Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: VOruNUcB0vXcqfXFPbMEBaGlx0aiZd1gDKGq5QCqs8M=
Subject key identifier: 70:38:83:4C:96:15:20:D5:7E:19:F0:EC:54:ED:93:48:5E:B0:D4:01
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019A22F7507F0B06006BE025631E344021A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 11D6
Signing time: Mon 27 Oct 2025 00:00:24 +0000
Manifest this update: Mon 27 Oct 2025 00:00:24 +0000
Manifest next update: Tue 28 Oct 2025 00:00:24 +0000
Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: t0F1lhGSvYnJwNgbCauwiB4d2KbcD9Vca5wRWUPPea4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:50:7f:0b:06:00:6b:e0:25:63:1e:34:40:21:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Oct 27 00:00:24 2025 GMT
Not After : Oct 28 00:00:24 2025 GMT
Subject: CN=7038834c961520d57e19f0ec54ed93485eb0d401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:85:a5:61:c8:6a:cb:77:f0:9e:86:ee:77:
03:5b:53:d7:c4:5b:6d:89:e7:fe:3b:91:fa:59:2e:
0d:cf:bc:19:51:93:09:39:ac:05:f0:b0:56:ef:e5:
ea:3c:88:c4:cd:eb:da:b7:ce:1c:08:70:5b:b4:e6:
32:6e:c0:d5:fd:b6:95:a7:a6:6e:8d:4b:4f:3c:58:
cb:df:18:9d:f3:5e:23:54:65:f5:37:54:33:54:0a:
46:d0:1a:42:36:95:d2:ab:6d:90:93:f3:a1:16:ea:
75:a9:7a:7e:58:2e:e4:77:c2:9b:f7:ce:c3:00:ed:
4e:70:f1:8d:24:1b:fe:eb:ad:3a:40:b8:1a:f2:ce:
2a:67:20:a5:d8:be:ab:fe:e5:ee:db:96:78:11:df:
7d:7d:9d:9e:9c:fe:67:61:34:a4:76:f3:62:07:33:
63:db:d6:4c:a9:c6:bb:b1:37:ab:bc:5f:7c:79:af:
9a:9a:c1:59:5c:fd:51:6c:be:40:97:2d:0a:18:48:
48:fe:e0:7a:ff:1c:79:bd:0c:49:bd:87:3a:98:92:
6a:ba:52:86:eb:6f:55:02:a0:7e:47:33:fa:a6:64:
4d:66:5b:8b:74:dd:5b:57:d1:8e:5c:bf:6b:c1:18:
b2:db:f3:f7:64:d6:a5:e3:86:6f:a2:63:98:95:77:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:38:83:4C:96:15:20:D5:7E:19:F0:EC:54:ED:93:48:5E:B0:D4:01
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e1:bb:1d:0f:47:3a:34:92:1f:73:cb:cf:67:16:b2:72:b7:
8b:35:b2:70:c0:f8:21:9b:01:96:9c:82:9b:0f:f5:6d:a5:c1:
c0:a0:ed:3d:76:1f:38:62:55:f1:77:6b:40:2c:e4:6c:b0:bb:
a8:da:6c:71:e2:3c:1a:7d:34:59:0e:89:8b:8d:59:43:7d:7f:
7a:b1:78:26:3a:ef:66:ef:e0:51:19:5b:57:03:4c:eb:d7:b8:
5c:73:08:c6:4b:07:8b:54:52:0a:37:c4:22:86:52:d0:8f:52:
7b:ab:c7:9a:27:76:95:ae:c6:95:0c:5d:24:9c:63:2e:21:bf:
bf:f3:56:9b:fe:38:17:3d:d2:10:ee:23:df:21:86:f4:3f:3d:
b8:97:21:84:e6:ed:a4:64:f9:14:53:26:b7:27:ba:50:4a:7b:
b7:b3:db:7d:91:47:9e:56:66:4a:4c:68:76:69:f0:36:fb:86:
04:f8:a4:db:4f:ed:b6:2d:e9:ed:08:6d:1a:d7:45:06:d8:92:
e9:04:ef:9c:d9:97:82:ef:69:c1:9f:81:44:c8:1e:89:a4:8a:
5d:c2:df:9a:da:37:b9:ce:f3:f5:c2:18:52:42:d7:44:8f:31:
e3:34:d9:46:35:ab:3c:2e:ec:cd:90:57:ab:99:5c:bb:42:9c:
b4:2a:8b:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoi91B/CwYAa+AlYx40QCGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj
OWRiNWYwHhcNMjUxMDI3MDAwMDI0WhcNMjUxMDI4MDAwMDI0WjAzMTEwLwYDVQQD
Eyg3MDM4ODM0Yzk2MTUyMGQ1N2UxOWYwZWM1NGVkOTM0ODVlYjBkNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZKFpWHIast38J6G7ncDW1PXxFtt
ief+O5H6WS4Nz7wZUZMJOawF8LBW7+XqPIjEzevat84cCHBbtOYybsDV/baVp6Zu
jUtPPFjL3xid814jVGX1N1QzVApG0BpCNpXSq22Qk/OhFup1qXp+WC7kd8Kb987D
AO1OcPGNJBv+6606QLga8s4qZyCl2L6r/uXu25Z4Ed99fZ2enP5nYTSkdvNiBzNj
29ZMqca7sTervF98ea+amsFZXP1RbL5Aly0KGEhI/uB6/xx5vQxJvYc6mJJqulKG
629VAqB+RzP6pmRNZluLdN1bV9GOXL9rwRiy2/P3ZNal44ZvomOYlXf0aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA4g0yWFSDVfhnw7FTtk0hesNQBMB8GA1UdIwQY
MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt
MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri
LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOG7HQ9H
OjSSH3PLz2cWsnK3izWycMD4IZsBlpyCmw/1baXBwKDtPXYfOGJV8XdrQCzkbLC7
qNpsceI8Gn00WQ6Ji41ZQ31/erF4JjrvZu/gURlbVwNM69e4XHMIxksHi1RSCjfE
IoZS0I9Se6vHmid2la7GlQxdJJxjLiG/v/NWm/44Fz3SEO4j3yGG9D89uJchhObt
pGT5FFMmtye6UEp7t7PbfZFHnlZmSkxodmnwNvuGBPik20/tti3p7QhtGtdFBtiS
6QTvnNmXgu9pwZ+BRMgeiaSKXcLfmto3uc7z9cIYUkLXRI8x4zTZRjWrPC7szZBX
q5lcu0KctCqLPA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:40:25 2025 by rpki-client