Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: +qhapZfclb3IiSMatAH//BUWjq1wfk2YpB3/Np9ve3M=
Subject key identifier: D8:C3:99:03:DF:00:C0:D4:C1:8D:34:B5:86:A9:33:68:A5:31:7F:13
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 0199FB7CF919B765B06B9E7B081E301F774F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:35 +0000
Manifest this update: Sun 19 Oct 2025 08:01:35 +0000
Manifest next update: Mon 20 Oct 2025 08:01:35 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: xoaxMxD/ev9nXUypqM2aHeJOMJfkG2vho8gTgbwA3HE=)
2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f9:19:b7:65:b0:6b:9e:7b:08:1e:30:1f:77:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Oct 19 08:01:35 2025 GMT
Not After : Oct 20 08:01:35 2025 GMT
Subject: CN=d8c39903df00c0d4c18d34b586a93368a5317f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:4d:5b:f5:9b:13:09:c1:4e:32:85:8f:46:
70:d9:7a:63:ba:92:4f:e8:ca:4b:23:96:21:a6:17:
67:90:cf:69:08:dd:49:e0:1e:2c:92:73:01:d9:25:
19:10:62:6b:00:b9:d4:cf:e1:ac:0e:48:25:99:e2:
fc:f3:69:80:c4:cd:24:d9:31:91:43:e1:8e:9d:16:
d0:16:18:a7:91:13:a6:ce:a5:1b:ff:17:69:b3:3d:
1e:fe:ba:67:82:2d:ae:5d:f8:1f:99:6a:40:97:47:
28:06:f3:ef:2e:d7:b6:e3:39:5f:e8:a7:2f:6f:23:
73:2e:d0:06:4b:f8:df:92:bf:6f:a7:68:5c:31:6d:
8c:36:7a:50:d0:ad:61:0d:6d:b9:b7:9c:a4:7f:d9:
36:b1:b9:9c:f8:e3:f8:86:cb:0a:ed:88:cc:02:44:
a4:98:0d:f0:4c:09:ae:21:57:f0:d9:46:78:39:77:
9d:f8:97:d3:22:08:fb:95:e3:00:8e:3f:51:e3:43:
52:34:e7:89:f6:34:9d:f9:55:5e:5b:9d:67:2e:7e:
0c:95:1c:af:3a:01:3e:c8:7f:de:96:5b:93:dd:96:
c6:47:89:89:24:73:70:c4:25:50:5e:ca:22:7b:2a:
7f:71:13:67:56:70:bb:d4:d9:5d:73:d0:17:85:f6:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:99:03:DF:00:C0:D4:C1:8D:34:B5:86:A9:33:68:A5:31:7F:13
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4e:e1:2d:3e:9d:35:ad:8c:8a:7d:80:81:3b:a8:03:e7:63:
38:a6:23:1d:d3:4b:d1:85:fb:ea:72:12:49:1f:be:e6:e8:b7:
62:38:a2:58:b5:87:c7:f5:63:d0:4b:ca:28:f9:84:51:ee:cd:
7d:51:16:41:ef:40:d4:45:3f:0d:96:0d:89:d7:16:86:a7:01:
87:37:15:ab:16:42:2b:43:66:c5:84:25:85:62:7c:2d:fd:53:
61:0b:0d:ac:81:10:e0:53:a4:12:60:f0:3a:2b:22:83:6f:75:
31:13:89:1a:e1:9f:f2:11:cf:67:a5:cd:69:ac:42:d0:0f:1e:
01:1d:a4:98:79:08:87:98:5d:e5:b8:0c:f6:d8:2c:9c:7b:b5:
d9:28:93:5c:99:2f:3d:1d:89:88:63:ca:60:cf:c6:25:1f:f3:
64:fe:2a:96:f8:a4:5c:4d:71:f4:ec:fd:30:13:41:ed:f5:b7:
62:9f:6c:c9:fa:9b:b5:6a:70:76:91:2a:80:6c:3f:40:26:04:
5c:b7:aa:81:20:30:6a:3b:78:76:73:ba:d1:98:74:11:b9:60:
08:8e:4b:25:cd:71:bf:60:37:27:b7:4f:3c:74:12:09:65:46:
94:81:8d:10:8a:65:9b:d8:e3:32:d8:56:36:4b:ac:29:f8:f0:
01:01:83:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPkZt2Wwa557CB4wH3dPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODhkYjE3NjY2ZmE5NTE1YWYzMWRiYTA5NWQwZjI1MGY4
NGJkZjcwHhcNMjUxMDE5MDgwMTM1WhcNMjUxMDIwMDgwMTM1WjAzMTEwLwYDVQQD
EyhkOGMzOTkwM2RmMDBjMGQ0YzE4ZDM0YjU4NmE5MzM2OGE1MzE3ZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzulNW/WbEwnBTjKFj0Zw2XpjupJP
6MpLI5YhphdnkM9pCN1J4B4sknMB2SUZEGJrALnUz+GsDkglmeL882mAxM0k2TGR
Q+GOnRbQFhinkROmzqUb/xdpsz0e/rpngi2uXfgfmWpAl0coBvPvLte24zlf6Kcv
byNzLtAGS/jfkr9vp2hcMW2MNnpQ0K1hDW25t5ykf9k2sbmc+OP4hssK7YjMAkSk
mA3wTAmuIVfw2UZ4OXed+JfTIgj7leMAjj9R40NSNOeJ9jSd+VVeW51nLn4MlRyv
OgE+yH/elluT3ZbGR4mJJHNwxCVQXsoieyp/cRNnVnC71Nldc9AXhfY/aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjDmQPfAMDUwY00tYapM2ilMX8TMB8GA1UdIwQY
MBaAFNWI2xdmb6lRWvMdugldDyUPhL33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODIt
MzE4OGU5ZDFmNWEwLzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODItMzE4OGU5ZDFmNWEw
LzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmk7hLT6d
Na2Min2AgTuoA+djOKYjHdNL0YX76nISSR++5ui3YjiiWLWHx/Vj0EvKKPmEUe7N
fVEWQe9A1EU/DZYNidcWhqcBhzcVqxZCK0NmxYQlhWJ8Lf1TYQsNrIEQ4FOkEmDw
Oisig291MROJGuGf8hHPZ6XNaaxC0A8eAR2kmHkIh5hd5bgM9tgsnHu12SiTXJkv
PR2JiGPKYM/GJR/zZP4qlvikXE1x9Oz9MBNB7fW3Yp9syfqbtWpwdpEqgGw/QCYE
XLeqgSAwajt4dnO60Zh0EblgCI5LJc1xv2A3J7dPPHQSCWVGlIGNEIplm9jjMthW
NkusKfjwAQGDng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:37 2025 by rpki-client