Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
File: c_yJAj6sdKsphWP5ndtx9vFflTg.mft (raw, json)
Hash identifier: 1EIL61Xb8VpqTKlAtQ3uGkpscJZAX/8d72lj6lQeM8U=
Subject key identifier: 66:B8:17:A6:05:8A:4D:46:EB:95:CC:A0:85:C1:F2:7C:A4:EB:38:09
Authority key identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
Certificate issuer: /CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Certificate serial: 0199FEEBCCEDF9E5ACC5F7EC78891A0C73C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
Manifest number: 0AF7
Signing time: Mon 20 Oct 2025 00:01:30 +0000
Manifest this update: Mon 20 Oct 2025 00:01:30 +0000
Manifest next update: Tue 21 Oct 2025 00:01:30 +0000
Files and hashes: 1: cS_oROlW9-wwbVo9EJJ4pl2eigE.roa (hash: JJRh33aNovJ8ixT1Vh+De6OT6uSujo/Saa2Iamwl/iI=)
2: c_yJAj6sdKsphWP5ndtx9vFflTg.crl (hash: xY2LUv+vWeQVi2fZC3o7xpiVj81ziusZDZHVKTQiaek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:cc:ed:f9:e5:ac:c5:f7:ec:78:89:1a:0c:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Validity
Not Before: Oct 20 00:01:30 2025 GMT
Not After : Oct 21 00:01:30 2025 GMT
Subject: CN=66b817a6058a4d46eb95cca085c1f27ca4eb3809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:22:77:be:e5:47:5a:d3:8f:c8:50:48:8b:
75:2f:53:b6:3b:1f:50:f6:2a:4e:78:5b:82:f2:54:
5b:00:1f:08:73:58:f4:e4:f4:04:8f:cf:f4:b4:28:
58:8a:e5:da:69:cc:25:42:a6:e1:08:d4:9b:bd:27:
27:fa:05:e0:16:00:5a:b6:d5:9b:f5:18:38:cc:78:
2f:cd:1f:c5:05:eb:a2:9f:94:e1:c2:c5:e3:99:c5:
a7:c2:2c:8b:32:9d:70:cd:17:93:4a:df:07:23:af:
dd:95:ae:43:6d:19:67:86:40:6f:7d:65:29:fc:6d:
e7:02:ab:c5:3b:b9:97:f8:a5:15:ca:3d:20:d4:22:
a0:91:5c:08:37:5e:7c:13:5e:36:16:fd:4e:70:4d:
6a:85:7b:b8:af:fb:87:7d:1e:7d:bb:b3:69:83:b9:
61:e7:8f:99:34:c3:af:74:d0:c0:3f:7a:b3:f4:b8:
13:d5:02:ee:e1:43:ae:d3:fb:c1:e6:f1:d6:29:04:
0f:38:9e:9f:14:7c:f4:c3:1f:41:e2:88:d1:de:2e:
c1:c4:cf:d0:ed:69:c0:9e:6f:35:e3:f1:91:99:bf:
a0:21:64:48:6a:72:2d:61:65:c5:df:d7:1a:42:6b:
c0:18:68:34:29:36:71:6b:14:3f:8f:9b:53:b2:51:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B8:17:A6:05:8A:4D:46:EB:95:CC:A0:85:C1:F2:7C:A4:EB:38:09
X509v3 Authority Key Identifier:
keyid:73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fc:4d:81:1b:0e:af:b9:1d:cd:94:00:47:ec:45:cc:3e:9c:
18:08:b0:a6:36:ca:6d:83:fe:19:c9:ba:26:34:2a:71:ab:fa:
2d:3a:50:ac:9d:1f:4a:d5:bb:b1:fd:26:6e:32:74:c6:bd:1c:
a8:d0:e6:8a:ff:39:55:bd:6a:3f:64:bb:d2:d6:b8:8a:0f:43:
8c:90:80:50:a2:dc:b8:0b:a9:5c:28:4f:07:68:85:a5:39:d8:
07:25:83:d1:d9:19:9f:47:08:d4:76:ea:24:cd:f3:e4:fb:6e:
fe:ac:67:04:6c:dc:5a:eb:dd:a2:eb:1f:63:96:96:88:a5:13:
b8:0e:2f:d6:b9:e2:b3:30:0f:c0:88:61:c2:ab:70:a8:65:b7:
5a:48:fb:46:e3:ac:32:b7:b0:a1:46:a5:e8:24:97:fc:3e:f1:
75:81:d5:30:b0:bc:35:19:38:77:fb:58:be:d1:c5:10:c3:26:
0c:2b:e0:81:38:8d:fb:47:08:af:bf:79:c2:48:c8:b1:d9:1b:
89:5f:a8:31:d5:91:8e:aa:54:5c:e4:60:02:0d:36:92:69:3a:
63:03:98:0a:eb:1b:b4:1a:8c:39:ee:98:39:11:ce:dd:62:6a:
47:60:f8:91:53:62:2f:96:fd:d8:b0:56:f0:26:80:c5:45:84:
4f:a8:cc:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+68zt+eWsxffseIkaDHPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmM4OTAyM2VhYzc0YWIyOTg1NjNmOTlkZGI3MWY2ZjE1
Zjk1MzgwHhcNMjUxMDIwMDAwMTMwWhcNMjUxMDIxMDAwMTMwWjAzMTEwLwYDVQQD
Eyg2NmI4MTdhNjA1OGE0ZDQ2ZWI5NWNjYTA4NWMxZjI3Y2E0ZWIzODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKUid77lR1rTj8hQSIt1L1O2Ox9Q
9ipOeFuC8lRbAB8Ic1j05PQEj8/0tChYiuXaacwlQqbhCNSbvScn+gXgFgBattWb
9Rg4zHgvzR/FBeuin5ThwsXjmcWnwiyLMp1wzReTSt8HI6/dla5DbRlnhkBvfWUp
/G3nAqvFO7mX+KUVyj0g1CKgkVwIN158E142Fv1OcE1qhXu4r/uHfR59u7Npg7lh
54+ZNMOvdNDAP3qz9LgT1QLu4UOu0/vB5vHWKQQPOJ6fFHz0wx9B4ojR3i7BxM/Q
7WnAnm814/GRmb+gIWRIanItYWXF39caQmvAGGg0KTZxaxQ/j5tTslFipwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGa4F6YFik1G65XMoIXB8nyk6zgJMB8GA1UdIwQY
MBaAFHP8iQI+rHSrKYVj+Z3bcfbxX5U4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY195SkFqNnNkS3NwaFdQNW5kdHg5dkZmbFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81NTMwM2EtZjIyNS00YTNmLTgyNWYt
NWRjZDgyZGVmODRmLzEvY195SkFqNnNkS3NwaFdQNW5kdHg5dkZmbFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81NTMwM2EtZjIyNS00YTNmLTgyNWYtNWRjZDgyZGVmODRm
LzEvY195SkFqNnNkS3NwaFdQNW5kdHg5dkZmbFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvxNgRsO
r7kdzZQAR+xFzD6cGAiwpjbKbYP+Gcm6JjQqcav6LTpQrJ0fStW7sf0mbjJ0xr0c
qNDmiv85Vb1qP2S70ta4ig9DjJCAUKLcuAupXChPB2iFpTnYByWD0dkZn0cI1Hbq
JM3z5Ptu/qxnBGzcWuvdousfY5aWiKUTuA4v1rniszAPwIhhwqtwqGW3Wkj7RuOs
MrewoUal6CSX/D7xdYHVMLC8NRk4d/tYvtHFEMMmDCvggTiN+0cIr795wkjIsdkb
iV+oMdWRjqpUXORgAg02kmk6YwOYCusbtBqMOe6YORHO3WJqR2D4kVNiL5b92LBW
8CaAxUWET6jMXg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:52 2025 by rpki-client