Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: ikG9RKtyDJqpHxCmuNGDwJ3huCBnSAcLm3WbOPZUlqo=
Subject key identifier: 70:2B:D1:D6:04:DE:A9:0F:92:40:19:41:9D:90:1A:60:CA:9E:26:C4
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 019A1A623F7A8BFF5C0B5C84C3409465BC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 08:00:37 +0000
Manifest this update: Sat 25 Oct 2025 08:00:37 +0000
Manifest next update: Sun 26 Oct 2025 08:00:37 +0000
Files and hashes: 1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: Xk8KZxW28VYWiaOMARip0Y1YLVkjLkAuu6nbjgyT6R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:62:3f:7a:8b:ff:5c:0b:5c:84:c3:40:94:65:bc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Oct 25 08:00:37 2025 GMT
Not After : Oct 26 08:00:37 2025 GMT
Subject: CN=702bd1d604dea90f924019419d901a60ca9e26c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:4e:20:dd:56:b2:0e:b9:f3:e8:0d:e7:72:
b0:63:8e:37:69:c9:1c:78:6c:8d:cf:4a:db:f2:87:
59:84:40:63:ff:64:05:f6:2d:24:6d:c0:15:ce:df:
e2:c4:aa:9d:19:93:b1:2d:84:24:58:74:0f:45:1f:
63:fb:7d:39:9a:97:f8:c1:74:33:c3:b4:06:9c:6b:
d6:a5:58:46:09:74:7a:a6:8b:8c:39:12:e9:96:59:
4f:df:36:4d:24:fa:4c:48:4f:ec:a1:0a:f7:56:fe:
6a:24:64:8e:01:96:81:0a:66:2d:54:9d:af:b4:88:
91:4a:a6:7d:ef:84:e0:6c:b1:87:dd:61:7b:f1:95:
51:88:a1:00:ff:2d:1e:6e:41:b7:0d:61:df:78:8b:
fa:27:96:72:de:1c:dd:08:b1:8e:2e:f9:92:0b:9d:
0b:1f:72:c1:93:e6:3b:2f:f2:4d:64:de:bb:41:3f:
13:2e:a2:1f:c6:16:4b:b8:75:0c:a0:6b:33:79:95:
46:32:0e:b4:3c:a8:f7:04:d0:db:bb:6b:30:8d:f1:
50:ee:ba:14:84:69:43:ed:e3:0f:5c:2a:3c:8a:94:
82:f0:79:9d:95:73:35:15:ce:2a:95:e4:06:6e:db:
71:1c:cd:23:43:23:6a:13:94:5b:0c:64:e8:9a:9b:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2B:D1:D6:04:DE:A9:0F:92:40:19:41:9D:90:1A:60:CA:9E:26:C4
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fd:bd:06:82:ef:e0:28:5f:30:4a:8a:d5:80:21:7c:0a:57:
63:8c:5f:ef:b9:bf:86:04:61:27:32:b8:83:09:ab:0d:a9:dd:
fd:aa:e3:9e:f7:17:1b:bc:9a:4f:64:5b:10:70:05:37:4d:66:
38:d5:7b:f3:e9:f4:19:e3:e3:e0:a9:0d:9f:1c:37:62:fd:9b:
d0:7b:cb:58:ff:9f:ec:c3:4f:63:6c:0e:12:93:9c:bd:f3:8a:
96:c4:73:8a:f7:7f:ed:1b:52:2d:f7:43:b6:36:0d:8f:d2:f5:
42:8f:7a:5a:f4:e9:4b:24:a2:3c:74:10:94:51:b2:36:ea:2e:
32:9c:d6:b0:3a:46:c3:bc:ee:76:ff:87:87:cc:51:8e:8a:de:
11:d1:b8:dd:a9:08:be:da:7f:ce:b9:8b:4d:90:4f:d1:31:65:
a3:12:f1:c2:a6:ee:56:dc:9d:4b:7b:19:dd:8e:4d:cf:19:20:
7e:6e:43:4b:31:ac:18:92:39:4b:cc:5f:a9:cb:54:b0:f5:60:
37:e6:ca:27:c1:27:ba:a1:96:94:ce:66:b1:c3:7a:fc:f3:a8:
f5:d8:70:d4:e9:c1:ca:f6:3e:a4:79:11:12:c1:1a:81:0d:ff:
b8:29:dc:3a:b3:c5:4a:01:d2:1c:f4:b4:eb:1b:cd:9f:fc:0c:
77:e2:56:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaYj96i/9cC1yEw0CUZbwTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1
NGEyMmEwHhcNMjUxMDI1MDgwMDM3WhcNMjUxMDI2MDgwMDM3WjAzMTEwLwYDVQQD
Eyg3MDJiZDFkNjA0ZGVhOTBmOTI0MDE5NDE5ZDkwMWE2MGNhOWUyNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQROIN1Wsg658+gN53KwY443ackc
eGyNz0rb8odZhEBj/2QF9i0kbcAVzt/ixKqdGZOxLYQkWHQPRR9j+305mpf4wXQz
w7QGnGvWpVhGCXR6pouMORLplllP3zZNJPpMSE/soQr3Vv5qJGSOAZaBCmYtVJ2v
tIiRSqZ974TgbLGH3WF78ZVRiKEA/y0ebkG3DWHfeIv6J5Zy3hzdCLGOLvmSC50L
H3LBk+Y7L/JNZN67QT8TLqIfxhZLuHUMoGszeZVGMg60PKj3BNDbu2swjfFQ7roU
hGlD7eMPXCo8ipSC8HmdlXM1Fc4qleQGbttxHM0jQyNqE5RbDGTomptCrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAr0dYE3qkPkkAZQZ2QGmDKnibEMB8GA1UdIwQY
MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt
YTZhYmIxMjE1ZGVjLzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj
LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuP29BoLv
4ChfMEqK1YAhfApXY4xf77m/hgRhJzK4gwmrDand/arjnvcXG7yaT2RbEHAFN01m
ONV78+n0GePj4KkNnxw3Yv2b0HvLWP+f7MNPY2wOEpOcvfOKlsRzivd/7RtSLfdD
tjYNj9L1Qo96WvTpSySiPHQQlFGyNuouMpzWsDpGw7zudv+Hh8xRjoreEdG43akI
vtp/zrmLTZBP0TFloxLxwqbuVtydS3sZ3Y5Nzxkgfm5DSzGsGJI5S8xfqctUsPVg
N+bKJ8EnuqGWlM5mscN6/POo9dhw1OnByvY+pHkREsEagQ3/uCncOrPFSgHSHPS0
6xvNn/wMd+JWkw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:35:58 2025 by rpki-client