Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier: +qD81m2GuTmtgC3A8Sw8K3BWWHYl3echIGBnsmy1S2k=
Subject key identifier: 0D:06:8D:0F:B7:55:DD:BD:00:A7:D5:5E:29:F5:83:76:8E:DE:9A:34
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer: /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial: 0198D54E9171310A255CC614485368581AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number: 0615
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: fNuaq77pKdESYZnwGV++ol29++FszsVbxwjn/yt8xNQ=)
2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:91:71:31:0a:25:5c:c6:14:48:53:68:58:1a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637115f728f97d16e0d124963764088120205ae0
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=0d068d0fb755ddbd00a7d55e29f583768ede9a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:72:34:28:fb:f2:02:26:8b:73:98:bb:41:
c5:f4:32:7f:33:bd:dc:f5:db:de:2b:c5:9c:81:e7:
ae:ed:12:66:02:05:e3:bf:2d:e8:e5:b9:36:9b:00:
1f:93:e2:29:c9:9b:91:a6:56:1f:70:60:1e:ce:74:
a3:f2:51:e2:ae:43:61:29:45:ce:69:e8:ed:44:8e:
3c:01:7b:27:8b:37:e3:fc:b9:27:5e:a9:6d:9a:a4:
f4:28:1e:ef:17:56:71:a3:5d:c3:88:ef:f4:51:3f:
2a:e2:49:de:a4:76:cc:c4:2e:79:c0:19:53:56:7f:
39:c6:f0:b2:a4:f3:f5:36:f4:b3:ed:50:d7:fa:28:
e1:24:49:da:15:69:1c:69:35:46:9f:7a:9a:72:29:
4c:27:46:d5:4f:f3:ba:52:8d:09:4e:64:3c:9f:d8:
b4:29:4b:f0:8d:93:5e:b4:01:cf:ab:62:46:fa:9f:
b5:72:95:35:69:dc:00:8b:c2:55:30:63:86:19:f0:
94:5a:21:76:1c:9a:e6:6e:a6:e0:7b:aa:d4:d0:a5:
21:4a:51:cb:46:67:93:71:92:ef:c8:b9:e4:cf:ae:
36:fe:0e:9c:ca:44:97:9d:ca:aa:8f:60:2b:60:da:
94:82:bc:d8:26:ac:27:41:a5:c6:b4:a6:17:4e:5d:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:06:8D:0F:B7:55:DD:BD:00:A7:D5:5E:29:F5:83:76:8E:DE:9A:34
X509v3 Authority Key Identifier:
keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d8:08:07:2b:85:4d:63:35:27:1d:71:ce:d2:69:04:cb:0f:
12:06:7c:84:05:20:ea:5d:45:a6:1b:8c:0c:5b:89:7f:6d:47:
13:e1:e7:35:64:15:f1:87:8c:49:a1:5b:9a:4e:ba:a4:4d:b0:
f7:e6:7d:ea:6f:d9:62:0f:c8:57:d3:56:dc:82:db:96:a9:c2:
24:c6:ff:5f:e4:36:2c:73:22:ce:cd:b7:69:0f:2c:21:34:5d:
2c:d0:4b:78:79:11:1e:a5:37:e0:7c:51:c2:8b:5f:1e:56:4e:
f9:b4:39:8c:e1:05:06:e0:eb:a4:89:6f:3d:0e:4c:14:95:8c:
93:41:b3:7b:00:95:91:18:b0:b7:dd:a8:30:00:f4:31:bd:00:
da:23:08:60:30:b0:94:af:a1:5f:d4:c7:aa:2a:fa:06:0e:46:
3f:54:64:c5:a1:90:d1:cc:14:fc:40:94:c5:35:32:de:83:50:
3c:bb:b3:76:97:a9:49:24:81:73:35:ed:5d:92:aa:75:68:d9:
04:c6:f2:0f:ae:59:ff:90:68:d5:ff:4d:06:f8:fd:88:4e:53:
01:c3:8e:1a:cd:9c:84:fb:68:66:cd:9d:ce:71:e4:68:29:6c:
b1:c0:fc:51:73:ba:b9:3f:ee:30:6f:61:63:9e:51:19:33:d7:
61:99:00:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTpFxMQolXMYUSFNoWBrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzExNWY3MjhmOTdkMTZlMGQxMjQ5NjM3NjQwODgxMjAy
MDVhZTAwHhcNMjUwODIzMDUwMjMyWhcNMjUwODI0MDUwMjMyWjAzMTEwLwYDVQQD
EygwZDA2OGQwZmI3NTVkZGJkMDBhN2Q1NWUyOWY1ODM3NjhlZGU5YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgxyNCj78gImi3OYu0HF9DJ/M73c
9dveK8Wcgeeu7RJmAgXjvy3o5bk2mwAfk+IpyZuRplYfcGAeznSj8lHirkNhKUXO
aejtRI48AXsnizfj/LknXqltmqT0KB7vF1Zxo13DiO/0UT8q4knepHbMxC55wBlT
Vn85xvCypPP1NvSz7VDX+ijhJEnaFWkcaTVGn3qacilMJ0bVT/O6Uo0JTmQ8n9i0
KUvwjZNetAHPq2JG+p+1cpU1adwAi8JVMGOGGfCUWiF2HJrmbqbge6rU0KUhSlHL
RmeTcZLvyLnkz642/g6cykSXncqqj2ArYNqUgrzYJqwnQaXGtKYXTl3ASQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0GjQ+3Vd29AKfVXin1g3aO3po0MB8GA1UdIwQY
MBaAFGNxFfco+X0W4NEkljdkCIEgIFrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFVjl5ajVmUmJnMFNTV04yUUlnU0FnV3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hODc1ZDMtOTkwNS00OTg0LWI5MmMt
ZTNiZTU1NjgyOTNkLzEvWTNFVjl5ajVmUmJnMFNTV04yUUlnU0FnV3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hODc1ZDMtOTkwNS00OTg0LWI5MmMtZTNiZTU1NjgyOTNk
LzEvWTNFVjl5ajVmUmJnMFNTV04yUUlnU0FnV3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNgIByuF
TWM1Jx1xztJpBMsPEgZ8hAUg6l1FphuMDFuJf21HE+HnNWQV8YeMSaFbmk66pE2w
9+Z96m/ZYg/IV9NW3ILblqnCJMb/X+Q2LHMizs23aQ8sITRdLNBLeHkRHqU34HxR
wotfHlZO+bQ5jOEFBuDrpIlvPQ5MFJWMk0GzewCVkRiwt92oMAD0Mb0A2iMIYDCw
lK+hX9THqir6Bg5GP1RkxaGQ0cwU/ECUxTUy3oNQPLuzdpepSSSBczXtXZKqdWjZ
BMbyD65Z/5Bo1f9NBvj9iE5TAcOOGs2chPtoZs2dznHkaClsscD8UXO6uT/uMG9h
Y55RGTPXYZkAHw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:21 2025 by rpki-client