Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: uGZfv6ybsWuUxt33MJDrJ32kIJjlDtDQWJZEPNND7SU=
Subject key identifier: 16:22:6B:9C:08:2A:22:8C:1B:95:49:3B:AB:97:C3:46:8D:AB:19:07
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 0198D960B8496D78F6720A85E25216021815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 070D
Signing time: Sun 24 Aug 2025 00:00:51 +0000
Manifest this update: Sun 24 Aug 2025 00:00:51 +0000
Manifest next update: Mon 25 Aug 2025 00:00:51 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: JkpnOSeMtia1tJTFgE/sOMBPBX2PPkl6VMA5EO9yZtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:b8:49:6d:78:f6:72:0a:85:e2:52:16:02:18:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Aug 24 00:00:51 2025 GMT
Not After : Aug 25 00:00:51 2025 GMT
Subject: CN=16226b9c082a228c1b95493bab97c3468dab1907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4c:ad:4d:12:51:f0:5d:e1:d2:43:06:0a:64:
d8:e8:60:3e:de:50:03:71:10:7b:d7:0d:aa:3e:04:
0d:73:79:e2:96:a5:3e:02:0e:5f:3f:84:0b:ba:26:
11:be:7f:c5:00:4d:25:dc:d2:40:92:11:72:57:bf:
53:91:3b:97:5c:a8:f7:e2:a2:f7:d9:1f:bd:c4:70:
f7:3e:b7:ba:a7:e2:50:ca:7d:49:cb:9c:17:81:e2:
f1:ef:d4:25:be:0f:54:3f:5e:6f:2c:31:f1:72:bd:
52:36:4a:7c:71:51:a5:e6:9b:a6:27:65:95:23:29:
15:74:9e:49:43:72:64:59:ea:f7:e1:4d:56:6b:af:
3b:d9:d5:ff:4c:e2:a6:ce:67:44:b0:e8:ad:f0:06:
12:d7:85:4a:bb:23:af:ae:67:b0:a8:b5:9c:4e:e1:
34:d3:8c:a3:92:54:f4:b8:43:f2:03:7f:1f:ca:6b:
b1:07:0d:b0:10:8c:13:aa:23:fa:2f:3c:e6:e6:6f:
7c:6c:e0:d1:ac:ee:c7:3a:7a:55:e4:56:20:55:43:
d4:1a:4d:7d:a9:0e:0d:59:f0:38:a5:37:23:47:92:
59:51:e8:4c:6a:d9:8e:68:36:5e:39:ab:fc:3d:f9:
28:33:48:da:7d:d9:82:18:0a:d9:80:76:2c:75:0e:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:22:6B:9C:08:2A:22:8C:1B:95:49:3B:AB:97:C3:46:8D:AB:19:07
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e3:58:63:6a:15:b8:a2:8c:32:d7:9e:5c:0d:ca:a2:71:70:
92:b9:6a:ed:09:19:06:94:b4:78:2e:1b:5e:65:a7:98:0e:24:
24:e9:02:0c:6c:f7:4e:d3:f0:e4:ca:85:58:c1:80:28:58:85:
75:4c:eb:75:94:ad:f4:f7:f1:2a:9e:fe:e5:fc:68:c4:0e:2d:
db:46:5b:cf:d5:74:27:df:d1:43:29:4d:3f:0e:65:a5:91:bc:
62:7d:c2:a7:f5:b1:d6:fe:c1:c6:8a:b8:62:46:9a:14:0a:85:
0f:b2:19:da:45:8b:7d:1b:e6:7f:87:dc:55:48:01:09:94:7a:
66:54:29:83:44:54:51:1a:91:68:0b:97:6c:2c:72:3a:0f:e5:
59:23:27:d2:12:a6:88:ce:f1:ab:3a:95:91:53:93:4a:ac:60:
2c:19:d2:30:51:5e:50:98:93:1c:3f:81:8e:84:69:29:3b:08:
a6:7e:79:fa:a5:89:17:b7:18:3f:e8:ce:37:bb:86:1b:ed:1f:
c4:7c:d1:bc:6d:a3:ff:67:7b:26:63:35:28:6c:e5:95:02:64:
25:56:26:17:b0:8e:0c:ea:ec:38:2e:5b:41:0a:03:77:dc:97:
7a:0b:6a:a1:b8:cb:4d:62:8b:98:2b:15:4f:ea:2f:bd:91:6a:
a7:a8:61:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZYLhJbXj2cgqF4lIWAhgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNThhZWI0MTI5ZjhlMmM5YmM0MmNkMTkxODVjOGQ3ZjBl
NmVhZjkwHhcNMjUwODI0MDAwMDUxWhcNMjUwODI1MDAwMDUxWjAzMTEwLwYDVQQD
EygxNjIyNmI5YzA4MmEyMjhjMWI5NTQ5M2JhYjk3YzM0NjhkYWIxOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kytTRJR8F3h0kMGCmTY6GA+3lAD
cRB71w2qPgQNc3nilqU+Ag5fP4QLuiYRvn/FAE0l3NJAkhFyV79TkTuXXKj34qL3
2R+9xHD3Pre6p+JQyn1Jy5wXgeLx79Qlvg9UP15vLDHxcr1SNkp8cVGl5pumJ2WV
IykVdJ5JQ3JkWer34U1Wa6872dX/TOKmzmdEsOit8AYS14VKuyOvrmewqLWcTuE0
04yjklT0uEPyA38fymuxBw2wEIwTqiP6Lzzm5m98bODRrO7HOnpV5FYgVUPUGk19
qQ4NWfA4pTcjR5JZUehMatmOaDZeOav8PfkoM0jafdmCGArZgHYsdQ4xYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYia5wIKiKMG5VJO6uXw0aNqxkHMB8GA1UdIwQY
MBaAFMpYrrQSn44sm8Qs0ZGFyNfw5ur5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84ZjAyMTgtNTQzZC00OTQzLThlM2Mt
YWVmMWIzNGEyODdkLzEveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84ZjAyMTgtNTQzZC00OTQzLThlM2MtYWVmMWIzNGEyODdk
LzEveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleNYY2oV
uKKMMteeXA3KonFwkrlq7QkZBpS0eC4bXmWnmA4kJOkCDGz3TtPw5MqFWMGAKFiF
dUzrdZSt9PfxKp7+5fxoxA4t20Zbz9V0J9/RQylNPw5lpZG8Yn3Cp/Wx1v7Bxoq4
YkaaFAqFD7IZ2kWLfRvmf4fcVUgBCZR6ZlQpg0RUURqRaAuXbCxyOg/lWSMn0hKm
iM7xqzqVkVOTSqxgLBnSMFFeUJiTHD+BjoRpKTsIpn55+qWJF7cYP+jON7uGG+0f
xHzRvG2j/2d7JmM1KGzllQJkJVYmF7CODOrsOC5bQQoDd9yXegtqobjLTWKLmCsV
T+ovvZFqp6hhEg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:09:11 2025 by rpki-client