Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier: jMmk3wWfmCczICOpE7fXo/LvLt+ViBnxs6XxPn+7VAg=
Subject key identifier: 20:1A:C5:5D:CD:42:0D:26:C7:A1:CE:D7:4B:DC:7C:1F:3B:1C:CD:D2
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 019A4C60E171DA8C587A6D0E8A3CC0FA5ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number: 12CD
Signing time: Tue 04 Nov 2025 01:00:08 +0000
Manifest this update: Tue 04 Nov 2025 01:00:08 +0000
Manifest next update: Wed 05 Nov 2025 01:00:08 +0000
Files and hashes: 1: Dfh76wqLJFFyVrWGvNQ86Cd1ugg.roa (hash: cQ3NC144NOW+txHpDNWV4+CIEXIR87Btz3V4GE61yOA=)
2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: Z7R4qw3A8Augb67qDi3FZU1lHEsRuexmxOcZCC13GDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:e1:71:da:8c:58:7a:6d:0e:8a:3c:c0:fa:5e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Nov 4 01:00:08 2025 GMT
Not After : Nov 5 01:00:08 2025 GMT
Subject: CN=201ac55dcd420d26c7a1ced74bdc7c1f3b1ccdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:66:59:4a:c0:b7:33:5f:cb:d2:87:0b:a2:
4f:98:bf:26:9f:68:a8:98:9d:07:57:83:92:4a:15:
22:eb:34:33:bb:35:87:83:ff:e9:0d:53:6b:00:fb:
72:d4:bf:6e:20:94:da:39:e3:c1:fc:fe:4f:19:22:
a7:29:5e:42:47:77:11:82:e9:6b:11:3b:1a:89:86:
fe:46:ae:c9:cf:c8:5c:fa:0b:a0:3b:c4:e8:39:59:
f0:71:89:34:70:84:fb:48:ac:5a:68:97:94:bd:0b:
20:31:2a:80:f8:96:78:4f:6a:31:ee:40:06:43:5f:
08:73:a5:49:19:61:00:8a:71:4b:8c:47:fc:31:b5:
61:9f:6c:fa:ed:57:4c:4a:33:2c:8e:5a:7f:88:98:
e5:89:78:bb:1b:64:64:c8:04:1f:b7:6f:54:64:2b:
15:5b:30:3e:36:55:7f:cc:3c:a8:3f:cf:ad:1b:55:
12:cf:34:a1:4b:48:c8:6b:f3:e8:97:4e:a5:da:6c:
a4:63:9d:ce:3e:44:17:79:20:f5:61:d6:d1:2f:81:
78:31:ae:31:13:26:d4:1e:01:dc:ff:cd:f0:ca:10:
c3:ea:7b:7a:b3:c5:43:cb:79:87:92:4a:bc:a7:31:
05:46:7e:27:90:da:bc:20:d5:af:27:41:09:c6:3f:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:C5:5D:CD:42:0D:26:C7:A1:CE:D7:4B:DC:7C:1F:3B:1C:CD:D2
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ff:49:c2:ee:cd:c0:fc:b5:b0:07:ea:05:91:23:b6:e8:24:
4a:90:97:d6:04:e6:be:cb:0b:9f:6a:ed:c7:7c:7b:a8:ad:a3:
6c:d5:37:8e:fd:f1:5a:9a:73:a9:41:58:e1:13:86:80:af:b7:
29:89:5f:54:06:fb:90:a5:d4:cf:22:b7:55:5d:5b:7a:70:01:
0f:ad:63:4a:3b:55:4f:fb:da:0b:07:df:1c:34:4f:c4:7b:c8:
bb:77:76:91:1e:f5:a5:2b:35:c0:73:64:3f:5c:e1:71:13:45:
b1:7f:f2:58:2e:50:9e:2c:33:49:36:93:f6:21:c1:67:25:b2:
35:45:89:d4:27:b8:2c:fd:ec:96:e2:da:00:0c:ca:35:e6:06:
02:f3:ee:6d:50:ad:84:cd:22:bf:d3:70:92:80:bc:4a:11:e9:
39:9b:9a:b3:3f:b3:10:db:4c:49:40:7e:4b:89:e0:5b:3c:b4:
3f:c6:bd:f5:63:1c:1f:e1:ec:08:c8:fc:e4:1b:52:51:1f:0d:
b2:f7:8b:be:73:e6:86:71:3e:45:b0:a7:1c:d8:21:a8:60:48:
af:d5:63:8c:9b:ff:39:f2:3b:e4:77:fe:c5:5d:e7:39:01:04:
45:d3:19:a2:f5:6f:5b:49:38:b3:a5:02:a3:c8:03:f6:6b:27:
ca:4d:ea:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYOFx2oxYem0OijzA+l7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YmViY2ZlODJiMjYyN2VhOGRlODE2MWNiOTI3YjI0NWIw
NThlNjkwHhcNMjUxMTA0MDEwMDA4WhcNMjUxMTA1MDEwMDA4WjAzMTEwLwYDVQQD
EygyMDFhYzU1ZGNkNDIwZDI2YzdhMWNlZDc0YmRjN2MxZjNiMWNjZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb5mWUrAtzNfy9KHC6JPmL8mn2io
mJ0HV4OSShUi6zQzuzWHg//pDVNrAPty1L9uIJTaOePB/P5PGSKnKV5CR3cRgulr
ETsaiYb+Rq7Jz8hc+gugO8ToOVnwcYk0cIT7SKxaaJeUvQsgMSqA+JZ4T2ox7kAG
Q18Ic6VJGWEAinFLjEf8MbVhn2z67VdMSjMsjlp/iJjliXi7G2RkyAQft29UZCsV
WzA+NlV/zDyoP8+tG1USzzShS0jIa/Pol06l2mykY53OPkQXeSD1YdbRL4F4Ma4x
EybUHgHc/83wyhDD6nt6s8VDy3mHkkq8pzEFRn4nkNq8INWvJ0EJxj8VewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAaxV3NQg0mx6HO10vcfB87HM3SMB8GA1UdIwQY
MBaAFMi+vP6CsmJ+qN6BYcuSeyRbBY5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgt
ZGVlZjdmMTUxZThlLzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgtZGVlZjdmMTUxZThl
LzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/9Jwu7N
wPy1sAfqBZEjtugkSpCX1gTmvssLn2rtx3x7qK2jbNU3jv3xWppzqUFY4ROGgK+3
KYlfVAb7kKXUzyK3VV1benABD61jSjtVT/vaCwffHDRPxHvIu3d2kR71pSs1wHNk
P1zhcRNFsX/yWC5QniwzSTaT9iHBZyWyNUWJ1Ce4LP3sluLaAAzKNeYGAvPubVCt
hM0iv9NwkoC8ShHpOZuasz+zENtMSUB+S4ngWzy0P8a99WMcH+HsCMj85BtSUR8N
sveLvnPmhnE+RbCnHNghqGBIr9VjjJv/OfI75Hf+xV3nOQEERdMZovVvW0k4s6UC
o8gD9msnyk3qeQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:50 2025 by rpki-client