Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: 2spNJtbHH9c0vKe5biWG0Cemp5cX4qV9qWrk+2AjktA=
Subject key identifier: 85:DC:68:7F:53:13:25:26:5C:3A:FC:97:B9:5F:4D:37:B3:02:B5:21
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 0198D660B421F6022C9D2362A6E6AA4D8112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 0666
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: YhtLNsAoF7LsvFcvlYWytyxeFcJLllwmTXc+S39bV/E=)
3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b4:21:f6:02:2c:9d:23:62:a6:e6:aa:4d:81:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=85dc687f531325265c3afc97b95f4d37b302b521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:8b:76:75:9d:90:c4:6a:89:02:eb:09:49:
42:76:de:b1:a7:99:8f:81:ff:fb:9d:43:82:a4:a7:
1c:bc:b8:26:75:d1:cb:b9:0c:b4:af:d3:6f:39:47:
4b:42:11:57:da:bf:6b:d5:6f:30:97:5d:97:06:2b:
09:c0:1f:31:53:aa:c2:d4:0c:71:3d:b7:0c:e4:47:
bf:27:74:15:5e:60:3d:ce:2b:15:f0:3d:c8:7a:c6:
75:b0:c2:a6:52:f4:8f:52:41:e5:ce:29:7d:07:8d:
57:7a:12:7f:ea:f7:12:8c:72:89:f6:97:b6:8f:dc:
fd:9c:78:13:b7:14:ea:b2:4d:62:f1:3a:ce:c4:8d:
86:ff:ca:05:1f:0a:6e:53:74:62:60:85:68:be:e7:
a2:c6:7b:a3:74:fc:d5:d7:c6:32:bc:b9:8f:c3:20:
c8:1c:96:73:36:93:45:7c:70:fb:b4:bc:8f:82:b8:
f2:b0:9a:d6:96:db:31:3e:a6:17:c8:12:35:17:ba:
20:44:e6:95:ce:20:af:58:d9:ec:2a:55:af:0e:2c:
71:19:06:5d:c7:3c:45:bf:93:32:5b:b7:29:f7:70:
21:ca:3c:3b:cf:08:68:a3:8d:a1:6e:bf:4c:4a:89:
56:e5:e3:54:e4:f2:35:c2:31:3b:56:5b:97:bf:15:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DC:68:7F:53:13:25:26:5C:3A:FC:97:B9:5F:4D:37:B3:02:B5:21
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5d:32:9a:97:4d:c2:3d:ab:e7:be:aa:db:b6:61:08:f1:78:
10:f3:0a:f9:a4:05:61:c5:8e:7f:8f:49:89:f7:cb:d2:03:c4:
95:36:aa:3c:98:9e:d6:7d:ce:46:90:8f:f4:60:ae:74:41:e8:
40:d8:b7:4b:89:61:a4:77:b2:41:a1:5c:65:5c:5d:4a:55:60:
3c:dc:17:2c:ab:ed:0b:68:6a:be:38:61:d8:de:9f:63:5c:f4:
91:37:c4:6f:8b:11:59:3e:ee:9e:c1:36:c8:66:d6:b3:34:15:
4a:86:34:d8:c6:ef:15:ae:51:d4:1e:44:02:5a:67:31:af:7a:
04:fc:df:34:1e:59:27:f5:98:6c:58:8d:0c:b7:95:c4:af:78:
47:6b:d6:3a:20:27:15:e0:bc:b6:5d:c7:77:5d:6a:f6:3e:18:
23:81:a8:66:07:24:3f:66:c8:6f:c5:e8:6f:c1:69:35:ff:e4:
c3:c4:a0:9a:8b:d6:c0:60:d4:02:78:89:79:7e:d2:c8:84:aa:
26:62:fb:70:1b:91:b2:0f:b5:fa:bc:da:61:16:5e:b5:00:89:
b3:2e:23:fe:13:31:90:1e:bc:77:6f:b0:3e:aa:54:7a:bf:26:
02:0f:45:73:ed:99:f7:d2:24:a4:80:94:d1:30:cd:2d:b8:ca:
ab:c7:dc:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYLQh9gIsnSNipuaqTYESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzY2MjY3OTQzZDQxM2NkZjc2MGRjNjg1MDEwNGMxYzBm
YzFkNjUwHhcNMjUwODIzMTAwMTU4WhcNMjUwODI0MTAwMTU4WjAzMTEwLwYDVQQD
Eyg4NWRjNjg3ZjUzMTMyNTI2NWMzYWZjOTdiOTVmNGQzN2IzMDJiNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25OLdnWdkMRqiQLrCUlCdt6xp5mP
gf/7nUOCpKccvLgmddHLuQy0r9NvOUdLQhFX2r9r1W8wl12XBisJwB8xU6rC1Axx
PbcM5Ee/J3QVXmA9zisV8D3IesZ1sMKmUvSPUkHlzil9B41XehJ/6vcSjHKJ9pe2
j9z9nHgTtxTqsk1i8TrOxI2G/8oFHwpuU3RiYIVovueixnujdPzV18YyvLmPwyDI
HJZzNpNFfHD7tLyPgrjysJrWltsxPqYXyBI1F7ogROaVziCvWNnsKlWvDixxGQZd
xzxFv5MyW7cp93Ahyjw7zwhoo42hbr9MSolW5eNU5PI1wjE7VluXvxX6tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXcaH9TEyUmXDr8l7lfTTezArUhMB8GA1UdIwQY
MBaAFGLGYmeUPUE833YNxoUBBMHA/B1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQt
YTlkN2FkNDQyYjNiLzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQtYTlkN2FkNDQyYjNi
LzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbF0ympdN
wj2r576q27ZhCPF4EPMK+aQFYcWOf49JiffL0gPElTaqPJie1n3ORpCP9GCudEHo
QNi3S4lhpHeyQaFcZVxdSlVgPNwXLKvtC2hqvjhh2N6fY1z0kTfEb4sRWT7unsE2
yGbWszQVSoY02MbvFa5R1B5EAlpnMa96BPzfNB5ZJ/WYbFiNDLeVxK94R2vWOiAn
FeC8tl3Hd11q9j4YI4GoZgckP2bIb8Xob8FpNf/kw8SgmovWwGDUAniJeX7SyISq
JmL7cBuRsg+1+rzaYRZetQCJsy4j/hMxkB68d2+wPqpUer8mAg9Fc+2Z99IkpICU
0TDNLbjKq8fcuw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:51 2025 by rpki-client