Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: eB4nt8s9rZKLin4ugrj4xYreTE4VfL+ZWcIVKTtRnvY=
Subject key identifier: 4B:5C:E6:9C:7C:23:7C:A5:E0:A4:F4:71:B7:1D:B2:F3:59:69:51:BE
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 0198D7060B1BDE4B77FAD19A893FA82814C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0D3E
Signing time: Sat 23 Aug 2025 13:02:34 +0000
Manifest this update: Sat 23 Aug 2025 13:02:34 +0000
Manifest next update: Sun 24 Aug 2025 13:02:34 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: 3NPRFpVBEk7pAljgzPf9pg1w3pf/zXtiB+lOXoVtYKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:0b:1b:de:4b:77:fa:d1:9a:89:3f:a8:28:14:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Aug 23 13:02:34 2025 GMT
Not After : Aug 24 13:02:34 2025 GMT
Subject: CN=4b5ce69c7c237ca5e0a4f471b71db2f3596951be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:7c:e0:e2:ef:b2:18:6c:ca:a7:33:c2:09:
f1:b7:ec:11:b2:2e:45:70:33:3d:b5:75:fe:3a:2a:
34:28:63:00:93:11:ed:d8:91:83:cc:f2:bd:74:34:
0e:da:b4:c9:72:01:77:0c:67:c2:15:e2:8a:7d:bb:
90:3c:72:bb:30:0a:60:f3:9c:01:93:74:f4:36:44:
da:a4:18:95:60:8b:23:b3:46:7b:25:be:c2:6d:14:
8f:87:b7:de:c0:ba:7a:cd:f1:27:94:cf:99:ec:d0:
81:ce:6f:31:80:2e:97:a0:25:e5:2a:68:bf:74:cc:
55:ae:3b:da:ce:af:e8:6f:c3:c6:05:6c:5c:da:c1:
56:5c:df:d7:24:c6:71:76:fa:35:38:93:f5:c1:5a:
ce:8b:ba:d9:d8:d4:18:31:36:03:22:17:7a:e1:83:
46:75:73:9b:e4:08:2e:3c:e1:62:d6:e6:86:37:f8:
e0:b3:ad:af:0b:0e:fd:6c:7a:eb:84:99:59:58:6a:
9d:c6:7e:86:97:62:4e:79:e1:fd:73:ec:0c:09:54:
69:34:d6:e0:28:66:a1:77:94:62:44:a7:94:10:a2:
21:4c:7a:b4:4c:fa:22:72:f5:a3:96:9f:ed:9d:2b:
9e:d2:e2:ee:be:54:26:a0:bd:e1:a4:f7:1f:7d:23:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:E6:9C:7C:23:7C:A5:E0:A4:F4:71:B7:1D:B2:F3:59:69:51:BE
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:57:52:df:5f:1e:50:37:07:9e:dd:1a:f1:03:a5:ac:7e:8f:
f0:db:0a:a6:3f:cc:88:5d:f9:10:f3:ba:bf:15:9e:13:73:9a:
53:cf:1b:9b:06:42:24:d6:75:63:0b:3f:ef:f5:e8:01:89:02:
2e:9a:67:20:8c:b0:00:20:a2:8f:88:d6:94:a5:97:90:bd:32:
3e:dc:89:50:4f:71:05:ac:e9:3e:41:1f:0e:4e:d0:c7:fa:fd:
73:20:ed:6e:d2:1a:98:68:dc:2b:bd:9d:2a:ac:b9:c2:2d:03:
d5:01:b4:34:6c:f4:66:1b:7a:ce:cb:ed:28:7d:e7:78:11:e2:
31:a8:af:27:56:e8:16:9f:c0:39:a9:b6:ae:ce:f0:0d:62:2f:
1a:00:40:a2:ef:ac:c2:fc:77:51:1b:8d:cc:14:34:48:85:47:
e6:8a:9e:ae:f1:8f:dc:e2:4b:c5:1e:13:15:29:ff:7a:04:e3:
82:87:42:6e:8e:47:6e:93:64:2f:16:c8:ca:c9:c5:70:32:26:
7f:47:c8:1f:3f:55:aa:98:42:14:27:cc:3a:83:b6:e9:e0:81:
1f:ff:9a:af:ed:55:44:39:b4:d0:f2:97:cc:65:9e:b5:49:ed:
c5:ea:1c:48:f7:ff:dd:bd:b2:79:aa:86:1f:3c:7b:34:ec:59:
35:08:7e:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBgsb3kt3+tGaiT+oKBTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MGE3ZThlYzQ3Y2FkZDg2NTM3MmRlNTAzZjg3OTBlZjYy
YzcxNDEwHhcNMjUwODIzMTMwMjM0WhcNMjUwODI0MTMwMjM0WjAzMTEwLwYDVQQD
Eyg0YjVjZTY5YzdjMjM3Y2E1ZTBhNGY0NzFiNzFkYjJmMzU5Njk1MWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmat84OLvshhsyqczwgnxt+wRsi5F
cDM9tXX+Oio0KGMAkxHt2JGDzPK9dDQO2rTJcgF3DGfCFeKKfbuQPHK7MApg85wB
k3T0NkTapBiVYIsjs0Z7Jb7CbRSPh7fewLp6zfEnlM+Z7NCBzm8xgC6XoCXlKmi/
dMxVrjvazq/ob8PGBWxc2sFWXN/XJMZxdvo1OJP1wVrOi7rZ2NQYMTYDIhd64YNG
dXOb5AguPOFi1uaGN/jgs62vCw79bHrrhJlZWGqdxn6Gl2JOeeH9c+wMCVRpNNbg
KGahd5RiRKeUEKIhTHq0TPoicvWjlp/tnSue0uLuvlQmoL3hpPcffSN8CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtc5px8I3yl4KT0cbcdsvNZaVG+MB8GA1UdIwQY
MBaAFMgKfo7EfK3YZTct5QP4eQ72LHFBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jYjViZWYtN2U4YS00MzkyLWE5YzYt
ZTEyZmFiMTg1NTQwLzEveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9jYjViZWYtN2U4YS00MzkyLWE5YzYtZTEyZmFiMTg1NTQw
LzEveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVdS318e
UDcHnt0a8QOlrH6P8NsKpj/MiF35EPO6vxWeE3OaU88bmwZCJNZ1Yws/7/XoAYkC
LppnIIywACCij4jWlKWXkL0yPtyJUE9xBazpPkEfDk7Qx/r9cyDtbtIamGjcK72d
Kqy5wi0D1QG0NGz0Zht6zsvtKH3neBHiMaivJ1boFp/AOam2rs7wDWIvGgBAou+s
wvx3URuNzBQ0SIVH5oqervGP3OJLxR4TFSn/egTjgodCbo5HbpNkLxbIysnFcDIm
f0fIHz9VqphCFCfMOoO26eCBH/+ar+1VRDm00PKXzGWetUntxeocSPf/3b2yeaqG
Hzx7NOxZNQh+8w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:51:01 2025 by rpki-client