Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: tgYcbf99TunA0S6etLExVTM1d/jVIwzzw4/Ww1phMMc=
Subject key identifier: 20:D4:C2:96:86:07:7C:50:12:73:27:87:22:4A:06:E1:4D:BE:74:E3
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 0198D5157EFD7DBE1A5DA723F8952D519534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: Z406JsldDq5gjN_1Lio77tcegQc.roa (hash: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: akTfuM74UYsNGeHZv3EkHksEOWWGOwxIfhtYrPKKEy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7e:fd:7d:be:1a:5d:a7:23:f8:95:2d:51:95:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=20d4c29686077c5012732787224a06e14dbe74e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:53:e5:1f:d0:3c:a0:6a:60:8a:cb:d6:52:
02:1c:69:fa:e5:cf:3e:a3:94:54:3a:1f:6e:14:e4:
d3:1d:74:36:20:41:bd:66:76:c8:28:dc:e2:c5:61:
0e:e6:64:05:ff:8b:09:54:55:48:52:d4:74:52:b3:
26:be:69:58:39:e8:7e:2a:55:0c:c8:e4:61:6e:ca:
ad:f0:43:b9:0e:49:86:c2:f3:44:01:fc:53:f7:1b:
ff:c8:62:33:08:f3:e3:f9:89:99:88:58:b6:bd:47:
18:fc:91:32:8f:c9:46:75:91:ab:6d:47:cb:ee:36:
65:16:d4:73:95:27:61:3b:5e:2b:69:b8:1c:35:ab:
d1:59:b6:d2:1b:12:75:b5:06:35:d0:07:3c:f7:b3:
87:0e:50:83:56:1a:4b:e2:04:52:f5:08:f4:24:bc:
9f:3e:ab:c6:ff:f0:2b:02:fa:65:7f:41:d5:15:9e:
48:0d:f0:2d:63:69:50:47:6d:9e:13:fb:9c:0a:4f:
a1:ae:05:1d:34:0e:f9:a9:75:fc:52:bb:b9:0e:a2:
39:91:04:36:fa:b5:c4:9c:7c:4e:ea:b0:15:c5:f5:
a1:52:08:f8:a0:82:18:e4:19:5d:cf:e5:de:fb:54:
2d:3a:2c:f9:bf:5d:a1:18:6d:3b:58:40:3c:b5:95:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:C2:96:86:07:7C:50:12:73:27:87:22:4A:06:E1:4D:BE:74:E3
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ed:ba:b1:5a:5e:f5:2b:b4:e6:b3:eb:ff:03:7d:ae:93:53:
27:db:47:1c:48:b1:53:de:3e:a8:ef:a2:52:da:b3:ce:1c:84:
23:8c:4b:2a:af:e8:64:c6:d5:88:ea:b5:24:e6:17:01:d0:62:
7b:e1:13:8f:fc:bb:72:91:f0:ea:bd:11:b3:9d:56:ad:e1:bb:
61:1a:2f:c8:42:99:2f:44:09:9c:64:56:1a:aa:90:62:d3:99:
51:c6:7d:17:b5:f6:4e:dc:f6:8d:9c:dc:5c:4f:2a:a4:37:31:
78:9d:d2:6d:42:10:57:8e:2a:b2:cf:13:53:79:aa:45:44:5d:
6f:d5:5b:c7:54:52:b8:63:ec:a4:cc:42:28:04:2f:d4:3e:97:
6e:3d:df:72:8e:a4:6a:9f:18:96:50:40:3c:c4:88:3f:cf:1c:
8d:75:4f:65:d0:29:21:89:d4:a4:91:23:71:5d:6b:a5:b6:bd:
c8:38:b3:ca:66:51:16:63:85:d8:25:7c:c1:de:56:8c:68:01:
58:a4:f4:3c:e4:01:f7:7c:c1:cc:bd:c8:81:2c:77:ad:91:ee:
2d:a5:e8:db:8d:e5:3e:d0:0c:26:0b:90:89:1b:3f:3d:48:f7:
cd:e2:53:a1:bc:4f:33:7f:a1:d3:d5:16:26:31:ba:19:11:53:
8f:64:f2:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFX79fb4aXacj+JUtUZU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDBmYzgyNTkwNzVjZDY3NWYzMTlkN2FmNGZhNzEzMDQ4
YTUxNWMwHhcNMjUwODIzMDQwMDEyWhcNMjUwODI0MDQwMDEyWjAzMTEwLwYDVQQD
EygyMGQ0YzI5Njg2MDc3YzUwMTI3MzI3ODcyMjRhMDZlMTRkYmU3NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xNT5R/QPKBqYIrL1lICHGn65c8+
o5RUOh9uFOTTHXQ2IEG9ZnbIKNzixWEO5mQF/4sJVFVIUtR0UrMmvmlYOeh+KlUM
yORhbsqt8EO5DkmGwvNEAfxT9xv/yGIzCPPj+YmZiFi2vUcY/JEyj8lGdZGrbUfL
7jZlFtRzlSdhO14rabgcNavRWbbSGxJ1tQY10Ac897OHDlCDVhpL4gRS9Qj0JLyf
PqvG//ArAvplf0HVFZ5IDfAtY2lQR22eE/ucCk+hrgUdNA75qXX8Uru5DqI5kQQ2
+rXEnHxO6rAVxfWhUgj4oIIY5Bldz+Xe+1QtOiz5v12hGG07WEA8tZWNTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDUwpaGB3xQEnMnhyJKBuFNvnTjMB8GA1UdIwQY
MBaAFMjQ/IJZB1zWdfMZ169PpxMEilFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80NWM4NjItOWUzMy00NWM4LWE3Mjgt
N2EyZmQxMDI2OWJlLzEveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80NWM4NjItOWUzMy00NWM4LWE3MjgtN2EyZmQxMDI2OWJl
LzEveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO26sVpe
9Su05rPr/wN9rpNTJ9tHHEixU94+qO+iUtqzzhyEI4xLKq/oZMbViOq1JOYXAdBi
e+ETj/y7cpHw6r0Rs51WreG7YRovyEKZL0QJnGRWGqqQYtOZUcZ9F7X2Ttz2jZzc
XE8qpDcxeJ3SbUIQV44qss8TU3mqRURdb9Vbx1RSuGPspMxCKAQv1D6Xbj3fco6k
ap8YllBAPMSIP88cjXVPZdApIYnUpJEjcV1rpba9yDizymZRFmOF2CV8wd5WjGgB
WKT0POQB93zBzL3IgSx3rZHuLaXo243lPtAMJguQiRs/PUj3zeJTobxPM3+h09UW
JjG6GRFTj2TybQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:39 2025 by rpki-client