Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: EgpiV98Qio9CASBKeFMWgc9FtHHna+acKwzG+0Ttt08=
Subject key identifier: 2D:5B:B6:1D:70:C8:D2:8B:34:8D:3E:52:D4:13:4A:FD:CA:59:05:D5
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 0198D583582C6E985AB267364DF0C10A04CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0C15
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa (hash: 73YKFKe5WyNrwSKLy76+GejDIV4ldqnve1bMw3FlzZM=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: Mq2uDy3NIT53PgTmJ0kqLgryz96AsPqUXi5sVsTxe5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:58:2c:6e:98:5a:b2:67:36:4d:f0:c1:0a:04:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=2d5bb61d70c8d28b348d3e52d4134afdca5905d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:e5:69:8f:4d:ff:cd:4b:b4:5c:7f:23:7e:
fb:76:37:01:c8:9a:e6:bd:25:a6:71:18:ec:e5:95:
eb:01:30:f5:70:22:0f:5a:1c:6f:4c:55:24:c3:84:
63:98:75:b2:0e:43:87:0d:37:fd:52:20:fc:b4:9a:
e0:b7:83:dd:71:93:dc:ca:f7:40:00:e1:fe:6c:ea:
91:50:35:43:c0:3f:a6:7b:e0:d0:88:9f:7c:dd:90:
de:7d:dd:fb:62:5e:1d:dd:24:07:4a:c8:43:2b:15:
d7:a5:f2:62:53:6b:24:e5:53:0f:bc:69:89:e7:29:
a7:42:1b:c3:7e:3f:ad:54:ff:dc:86:43:6d:af:88:
13:a0:cb:b8:1e:9f:57:9a:84:64:99:4d:4e:75:fc:
ee:05:99:dc:5e:3b:85:08:86:08:f7:8a:ff:7b:ba:
47:ca:25:c7:14:5d:4b:54:c4:cf:84:22:ff:5a:02:
cf:a2:4a:fa:0c:19:80:77:3d:93:fb:5b:af:9d:e6:
0b:67:8a:e6:e6:7e:03:f8:17:2c:77:a2:95:72:52:
96:9e:84:1a:57:4c:c2:0b:3b:54:2e:40:4f:50:0c:
41:c1:67:a1:d2:2f:1c:ee:26:6a:ac:c8:70:ab:84:
e4:5c:f9:26:80:79:a8:31:0b:61:65:56:e7:cb:99:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:B6:1D:70:C8:D2:8B:34:8D:3E:52:D4:13:4A:FD:CA:59:05:D5
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:81:0b:4f:39:92:b6:e5:e3:ec:8b:90:ba:1e:09:82:da:49:
7b:da:ae:b2:03:1a:48:e0:ca:af:3b:62:cb:21:b7:14:1a:11:
2c:92:4b:25:68:e0:a8:69:2d:f1:bd:a0:03:0a:0a:91:51:c6:
4b:4d:9c:99:e8:16:87:f2:3d:a9:02:c4:92:80:13:d9:55:c5:
c5:d6:9a:78:af:91:19:9e:3b:e8:4d:74:16:27:69:10:c6:4a:
32:1e:d9:bf:6d:91:71:83:7f:4e:86:8a:7e:c4:85:73:b8:03:
e4:28:8a:af:8f:08:26:75:33:a3:fb:44:16:e0:7c:c6:37:20:
2b:ba:ea:1d:01:a6:8b:7c:cd:a9:04:a2:cf:32:7a:91:82:b8:
e2:27:f9:b6:3f:c1:c5:2e:53:d6:d2:c2:40:e2:55:a2:6b:23:
fc:7d:fc:a7:3a:9b:64:c8:da:77:31:99:4c:e6:8d:6a:e4:6c:
53:85:80:72:f1:c2:fc:cb:b0:3c:67:fa:89:d0:42:2b:bb:fe:
90:ee:6a:d3:92:fd:5b:dd:23:57:f1:7e:0b:51:bb:5d:1c:ef:
96:b8:2c:6d:cb:ea:a7:42:a5:15:24:95:09:e7:30:fd:e5:8e:
ef:09:55:d0:78:ce:ad:43:be:a9:cb:59:3a:92:c6:9d:cf:03:
17:92:10:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1gsbphasmc2TfDBCgTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzRjNzQzZDVjMmFmY2YyN2YxMDRlYjZlMDMxNjExNmM4
NWM3ZGUwHhcNMjUwODIzMDYwMDExWhcNMjUwODI0MDYwMDExWjAzMTEwLwYDVQQD
EygyZDViYjYxZDcwYzhkMjhiMzQ4ZDNlNTJkNDEzNGFmZGNhNTkwNWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwTlaY9N/81LtFx/I377djcByJrm
vSWmcRjs5ZXrATD1cCIPWhxvTFUkw4RjmHWyDkOHDTf9UiD8tJrgt4PdcZPcyvdA
AOH+bOqRUDVDwD+me+DQiJ983ZDefd37Yl4d3SQHSshDKxXXpfJiU2sk5VMPvGmJ
5ymnQhvDfj+tVP/chkNtr4gToMu4Hp9XmoRkmU1OdfzuBZncXjuFCIYI94r/e7pH
yiXHFF1LVMTPhCL/WgLPokr6DBmAdz2T+1uvneYLZ4rm5n4D+Bcsd6KVclKWnoQa
V0zCCztULkBPUAxBwWeh0i8c7iZqrMhwq4TkXPkmgHmoMQthZVbny5llmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1bth1wyNKLNI0+UtQTSv3KWQXVMB8GA1UdIwQY
MBaAFGLEx0PVwq/PJ/EE624DFhFshcfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUt
ZGUzNTJhOTJmNmJhLzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUtZGUzNTJhOTJmNmJh
LzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4ELTzmS
tuXj7IuQuh4JgtpJe9qusgMaSODKrztiyyG3FBoRLJJLJWjgqGkt8b2gAwoKkVHG
S02cmegWh/I9qQLEkoAT2VXFxdaaeK+RGZ476E10FidpEMZKMh7Zv22RcYN/ToaK
fsSFc7gD5CiKr48IJnUzo/tEFuB8xjcgK7rqHQGmi3zNqQSizzJ6kYK44if5tj/B
xS5T1tLCQOJVomsj/H38pzqbZMjadzGZTOaNauRsU4WAcvHC/MuwPGf6idBCK7v+
kO5q05L9W90jV/F+C1G7XRzvlrgsbcvqp0KlFSSVCecw/eWO7wlV0HjOrUO+qctZ
OpLGnc8DF5IQYg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:01 2025 by rpki-client