Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier: f82YXRbjvMWrN8xkA66bDsSElYpL8WyAgrbCjLIwCVI=
Subject key identifier: 0E:26:83:94:AE:31:EB:47:81:6E:35:FC:73:0D:C5:2F:66:7F:B5:F4
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial: 0199FBEB2A8E66D77CCF4BC059917F858BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number: 07EA
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: Kukv8lguLlqo8syva8to6ZRKCQQ.roa (hash: 6TsYNWvLqQDFoSOz1kHCV3IHIsfRZkDxe8fDivBN+2k=)
2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: mszJiZonU3UpEVqzx4Br0Aw3VI+aTo1STLelANf9wOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2a:8e:66:d7:7c:cf:4b:c0:59:91:7f:85:8b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=0e268394ae31eb47816e35fc730dc52f667fb5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:21:59:cf:d8:eb:c5:a1:e9:a2:8d:b8:33:
02:13:86:b8:30:ce:16:bd:69:7a:3d:ac:5e:79:1b:
ab:81:fd:5b:8e:bd:01:7f:92:75:cb:f9:eb:ef:96:
5e:c1:64:81:f5:d5:3a:b2:6f:08:39:a6:b9:6d:2a:
5a:ff:d6:e8:a2:e7:5e:03:ff:14:f7:31:7b:ca:76:
ae:8c:ea:dd:1c:4c:5a:49:ec:75:0a:be:6c:39:48:
84:4f:02:57:a6:2a:a6:74:56:0f:d6:8e:c4:9a:b4:
3e:93:6f:80:a7:58:23:0e:4e:47:d5:1c:e7:54:3e:
a5:18:ea:57:87:c0:2e:da:e7:e7:fd:4b:eb:72:9b:
e0:e7:ba:81:88:af:c4:8e:be:73:38:80:7a:86:2a:
78:f7:d3:01:99:96:7e:e2:21:2e:3e:ce:ab:3d:92:
58:40:86:e9:74:f3:2c:5f:27:f8:f6:38:87:1e:de:
41:96:86:d6:56:e4:d3:bf:b2:61:19:c0:ff:c4:d6:
46:ef:ae:bc:13:9f:61:ff:99:49:63:fb:64:29:9f:
23:8a:a3:bb:1c:aa:3d:99:68:06:b8:39:d6:27:31:
66:4d:36:5b:5e:69:be:4b:32:06:bd:1d:a4:79:89:
f4:9f:0f:ae:89:93:e7:87:a8:b7:61:7b:4f:d1:c7:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:26:83:94:AE:31:EB:47:81:6E:35:FC:73:0D:C5:2F:66:7F:B5:F4
X509v3 Authority Key Identifier:
keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:53:07:db:11:bd:c6:3d:1f:da:c8:2a:f4:17:20:a2:6f:6b:
d7:2a:f3:6c:b5:d9:81:f1:00:da:65:f8:f2:55:df:e9:24:06:
ac:2e:2f:fd:08:72:6e:46:ab:1a:70:51:c4:dd:a1:ac:ed:75:
d9:50:4c:c9:11:62:97:96:87:dd:5d:4f:ee:92:dd:49:6b:32:
1f:65:a4:20:23:8d:02:a6:5f:c2:e6:d1:e2:e0:0f:1b:67:5e:
4d:16:04:f4:22:9f:50:fc:67:7b:6f:56:18:b6:59:40:4d:08:
4c:71:5d:27:26:44:c7:9a:52:81:d7:c9:6a:e6:e0:eb:d7:c7:
05:79:4b:46:e1:a5:97:14:6f:a7:ab:1b:74:95:25:43:44:16:
98:29:1c:df:b0:d9:c5:03:bb:89:38:58:cb:fb:7e:99:30:d5:
65:bc:26:e1:a9:f6:9b:54:15:be:c3:fb:a1:2d:e1:4c:04:69:
cc:7e:48:2b:9b:3a:b7:8b:63:42:5a:d3:50:03:e4:73:28:8f:
9b:6d:a3:60:0b:d4:6f:3a:45:dc:1b:a0:cc:b0:f5:95:bf:29:
eb:52:45:15:7c:be:90:55:98:1e:af:d3:df:3c:20:cf:bf:40:
8f:a6:d7:ac:fb:1c:03:ed:f9:cd:58:2d:0d:fb:d0:76:00:5b:
0a:78:55:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yqOZtd8z0vAWZF/hYvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNTQyN2ZkNWQyMDU4NWU5N2MyZjI3NzFkNDgwOWJmNjM0
MWRhYTEwHhcNMjUxMDE5MTAwMTU2WhcNMjUxMDIwMTAwMTU2WjAzMTEwLwYDVQQD
EygwZTI2ODM5NGFlMzFlYjQ3ODE2ZTM1ZmM3MzBkYzUyZjY2N2ZiNWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXQhWc/Y68Wh6aKNuDMCE4a4MM4W
vWl6PaxeeRurgf1bjr0Bf5J1y/nr75ZewWSB9dU6sm8IOaa5bSpa/9booudeA/8U
9zF7ynaujOrdHExaSex1Cr5sOUiETwJXpiqmdFYP1o7EmrQ+k2+Ap1gjDk5H1Rzn
VD6lGOpXh8Au2ufn/Uvrcpvg57qBiK/Ejr5zOIB6hip499MBmZZ+4iEuPs6rPZJY
QIbpdPMsXyf49jiHHt5BlobWVuTTv7JhGcD/xNZG7668E59h/5lJY/tkKZ8jiqO7
HKo9mWgGuDnWJzFmTTZbXmm+SzIGvR2keYn0nw+uiZPnh6i3YXtP0cedJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4mg5SuMetHgW41/HMNxS9mf7X0MB8GA1UdIwQY
MBaAFMtUJ/1dIFhel8Lydx1ICb9jQdqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iODllODYtYmZiNC00YWY2LTg0NDgt
MWYwZGQ5ZmRmNWYzLzEveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iODllODYtYmZiNC00YWY2LTg0NDgtMWYwZGQ5ZmRmNWYz
LzEveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1MH2xG9
xj0f2sgq9Bcgom9r1yrzbLXZgfEA2mX48lXf6SQGrC4v/QhybkarGnBRxN2hrO11
2VBMyRFil5aH3V1P7pLdSWsyH2WkICONAqZfwubR4uAPG2deTRYE9CKfUPxne29W
GLZZQE0ITHFdJyZEx5pSgdfJaubg69fHBXlLRuGllxRvp6sbdJUlQ0QWmCkc37DZ
xQO7iThYy/t+mTDVZbwm4an2m1QVvsP7oS3hTARpzH5IK5s6t4tjQlrTUAPkcyiP
m22jYAvUbzpF3BugzLD1lb8p61JFFXy+kFWYHq/T3zwgz79Aj6bXrPscA+35zVgt
DfvQdgBbCnhV9w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:10:59 2025 by rpki-client