Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier: 6qlv0/Lc6ySXo7D8VwHA9hua82Ccope2/HSB7xfMlZ8=
Subject key identifier: 91:94:20:8E:C5:DC:D6:8A:5B:4B:61:35:92:D5:92:30:1F:85:52:4F
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 0199FE4737AFE26730A2C3F31F1B32FE0EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 21:01:43 +0000
Manifest this update: Sun 19 Oct 2025 21:01:43 +0000
Manifest next update: Mon 20 Oct 2025 21:01:43 +0000
Files and hashes: 1: 08KPrzvK2WRWpD6p5CJ-Ul7cl9I.roa (hash: sfh9qqw8GmrlQX4Jo45lPqyd4sncTsU6nFud/SZKyQU=)
2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=)
3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: pa7oLlvfQub8VjfX0db5H/engSVnYxEhF9Dlc9ufMkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:37:af:e2:67:30:a2:c3:f3:1f:1b:32:fe:0e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Oct 19 21:01:43 2025 GMT
Not After : Oct 20 21:01:43 2025 GMT
Subject: CN=9194208ec5dcd68a5b4b613592d592301f85524f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:76:37:5a:2d:e4:7b:f6:76:89:0c:fa:c3:
b4:cd:a9:80:64:7d:07:98:ae:f1:58:24:46:77:42:
6d:b9:fd:01:f1:3a:ae:71:3f:b7:66:66:b8:8a:31:
70:d1:3a:e8:e9:04:8d:f2:c8:41:3a:71:75:ef:e9:
20:48:c0:4a:7f:af:11:3c:82:84:89:92:75:98:64:
a7:e1:4e:64:ce:c0:8e:8a:ce:57:39:10:9e:57:ea:
95:e8:80:b3:4a:78:01:ec:74:64:39:3a:ff:91:9d:
8b:80:b2:a3:43:42:de:ff:3a:f1:41:05:2f:f6:2a:
f7:7e:74:2f:2d:7e:99:a0:e9:6a:88:aa:1f:58:68:
d0:aa:46:77:89:eb:79:ae:45:09:ea:95:7f:9a:98:
14:e9:c1:75:f0:bb:fe:39:5e:88:13:25:80:65:02:
4d:cd:29:0f:3b:29:5b:cc:10:d5:41:e5:55:3f:29:
47:10:fc:23:bd:70:f1:ae:3f:86:d0:7f:f6:9b:47:
25:d0:22:80:58:91:af:bc:bd:96:b2:8a:a9:0c:b6:
4c:15:9c:a1:23:7b:6f:e9:90:95:67:25:24:0a:84:
5a:f1:28:94:b2:a8:25:07:3f:38:a9:2c:20:25:a5:
b7:6c:48:5b:9d:0d:35:9b:01:17:48:27:b7:e0:66:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:94:20:8E:C5:DC:D6:8A:5B:4B:61:35:92:D5:92:30:1F:85:52:4F
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e7:93:f6:60:c1:60:eb:6c:2f:df:3a:4b:e5:6d:17:55:d2:
bd:c3:7c:87:1f:3f:d9:d4:26:1a:67:3a:f2:5f:79:48:3b:10:
f3:05:5d:07:0a:22:2a:f6:b7:b4:8d:9c:b1:bd:d3:05:1f:dd:
73:ce:a4:f9:d7:7f:d2:3c:58:f2:0e:0b:fd:7a:66:9a:d1:e9:
32:50:ce:77:9b:5d:32:d8:be:9e:69:98:17:6e:6f:32:93:81:
44:26:c1:b3:6a:a4:9e:18:4c:c2:18:e1:a8:02:0b:64:45:51:
29:1c:6b:4f:30:19:08:b8:71:77:2c:3f:60:1b:ef:67:12:d0:
f3:e4:94:73:29:03:96:fd:ae:3b:0f:5f:ba:e1:98:79:c5:c1:
90:4f:81:26:0f:bd:87:2b:b4:2f:b3:74:d2:cb:8a:32:60:34:
a2:5e:2a:79:31:91:8f:4f:01:69:53:49:d8:80:73:37:68:42:
07:75:7c:de:ff:80:45:fb:80:1b:61:f3:42:ac:10:54:6e:f2:
bf:ce:aa:fb:c1:2b:2c:26:e1:dd:03:c5:08:f6:9b:f5:e3:9c:
91:92:24:da:00:77:02:83:b7:be:ab:bc:f1:37:5e:88:ae:7d:
25:b3:47:7e:1f:13:48:8b:e1:73:dd:58:fd:f5:3c:4c:ce:b1:
ac:88:73:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rzev4mcwosPzHxsy/g7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGNiNjk1YzcwZGI0Yjk2MzcwNjAwNzUwOTE4YTRiM2E4
YTIxYTkwHhcNMjUxMDE5MjEwMTQzWhcNMjUxMDIwMjEwMTQzWjAzMTEwLwYDVQQD
Eyg5MTk0MjA4ZWM1ZGNkNjhhNWI0YjYxMzU5MmQ1OTIzMDFmODU1MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU12N1ot5Hv2dokM+sO0zamAZH0H
mK7xWCRGd0Jtuf0B8TqucT+3Zma4ijFw0Tro6QSN8shBOnF17+kgSMBKf68RPIKE
iZJ1mGSn4U5kzsCOis5XORCeV+qV6ICzSngB7HRkOTr/kZ2LgLKjQ0Le/zrxQQUv
9ir3fnQvLX6ZoOlqiKofWGjQqkZ3iet5rkUJ6pV/mpgU6cF18Lv+OV6IEyWAZQJN
zSkPOylbzBDVQeVVPylHEPwjvXDxrj+G0H/2m0cl0CKAWJGvvL2WsoqpDLZMFZyh
I3tv6ZCVZyUkCoRa8SiUsqglBz84qSwgJaW3bEhbnQ01mwEXSCe34GattQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGUII7F3NaKW0thNZLVkjAfhVJPMB8GA1UdIwQY
MBaAFMnctpXHDbS5Y3BgB1CRiks6iiGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTIt
ZWNhOTc4YzNjYjg1LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTItZWNhOTc4YzNjYjg1
LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheeT9mDB
YOtsL986S+VtF1XSvcN8hx8/2dQmGmc68l95SDsQ8wVdBwoiKva3tI2csb3TBR/d
c86k+dd/0jxY8g4L/XpmmtHpMlDOd5tdMti+nmmYF25vMpOBRCbBs2qknhhMwhjh
qAILZEVRKRxrTzAZCLhxdyw/YBvvZxLQ8+SUcykDlv2uOw9fuuGYecXBkE+BJg+9
hyu0L7N00suKMmA0ol4qeTGRj08BaVNJ2IBzN2hCB3V83v+ARfuAG2HzQqwQVG7y
v86q+8ErLCbh3QPFCPab9eOckZIk2gB3AoO3vqu88TdeiK59JbNHfh8TSIvhc91Y
/fU8TM6xrIhzbg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:39 2025 by rpki-client