Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
File: JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json)
Hash identifier: AIv57VMC9lcFi2/SLSJfmYA1YcT+GbVKynn+Mr9fjZM=
Subject key identifier: 86:F2:BD:64:D4:30:FB:51:6E:89:97:DD:D9:42:56:8D:F5:15:8A:D2
Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
Certificate issuer: /CN=271b98a60a926820a48cb43a4af308c88ff2721a
Certificate serial: 0198D5BB9CEBC81BE6E6BA080ADBE808D2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
Manifest number: 0F0E
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: JkXMlJ2G4551oIQP38JCn63RxdRiScihRVi+x5NB2W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9c:eb:c8:1b:e6:e6:ba:08:0a:db:e8:08:d2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=86f2bd64d430fb516e8997ddd942568df5158ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:0f:c1:d7:dc:bb:ee:3b:c3:0e:2d:d2:12:
19:b3:e9:f2:e5:60:8f:50:e0:e1:02:f7:83:1d:6b:
bf:08:c2:c6:85:de:bb:75:5b:c1:7f:34:12:10:2f:
37:e6:de:66:dd:46:9c:f7:cb:a9:9c:5b:3c:9a:56:
98:61:12:f2:25:f8:bf:18:a9:2c:e1:b3:eb:f2:ee:
e4:f6:41:c5:7d:e6:16:78:94:6d:7b:89:02:82:56:
f8:54:a3:e0:5c:e7:e2:11:b7:48:87:fc:30:cf:cd:
5e:db:f3:e9:d1:da:2e:77:88:a8:8e:84:a5:ca:64:
84:ff:d1:78:8c:44:d4:56:13:64:19:e0:4b:8b:b1:
2a:b8:b7:3d:0f:fd:fa:b9:48:ad:ea:a0:d2:09:11:
60:36:ba:fa:f0:1c:ef:62:a8:ee:42:8e:90:6f:34:
88:67:38:1b:16:07:2e:3e:f0:da:4b:b5:7c:e9:a5:
15:87:65:6b:85:3d:3b:b8:12:8f:97:62:82:de:9d:
b6:19:c4:9d:4b:f2:a5:6b:c7:7b:9c:a5:02:21:e3:
be:54:52:9d:6e:71:90:52:1b:8d:5a:c7:43:16:54:
54:c3:06:12:97:66:9e:45:73:5b:2c:06:92:15:84:
33:aa:34:9e:8e:d6:cd:03:19:dc:9f:39:6b:84:62:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:BD:64:D4:30:FB:51:6E:89:97:DD:D9:42:56:8D:F5:15:8A:D2
X509v3 Authority Key Identifier:
keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2b:56:1e:f5:00:57:cb:83:a3:35:ae:bb:ef:e4:9c:04:9a:
eb:c2:ae:6b:f3:65:75:7d:01:36:e8:5b:5e:45:c5:47:aa:a5:
66:c6:d5:1b:21:e1:93:7b:45:f0:36:6b:d0:29:a0:85:60:07:
8b:2a:90:3f:ae:d9:e4:6a:dd:91:aa:62:f9:d5:b2:da:e8:62:
3e:f1:9e:bc:10:b2:0a:48:ea:c9:0d:d5:b9:de:fa:96:63:80:
71:e7:fb:d1:88:0f:70:c7:fb:55:02:43:b6:3c:3b:b8:a9:ca:
92:1e:d1:e6:c3:4a:e0:7b:33:99:0c:6b:39:d5:b7:82:5a:2a:
c2:fe:61:1e:cb:97:02:07:a0:e1:60:e8:81:fe:4e:22:1a:ab:
d0:b3:05:31:4e:3b:67:b7:fb:d5:3d:10:10:2e:e3:2d:6c:1a:
f3:48:4c:cd:64:59:55:95:dc:0d:d0:2e:b2:90:9f:5c:5f:c8:
4a:9f:67:8b:e6:e6:52:1c:fa:27:7c:ce:be:d9:c4:df:97:7a:
7e:21:c0:4b:ef:29:e2:1f:1a:36:36:cb:e8:a1:b8:7a:b1:07:
fd:c5:31:25:bb:5a:de:16:c7:da:23:b4:9c:87:f6:18:49:4b:
6b:2e:81:58:b6:99:40:94:e8:3b:c7:05:09:ab:9e:02:a5:f2:
72:34:83:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu5zryBvm5roICtvoCNLmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MWI5OGE2MGE5MjY4MjBhNDhjYjQzYTRhZjMwOGM4OGZm
MjcyMWEwHhcNMjUwODIzMDcwMTM5WhcNMjUwODI0MDcwMTM5WjAzMTEwLwYDVQQD
Eyg4NmYyYmQ2NGQ0MzBmYjUxNmU4OTk3ZGRkOTQyNTY4ZGY1MTU4YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3wPwdfcu+47ww4t0hIZs+ny5WCP
UODhAveDHWu/CMLGhd67dVvBfzQSEC835t5m3Uac98upnFs8mlaYYRLyJfi/GKks
4bPr8u7k9kHFfeYWeJRte4kCglb4VKPgXOfiEbdIh/wwz81e2/Pp0doud4iojoSl
ymSE/9F4jETUVhNkGeBLi7EquLc9D/36uUit6qDSCRFgNrr68BzvYqjuQo6QbzSI
ZzgbFgcuPvDaS7V86aUVh2VrhT07uBKPl2KC3p22GcSdS/Kla8d7nKUCIeO+VFKd
bnGQUhuNWsdDFlRUwwYSl2aeRXNbLAaSFYQzqjSejtbNAxncnzlrhGKtzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbyvWTUMPtRbomX3dlCVo31FYrSMB8GA1UdIwQY
MBaAFCcbmKYKkmggpIy0OkrzCMiP8nIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnh1WXBncVNhQ0NrakxRNlN2TUl5SV95Y2hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzRkODAtZDM5NC00OTYyLWE2YTMt
Y2U0ZDg0NTU1NGZkLzEvSnh1WXBncVNhQ0NrakxRNlN2TUl5SV95Y2hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85NzRkODAtZDM5NC00OTYyLWE2YTMtY2U0ZDg0NTU1NGZk
LzEvSnh1WXBncVNhQ0NrakxRNlN2TUl5SV95Y2hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATStWHvUA
V8uDozWuu+/knASa68Kua/NldX0BNuhbXkXFR6qlZsbVGyHhk3tF8DZr0CmghWAH
iyqQP67Z5Grdkapi+dWy2uhiPvGevBCyCkjqyQ3Vud76lmOAcef70YgPcMf7VQJD
tjw7uKnKkh7R5sNK4HszmQxrOdW3gloqwv5hHsuXAgeg4WDogf5OIhqr0LMFMU47
Z7f71T0QEC7jLWwa80hMzWRZVZXcDdAuspCfXF/ISp9ni+bmUhz6J3zOvtnE35d6
fiHAS+8p4h8aNjbL6KG4erEH/cUxJbta3hbH2iO0nIf2GElLay6BWLaZQJToO8cF
CaueAqXycjSDIQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:24 2025 by rpki-client