Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: X/4EvQDF01j5SMzMgAZrEUORTP7rScGybwo9NKTpweU=
Subject key identifier: 2F:39:95:F8:18:4D:3D:6A:01:D4:73:64:93:75:8C:B3:47:4F:D5:28
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 0199315A78F3C3322919CB34DAC812AE2B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 16D2
Signing time: Wed 10 Sep 2025 02:00:36 +0000
Manifest this update: Wed 10 Sep 2025 02:00:36 +0000
Manifest next update: Thu 11 Sep 2025 02:00:36 +0000
Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: u+E/Oy1rLv8e6PHwO6F6+40G/XDf/B6ZYby8+pVZO68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:78:f3:c3:32:29:19:cb:34:da:c8:12:ae:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Sep 10 02:00:36 2025 GMT
Not After : Sep 11 02:00:36 2025 GMT
Subject: CN=2f3995f8184d3d6a01d4736493758cb3474fd528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:ec:72:cf:3f:9e:a6:de:d1:76:bc:e7:8e:
ab:43:ae:ed:04:78:15:46:97:95:89:12:55:21:58:
70:94:45:b5:68:11:29:e4:3c:f0:4b:60:48:4c:70:
93:fd:14:e4:fb:7b:77:9a:92:d7:c5:fd:83:2c:ae:
f6:95:10:2e:0d:3d:94:ee:b9:43:fd:db:4d:28:1c:
1d:bc:63:45:86:2c:b3:a2:1c:b8:3a:74:16:0e:25:
38:87:3e:12:e8:24:46:be:a9:fb:d1:0b:07:fc:a0:
15:35:4f:aa:38:1c:fb:ba:ca:5e:63:3f:a7:73:81:
9e:80:b1:b4:ce:ad:ed:48:76:aa:37:91:59:52:73:
75:47:1a:4a:25:26:3d:57:5d:5f:c4:eb:40:98:1f:
41:46:ca:e6:c0:1e:9a:7b:45:d5:b6:6f:bf:5b:64:
d0:a1:98:5b:ae:dc:be:44:75:86:a6:f7:4c:9c:a2:
94:a6:c7:7c:27:44:af:41:16:a9:f4:cc:29:8e:82:
2f:05:0e:56:3f:21:c7:e0:32:12:98:01:1d:55:13:
40:68:af:0a:97:3d:da:29:64:35:de:16:4b:91:4e:
d0:ab:c5:a7:56:ed:50:18:63:55:32:9b:92:80:3b:
4e:b8:34:33:57:c4:ed:35:27:86:7b:73:d5:08:a9:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:95:F8:18:4D:3D:6A:01:D4:73:64:93:75:8C:B3:47:4F:D5:28
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6c:20:0c:9f:29:62:7f:a6:fb:24:ff:87:36:1f:bc:4b:3a:
73:1e:61:cb:ed:76:6e:60:a4:37:e6:8a:5b:b3:cd:dc:87:6a:
09:81:c8:d5:65:ad:ca:6d:ba:f9:59:3a:0a:9c:d0:46:17:bd:
e6:cb:f3:e8:8c:29:f3:9d:a0:30:8c:e0:25:40:8a:73:7a:39:
71:dc:28:84:fb:f0:ac:08:91:83:b5:8f:8a:14:48:47:8e:2b:
b4:60:f9:d3:22:e7:fd:ac:89:b7:64:4e:07:76:f4:ed:5f:a2:
a6:af:31:e9:f0:d6:3d:74:6e:d4:8f:d0:a6:fd:bd:5b:fc:55:
ad:e6:5e:db:7d:b6:8c:76:e8:60:63:c0:5a:7a:6b:e6:a8:8a:
36:c0:81:03:66:39:61:60:a5:d2:02:9e:a9:e1:e0:5c:be:40:
a8:82:7f:f8:3f:b9:70:d2:28:1e:8d:ca:82:00:88:07:ba:b6:
28:1a:a0:d4:eb:0d:61:67:c5:6f:c0:a5:cc:55:9a:9f:64:07:
b4:1e:e4:13:bf:3e:77:af:70:21:78:57:72:17:ff:68:73:ae:
c4:b5:57:93:1a:ec:c8:3b:e4:c1:78:c2:50:ac:46:6d:07:b0:
13:c1:71:fe:54:69:e7:e4:dd:96:eb:b8:b5:79:66:e8:c0:ca:
e2:c5:90:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxWnjzwzIpGcs02sgSriuaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGMyNWVhM2EwYTcyOWVkOGU2ZTlhNzNkYTg5NmQ4NGY5
NTQzOWMwHhcNMjUwOTEwMDIwMDM2WhcNMjUwOTExMDIwMDM2WjAzMTEwLwYDVQQD
EygyZjM5OTVmODE4NGQzZDZhMDFkNDczNjQ5Mzc1OGNiMzQ3NGZkNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS/scs8/nqbe0Xa8546rQ67tBHgV
RpeViRJVIVhwlEW1aBEp5DzwS2BITHCT/RTk+3t3mpLXxf2DLK72lRAuDT2U7rlD
/dtNKBwdvGNFhiyzohy4OnQWDiU4hz4S6CRGvqn70QsH/KAVNU+qOBz7uspeYz+n
c4GegLG0zq3tSHaqN5FZUnN1RxpKJSY9V11fxOtAmB9BRsrmwB6ae0XVtm+/W2TQ
oZhbrty+RHWGpvdMnKKUpsd8J0SvQRap9MwpjoIvBQ5WPyHH4DISmAEdVRNAaK8K
lz3aKWQ13hZLkU7Qq8WnVu1QGGNVMpuSgDtOuDQzV8TtNSeGe3PVCKni/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC85lfgYTT1qAdRzZJN1jLNHT9UoMB8GA1UdIwQY
MBaAFMvcJeo6CnKe2Obppz2olthPlUOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUt
MjJjNzlhZWExMjdjLzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUtMjJjNzlhZWExMjdj
LzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2wgDJ8p
Yn+m+yT/hzYfvEs6cx5hy+12bmCkN+aKW7PN3IdqCYHI1WWtym26+Vk6CpzQRhe9
5svz6Iwp852gMIzgJUCKc3o5cdwohPvwrAiRg7WPihRIR44rtGD50yLn/ayJt2RO
B3b07V+ipq8x6fDWPXRu1I/Qpv29W/xVreZe2322jHboYGPAWnpr5qiKNsCBA2Y5
YWCl0gKeqeHgXL5AqIJ/+D+5cNIoHo3KggCIB7q2KBqg1OsNYWfFb8ClzFWan2QH
tB7kE78+d69wIXhXchf/aHOuxLVXkxrsyDvkwXjCUKxGbQewE8Fx/lRp5+Tdluu4
tXlm6MDK4sWQBw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 11:57:12 2025 by rpki-client