxmZ0XtuKe1GMVq7SP9JX4fjnSJDDN/JytK262mRcUC27CUshIfNKWfMhIS7X
akJcscKond6ueYTDn0HOW2Bm0x+Owa3yQvu1jfyVuhStWxnbe4qdoJyGLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZUyhb1rDrgSv3kqbnilVERV6XcMB8GA1UdIwQY
MBaAFMvIwGRutsvyaYuwp2BQO825HxpcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zN2Q5M2UtZjVkYS00ZWNmLWE3YTgt
OTA4ZThiMjc4NTUyLzEveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zN2Q5M2UtZjVkYS00ZWNmLWE3YTgtOTA4ZThiMjc4NTUy
LzEveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWyN7gA5
/FOkmhoABwRAmodfkbWfB0fewguYhx7I6TULGBu8NpwkGwQorL/4LnQZrVBK3Fip
LBsU52FBbmTWOrbtdGiUzyiqerLIeehmCpYfXXMOe/YS6wfueJmhw/IQEW7Z4tu2
hr6DGa1vvngsu9r/BwqVAM8lK8OR+/OS3OrWhwl6/fMBcPGqGYKam0QtGTKhy4sM
r7eQjYtsW+/vIqt55GC1Lhxs5SNA0U9oOct6kRxOwiut5C/KL6dtyp294l1i7wZF
qkShzx3R85OeoEsj3Y3TMS4I7D/36t2H0kWhFLuFsgXUYuJABMQixKPuGp8ZhEwy
w6HoWj9J8jCspQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:54 2025 by rpki-client