Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File: YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier: +PzpcvZgGG/iMmoIgpK3cUr+i/N6jQvC1APpTFoUYbc=
Subject key identifier: E8:7B:9F:08:BB:61:BA:E1:74:8E:72:13:F3:49:6B:3E:05:86:6D:79
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer: /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial: 0198D8F2AC237905A04165B1338387207037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 22:00:39 +0000
Manifest this update: Sat 23 Aug 2025 22:00:39 +0000
Manifest next update: Sun 24 Aug 2025 22:00:39 +0000
Files and hashes: 1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: gG43iA9kQtGpTsSzcCOtUhx9rPXQqnDKGcPIG+rcfKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:ac:23:79:05:a0:41:65:b1:33:83:87:20:70:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Validity
Not Before: Aug 23 22:00:39 2025 GMT
Not After : Aug 24 22:00:39 2025 GMT
Subject: CN=e87b9f08bb61bae1748e7213f3496b3e05866d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:b8:e4:9d:b2:62:cc:7e:f7:4d:8d:bf:34:
8e:ce:b9:34:74:72:84:4c:2c:20:e0:8a:41:22:78:
0c:5e:b3:16:a9:8f:06:14:ff:d3:7b:ca:1f:1a:f3:
35:92:e0:12:30:e7:bb:00:9e:51:fb:0d:fb:56:83:
7f:8d:5c:3c:b1:77:41:e9:29:3a:3c:8b:94:b3:5d:
3e:cd:71:c2:cc:d7:08:5b:ce:9e:41:ae:c4:27:f1:
c3:9d:e3:03:11:70:09:e3:31:9c:84:24:e9:5d:de:
80:b6:fe:35:1d:57:68:79:e0:45:7b:aa:7a:14:f2:
60:32:84:11:fc:60:1b:d3:25:10:6a:1c:e0:24:ed:
70:5c:cb:42:1d:bf:47:8d:ed:f5:b1:9d:2e:71:aa:
6f:64:e1:89:31:3c:0d:f7:97:b6:8f:48:66:c3:ba:
70:28:cf:99:aa:d4:71:f8:bf:5c:ad:0d:32:6e:3c:
c9:84:57:36:24:51:e5:ed:5e:c1:a5:b5:83:01:f2:
f0:a3:f8:64:b6:8b:13:d2:1b:2c:a9:2f:24:20:e3:
63:8a:9e:fd:c2:03:47:32:91:00:88:42:20:f1:f8:
78:19:b8:65:98:36:60:13:0d:80:0b:5a:c5:51:55:
f5:fc:b3:ae:80:75:89:b7:fe:10:46:fc:29:89:8c:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7B:9F:08:BB:61:BA:E1:74:8E:72:13:F3:49:6B:3E:05:86:6D:79
X509v3 Authority Key Identifier:
keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e3:af:7d:45:bb:93:78:7c:e5:ae:96:50:bc:7e:0b:17:90:
a9:a3:55:92:a6:a7:d2:b0:7d:e2:18:c9:1d:0e:8b:6e:d1:22:
77:10:7e:a2:19:b1:0e:ba:81:51:4c:f3:15:49:0d:a5:c8:94:
19:26:23:0d:7e:05:3d:10:6d:a2:95:49:08:ef:7e:fd:26:23:
0d:18:4f:fc:4d:30:42:28:40:4a:60:ab:98:35:ba:bf:9e:e5:
59:fe:5a:6c:33:af:d0:1f:58:d3:aa:9b:a3:48:95:8c:cc:b7:
01:eb:8a:87:78:50:07:9d:2b:c1:77:72:2d:ee:5a:c7:d1:db:
6b:e8:f3:cc:09:00:bb:a4:5e:20:06:2b:50:10:b3:30:bf:8c:
4f:df:cb:8e:2d:67:8a:3f:d0:de:c7:50:d4:54:f9:2b:af:ab:
93:b2:ce:76:e2:33:1c:18:31:f5:06:94:94:ff:f2:af:75:57:
ff:22:34:8f:86:2b:93:a9:74:2c:a8:10:80:c7:79:f4:fa:6d:
0f:ce:0e:c3:ff:ce:65:3d:01:50:ce:e2:1d:db:8b:8d:aa:a2:
f8:1e:6a:9e:df:cb:ad:c5:ad:c0:62:27:32:6d:04:fa:78:d8:
55:c5:bb:53:ea:1d:30:52:18:55:6d:b1:d4:5b:59:40:df:ea:
e7:1f:d5:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjY8qwjeQWgQWWxM4OHIHA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWUwYWFlOTNlYjA1ZmY1ZDQyZGQ3MDE2ZjVkZWEzODFm
Yjg2NjAwHhcNMjUwODIzMjIwMDM5WhcNMjUwODI0MjIwMDM5WjAzMTEwLwYDVQQD
EyhlODdiOWYwOGJiNjFiYWUxNzQ4ZTcyMTNmMzQ5NmIzZTA1ODY2ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9a45J2yYsx+902NvzSOzrk0dHKE
TCwg4IpBIngMXrMWqY8GFP/Te8ofGvM1kuASMOe7AJ5R+w37VoN/jVw8sXdB6Sk6
PIuUs10+zXHCzNcIW86eQa7EJ/HDneMDEXAJ4zGchCTpXd6Atv41HVdoeeBFe6p6
FPJgMoQR/GAb0yUQahzgJO1wXMtCHb9Hje31sZ0ucapvZOGJMTwN95e2j0hmw7pw
KM+ZqtRx+L9crQ0ybjzJhFc2JFHl7V7BpbWDAfLwo/hktosT0hssqS8kIONjip79
wgNHMpEAiEIg8fh4GbhlmDZgEw2AC1rFUVX1/LOugHWJt/4QRvwpiYzCMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOh7nwi7YbrhdI5yE/NJaz4Fhm15MB8GA1UdIwQY
MBaAFGAeCq6T6wX/XULdcBb13qOB+4ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xZmM4NTMtNjUyNi00MDkxLTk1ZjQt
ZjlmNjAxYzA2ODZlLzEvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xZmM4NTMtNjUyNi00MDkxLTk1ZjQtZjlmNjAxYzA2ODZl
LzEvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+OvfUW7
k3h85a6WULx+CxeQqaNVkqan0rB94hjJHQ6LbtEidxB+ohmxDrqBUUzzFUkNpciU
GSYjDX4FPRBtopVJCO9+/SYjDRhP/E0wQihASmCrmDW6v57lWf5abDOv0B9Y06qb
o0iVjMy3AeuKh3hQB50rwXdyLe5ax9Hba+jzzAkAu6ReIAYrUBCzML+MT9/Lji1n
ij/Q3sdQ1FT5K6+rk7LOduIzHBgx9QaUlP/yr3VX/yI0j4Yrk6l0LKgQgMd59Ppt
D84Ow//OZT0BUM7iHduLjaqi+B5qnt/LrcWtwGInMm0E+njYVcW7U+odMFIYVW2x
1FtZQN/q5x/VLA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:17 2025 by rpki-client