Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: 2TK2HAlOCmK7fqtVqhYHTy+oIDrHxVWtcsHMdPN/U0c=
Subject key identifier: DC:EB:28:80:97:F3:EC:C9:46:73:38:BE:17:D5:89:E3:6D:83:2B:D2
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 019A221B6474D94C7F190790136C8FCA54B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 20:00:11 +0000
Manifest this update: Sun 26 Oct 2025 20:00:11 +0000
Manifest next update: Mon 27 Oct 2025 20:00:11 +0000
Files and hashes: 1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: bnOLAkGnSCdn1HE7swO+dkcZuXpOMosJcXC9DwFpVBI=)
2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:64:74:d9:4c:7f:19:07:90:13:6c:8f:ca:54:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Oct 26 20:00:11 2025 GMT
Not After : Oct 27 20:00:11 2025 GMT
Subject: CN=dceb288097f3ecc9467338be17d589e36d832bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:d6:1e:8b:d1:64:da:25:c9:d2:d5:4e:9f:
64:2d:4d:30:8e:74:b2:c7:71:4e:0a:d7:9e:b6:98:
5c:d6:a8:86:15:b9:c0:83:10:03:50:2f:2e:55:ab:
73:84:2d:02:44:82:99:f3:1a:81:83:0d:c8:e3:a0:
95:70:52:2c:36:65:58:5a:a2:f0:21:45:12:57:64:
b5:b9:e5:54:9f:92:f9:69:7a:80:e6:28:ad:42:bb:
e5:ab:e2:80:f1:8c:1a:cd:b9:68:0d:6d:00:85:16:
d4:da:99:16:48:8f:fb:51:8a:7f:24:f2:8f:b8:c4:
54:c7:2c:87:a2:fc:87:23:5f:65:08:be:e6:54:d6:
03:1d:f5:2c:91:67:50:08:e6:d8:47:01:82:b8:cf:
ce:bd:93:ea:16:6e:96:96:62:76:4f:4c:77:0d:8e:
d9:58:b0:61:6a:e4:24:8c:f5:29:cc:c4:a6:76:a4:
19:07:42:97:37:30:07:ab:b8:e2:8d:a0:92:ac:1a:
22:f0:b6:e5:50:3c:61:51:f2:da:65:1d:10:30:47:
e2:41:e8:c1:33:40:b2:16:46:57:fc:df:08:ac:d0:
a1:3f:cf:26:13:b0:50:da:27:53:a8:29:c0:f1:59:
ce:a9:4f:80:4f:8c:e9:c5:0c:fd:40:70:26:10:4b:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:28:80:97:F3:EC:C9:46:73:38:BE:17:D5:89:E3:6D:83:2B:D2
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a4:95:2d:58:48:f5:00:94:f2:ec:ea:a3:e7:64:8e:c6:ea:
a3:a7:d8:4f:4c:94:bf:2f:35:4c:21:a0:f3:42:b1:ce:90:7b:
86:d9:19:55:ff:22:e4:28:f9:15:b3:58:83:c0:7b:c3:ca:30:
4b:c8:6a:9d:2f:2b:de:fb:0c:b6:00:11:9d:f1:91:03:5c:6a:
55:22:6c:b4:db:64:4d:69:59:5c:f2:64:15:9e:33:f1:9b:b7:
46:73:68:9f:18:e0:67:75:83:cc:12:b3:ab:e7:b9:6a:41:b3:
f3:f4:86:a8:d2:45:81:1f:89:6d:19:1c:19:c9:ab:d1:f8:ef:
37:83:71:e0:03:6c:92:aa:5a:d0:7f:1b:d4:56:03:8b:e1:5f:
49:ee:ea:de:4f:aa:db:20:f5:f6:f4:f8:00:af:23:18:eb:a4:
fd:8c:30:a9:7c:d6:ac:7b:ad:de:c3:68:67:29:46:ab:9b:8a:
02:64:cf:fb:11:7f:87:d5:36:65:b6:39:f6:25:33:ad:68:ac:
20:1a:85:30:8a:85:c6:ae:7e:cc:ff:e1:e4:f5:ac:99:8e:a3:
0a:9c:9f:dc:8b:b7:0b:07:0e:1a:4e:14:8a:73:55:ce:a9:19:
ac:99:67:d1:e2:d7:bf:87:92:ed:b9:8f:58:bc:56:98:c0:92:
b8:d5:be:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG2R02Ux/GQeQE2yPylS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMWFjYTVmOWExZGNmYTE5NzA0ZDFmMDM3N2YxYjlmZTkx
NDVlMDgwHhcNMjUxMDI2MjAwMDExWhcNMjUxMDI3MjAwMDExWjAzMTEwLwYDVQQD
EyhkY2ViMjg4MDk3ZjNlY2M5NDY3MzM4YmUxN2Q1ODllMzZkODMyYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumfWHovRZNolydLVTp9kLU0wjnSy
x3FOCteetphc1qiGFbnAgxADUC8uVatzhC0CRIKZ8xqBgw3I46CVcFIsNmVYWqLw
IUUSV2S1ueVUn5L5aXqA5iitQrvlq+KA8YwazbloDW0AhRbU2pkWSI/7UYp/JPKP
uMRUxyyHovyHI19lCL7mVNYDHfUskWdQCObYRwGCuM/OvZPqFm6WlmJ2T0x3DY7Z
WLBhauQkjPUpzMSmdqQZB0KXNzAHq7jijaCSrBoi8LblUDxhUfLaZR0QMEfiQejB
M0CyFkZX/N8IrNChP88mE7BQ2idTqCnA8VnOqU+AT4zpxQz9QHAmEEuEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzrKICX8+zJRnM4vhfVieNtgyvSMB8GA1UdIwQY
MBaAFGMayl+aHc+hlwTR8Dd/G5/pFF4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTkt
ZDJiMDJhNDAzYzdiLzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTktZDJiMDJhNDAzYzdi
LzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6SVLVhI
9QCU8uzqo+dkjsbqo6fYT0yUvy81TCGg80KxzpB7htkZVf8i5Cj5FbNYg8B7w8ow
S8hqnS8r3vsMtgARnfGRA1xqVSJstNtkTWlZXPJkFZ4z8Zu3RnNonxjgZ3WDzBKz
q+e5akGz8/SGqNJFgR+JbRkcGcmr0fjvN4Nx4ANskqpa0H8b1FYDi+FfSe7q3k+q
2yD19vT4AK8jGOuk/YwwqXzWrHut3sNoZylGq5uKAmTP+xF/h9U2ZbY59iUzrWis
IBqFMIqFxq5+zP/h5PWsmY6jCpyf3Iu3CwcOGk4UinNVzqkZrJln0eLXv4eS7bmP
WLxWmMCSuNW+PA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:19 2025 by rpki-client