Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: JdGUXBbS6QIAX6UP4oMkedP68EFN+S/InHfvO0QI6ps=
Subject key identifier: 17:BD:14:88:EE:46:75:03:0E:BF:2F:04:C4:C3:5C:48:21:27:89:C7
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 019A71B97A4CF4E922B6646DD8D1500B4F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 12F6
Signing time: Tue 11 Nov 2025 07:02:52 +0000
Manifest this update: Tue 11 Nov 2025 07:02:52 +0000
Manifest next update: Wed 12 Nov 2025 07:02:52 +0000
Files and hashes: 1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=)
2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: DK0s0XBVGJHtdahiYnVLt3YCKOJXKw67VSoUFV6JGdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:7a:4c:f4:e9:22:b6:64:6d:d8:d1:50:0b:4f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Nov 11 07:02:52 2025 GMT
Not After : Nov 12 07:02:52 2025 GMT
Subject: CN=17bd1488ee4675030ebf2f04c4c35c48212789c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e6:a3:12:7c:01:ac:4b:76:02:42:35:88:aa:
b8:e1:b5:bd:1e:54:4e:3c:12:41:35:24:c8:36:90:
80:3c:05:ca:26:79:30:59:0a:85:e3:1f:32:22:81:
a7:c3:6c:ed:c8:df:a6:a6:ab:18:1b:da:61:cf:a2:
84:2a:9e:8a:3c:80:82:b1:59:c8:13:8a:d6:b5:7c:
b5:2a:3c:f9:63:90:e7:af:b5:83:72:b6:4d:eb:7c:
e1:b4:03:1b:bb:ff:15:19:72:46:5c:f9:08:54:ac:
99:e1:b5:cd:3d:aa:26:62:f8:9e:12:52:03:ff:aa:
19:f5:59:ce:9b:28:37:27:16:9c:f2:0f:24:52:6f:
a8:38:1f:46:a2:b6:0e:42:df:3a:1f:4b:dc:27:57:
0f:cb:ac:85:e5:ab:fe:de:bf:8c:cf:94:55:3c:74:
79:ab:ee:88:35:93:d7:f0:b2:35:c1:b0:4e:61:3a:
20:89:09:b1:03:cb:b1:bc:16:83:fc:30:d1:2f:a0:
14:59:1e:33:87:42:6c:07:2f:dd:ce:35:cd:03:58:
0b:34:67:0a:25:b1:78:17:54:2c:64:fa:16:50:49:
6e:d5:ce:2a:f2:78:05:bc:96:7c:a5:d3:f2:03:81:
e5:ae:fb:43:0d:17:b0:68:d7:dd:4f:b6:9e:f1:eb:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BD:14:88:EE:46:75:03:0E:BF:2F:04:C4:C3:5C:48:21:27:89:C7
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d3:e6:da:9f:7b:1d:ee:81:92:c6:97:86:6f:26:ba:13:12:
39:ca:42:a2:36:cc:a1:b6:5c:9b:5d:bf:58:39:19:79:9d:e1:
ac:f9:2b:9e:86:25:0f:43:5f:03:bd:cf:44:8e:80:d6:3b:0e:
96:6c:3d:84:16:67:e9:a9:7a:e4:47:b2:44:0b:9f:6e:fa:10:
2f:94:f8:7d:e7:60:18:19:1e:a7:0b:7b:8a:0a:02:a9:50:e8:
30:30:32:82:16:74:d7:b5:fa:31:db:f7:4f:7b:98:56:85:68:
48:96:46:ad:38:6c:9f:2f:cc:ee:18:54:8b:93:d8:3f:ac:62:
16:67:d1:60:0c:fb:9d:69:ea:25:8b:f7:98:9c:3c:25:61:90:
c7:67:52:c0:34:46:59:a2:a2:d3:b1:9f:d6:8b:00:20:53:8b:
1d:1f:6f:57:75:23:71:f2:9b:50:49:a3:4e:13:16:32:89:dc:
4c:45:5b:cf:c5:29:e3:d3:3d:fc:13:eb:66:d2:49:7e:24:6f:
a1:74:a5:6d:b9:b2:d1:f7:f0:00:df:37:f1:37:b5:8e:1c:8b:
c6:b8:30:fd:7d:80:4f:e0:00:2a:58:db:9f:7c:06:03:48:83:
20:6f:06:a4:eb:63:80:f8:61:a2:c0:ee:b0:ad:16:0a:0c:10:
d3:cd:d7:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuXpM9OkitmRt2NFQC08zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZmM4MjU4NWRmNjliN2M5NGIxNmE2MTkzMmZmYzhiNmUz
MzUxNTYwHhcNMjUxMTExMDcwMjUyWhcNMjUxMTEyMDcwMjUyWjAzMTEwLwYDVQQD
EygxN2JkMTQ4OGVlNDY3NTAzMGViZjJmMDRjNGMzNWM0ODIxMjc4OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeajEnwBrEt2AkI1iKq44bW9HlRO
PBJBNSTINpCAPAXKJnkwWQqF4x8yIoGnw2ztyN+mpqsYG9phz6KEKp6KPICCsVnI
E4rWtXy1Kjz5Y5Dnr7WDcrZN63zhtAMbu/8VGXJGXPkIVKyZ4bXNPaomYvieElID
/6oZ9VnOmyg3Jxac8g8kUm+oOB9GorYOQt86H0vcJ1cPy6yF5av+3r+Mz5RVPHR5
q+6INZPX8LI1wbBOYTogiQmxA8uxvBaD/DDRL6AUWR4zh0JsBy/dzjXNA1gLNGcK
JbF4F1QsZPoWUElu1c4q8ngFvJZ8pdPyA4HlrvtDDRewaNfdT7ae8esbtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe9FIjuRnUDDr8vBMTDXEghJ4nHMB8GA1UdIwQY
MBaAFH/8glhd9pt8lLFqYZMv/ItuM1FWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl95Q1dGMzJtM3lVc1dwaGt5XzhpMjR6VVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81MzFkMmItZTE3MC00OWE1LTg0MDQt
OTJmNzNmNTZmYzYyLzEvZl95Q1dGMzJtM3lVc1dwaGt5XzhpMjR6VVZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81MzFkMmItZTE3MC00OWE1LTg0MDQtOTJmNzNmNTZmYzYy
LzEvZl95Q1dGMzJtM3lVc1dwaGt5XzhpMjR6VVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNPm2p97
He6BksaXhm8muhMSOcpCojbMobZcm12/WDkZeZ3hrPkrnoYlD0NfA73PRI6A1jsO
lmw9hBZn6al65EeyRAufbvoQL5T4fedgGBkepwt7igoCqVDoMDAyghZ017X6Mdv3
T3uYVoVoSJZGrThsny/M7hhUi5PYP6xiFmfRYAz7nWnqJYv3mJw8JWGQx2dSwDRG
WaKi07Gf1osAIFOLHR9vV3UjcfKbUEmjThMWMoncTEVbz8Up49M9/BPrZtJJfiRv
oXSlbbmy0ffwAN838Te1jhyLxrgw/X2AT+AAKljbn3wGA0iDIG8GpOtjgPhhosDu
sK0WCgwQ083XYQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:39 2025 by rpki-client