Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier: bnki0Lf65Pv9ywFOMHv2B8trO343pyzEdhINy2/cDGY=
Subject key identifier: FA:50:54:3E:2B:A0:42:83:1A:66:DD:9C:A3:75:F5:0E:CE:D7:16:D1
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial: 0199FB7C718D769A30330D668D79435B05D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number: 37
Signing time: Sun 19 Oct 2025 08:01:00 +0000
Manifest this update: Sun 19 Oct 2025 08:01:00 +0000
Manifest next update: Mon 20 Oct 2025 08:01:00 +0000
Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: YeDES/8xQ/b9vp3mnhml8L+pKcGxk+0l2ZpczrJ6JOs=)
2: qdMXO5dxGNkyeRydnMIi_ZzZAVs.roa (hash: emXh4czyfau1VXJaPAfpRR7uc8vhZu0P1DoeRXNpxPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:71:8d:76:9a:30:33:0d:66:8d:79:43:5b:05:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Validity
Not Before: Oct 19 08:01:00 2025 GMT
Not After : Oct 20 08:01:00 2025 GMT
Subject: CN=fa50543e2ba042831a66dd9ca375f50eced716d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:74:d1:b6:0a:84:11:2e:8a:66:0b:14:93:
3f:c2:1b:e1:c7:f5:55:03:16:2e:a9:5b:f0:88:18:
3c:26:e1:35:c7:5f:dd:2a:cd:4f:62:1b:82:61:f2:
64:4e:26:58:1f:10:16:79:76:17:81:e3:aa:ca:59:
86:ca:e8:38:fc:e0:e2:d3:fb:49:8d:8d:1d:13:4a:
fa:7c:91:22:42:ee:ea:3f:d9:d9:30:15:4a:65:bf:
2d:47:31:61:7a:53:ca:e5:30:9d:b1:59:40:08:c1:
d6:2d:7a:a0:23:5e:59:64:21:6f:a0:ef:4c:a4:b4:
b7:81:9d:90:77:bc:e7:c0:ed:cc:a1:63:ef:71:9e:
3f:93:74:0f:24:45:03:a3:3b:bf:c5:9a:5a:c4:32:
58:8e:8a:b2:cc:0d:d0:0c:ee:da:6f:2b:fa:f8:33:
32:3e:32:02:bb:5c:4a:ac:85:c9:5c:5f:16:dd:9e:
2b:83:51:d6:98:28:b8:88:6c:2d:e8:82:23:3a:5b:
bc:d7:83:70:ef:93:c3:1d:ab:9b:16:5e:1a:d7:a5:
ea:13:30:2f:fb:41:2f:80:0a:63:56:87:ab:c0:6e:
c5:3f:45:7a:0c:ac:9c:ae:8f:49:bb:85:b5:ba:89:
ad:d8:70:60:ca:68:de:35:b7:0b:9a:38:19:c3:22:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:50:54:3E:2B:A0:42:83:1A:66:DD:9C:A3:75:F5:0E:CE:D7:16:D1
X509v3 Authority Key Identifier:
keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8d:b2:85:bf:89:af:49:45:77:f8:68:4e:a4:9a:c3:b9:11:
f2:f5:6d:e7:02:a2:79:d5:7e:37:10:2b:09:30:48:b4:05:1e:
ad:87:d7:1b:ae:6b:7a:f9:dd:1e:2f:2c:5c:03:0d:ff:8d:41:
0f:ce:2a:35:9d:b0:52:80:b1:c9:47:2f:bd:ad:e4:27:99:c5:
d0:8f:7a:8e:07:cb:a2:f5:43:93:11:c0:82:75:1e:ba:dc:52:
88:fc:c7:4d:30:15:0b:cc:ee:3c:fc:88:60:db:91:b9:26:34:
e6:6e:15:f2:6d:67:15:63:0d:4b:de:50:6b:9d:88:e0:e3:dc:
9f:47:62:5e:e8:70:78:3c:b4:e4:4f:62:b7:ab:9a:57:3b:9c:
96:6f:9f:11:34:54:83:fb:48:f8:a9:82:2b:47:ea:1a:13:dc:
e2:c1:e5:cf:42:c8:0b:bd:a2:ea:f5:22:8b:07:9c:2d:5c:5c:
34:59:c5:e4:41:5e:a0:c6:77:04:ba:df:39:04:3e:a0:ce:fd:
6e:12:41:16:91:57:0b:e4:98:c4:45:10:9a:59:0e:36:1b:5a:
7c:f8:54:8a:bf:c3:34:64:4a:74:c6:06:76:b2:e8:bf:6a:33:
05:dd:29:79:66:c1:dd:21:66:95:95:a2:91:a1:c4:df:96:ac:
e5:06:ef:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fHGNdpowMw1mjXlDWwXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNWUxNzBkOWIwN2M1MGQxYjI5YWU4Njk2MjA2Y2IxNDVh
NGYxZjcwHhcNMjUxMDE5MDgwMTAwWhcNMjUxMDIwMDgwMTAwWjAzMTEwLwYDVQQD
EyhmYTUwNTQzZTJiYTA0MjgzMWE2NmRkOWNhMzc1ZjUwZWNlZDcxNmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDF00bYKhBEuimYLFJM/whvhx/VV
AxYuqVvwiBg8JuE1x1/dKs1PYhuCYfJkTiZYHxAWeXYXgeOqylmGyug4/ODi0/tJ
jY0dE0r6fJEiQu7qP9nZMBVKZb8tRzFhelPK5TCdsVlACMHWLXqgI15ZZCFvoO9M
pLS3gZ2Qd7znwO3MoWPvcZ4/k3QPJEUDozu/xZpaxDJYjoqyzA3QDO7abyv6+DMy
PjICu1xKrIXJXF8W3Z4rg1HWmCi4iGwt6IIjOlu814Nw75PDHaubFl4a16XqEzAv
+0EvgApjVoerwG7FP0V6DKycro9Ju4W1uomt2HBgymjeNbcLmjgZwyLOWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpQVD4roEKDGmbdnKN19Q7O1xbRMB8GA1UdIwQY
MBaAFGNeFw2bB8UNGymuhpYgbLFFpPH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYt
ZjgwZDVmMzE2NjRlLzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYtZjgwZDVmMzE2NjRl
LzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbY2yhb+J
r0lFd/hoTqSaw7kR8vVt5wKiedV+NxArCTBItAUerYfXG65revndHi8sXAMN/41B
D84qNZ2wUoCxyUcvva3kJ5nF0I96jgfLovVDkxHAgnUeutxSiPzHTTAVC8zuPPyI
YNuRuSY05m4V8m1nFWMNS95Qa52I4OPcn0diXuhweDy05E9it6uaVzuclm+fETRU
g/tI+KmCK0fqGhPc4sHlz0LIC72i6vUiiwecLVxcNFnF5EFeoMZ3BLrfOQQ+oM79
bhJBFpFXC+SYxEUQmlkONhtafPhUir/DNGRKdMYGdrLov2ozBd0peWbB3SFmlZWi
kaHE35as5Qbvng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:57 2025 by rpki-client