Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: GRe1YDoLSt2xMoA2kDG8dsJQubGztFuJ7/Wu8kx7zeE=
Subject key identifier: 2A:4A:A9:3B:E8:BE:BF:EC:05:53:85:6E:4D:17:F0:55:AD:04:0A:84
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 019A1505D99F7FF1A1B17CE8C444047BCD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 0612
Signing time: Fri 24 Oct 2025 07:01:36 +0000
Manifest this update: Fri 24 Oct 2025 07:01:36 +0000
Manifest next update: Sat 25 Oct 2025 07:01:36 +0000
Files and hashes: 1: PkfIS5G435_5emRi_COnc1WyLBs.roa (hash: IOA4UWzzxA3Jqfg26gD/3jtgnYFnAYPzln5ueD/sEOk=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: JN04LRoU2U5slLdheRpLj6BcV/8ZHpVXx+xXrzQ7lHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:05:d9:9f:7f:f1:a1:b1:7c:e8:c4:44:04:7b:cd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Oct 24 07:01:36 2025 GMT
Not After : Oct 25 07:01:36 2025 GMT
Subject: CN=2a4aa93be8bebfec0553856e4d17f055ad040a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:20:c2:c6:a9:65:f3:7d:83:f0:85:5e:8a:
96:86:e6:92:38:b6:9d:a3:da:3c:9e:e6:0b:1a:96:
ed:3b:35:de:f9:27:95:3d:5c:9f:10:b2:f2:7d:ff:
7d:39:14:4e:2c:ca:3d:11:db:9b:46:44:04:10:ff:
fd:ef:32:5f:7c:0b:5a:6b:20:ff:e7:2b:e3:36:3a:
4d:63:55:fe:38:50:8e:b0:82:37:eb:9a:ed:09:84:
fe:ca:47:d5:82:f8:20:d4:5c:df:66:ca:ec:cf:7e:
66:9f:8b:b9:6d:77:2c:bb:33:f7:40:ce:86:75:21:
4e:1e:b9:16:bf:43:ce:0a:ab:a9:ce:56:48:96:e5:
09:a6:83:2b:8b:8d:21:a0:74:85:6a:11:08:c4:64:
b2:ab:75:03:28:84:11:03:a7:60:95:58:9f:6d:95:
60:72:65:20:1d:50:dc:6c:d1:f9:b5:80:8d:a7:be:
1d:70:18:67:a8:b8:79:a8:bd:5e:98:fc:d4:7e:da:
20:46:b1:36:a8:7f:1a:19:f6:9c:ad:fa:3d:36:90:
aa:96:66:60:0f:d1:01:66:f6:10:b1:a8:10:d3:32:
33:b0:ab:fb:e7:86:0e:5b:62:a5:82:ef:24:ec:33:
68:13:e1:99:e8:a0:6c:c2:94:bc:c3:53:dd:dd:5a:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4A:A9:3B:E8:BE:BF:EC:05:53:85:6E:4D:17:F0:55:AD:04:0A:84
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:be:75:86:f6:09:a5:5b:4c:d7:5d:5c:91:77:b8:cc:e3:fc:
5d:14:f7:d9:e3:2f:09:f9:51:5d:8e:27:dd:1c:29:24:e5:c9:
f3:38:a7:6b:31:a4:56:ff:bb:a6:96:c0:c2:0d:46:f3:d2:5f:
5d:87:1e:7a:1b:1c:7d:02:47:ef:1a:79:5b:3d:f9:a0:2c:67:
3e:a2:96:a9:34:0e:e8:b9:db:9f:04:5f:dd:96:32:3c:5a:77:
f9:04:b6:d8:94:eb:18:68:1d:db:23:28:57:21:c5:9a:dc:57:
3f:e6:78:93:bf:75:1f:02:43:c0:88:39:52:00:89:8b:b9:74:
81:b3:f7:be:05:7f:60:3a:67:f6:e9:89:98:7a:76:1f:ff:0e:
6e:37:7c:67:8c:70:65:0a:26:a7:45:2b:0e:4a:ae:95:e3:d8:
76:58:33:c7:0a:82:a1:f4:18:d1:27:9c:86:1d:6d:aa:b0:76:
0f:2b:f8:27:f9:2e:87:10:5d:54:56:8f:26:1c:16:1a:eb:cb:
ca:e5:49:8e:8a:05:bf:1b:1c:8b:c0:5c:e4:b6:48:63:5e:24:
db:c2:6f:8a:10:ce:03:9f:b7:88:0b:24:ed:19:e4:a6:0a:ff:
85:7a:83:01:cf:58:10:fb:6b:91:80:ce:f0:0f:c8:47:4b:4a:
bb:0f:90:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoVBdmff/GhsXzoxEQEe81aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZWM3YzRhNTcxNTVjZThkZWM1YjFjZDYyZmZhODQwMTdi
MTZmNTgwHhcNMjUxMDI0MDcwMTM2WhcNMjUxMDI1MDcwMTM2WjAzMTEwLwYDVQQD
EygyYTRhYTkzYmU4YmViZmVjMDU1Mzg1NmU0ZDE3ZjA1NWFkMDQwYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbIgwsapZfN9g/CFXoqWhuaSOLad
o9o8nuYLGpbtOzXe+SeVPVyfELLyff99ORROLMo9EdubRkQEEP/97zJffAtaayD/
5yvjNjpNY1X+OFCOsII365rtCYT+ykfVgvgg1FzfZsrsz35mn4u5bXcsuzP3QM6G
dSFOHrkWv0POCqupzlZIluUJpoMri40hoHSFahEIxGSyq3UDKIQRA6dglVifbZVg
cmUgHVDcbNH5tYCNp74dcBhnqLh5qL1emPzUftogRrE2qH8aGfacrfo9NpCqlmZg
D9EBZvYQsagQ0zIzsKv754YOW2Klgu8k7DNoE+GZ6KBswpS8w1Pd3Vp7KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpKqTvovr/sBVOFbk0X8FWtBAqEMB8GA1UdIwQY
MBaAFMjsfEpXFVzo3sWxzWL/qEAXsW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5Yjct
ZGE1ZjZhNjU4ZjhiLzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5YjctZGE1ZjZhNjU4Zjhi
LzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYb51hvYJ
pVtM111ckXe4zOP8XRT32eMvCflRXY4n3RwpJOXJ8zinazGkVv+7ppbAwg1G89Jf
XYceehscfQJH7xp5Wz35oCxnPqKWqTQO6LnbnwRf3ZYyPFp3+QS22JTrGGgd2yMo
VyHFmtxXP+Z4k791HwJDwIg5UgCJi7l0gbP3vgV/YDpn9umJmHp2H/8Objd8Z4xw
ZQomp0UrDkqulePYdlgzxwqCofQY0Sechh1tqrB2Dyv4J/kuhxBdVFaPJhwWGuvL
yuVJjooFvxsci8Bc5LZIY14k28JvihDOA5+3iAsk7Rnkpgr/hXqDAc9YEPtrkYDO
8A/IR0tKuw+Qtw==
-----END CERTIFICATE-----
Generated at Fri Oct 24 09:28:41 2025 by rpki-client