Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: 4kJHBL02oV13K3fpboXD8/R6JpU238cbDVSXpsu2yyw=
Subject key identifier: 48:C6:8C:1D:22:32:83:C1:00:65:BE:68:46:3D:51:6D:80:13:E0:D7
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 0199FB7C9AA7981D34EC6658255DD098B4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
2: jECFVXifI2PML21GlnCLdBYUig0.roa (hash: 88xVe4+njhjbTw9qYTdy0ykyXz6/PEaM+aox252NmaU=)
3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: JNA+NLf5r0ZeCdkx4pMr4zdVSu/t3WIY41p890KHSGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9a:a7:98:1d:34:ec:66:58:25:5d:d0:98:b4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=48c68c1d223283c10065be68463d516d8013e0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:e0:e5:b5:c3:45:78:f1:5c:dd:cc:8f:eb:
cb:75:84:36:85:e3:45:01:f7:a2:0e:4b:82:7b:94:
6a:f0:85:94:7b:e1:8a:f9:d2:1b:66:3b:fe:14:b5:
08:96:30:e1:7c:d2:c1:12:5e:fc:0c:82:7e:56:79:
c4:eb:02:0b:7a:86:54:1d:87:52:ef:a5:66:0b:a9:
ac:70:bf:3b:34:7d:83:55:a6:e4:0a:95:b7:c5:97:
eb:23:4f:1e:05:d6:b7:ba:71:30:4a:96:ef:42:0f:
e1:1d:1e:6f:8b:9a:dc:4e:f1:22:44:00:cd:32:ec:
f8:5a:a2:ab:2d:d2:99:54:07:58:a6:27:da:24:7b:
e8:84:a1:28:57:d9:5b:64:2d:e6:01:5e:81:ef:6a:
8b:ba:9e:a5:cd:1d:cb:2e:f9:72:f4:c7:c6:d3:62:
27:1a:54:86:85:0a:c0:d1:8a:16:b1:aa:67:8f:2e:
fc:1e:c0:61:27:e8:ed:b6:37:c7:ab:18:ad:5c:c4:
59:4d:6e:d5:b7:d4:55:b2:4e:fd:a5:c6:a9:6b:64:
27:f5:2a:36:e3:2f:8e:28:8d:f1:ce:85:1c:81:54:
6b:7b:b0:96:6f:c1:b1:2d:be:9d:dd:7f:04:5d:0c:
e2:b6:23:2a:dc:0b:53:d3:dc:fe:e2:d8:00:a4:c1:
35:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:8C:1D:22:32:83:C1:00:65:BE:68:46:3D:51:6D:80:13:E0:D7
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ba:79:55:67:50:22:81:50:28:17:e6:c5:1a:51:75:ab:9a:
78:ba:40:61:c8:e0:e1:31:76:f1:f2:3d:c6:5d:41:1d:f5:95:
9c:7c:87:e3:16:5b:d7:61:c1:f0:c4:5e:6e:ba:f7:6a:d2:e3:
c0:04:85:02:7a:84:43:cd:1b:56:09:69:42:c3:9d:58:0b:63:
61:4c:dc:51:5f:41:f5:cd:c2:98:30:37:1e:27:b3:1a:e6:65:
15:80:fd:1f:97:c0:9a:c7:c0:be:10:2e:83:10:57:29:20:31:
af:af:99:fa:a4:a9:96:ed:f2:4e:c0:aa:56:91:e5:34:00:a1:
36:6d:6b:34:c4:7e:b2:f0:8f:04:9a:98:40:91:87:b4:c5:c8:
eb:aa:23:5f:d9:22:20:19:d3:48:4a:89:54:5e:a4:38:11:00:
3d:eb:2c:42:36:5f:7f:62:77:87:26:29:c5:ff:78:e9:9f:78:
bc:ad:f9:48:c0:25:d5:f7:63:3a:42:e7:eb:bb:77:de:92:41:
0c:c7:4f:1c:f9:fa:87:a8:8c:95:ac:11:7e:77:e7:39:14:19:
63:54:aa:23:cd:96:c0:dc:f5:c2:16:7d:9a:97:37:1d:1f:da:
d0:84:1c:ff:a5:8d:b4:a5:31:d6:27:18:19:b4:df:a7:74:cb:
20:58:69:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJqnmB007GZYJV3QmLTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx
NjQwYjYwHhcNMjUxMDE5MDgwMTExWhcNMjUxMDIwMDgwMTExWjAzMTEwLwYDVQQD
Eyg0OGM2OGMxZDIyMzI4M2MxMDA2NWJlNjg0NjNkNTE2ZDgwMTNlMGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSvg5bXDRXjxXN3Mj+vLdYQ2heNF
AfeiDkuCe5Rq8IWUe+GK+dIbZjv+FLUIljDhfNLBEl78DIJ+VnnE6wILeoZUHYdS
76VmC6mscL87NH2DVabkCpW3xZfrI08eBda3unEwSpbvQg/hHR5vi5rcTvEiRADN
Muz4WqKrLdKZVAdYpifaJHvohKEoV9lbZC3mAV6B72qLup6lzR3LLvly9MfG02In
GlSGhQrA0YoWsapnjy78HsBhJ+jttjfHqxitXMRZTW7Vt9RVsk79pcapa2Qn9So2
4y+OKI3xzoUcgVRre7CWb8GxLb6d3X8EXQzitiMq3AtT09z+4tgApME1lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjGjB0iMoPBAGW+aEY9UW2AE+DXMB8GA1UdIwQY
MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt
OGFiZjVlZTZjNGFkLzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk
LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbp5VWdQ
IoFQKBfmxRpRdauaeLpAYcjg4TF28fI9xl1BHfWVnHyH4xZb12HB8MRebrr3atLj
wASFAnqEQ80bVglpQsOdWAtjYUzcUV9B9c3CmDA3HiezGuZlFYD9H5fAmsfAvhAu
gxBXKSAxr6+Z+qSplu3yTsCqVpHlNAChNm1rNMR+svCPBJqYQJGHtMXI66ojX9ki
IBnTSEqJVF6kOBEAPessQjZff2J3hyYpxf946Z94vK35SMAl1fdjOkLn67t33pJB
DMdPHPn6h6iMlawRfnfnORQZY1SqI82WwNz1whZ9mpc3HR/a0IQc/6WNtKUx1icY
GbTfp3TLIFhpBA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:17 2025 by rpki-client