Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: qjgKmLKn0xhxukduX2ASTZU/wje/0ILuIv7/lfbIIas=
Subject key identifier: B6:76:06:D5:59:AD:74:04:EF:1C:15:BC:E5:B2:13:21:7F:FA:2B:EF
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 0198D5F162FCF6623E123E8C6570BB1B6163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:23 +0000
Manifest this update: Sat 23 Aug 2025 08:00:23 +0000
Manifest next update: Sun 24 Aug 2025 08:00:23 +0000
Files and hashes: 1: 8gQzPchz9vCwdjVN_ZBPueH3G6Y.roa (hash: Z7w2/N0mbKOYhB3ua7HBgoWG65DoIXePIy8hWS+i+vg=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: t7kh7cbu0r0zl6RiJrKdyK0H07e7xKnsBwO0sW121RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:62:fc:f6:62:3e:12:3e:8c:65:70:bb:1b:61:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Aug 23 08:00:23 2025 GMT
Not After : Aug 24 08:00:23 2025 GMT
Subject: CN=b67606d559ad7404ef1c15bce5b213217ffa2bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:47:3f:97:27:cc:15:57:05:aa:c2:b8:c3:
3d:fe:be:65:7c:a1:84:56:ba:34:a8:9b:44:cc:24:
f0:72:56:d0:98:1d:db:3d:3d:b8:23:91:59:a9:a8:
dc:64:bf:e3:67:65:b8:f4:6b:b5:18:d4:ad:99:f4:
e4:94:6e:21:ff:fe:bf:83:22:de:1a:71:08:83:02:
5b:8d:57:e5:4a:6d:8e:24:ab:3e:c7:f6:76:cd:d2:
36:09:09:37:be:c1:d7:49:72:7f:4d:01:bb:90:96:
92:4c:d7:a1:58:7a:1a:50:fd:1e:78:e0:74:c6:cb:
42:6c:fd:b2:ab:6b:72:b7:b3:a2:48:65:52:8d:c3:
f5:6b:ff:c0:e5:98:d0:ac:49:1f:ff:77:2a:f6:27:
82:f5:31:e0:51:d5:ea:12:ae:56:9c:9d:9f:b1:58:
14:25:ad:5b:e1:80:b2:c5:48:23:58:9d:a8:d9:d4:
d4:45:11:82:37:d3:d7:15:e4:eb:0d:92:6f:1f:3b:
6f:b3:63:bc:f7:7c:4d:77:bf:07:74:a9:4d:00:50:
a6:ab:6f:4c:c9:34:77:d6:8c:aa:b5:47:5b:54:df:
76:4d:df:bb:a3:18:9b:72:0e:23:64:48:2b:94:b7:
20:80:b0:02:6b:9e:94:fb:cc:8c:33:3d:75:e1:47:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:76:06:D5:59:AD:74:04:EF:1C:15:BC:E5:B2:13:21:7F:FA:2B:EF
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:27:be:02:9e:ce:4a:84:f6:87:5c:bf:c9:3c:13:af:4f:3e:
44:34:f5:e1:46:c6:fe:bd:e4:78:1d:a4:26:8f:fd:48:af:a4:
47:b0:c9:13:f7:95:1f:1a:fc:53:73:92:94:a6:bf:aa:f0:a9:
9a:10:1b:a0:d8:04:e2:89:8f:72:6d:c9:6b:11:c1:45:9e:c2:
a3:3d:2a:7b:51:ba:90:44:ef:f5:5c:6f:b8:93:09:dc:d7:53:
43:ce:d6:60:9a:a2:47:b3:87:1e:1f:5e:33:01:3d:8c:04:62:
0e:6d:81:51:6a:27:a6:52:2b:1b:e5:7b:20:d8:02:74:0f:04:
ad:8e:74:f9:39:ef:e9:25:0d:b7:30:f0:35:fc:52:ec:f9:74:
f5:fe:c9:e6:90:88:bc:a7:f8:dc:c6:b0:b2:e7:8c:48:33:f0:
4b:2e:fd:72:94:28:dc:fd:c5:68:59:9d:4a:e1:f7:14:55:7a:
69:fa:83:65:f7:c7:cd:b6:9f:26:6f:36:b2:29:e8:69:a6:cc:
18:a9:fc:d4:97:e2:8a:8d:5e:16:a0:2c:4f:ee:b4:43:9c:c1:
c2:ba:bb:d4:6f:54:ec:6d:f1:1b:67:06:23:02:9f:98:c9:e1:
37:9a:07:d7:59:f3:21:dc:00:87:53:a5:34:bb:4f:ba:89:64:
0d:a7:c6:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8WL89mI+Ej6MZXC7G2FjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTI1NjU2YzUwYmIyNTRmNTgwNzdkMWI5NjZlNDc0YjE2
MzQ3YWYwHhcNMjUwODIzMDgwMDIzWhcNMjUwODI0MDgwMDIzWjAzMTEwLwYDVQQD
EyhiNjc2MDZkNTU5YWQ3NDA0ZWYxYzE1YmNlNWIyMTMyMTdmZmEyYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWBHP5cnzBVXBarCuMM9/r5lfKGE
Vro0qJtEzCTwclbQmB3bPT24I5FZqajcZL/jZ2W49Gu1GNStmfTklG4h//6/gyLe
GnEIgwJbjVflSm2OJKs+x/Z2zdI2CQk3vsHXSXJ/TQG7kJaSTNehWHoaUP0eeOB0
xstCbP2yq2tyt7OiSGVSjcP1a//A5ZjQrEkf/3cq9ieC9THgUdXqEq5WnJ2fsVgU
Ja1b4YCyxUgjWJ2o2dTURRGCN9PXFeTrDZJvHztvs2O893xNd78HdKlNAFCmq29M
yTR31oyqtUdbVN92Td+7oxibcg4jZEgrlLcggLACa56U+8yMMz114Uf0NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZ2BtVZrXQE7xwVvOWyEyF/+ivvMB8GA1UdIwQY
MBaAFGLiVlbFC7JU9YB30blm5HSxY0evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2Mt
YzIwNjRiMGY5YWI5LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2MtYzIwNjRiMGY5YWI5
LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMie+Ap7O
SoT2h1y/yTwTr08+RDT14UbG/r3keB2kJo/9SK+kR7DJE/eVHxr8U3OSlKa/qvCp
mhAboNgE4omPcm3JaxHBRZ7Coz0qe1G6kETv9VxvuJMJ3NdTQ87WYJqiR7OHHh9e
MwE9jARiDm2BUWonplIrG+V7INgCdA8ErY50+Tnv6SUNtzDwNfxS7Pl09f7J5pCI
vKf43MawsueMSDPwSy79cpQo3P3FaFmdSuH3FFV6afqDZffHzbafJm82sinoaabM
GKn81Jfiio1eFqAsT+60Q5zBwrq71G9U7G3xG2cGIwKfmMnhN5oH11nzIdwAh1Ol
NLtPuolkDafG1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:15 2025 by rpki-client