Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: occB9LXkNTXQDGIcoq939AvRMlbb3SOfwo/1QzRCJts=
Subject key identifier: 98:04:74:09:E6:02:02:C4:A2:40:D3:AD:49:F3:AE:E0:BC:66:6A:3C
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 0198D698495B8B392C2B323C5661E226EAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 11:02:41 +0000
Manifest this update: Sat 23 Aug 2025 11:02:41 +0000
Manifest next update: Sun 24 Aug 2025 11:02:41 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: 2PEhsRti2cGYHDNcH4yZFq86J04wn78LQBqqyHyo5Rs=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:49:5b:8b:39:2c:2b:32:3c:56:61:e2:26:ea:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Aug 23 11:02:41 2025 GMT
Not After : Aug 24 11:02:41 2025 GMT
Subject: CN=98047409e60202c4a240d3ad49f3aee0bc666a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:2b:ea:bc:99:73:0d:93:c0:f8:aa:db:dd:
55:31:f1:e6:0d:de:3c:6f:b1:9d:17:1a:47:7f:62:
38:c6:c0:6f:5c:e1:dc:5e:58:86:76:d1:ce:aa:8b:
54:2b:12:04:ce:94:3a:e7:b9:a8:98:fa:49:04:71:
e2:cd:46:51:1d:d5:cd:0e:36:6b:c3:57:60:30:0d:
53:14:f3:55:2b:a8:2f:ce:d8:eb:9c:19:6f:33:43:
e0:eb:c4:6d:9d:8c:53:75:dd:8d:bf:34:35:10:4f:
66:be:88:2b:8b:82:c7:d0:81:c6:9b:09:e1:46:54:
47:4b:3b:8e:80:db:85:73:6e:cd:af:66:b8:ac:e8:
05:3d:04:d9:e5:a2:e0:60:60:a2:56:6d:48:c3:39:
e9:5b:01:94:e8:3e:11:f4:ee:e0:98:00:35:3d:11:
a8:cc:c9:eb:ca:16:92:6b:a4:4c:75:5e:e2:6b:bc:
26:24:65:75:db:c8:65:25:8d:a9:ad:49:98:aa:13:
84:79:61:23:ed:ff:eb:2c:ad:63:5c:d7:80:c2:7b:
ee:3b:38:71:ed:20:b9:25:0b:9c:ce:0e:4d:60:5b:
8e:93:6f:9a:ea:9c:8b:c5:c4:63:ea:f9:2c:92:51:
85:9e:ad:d3:0c:85:39:b0:9a:cc:64:a4:15:8c:41:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:74:09:E6:02:02:C4:A2:40:D3:AD:49:F3:AE:E0:BC:66:6A:3C
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9d:4d:93:1f:08:9b:9d:29:9d:c6:23:fb:02:49:7c:35:30:
7d:92:49:84:f9:bf:8f:c7:7a:13:4f:27:91:5d:21:73:1a:80:
48:4f:19:65:7b:45:65:45:69:28:e7:64:03:89:03:d0:e0:73:
75:cf:52:a3:ae:b9:44:32:27:66:07:29:35:40:94:4b:ce:32:
bc:ee:c4:9a:cd:03:11:9e:5c:0a:67:8f:10:c9:11:c5:ae:79:
22:b4:e8:e1:9a:9a:a1:d4:9d:56:ec:f4:57:f2:27:65:a5:ef:
1d:77:1a:fa:98:48:33:2c:fb:ee:eb:71:66:8c:e1:eb:93:6e:
64:fa:15:a4:53:9a:a8:01:0d:1d:2f:b9:af:5c:88:6e:2d:a1:
14:d0:45:08:41:9d:5a:32:54:9f:f1:e5:d7:ce:cf:c9:eb:8b:
de:f2:51:1e:b8:7a:d5:37:82:a2:7e:66:88:3c:85:6f:27:e0:
5e:be:48:61:ff:63:f0:cd:91:a2:93:4a:90:2e:be:80:cc:15:
73:8d:52:0b:18:e7:b2:29:9f:96:ca:1c:87:de:ab:e9:f7:2e:
e8:2c:b2:4a:d9:82:1c:a1:db:93:e3:5a:c5:4e:6b:91:ef:68:
cb:90:54:55:60:4c:69:95:23:3a:31:61:75:43:44:d8:df:cb:
d5:05:45:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmElbizksKzI8VmHiJurGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGU4NWY1ODFjNzUxMzkwOGVhMDQ2NjVmZDIzNzI2ZmQ3
MGU2MmIwHhcNMjUwODIzMTEwMjQxWhcNMjUwODI0MTEwMjQxWjAzMTEwLwYDVQQD
Eyg5ODA0NzQwOWU2MDIwMmM0YTI0MGQzYWQ0OWYzYWVlMGJjNjY2YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHEr6ryZcw2TwPiq291VMfHmDd48
b7GdFxpHf2I4xsBvXOHcXliGdtHOqotUKxIEzpQ657momPpJBHHizUZRHdXNDjZr
w1dgMA1TFPNVK6gvztjrnBlvM0Pg68RtnYxTdd2NvzQ1EE9mvogri4LH0IHGmwnh
RlRHSzuOgNuFc27Nr2a4rOgFPQTZ5aLgYGCiVm1IwznpWwGU6D4R9O7gmAA1PRGo
zMnryhaSa6RMdV7ia7wmJGV128hlJY2prUmYqhOEeWEj7f/rLK1jXNeAwnvuOzhx
7SC5JQuczg5NYFuOk2+a6pyLxcRj6vksklGFnq3TDIU5sJrMZKQVjEEvgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgEdAnmAgLEokDTrUnzruC8Zmo8MB8GA1UdIwQY
MBaAFGAOhfWBx1E5COoEZl/SNyb9cOYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDIt
NGNkYTc4OGZlODk5LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDItNGNkYTc4OGZlODk5
LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp1Nkx8I
m50pncYj+wJJfDUwfZJJhPm/j8d6E08nkV0hcxqASE8ZZXtFZUVpKOdkA4kD0OBz
dc9So665RDInZgcpNUCUS84yvO7Ems0DEZ5cCmePEMkRxa55IrTo4ZqaodSdVuz0
V/InZaXvHXca+phIMyz77utxZozh65NuZPoVpFOaqAENHS+5r1yIbi2hFNBFCEGd
WjJUn/Hl187PyeuL3vJRHrh61TeCon5miDyFbyfgXr5IYf9j8M2RopNKkC6+gMwV
c41SCxjnsimflsoch96r6fcu6CyyStmCHKHbk+NaxU5rke9oy5BUVWBMaZUjOjFh
dUNE2N/L1QVF/w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:24 2025 by rpki-client