Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: JjGILN4kWWJqjkhiBRjin6iK3hDEeeCwAyQCdTg0DwQ=
Subject key identifier: B8:D8:6F:7D:AD:BB:FC:E3:A0:1B:4E:9B:D8:04:B7:48:95:2E:9D:E5
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 019A251CC9F816877B4E835C875A408DEE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 1223
Signing time: Mon 27 Oct 2025 10:00:34 +0000
Manifest this update: Mon 27 Oct 2025 10:00:34 +0000
Manifest next update: Tue 28 Oct 2025 10:00:34 +0000
Files and hashes: 1: ghqg6ujuEOV4Vw3b6x6YkQU8aSs.roa (hash: IATpDK+kaz0czhsEzmLbtPDJ492YJfivjvGQ/3AgHO8=)
2: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (hash: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=)
3: x5FwTTVorsGfIV2MDa8IC9dozSI.roa (hash: cVCSNkZBBh3ZJGnim77LdgANipO1Ai7iWjVLFMe9HIY=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: lrohi5SUjJI0g7KBFwDCj1wyoywUGKzBLHlLqIFlXgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:c9:f8:16:87:7b:4e:83:5c:87:5a:40:8d:ee:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Oct 27 10:00:34 2025 GMT
Not After : Oct 28 10:00:34 2025 GMT
Subject: CN=b8d86f7dadbbfce3a01b4e9bd804b748952e9de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:2a:5b:dd:45:0b:a0:40:7e:c0:14:22:c7:
12:e7:c1:bb:c3:31:cc:2a:07:91:6a:16:ec:ad:cf:
3c:38:ba:3c:40:8e:a2:42:a5:a3:17:2a:36:f9:5c:
94:ed:7e:92:f7:f2:c4:29:07:a4:c2:51:0a:ce:5e:
76:06:2f:73:94:d7:65:7c:45:15:dc:6d:30:60:fd:
cb:ab:12:35:f6:c8:d3:8c:5b:bb:0b:ee:94:2c:45:
c5:db:c8:eb:e5:91:ca:ea:a6:cf:bf:14:44:5a:1f:
6d:8d:41:a2:48:c8:95:57:3c:65:82:5e:49:5b:3b:
54:b0:03:20:bb:46:4d:30:98:7d:63:a4:68:bf:24:
fe:f4:0b:1d:ba:48:6b:c7:7c:a4:94:84:c4:92:5c:
e8:56:08:a2:df:85:b1:d4:98:d1:4b:b3:3c:b9:9f:
9c:4e:9a:4a:00:59:47:a2:e0:f3:19:dd:89:d1:a4:
b0:b9:64:a0:33:60:cf:ba:88:27:8d:31:90:f0:eb:
a5:6f:b7:e0:04:ea:c2:a9:d1:78:c5:0e:36:15:7c:
b9:84:c5:b7:17:46:ba:33:13:46:3f:59:eb:f2:1f:
bd:21:4c:0f:f6:e6:4e:3a:68:46:90:18:2e:36:94:
1c:cb:7d:0a:53:6a:55:35:8c:e9:e6:d1:dc:62:5b:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D8:6F:7D:AD:BB:FC:E3:A0:1B:4E:9B:D8:04:B7:48:95:2E:9D:E5
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:83:1a:6d:a3:cc:84:2d:e8:2f:07:62:29:43:1c:ce:a9:cb:
27:4d:07:e4:7c:35:7c:20:91:44:9f:02:ef:27:e9:1f:b9:b6:
65:ab:16:cc:58:bf:89:29:cc:53:41:45:1b:2b:65:28:eb:25:
d3:a9:95:5f:49:c6:a0:7c:df:39:82:95:71:79:ac:da:64:dd:
48:1d:ed:9f:13:cb:d4:c6:fa:55:e8:1f:1b:15:77:46:80:fa:
1a:24:b2:53:8e:1d:21:3b:de:df:c7:b6:1c:28:5d:a4:ab:7b:
23:ae:82:08:a2:cc:0e:12:6e:9b:f8:d2:9b:83:bb:48:7f:41:
7d:ae:46:bd:5e:46:31:4e:a6:23:93:87:2f:04:53:ae:93:07:
a4:75:4b:1f:7e:8d:f6:6e:0e:a1:db:0f:fe:02:2c:33:60:c7:
90:b8:90:a9:f5:37:43:a2:88:3e:d5:08:84:0e:a5:9b:68:91:
0b:6c:79:10:8b:79:01:8b:8f:0d:a2:32:c5:cb:2d:7b:96:ba:
75:1a:95:00:7b:d6:0d:19:2e:f6:05:2c:53:6f:33:4d:08:2b:
6c:b3:64:0a:39:24:dc:e9:75:4a:84:13:73:b8:ca:06:d8:e2:
51:10:c6:9d:cc:03:12:2a:4a:aa:ed:d9:c1:88:96:ea:77:79:
43:10:c4:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHMn4Fod7ToNch1pAje5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj
ZjUwNmYwHhcNMjUxMDI3MTAwMDM0WhcNMjUxMDI4MTAwMDM0WjAzMTEwLwYDVQQD
EyhiOGQ4NmY3ZGFkYmJmY2UzYTAxYjRlOWJkODA0Yjc0ODk1MmU5ZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql0qW91FC6BAfsAUIscS58G7wzHM
KgeRahbsrc88OLo8QI6iQqWjFyo2+VyU7X6S9/LEKQekwlEKzl52Bi9zlNdlfEUV
3G0wYP3LqxI19sjTjFu7C+6ULEXF28jr5ZHK6qbPvxREWh9tjUGiSMiVVzxlgl5J
WztUsAMgu0ZNMJh9Y6RovyT+9Asdukhrx3yklITEklzoVgii34Wx1JjRS7M8uZ+c
TppKAFlHouDzGd2J0aSwuWSgM2DPuognjTGQ8Oulb7fgBOrCqdF4xQ42FXy5hMW3
F0a6MxNGP1nr8h+9IUwP9uZOOmhGkBguNpQcy30KU2pVNYzp5tHcYlv3mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjYb32tu/zjoBtOm9gEt0iVLp3lMB8GA1UdIwQY
MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut
OGNmN2Q0NDkzMzU4LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4
LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4MabaPM
hC3oLwdiKUMczqnLJ00H5Hw1fCCRRJ8C7yfpH7m2ZasWzFi/iSnMU0FFGytlKOsl
06mVX0nGoHzfOYKVcXms2mTdSB3tnxPL1Mb6VegfGxV3RoD6GiSyU44dITve38e2
HChdpKt7I66CCKLMDhJum/jSm4O7SH9Bfa5GvV5GMU6mI5OHLwRTrpMHpHVLH36N
9m4OodsP/gIsM2DHkLiQqfU3Q6KIPtUIhA6lm2iRC2x5EIt5AYuPDaIyxcste5a6
dRqVAHvWDRku9gUsU28zTQgrbLNkCjkk3Ol1SoQTc7jKBtjiURDGncwDEipKqu3Z
wYiW6nd5QxDEhA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:04:30 2025 by rpki-client