Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier: FNZX02DUkRF3AMkUELEKQzP7oeb0P6qx48SvNzkQv78=
Subject key identifier: A1:60:C5:D9:AC:24:03:E6:84:67:9E:9F:17:E7:23:E3:50:11:40:C3
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 0198D4724754874B3D6E1FCDF2C6E5E9D989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number: 0AA2
Signing time: Sat 23 Aug 2025 01:01:55 +0000
Manifest this update: Sat 23 Aug 2025 01:01:55 +0000
Manifest next update: Sun 24 Aug 2025 01:01:55 +0000
Files and hashes: 1: CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa (hash: OdCH0xAebcoZtMG/wZGi9eDKxyAg95m1InonEHGGddU=)
2: ZevzjSVvulMbqdJtY8B4bnQMQ18.roa (hash: W1po1ozIsux5yOEXy/FIuleWTHBIh+Vuq+plxlxVu8s=)
3: _xVJ1hQmic9FLrcgVmh-KAZfgtA.roa (hash: psme/h2vzp67q25AbH+m68R73Xe8GmTvYaqc5PS4Y/k=)
4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: 336AUnRiOz9ObSxWROpg+R/tXPbu2Y5gbik4o0JFhYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:47:54:87:4b:3d:6e:1f:cd:f2:c6:e5:e9:d9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Aug 23 01:01:55 2025 GMT
Not After : Aug 24 01:01:55 2025 GMT
Subject: CN=a160c5d9ac2403e684679e9f17e723e3501140c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:17:eb:e4:c8:3f:f3:68:6e:9c:5b:64:fe:
ac:2b:23:84:f5:9f:0f:ea:e2:63:14:86:16:7b:cc:
b7:f5:6c:aa:8e:e4:5a:f3:93:05:de:52:ae:af:d4:
de:00:2f:8c:0c:a8:51:16:f1:3a:28:fd:ac:dc:4f:
e9:9a:e7:64:32:4a:e4:c6:73:4c:f7:bd:8c:65:53:
74:6a:c6:f0:eb:12:28:3d:f4:e4:22:b2:79:48:72:
36:16:24:97:71:38:c7:22:54:f1:ff:16:40:9e:d8:
2a:f3:c6:e1:60:68:0a:0a:b4:6a:c5:45:b4:98:9f:
b3:39:91:10:6f:3a:a1:e0:21:f9:17:7e:c2:87:2d:
a7:f7:03:ae:59:18:7e:fa:3e:5f:67:a3:b6:c8:19:
31:62:4c:ed:ea:d8:0b:6f:05:b5:ed:64:ff:96:de:
29:19:7b:88:6d:5e:cf:6b:09:85:a1:3f:90:44:0c:
84:51:f8:90:58:70:a4:94:0c:ae:46:9a:bd:9d:0f:
2b:7c:a6:91:fb:74:3f:60:cd:86:eb:21:39:f3:67:
49:b2:8e:9f:ec:55:05:2f:53:76:79:44:06:e0:69:
d9:f9:fa:93:11:bb:f3:f6:03:5b:79:ad:d1:e4:46:
38:67:d5:d4:ca:16:f0:22:f3:81:2f:0e:bf:ba:92:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:60:C5:D9:AC:24:03:E6:84:67:9E:9F:17:E7:23:E3:50:11:40:C3
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:29:b8:e3:05:31:6b:df:72:d2:80:a2:76:3f:85:23:5e:00:
b1:6d:92:9e:16:3c:7d:2e:9d:79:e7:94:e0:65:9c:16:fc:6b:
c4:93:79:ad:87:44:5d:ed:6c:9c:21:08:b4:c0:23:af:81:ad:
f7:8d:07:19:9a:25:ad:3f:9c:76:a9:90:fe:c1:ba:3c:4c:d3:
62:d8:17:37:34:af:dd:4b:6c:89:bc:f7:36:15:bb:5b:9d:7d:
e7:98:ec:4e:fc:e8:77:eb:a9:e9:50:6b:a0:66:93:8f:d3:46:
a7:39:69:5a:9b:60:5a:29:0c:0c:c7:75:a3:9e:6c:d8:1b:64:
71:ce:66:19:7a:73:dd:87:6a:3e:8e:d0:39:ea:06:50:76:b3:
d4:67:00:98:ea:bc:5b:15:52:a9:62:f2:c9:58:41:0f:ec:97:
0b:02:18:5a:dd:ef:3a:5f:97:a6:d9:23:fc:20:0c:dc:2e:61:
66:58:42:f0:0b:ac:c7:e5:e9:83:06:2c:92:94:ca:03:f9:08:
fc:be:b5:4b:55:05:d3:67:4f:e6:88:94:4f:cc:1a:b3:6c:18:
62:1f:b5:db:57:cf:cf:d5:c4:4e:3a:36:f1:4b:a9:ab:b4:71:
2f:48:36:44:09:0f:3b:83:fd:1e:9c:38:d6:f8:6e:a9:21:38:
47:60:b7:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUckdUh0s9bh/N8sbl6dmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NDZjNGJlZmUwZmJiZTM2MjRiZDc0ODI5NmI1ZmUyZTdl
YzJkNjgwHhcNMjUwODIzMDEwMTU1WhcNMjUwODI0MDEwMTU1WjAzMTEwLwYDVQQD
EyhhMTYwYzVkOWFjMjQwM2U2ODQ2NzllOWYxN2U3MjNlMzUwMTE0MGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRsX6+TIP/NobpxbZP6sKyOE9Z8P
6uJjFIYWe8y39WyqjuRa85MF3lKur9TeAC+MDKhRFvE6KP2s3E/pmudkMkrkxnNM
972MZVN0asbw6xIoPfTkIrJ5SHI2FiSXcTjHIlTx/xZAntgq88bhYGgKCrRqxUW0
mJ+zOZEQbzqh4CH5F37Chy2n9wOuWRh++j5fZ6O2yBkxYkzt6tgLbwW17WT/lt4p
GXuIbV7PawmFoT+QRAyEUfiQWHCklAyuRpq9nQ8rfKaR+3Q/YM2G6yE582dJso6f
7FUFL1N2eUQG4GnZ+fqTEbvz9gNbea3R5EY4Z9XUyhbwIvOBLw6/upJJUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFgxdmsJAPmhGeenxfnI+NQEUDDMB8GA1UdIwQY
MBaAFMlGxL7+D7vjYkvXSClrX+Ln7C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODkt
NmJiYjI3MDgxZGUyLzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODktNmJiYjI3MDgxZGUy
LzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCm44wUx
a99y0oCidj+FI14AsW2SnhY8fS6deeeU4GWcFvxrxJN5rYdEXe1snCEItMAjr4Gt
940HGZolrT+cdqmQ/sG6PEzTYtgXNzSv3Utsibz3NhW7W51955jsTvzod+up6VBr
oGaTj9NGpzlpWptgWikMDMd1o55s2Btkcc5mGXpz3YdqPo7QOeoGUHaz1GcAmOq8
WxVSqWLyyVhBD+yXCwIYWt3vOl+Xptkj/CAM3C5hZlhC8Ausx+XpgwYskpTKA/kI
/L61S1UF02dP5oiUT8was2wYYh+121fPz9XETjo28Uupq7RxL0g2RAkPO4P9Hpw4
1vhuqSE4R2C3TA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:46 2025 by rpki-client