Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
File: y9lerW0qHa8u9oestMKedgdrKAk.mft (raw, json)
Hash identifier: G1EXxsnrvB2v3GdsIkELdZYgM22x6QMauACe1881PAo=
Subject key identifier: FF:F8:C5:F3:41:4A:49:B9:64:A5:39:78:16:29:81:AC:AE:2B:08:7E
Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Certificate serial: 0199FCFDA3FD289920FBA3E80123F452DB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
Manifest number: 0AC4
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa (hash: R+7BGQyfLFShlywgi4Re33H2XJ0XnH/YSJRVXJB4EDE=)
2: y9lerW0qHa8u9oestMKedgdrKAk.crl (hash: krk/hZnGG2v1COZChx4NhQSxeRudRVhU1gc534D8Lk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a3:fd:28:99:20:fb:a3:e8:01:23:f4:52:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=fff8c5f3414a49b964a53978162981acae2b087e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:9b:64:0e:f7:d7:41:6c:68:22:5a:ca:b1:
f9:38:6a:cf:cc:ba:1f:0c:f2:fe:35:c8:e6:86:14:
72:ab:25:d0:59:73:7e:9f:0d:b1:5b:ef:32:94:01:
7f:7b:42:a3:7a:6b:3f:dc:55:b2:dd:f6:16:56:57:
f6:82:db:ad:db:d0:0c:12:73:bc:80:4c:44:f7:75:
a9:a7:8a:19:d3:d6:fb:bb:34:3e:1c:96:f5:be:91:
c5:0d:9d:30:ad:42:c6:81:8d:1b:5a:b7:e0:76:05:
db:ca:d1:02:5f:43:05:7e:85:29:79:75:e5:da:47:
ff:88:83:7f:10:fb:b6:a5:89:d1:73:50:b4:fa:a9:
2f:29:fd:34:82:13:b6:b8:82:f9:fd:24:d3:af:9b:
a1:50:5c:10:1f:9e:44:8e:ed:d0:47:1a:10:3d:7a:
9c:25:de:34:01:82:c2:38:49:a5:ac:b1:99:ad:39:
26:9b:b5:bc:8c:aa:b6:00:5c:a2:e7:29:b0:86:f1:
e9:d9:b6:77:f1:95:e1:54:d8:36:0b:d1:ef:c0:c2:
16:65:2d:d7:1d:ba:39:71:eb:2b:80:60:01:2b:46:
54:73:e7:04:6a:d2:6b:fd:91:1f:8b:a3:ed:12:b3:
c6:02:b8:6c:69:b1:1b:aa:7a:18:e2:ce:fa:c7:00:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:C5:F3:41:4A:49:B9:64:A5:39:78:16:29:81:AC:AE:2B:08:7E
X509v3 Authority Key Identifier:
keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:03:db:67:74:ed:fd:2a:d8:62:ed:70:71:ee:63:2a:d1:b4:
94:35:93:45:41:d2:57:f7:59:63:86:0d:d1:04:02:8d:98:14:
39:da:63:cc:6b:06:de:c5:c9:86:d6:9b:ad:d3:50:a2:36:43:
90:b0:71:b4:bd:76:fc:b0:c4:32:81:3f:94:d0:e1:87:9b:2c:
a3:aa:20:2a:b5:6e:8c:08:93:3f:06:9e:30:05:d9:46:b1:3a:
8a:af:59:47:7a:c7:37:b1:b0:68:eb:8b:4c:04:9b:49:d9:18:
70:5e:6d:e6:27:d5:b8:8b:e6:2c:ca:c8:24:c6:33:0e:a3:d5:
a2:ed:5f:4a:a4:ce:89:6e:fa:ec:85:27:74:9e:3e:58:4c:bb:
d7:cf:17:fa:0b:c4:62:f0:ef:78:6b:b1:ca:9e:7f:0a:5e:b1:
3d:a6:d2:25:4e:b1:94:d5:dd:c8:c0:f5:da:c6:8b:c9:50:f5:
18:60:6f:af:1b:d0:e8:b1:36:3e:2c:7b:e8:01:16:b1:74:4c:
29:4f:4c:02:36:c0:44:56:07:46:7e:ef:c3:0f:47:4b:1f:6e:
ef:ff:07:3c:ae:99:fa:19:43:e7:3f:fb:51:90:5d:9a:22:53:
33:7b:a6:b9:84:c7:60:f5:f8:74:28:c3:52:29:14:08:21:8b:
30:cd:08:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/aP9KJkg+6PoASP0UttBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDk1ZWFkNmQyYTFkYWYyZWY2ODdhY2I0YzI5ZTc2MDc2
YjI4MDkwHhcNMjUxMDE5MTUwMTQ1WhcNMjUxMDIwMTUwMTQ1WjAzMTEwLwYDVQQD
EyhmZmY4YzVmMzQxNGE0OWI5NjRhNTM5NzgxNjI5ODFhY2FlMmIwODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA006bZA7310FsaCJayrH5OGrPzLof
DPL+NcjmhhRyqyXQWXN+nw2xW+8ylAF/e0Kjems/3FWy3fYWVlf2gtut29AMEnO8
gExE93Wpp4oZ09b7uzQ+HJb1vpHFDZ0wrULGgY0bWrfgdgXbytECX0MFfoUpeXXl
2kf/iIN/EPu2pYnRc1C0+qkvKf00ghO2uIL5/STTr5uhUFwQH55Eju3QRxoQPXqc
Jd40AYLCOEmlrLGZrTkmm7W8jKq2AFyi5ymwhvHp2bZ38ZXhVNg2C9HvwMIWZS3X
Hbo5cesrgGABK0ZUc+cEatJr/ZEfi6PtErPGArhsabEbqnoY4s76xwDgjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/4xfNBSkm5ZKU5eBYpgayuKwh+MB8GA1UdIwQY
MBaAFMvZXq1tKh2vLvaHrLTCnnYHaygJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlsZXJXMHFIYTh1OW9lc3RNS2VkZ2RyS0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kMTY0NjMtODliZS00ZjViLWIyZjIt
YWNjNDFjYWNmN2UxLzEveTlsZXJXMHFIYTh1OW9lc3RNS2VkZ2RyS0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kMTY0NjMtODliZS00ZjViLWIyZjItYWNjNDFjYWNmN2Ux
LzEveTlsZXJXMHFIYTh1OW9lc3RNS2VkZ2RyS0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwPbZ3Tt
/SrYYu1wce5jKtG0lDWTRUHSV/dZY4YN0QQCjZgUOdpjzGsG3sXJhtabrdNQojZD
kLBxtL12/LDEMoE/lNDhh5sso6ogKrVujAiTPwaeMAXZRrE6iq9ZR3rHN7GwaOuL
TASbSdkYcF5t5ifVuIvmLMrIJMYzDqPVou1fSqTOiW767IUndJ4+WEy7188X+gvE
YvDveGuxyp5/Cl6xPabSJU6xlNXdyMD12saLyVD1GGBvrxvQ6LE2Pix76AEWsXRM
KU9MAjbARFYHRn7vww9HSx9u7/8HPK6Z+hlD5z/7UZBdmiJTM3umuYTHYPX4dCjD
UikUCCGLMM0IHw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:18 2025 by rpki-client