Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: 23rf6UeSr9v7oY5fGeAs3BuP4+0q3Y6fIBAfkFWrp1Q=
Subject key identifier: E7:C9:48:D5:60:31:F1:46:0D:1C:E6:01:19:61:D7:E8:21:4D:CA:7A
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 0198D7A8BA1EDE4B09852C782D99DB2C1F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 1388
Signing time: Sat 23 Aug 2025 16:00:15 +0000
Manifest this update: Sat 23 Aug 2025 16:00:15 +0000
Manifest next update: Sun 24 Aug 2025 16:00:15 +0000
Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: W9wLDBvirSFCNK9uJ5FRKuSHvH7lwYgtwGhIe1b7qUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ba:1e:de:4b:09:85:2c:78:2d:99:db:2c:1f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Aug 23 16:00:15 2025 GMT
Not After : Aug 24 16:00:15 2025 GMT
Subject: CN=e7c948d56031f1460d1ce6011961d7e8214dca7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:1b:19:07:c7:20:1b:55:9e:19:4b:2a:fd:
02:b9:a7:76:ef:fc:e0:85:fd:9f:e1:37:0d:10:ae:
c9:f4:a2:04:fb:3f:60:8c:32:35:10:5f:8f:8f:ee:
8e:58:7c:4a:8c:63:16:8e:86:d0:da:90:53:36:ea:
2b:05:3a:cc:1e:0b:7b:4e:e7:4e:6c:03:88:39:3c:
0f:ae:65:c0:b4:a1:ad:40:8d:bb:ef:02:92:31:7d:
8d:92:85:d9:23:ec:a5:56:ed:c0:3d:0b:0c:e5:d1:
63:79:af:76:6a:95:82:f6:80:f9:ba:66:6d:02:6a:
61:8b:65:c6:1f:5f:28:b6:89:bb:c8:4b:02:42:67:
94:fa:31:2d:26:c4:aa:06:80:38:2b:f3:e9:3f:56:
fc:41:8d:b3:04:52:76:30:41:eb:c1:5d:6e:ec:12:
ba:e1:c2:9e:fd:2e:e4:1e:9d:42:ec:37:49:1b:dc:
b5:ca:95:e5:68:94:76:64:db:51:17:91:07:3f:4e:
82:96:de:14:21:e1:bb:eb:7f:92:6c:a1:65:b2:34:
e8:52:0e:1a:01:38:99:0c:ae:d2:cb:42:01:b9:c2:
3f:fd:8a:b0:86:39:68:f0:51:51:c9:3b:eb:37:01:
51:22:e3:af:e3:ad:8c:4a:0d:52:70:41:43:2e:52:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C9:48:D5:60:31:F1:46:0D:1C:E6:01:19:61:D7:E8:21:4D:CA:7A
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2d:11:17:fc:ae:91:3b:72:4b:ff:8b:ca:8b:4a:e0:e3:44:
39:3e:78:1e:39:37:d9:08:f9:3e:53:f9:ae:21:09:be:e9:20:
66:59:5b:e1:c7:28:f0:9f:bb:7c:40:d4:59:20:01:f4:da:4f:
fb:74:74:66:a0:b4:00:3b:59:27:5c:b6:16:a3:7e:8a:d2:f4:
fc:a6:93:e3:55:f5:5c:8b:c7:29:5d:e0:cb:8b:a8:96:33:4d:
42:8d:68:41:74:20:e6:b6:70:44:7b:36:86:fb:1a:3b:de:73:
fb:85:80:7a:25:73:7d:a4:98:3e:06:82:eb:2f:2d:9e:9c:34:
c7:2f:81:e3:b2:9b:fb:c2:2b:ea:4d:f1:39:b5:81:ad:d6:ff:
74:9b:9b:91:0f:f4:6d:4b:1b:07:7d:cb:33:0e:0f:c6:02:40:
7d:87:f7:4a:68:f9:16:8e:d9:7b:1a:0b:e2:36:76:fa:dc:0d:
46:f5:2e:f9:1d:d2:13:4d:a6:d3:00:22:a0:5e:c8:e0:1a:77:
77:86:08:9e:85:b5:7c:af:2c:8d:c3:fb:7a:83:42:ae:6d:73:
ba:eb:d8:24:8c:6a:90:4d:d3:d6:f8:23:03:3a:05:a4:86:3f:
49:ee:b2:61:df:5c:de:38:37:5a:41:9c:c7:76:0c:5b:5e:8d:
bf:24:ea:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqLoe3ksJhSx4LZnbLB80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2NlYTZlMTAzYTIzMjVjNDhjMTY2N2E5OWM3YjE3ZWIz
Y2U3YjYwHhcNMjUwODIzMTYwMDE1WhcNMjUwODI0MTYwMDE1WjAzMTEwLwYDVQQD
EyhlN2M5NDhkNTYwMzFmMTQ2MGQxY2U2MDExOTYxZDdlODIxNGRjYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPgbGQfHIBtVnhlLKv0Cuad27/zg
hf2f4TcNEK7J9KIE+z9gjDI1EF+Pj+6OWHxKjGMWjobQ2pBTNuorBTrMHgt7TudO
bAOIOTwPrmXAtKGtQI277wKSMX2NkoXZI+ylVu3APQsM5dFjea92apWC9oD5umZt
Amphi2XGH18otom7yEsCQmeU+jEtJsSqBoA4K/PpP1b8QY2zBFJ2MEHrwV1u7BK6
4cKe/S7kHp1C7DdJG9y1ypXlaJR2ZNtRF5EHP06Clt4UIeG763+SbKFlsjToUg4a
ATiZDK7Sy0IBucI//Yqwhjlo8FFRyTvrNwFRIuOv462MSg1ScEFDLlLdNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfJSNVgMfFGDRzmARlh1+ghTcp6MB8GA1UdIwQY
MBaAFGB86m4QOiMlxIwWZ6mcexfrPOe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lNjE5ODUtZjg4MS00MDM1LWFiNWIt
YzlhOWJhYTQzZjk0LzEvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lNjE5ODUtZjg4MS00MDM1LWFiNWItYzlhOWJhYTQzZjk0
LzEvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWC0RF/yu
kTtyS/+LyotK4ONEOT54Hjk32Qj5PlP5riEJvukgZllb4cco8J+7fEDUWSAB9NpP
+3R0ZqC0ADtZJ1y2FqN+itL0/KaT41X1XIvHKV3gy4uoljNNQo1oQXQg5rZwRHs2
hvsaO95z+4WAeiVzfaSYPgaC6y8tnpw0xy+B47Kb+8Ir6k3xObWBrdb/dJubkQ/0
bUsbB33LMw4PxgJAfYf3Smj5Fo7ZexoL4jZ2+twNRvUu+R3SE02m0wAioF7I4Bp3
d4YInoW1fK8sjcP7eoNCrm1zuuvYJIxqkE3T1vgjAzoFpIY/Se6yYd9c3jg3WkGc
x3YMW16NvyTqew==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:57 2025 by rpki-client