Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: ts29Y2Yssp4NKQKeKfo3DCEGGDwUugUtm+jolyUhSaU=
Subject key identifier: 90:61:61:2A:11:6E:BE:F3:7D:05:F9:9A:7D:D5:E5:4A:EA:45:02:2E
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 0198D472E6E9C80DB9C2744D99DDF6869990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 1133
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: R/FmaCtoPRtlda72eQqUHK1vYZK0EUSEfBe80Ix44co=)
2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e6:e9:c8:0d:b9:c2:74:4d:99:dd:f6:86:99:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=9061612a116ebef37d05f99a7dd5e54aea45022e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:d2:51:4f:b3:fd:df:43:38:d7:6f:a9:94:
74:24:26:4e:e6:83:61:48:5d:7f:f2:59:ef:70:d6:
37:ee:0e:48:58:7a:99:64:51:cd:92:79:e7:2e:4f:
9e:48:9f:c7:0c:60:9e:0b:d7:90:18:13:e3:dc:44:
a5:7a:f5:cd:84:21:55:fa:4f:b2:ae:c0:72:9f:54:
b1:b6:20:7f:0a:d1:f2:3a:8d:a0:a3:8e:ce:4b:3f:
b7:be:25:09:b1:76:56:aa:e0:aa:43:60:97:f2:8c:
29:0c:5b:b9:52:66:19:ff:ea:28:46:d6:5a:a4:83:
b6:aa:28:ae:11:46:25:65:4b:1b:61:fc:19:0a:9d:
e3:33:60:f0:1e:55:d9:57:c5:3d:2a:dd:ae:e3:b9:
00:f8:92:42:ec:70:54:8d:25:bd:fe:f5:72:20:c4:
7a:05:5a:51:7b:52:1d:63:97:60:e8:f9:ac:64:64:
96:f0:00:5c:d6:a1:0e:2c:39:13:d2:a7:af:6c:bb:
11:23:62:b6:7d:ae:e7:9b:f0:a4:e0:d3:94:c2:b4:
4e:77:94:6f:5c:ae:26:a1:da:e0:bb:f8:64:5a:a1:
21:89:20:43:9b:15:a6:72:18:07:3e:7f:d7:cf:bf:
ee:94:75:57:d5:64:8a:40:97:70:03:cd:4d:e7:a5:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:61:61:2A:11:6E:BE:F3:7D:05:F9:9A:7D:D5:E5:4A:EA:45:02:2E
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6c:64:e9:f8:4f:cb:06:43:db:9f:24:4a:6b:96:1b:a8:7b:
af:34:4a:36:88:b1:4c:40:8a:57:07:d9:55:c7:90:c4:f4:d8:
08:bd:d4:cf:be:a3:12:b1:79:db:38:e9:4f:b5:aa:3f:be:41:
68:6d:f2:a7:cb:fc:fa:05:35:be:d4:73:98:93:70:1c:c6:0f:
87:95:1d:df:e5:5e:69:89:2d:16:ba:77:59:f6:11:68:02:fe:
07:0c:cb:79:fe:09:66:98:09:26:24:de:71:d4:80:d8:08:58:
ee:e7:8b:61:e3:74:a6:bc:ef:21:e2:24:40:53:37:53:0e:96:
dd:d7:15:35:70:6f:76:ad:f0:86:69:53:19:0e:f8:ec:b9:32:
49:d1:ba:df:cd:56:59:f7:f9:80:b2:8a:ed:ec:43:77:f5:c0:
91:79:cd:2c:b6:f7:54:b4:5a:00:ae:5b:26:42:78:28:72:1e:
98:d6:dc:82:0f:aa:b9:61:69:de:bb:42:d0:82:ce:f5:fc:24:
5c:95:e0:b7:74:43:98:40:2c:81:43:81:7d:0c:8f:e0:d1:03:
b1:f4:d1:d3:07:ca:8a:80:02:ce:b6:2c:86:57:11:3e:b5:dc:
aa:67:ba:2f:b2:b2:20:0f:48:a5:d9:43:26:2c:f0:15:d7:85:
44:44:07:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcubpyA25wnRNmd32hpmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOGMyMDMwYTU5NzFjNGE1NDA5NmE4ZWRiYjIxMjExZTU0
MjE2YTcwHhcNMjUwODIzMDEwMjM2WhcNMjUwODI0MDEwMjM2WjAzMTEwLwYDVQQD
Eyg5MDYxNjEyYTExNmViZWYzN2QwNWY5OWE3ZGQ1ZTU0YWVhNDUwMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RbSUU+z/d9DONdvqZR0JCZO5oNh
SF1/8lnvcNY37g5IWHqZZFHNknnnLk+eSJ/HDGCeC9eQGBPj3ESlevXNhCFV+k+y
rsByn1SxtiB/CtHyOo2go47OSz+3viUJsXZWquCqQ2CX8owpDFu5UmYZ/+ooRtZa
pIO2qiiuEUYlZUsbYfwZCp3jM2DwHlXZV8U9Kt2u47kA+JJC7HBUjSW9/vVyIMR6
BVpRe1IdY5dg6PmsZGSW8ABc1qEOLDkT0qevbLsRI2K2fa7nm/Ck4NOUwrROd5Rv
XK4modrgu/hkWqEhiSBDmxWmchgHPn/Xz7/ulHVX1WSKQJdwA81N56Xi3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBhYSoRbr7zfQX5mn3V5UrqRQIuMB8GA1UdIwQY
MBaAFNGMIDCllxxKVAlqjtuyEhHlQhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQt
NTNhNjcyZDE0YjdhLzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQtNTNhNjcyZDE0Yjdh
LzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWxk6fhP
ywZD258kSmuWG6h7rzRKNoixTECKVwfZVceQxPTYCL3Uz76jErF52zjpT7WqP75B
aG3yp8v8+gU1vtRzmJNwHMYPh5Ud3+VeaYktFrp3WfYRaAL+BwzLef4JZpgJJiTe
cdSA2AhY7ueLYeN0przvIeIkQFM3Uw6W3dcVNXBvdq3whmlTGQ747LkySdG6381W
Wff5gLKK7exDd/XAkXnNLLb3VLRaAK5bJkJ4KHIemNbcgg+quWFp3rtC0ILO9fwk
XJXgt3RDmEAsgUOBfQyP4NEDsfTR0wfKioACzrYshlcRPrXcqme6L7KyIA9IpdlD
JizwFdeFREQHkQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:50 2025 by rpki-client