Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier: pr5XHsPGPVCnCgG9u16uEkHAx+AiCrVJfH2urgMijY0=
Subject key identifier: AC:6F:41:7D:4F:D6:56:60:23:38:85:43:18:56:CA:49:5C:AA:39:09
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 0199FB4627C7A4860ADC36F3918B36FA6331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number: 12A3
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: Dfh76wqLJFFyVrWGvNQ86Cd1ugg.roa (hash: cQ3NC144NOW+txHpDNWV4+CIEXIR87Btz3V4GE61yOA=)
2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: pY3WESviLj2Bdu8O/NTlP1j0yrc3tfS+15GKqcoCC8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:27:c7:a4:86:0a:dc:36:f3:91:8b:36:fa:63:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=ac6f417d4fd65660233885431856ca495caa3909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:9c:3e:b3:41:ae:57:00:d2:81:b2:a1:2a:
7e:c8:43:7f:68:e9:c0:7d:bd:2f:8c:e8:a0:05:28:
23:ee:98:af:7f:a9:8e:6b:3a:34:d3:68:a4:41:f5:
6b:60:4e:e9:18:c0:be:fe:0e:97:d8:18:0d:46:3c:
74:e7:a4:2c:4d:46:f5:a5:89:87:c7:76:ef:14:ba:
f9:54:3b:77:9d:1f:b6:06:94:e5:bd:d3:8f:65:f0:
22:fd:ab:70:4b:71:3b:f4:1a:e4:d6:cc:0c:5e:db:
05:c5:f5:0c:34:c5:c9:41:df:00:d5:49:3a:5a:33:
c1:93:0f:76:3d:88:3c:93:86:a3:b2:54:ef:49:c2:
11:46:d2:c4:97:d4:fc:89:2b:42:ed:5a:73:06:e5:
4f:8c:59:3f:5e:10:04:e9:81:af:82:47:de:67:c0:
ad:2c:11:80:d7:cf:b1:22:d0:44:f7:8f:5d:ae:18:
75:dd:bf:d1:4f:7f:15:63:5c:3e:37:19:bd:c7:aa:
c1:b9:b9:31:91:58:79:90:59:ac:7d:e1:c7:b9:91:
8f:a0:dc:05:a1:62:bb:57:d5:49:6d:2c:35:45:44:
70:62:4e:83:09:ba:ca:da:9a:b6:07:4f:7a:b9:83:
20:f7:21:cc:09:f3:19:bb:b2:c8:75:4c:0a:e4:6c:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6F:41:7D:4F:D6:56:60:23:38:85:43:18:56:CA:49:5C:AA:39:09
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ae:76:34:01:d1:86:21:18:a2:81:4c:c2:99:0d:8d:21:57:
91:5c:5a:8a:06:4c:86:a1:47:8e:88:ee:97:1e:2e:05:28:a3:
fb:e9:d4:7f:0a:ee:16:ba:9d:80:7d:f7:35:25:17:43:96:25:
87:26:d0:04:50:54:de:04:21:47:8e:39:23:1f:71:6f:bd:79:
71:d5:d3:8c:5a:d8:31:a2:0b:88:4e:86:e2:d7:c6:5e:b9:1f:
76:bc:95:cc:00:0e:61:4a:b1:d5:fa:bd:bd:c9:ba:79:f8:b9:
22:f3:4e:f4:fb:29:50:a5:c8:ec:34:10:84:30:b1:2d:ad:d7:
49:1b:8e:e0:81:6a:06:3a:96:2f:a5:f6:da:64:73:a7:5d:23:
36:c0:3a:ae:f9:ad:62:79:87:51:58:2b:b4:3c:34:87:77:74:
8d:e8:01:24:9f:85:56:69:79:36:90:3c:77:bb:4f:8e:bd:7f:
7f:e0:a0:43:d5:2f:92:45:2b:fd:8d:ff:f1:90:d3:03:0b:47:
ad:4d:f9:28:ad:97:2a:0b:18:01:ad:3e:61:f1:f5:bf:1d:e9:
43:49:94:e9:ef:07:af:c6:f8:ec:d8:8f:25:00:ee:14:b5:69:
6a:0b:1a:4e:4f:32:1a:a8:74:20:46:c0:90:c7:24:80:83:3d:
cd:87:e6:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RifHpIYK3DbzkYs2+mMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YmViY2ZlODJiMjYyN2VhOGRlODE2MWNiOTI3YjI0NWIw
NThlNjkwHhcNMjUxMDE5MDcwMTQyWhcNMjUxMDIwMDcwMTQyWjAzMTEwLwYDVQQD
EyhhYzZmNDE3ZDRmZDY1NjYwMjMzODg1NDMxODU2Y2E0OTVjYWEzOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzGcPrNBrlcA0oGyoSp+yEN/aOnA
fb0vjOigBSgj7pivf6mOazo002ikQfVrYE7pGMC+/g6X2BgNRjx056QsTUb1pYmH
x3bvFLr5VDt3nR+2BpTlvdOPZfAi/atwS3E79Brk1swMXtsFxfUMNMXJQd8A1Uk6
WjPBkw92PYg8k4ajslTvScIRRtLEl9T8iStC7VpzBuVPjFk/XhAE6YGvgkfeZ8Ct
LBGA18+xItBE949drhh13b/RT38VY1w+Nxm9x6rBubkxkVh5kFmsfeHHuZGPoNwF
oWK7V9VJbSw1RURwYk6DCbrK2pq2B096uYMg9yHMCfMZu7LIdUwK5GzmMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxvQX1P1lZgIziFQxhWyklcqjkJMB8GA1UdIwQY
MBaAFMi+vP6CsmJ+qN6BYcuSeyRbBY5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgt
ZGVlZjdmMTUxZThlLzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgtZGVlZjdmMTUxZThl
LzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkK52NAHR
hiEYooFMwpkNjSFXkVxaigZMhqFHjojulx4uBSij++nUfwruFrqdgH33NSUXQ5Yl
hybQBFBU3gQhR445Ix9xb715cdXTjFrYMaILiE6G4tfGXrkfdryVzAAOYUqx1fq9
vcm6efi5IvNO9PspUKXI7DQQhDCxLa3XSRuO4IFqBjqWL6X22mRzp10jNsA6rvmt
YnmHUVgrtDw0h3d0jegBJJ+FVml5NpA8d7tPjr1/f+CgQ9UvkkUr/Y3/8ZDTAwtH
rU35KK2XKgsYAa0+YfH1vx3pQ0mU6e8Hr8b47NiPJQDuFLVpagsaTk8yGqh0IEbA
kMckgIM9zYfmbw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:50 2025 by rpki-client