Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: BM1FmIht2nE6ppw2YSG+IaJyVVt5wssb3iN8ujDwNaY=
Subject key identifier: 81:D7:98:8B:BC:A0:F6:F1:27:7D:EA:69:80:8C:5F:A9:4C:5E:AA:5D
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 0199FF5969749E9366420AC6538E0C25BBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 02:01:13 +0000
Manifest this update: Mon 20 Oct 2025 02:01:13 +0000
Manifest next update: Tue 21 Oct 2025 02:01:13 +0000
Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: 43t7MCM5eFqJI0dlleZfxCLyDid6gv1DCPP3AWgUzRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:69:74:9e:93:66:42:0a:c6:53:8e:0c:25:bb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Oct 20 02:01:13 2025 GMT
Not After : Oct 21 02:01:13 2025 GMT
Subject: CN=81d7988bbca0f6f1277dea69808c5fa94c5eaa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:e6:6b:ff:ad:c9:e1:7a:09:08:c4:ff:7b:
ba:a9:7d:19:40:03:82:5f:50:16:99:2f:54:cf:a1:
4b:20:23:e5:bd:11:2a:45:c8:a3:fb:60:e7:8a:a5:
4b:4a:d2:73:4d:c4:2e:96:24:84:50:74:83:93:8e:
69:e2:bf:d1:5d:ed:b7:33:f5:54:03:7d:4c:08:39:
c9:8b:94:38:da:42:fa:27:18:de:88:d4:01:7b:7f:
f4:6d:81:48:7d:4e:21:45:ad:e2:b5:e0:f5:93:9c:
d8:c8:80:f0:27:f6:eb:fc:4c:1c:75:20:c5:a7:86:
ca:28:d1:97:bb:9e:90:25:0b:d5:b6:54:60:dd:42:
f1:e4:0f:dd:33:e5:f7:a9:5e:14:8d:0d:3f:eb:c8:
1d:50:dd:97:24:01:da:2c:20:08:30:78:ff:08:f3:
fd:07:98:90:95:42:75:93:6b:65:8f:a0:60:13:b8:
f5:2f:e3:be:c7:d2:0a:74:a0:c3:d6:86:13:cd:32:
8c:0f:64:87:b5:a5:29:b4:6d:ee:7d:a9:52:42:c2:
7b:57:0d:e6:6f:9f:9e:55:c0:ce:13:ea:db:6d:b8:
0b:ae:09:34:88:97:83:5f:b9:e4:ff:29:51:58:01:
46:e2:b4:cd:d3:82:96:ac:b1:72:00:be:7f:f7:ba:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:98:8B:BC:A0:F6:F1:27:7D:EA:69:80:8C:5F:A9:4C:5E:AA:5D
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:03:ad:45:fb:cd:bc:21:47:d2:af:fa:a1:39:c9:30:d9:c3:
af:a7:57:a4:db:ec:79:af:48:75:df:f8:36:30:aa:36:a1:8d:
85:97:9f:06:74:1d:c7:80:ee:94:01:7a:c8:31:c0:54:40:48:
7a:5b:a7:e0:ae:8f:2f:5d:d9:a1:41:a1:2e:53:b0:1f:52:fa:
bf:5f:d0:c1:ef:d1:f4:fe:a0:47:19:e9:58:dc:35:b8:dd:78:
01:65:c5:8f:ee:1f:45:0e:a6:d2:be:6c:c3:7e:9a:26:6e:5c:
73:50:ab:fb:fa:bb:e2:cb:31:62:d2:7d:fa:ea:d2:9a:bd:e7:
27:4a:83:7b:ee:32:1f:54:cb:61:a4:96:a5:4c:f5:ec:b6:c6:
02:da:72:12:12:6c:52:d8:fb:c0:30:09:cb:6a:ae:9e:4c:e0:
1d:7a:a4:1e:e5:81:e1:15:29:d7:a1:6d:a4:18:cb:6b:9a:06:
60:60:61:cb:f4:82:3f:f3:24:cd:08:c3:ca:35:dc:da:83:25:
7d:f5:76:53:91:dd:0f:a5:8b:e6:af:68:9a:52:e3:f6:4c:2f:
13:fa:4e:eb:9d:3b:0f:e2:f9:f6:30:45:ed:4b:f6:59:41:4b:
68:21:b8:d9:7b:06:1e:72:fc:e1:8c:85:b4:0f:04:32:8b:b6:
52:61:4e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WWl0npNmQgrGU44MJbvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTVlMWNiYzY3ZTc4MmRiZjlmOGU3NDRlNDM3MjY4YmRj
YzM5Y2UwHhcNMjUxMDIwMDIwMTEzWhcNMjUxMDIxMDIwMTEzWjAzMTEwLwYDVQQD
Eyg4MWQ3OTg4YmJjYTBmNmYxMjc3ZGVhNjk4MDhjNWZhOTRjNWVhYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArojma/+tyeF6CQjE/3u6qX0ZQAOC
X1AWmS9Uz6FLICPlvREqRcij+2DniqVLStJzTcQuliSEUHSDk45p4r/RXe23M/VU
A31MCDnJi5Q42kL6JxjeiNQBe3/0bYFIfU4hRa3iteD1k5zYyIDwJ/br/EwcdSDF
p4bKKNGXu56QJQvVtlRg3ULx5A/dM+X3qV4UjQ0/68gdUN2XJAHaLCAIMHj/CPP9
B5iQlUJ1k2tlj6BgE7j1L+O+x9IKdKDD1oYTzTKMD2SHtaUptG3ufalSQsJ7Vw3m
b5+eVcDOE+rbbbgLrgk0iJeDX7nk/ylRWAFG4rTN04KWrLFyAL5/97p83wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHXmIu8oPbxJ33qaYCMX6lMXqpdMB8GA1UdIwQY
MBaAFMuV4cvGfngtv5+OdE5Dcmi9zDnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmIt
NzY2ODJlNzk0Y2MzLzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmItNzY2ODJlNzk0Y2Mz
LzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAOtRfvN
vCFH0q/6oTnJMNnDr6dXpNvsea9Idd/4NjCqNqGNhZefBnQdx4DulAF6yDHAVEBI
elun4K6PL13ZoUGhLlOwH1L6v1/Qwe/R9P6gRxnpWNw1uN14AWXFj+4fRQ6m0r5s
w36aJm5cc1Cr+/q74ssxYtJ9+urSmr3nJ0qDe+4yH1TLYaSWpUz17LbGAtpyEhJs
Utj7wDAJy2qunkzgHXqkHuWB4RUp16FtpBjLa5oGYGBhy/SCP/MkzQjDyjXc2oMl
ffV2U5HdD6WL5q9omlLj9kwvE/pO6507D+L59jBF7Uv2WUFLaCG42XsGHnL84YyF
tA8EMou2UmFO2w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:19:47 2025 by rpki-client