Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier: dn+FAWlQ1DnrIdCwpeoe1qLAUJHeJlKkq0zf4zpgInE=
Subject key identifier: 30:5D:A4:A9:60:95:6D:7A:04:89:D4:48:9F:22:67:CD:E4:FE:A8:47
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial: 0198D583CCAFADE1D39D4CC25AD69D15CF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number: 018D
Signing time: Sat 23 Aug 2025 06:00:41 +0000
Manifest this update: Sat 23 Aug 2025 06:00:41 +0000
Manifest next update: Sun 24 Aug 2025 06:00:41 +0000
Files and hashes: 1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=)
2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: GbSCKR+BOwfO3j52ibMyHTcp+0ALoNTDsc/1+9MdArc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:cc:af:ad:e1:d3:9d:4c:c2:5a:d6:9d:15:cf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Validity
Not Before: Aug 23 06:00:41 2025 GMT
Not After : Aug 24 06:00:41 2025 GMT
Subject: CN=305da4a960956d7a0489d4489f2267cde4fea847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:f5:28:f3:7b:cd:39:6a:d4:38:a5:eb:78:
b6:b3:5e:46:f0:76:4f:58:86:d5:e0:7a:64:88:f0:
29:e6:44:ae:19:e2:6b:71:2a:db:e8:66:42:d0:9b:
60:4f:63:27:35:d9:31:27:0a:b6:3c:61:28:48:ad:
30:8a:d7:13:97:e6:aa:2c:65:07:fb:99:44:84:6a:
00:ca:e8:99:34:c4:c4:a3:63:d5:91:47:e3:d9:06:
39:43:4f:a2:3f:a0:65:d8:f2:61:05:ae:f9:54:51:
da:57:01:34:82:55:00:cc:6b:ca:f8:45:16:b9:11:
0e:1f:77:e3:4d:51:84:d4:41:f0:10:be:3f:4b:59:
22:25:0b:84:08:57:f3:3a:9e:b5:e3:10:e7:9e:3d:
7b:eb:e2:8a:89:da:f5:f4:76:a9:7a:60:7d:13:66:
46:a3:64:05:f8:c6:a1:58:72:d0:4b:9d:6d:78:01:
54:df:6b:f5:d3:63:bb:60:ff:6a:c1:86:1b:6b:e4:
29:73:23:a4:e2:f3:95:66:c6:09:c7:e1:ee:df:6a:
ba:58:fb:24:24:ea:9c:77:7e:a4:85:b6:e7:e1:f5:
c3:26:65:b6:4f:68:91:05:95:7b:64:c9:77:08:f8:
a9:0d:9a:14:a0:5d:66:24:1c:60:a9:ea:0f:54:49:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5D:A4:A9:60:95:6D:7A:04:89:D4:48:9F:22:67:CD:E4:FE:A8:47
X509v3 Authority Key Identifier:
keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2c:1d:b4:e0:e6:b1:c4:37:5c:b0:9e:03:87:56:91:a1:6e:
72:b6:e9:4f:92:12:a5:84:ae:83:f2:2a:22:8f:20:8b:d7:6e:
71:91:92:f7:50:70:af:14:d7:10:66:f9:1f:cc:d6:9c:e0:c7:
01:6d:74:72:cb:9c:2a:8e:ae:b0:3b:a2:1c:04:ec:d8:37:60:
56:ca:2e:ca:7e:d6:f4:e8:68:35:cd:3d:1b:5b:86:fd:91:cf:
6d:a9:be:d3:94:49:9b:7f:37:25:45:0d:df:10:ff:a1:e3:39:
be:cc:6a:9c:4a:24:5b:e1:36:b8:73:b0:26:3b:78:67:c4:84:
2e:e0:81:e1:74:ca:a1:2f:28:2d:81:d4:c1:ec:13:e5:42:7c:
10:72:93:16:9b:8c:65:ec:a0:d2:80:11:44:25:4e:2c:d0:02:
61:97:91:70:ca:79:85:49:4b:aa:74:02:c6:8f:da:30:b3:ce:
c7:84:2e:c3:3b:49:5b:68:1b:41:d8:26:a3:ae:9f:f5:c5:be:
50:36:38:6e:98:11:bc:14:78:9d:22:d3:39:73:49:e7:b5:ac:
57:e5:9f:7c:41:7f:2b:4d:77:9c:84:e2:89:6b:ab:c6:fe:f4:
f9:12:2c:dd:a3:d5:75:64:90:f8:80:ae:81:0d:d7:1f:a8:61:
33:0a:bd:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8yvreHTnUzCWtadFc9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZTFiYmY2MGFlMGViN2Q0MDA3NjI3MTg1YzVmMTQ3MjNm
ZmYzYWUwHhcNMjUwODIzMDYwMDQxWhcNMjUwODI0MDYwMDQxWjAzMTEwLwYDVQQD
EygzMDVkYTRhOTYwOTU2ZDdhMDQ4OWQ0NDg5ZjIyNjdjZGU0ZmVhODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxon1KPN7zTlq1Dil63i2s15G8HZP
WIbV4HpkiPAp5kSuGeJrcSrb6GZC0JtgT2MnNdkxJwq2PGEoSK0witcTl+aqLGUH
+5lEhGoAyuiZNMTEo2PVkUfj2QY5Q0+iP6Bl2PJhBa75VFHaVwE0glUAzGvK+EUW
uREOH3fjTVGE1EHwEL4/S1kiJQuECFfzOp614xDnnj176+KKidr19HapemB9E2ZG
o2QF+MahWHLQS51teAFU32v102O7YP9qwYYba+QpcyOk4vOVZsYJx+Hu32q6WPsk
JOqcd36khbbn4fXDJmW2T2iRBZV7ZMl3CPipDZoUoF1mJBxgqeoPVEkzqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBdpKlglW16BInUSJ8iZ83k/qhHMB8GA1UdIwQY
MBaAFMnhu/YK4Ot9QAdicYXF8Ucj//OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDIt
ZTEyOTZiMzJhMTFmLzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDItZTEyOTZiMzJhMTFm
LzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSwdtODm
scQ3XLCeA4dWkaFucrbpT5ISpYSug/IqIo8gi9ducZGS91BwrxTXEGb5H8zWnODH
AW10csucKo6usDuiHATs2DdgVsouyn7W9OhoNc09G1uG/ZHPbam+05RJm383JUUN
3xD/oeM5vsxqnEokW+E2uHOwJjt4Z8SELuCB4XTKoS8oLYHUwewT5UJ8EHKTFpuM
Zeyg0oARRCVOLNACYZeRcMp5hUlLqnQCxo/aMLPOx4QuwztJW2gbQdgmo66f9cW+
UDY4bpgRvBR4nSLTOXNJ57WsV+WffEF/K013nITiiWurxv70+RIs3aPVdWSQ+ICu
gQ3XH6hhMwq9Kg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:39 2025 by rpki-client