Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: TozUaRl9aHDIrRlOUjW18Y1LmNzGBgjKTPucYvfk/cg=
Subject key identifier: A4:41:35:52:2C:FD:D6:00:73:A6:07:F2:DE:8F:B9:35:0F:78:8B:BF
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 0198D4A8206B0C8538177A3AA91B017B0D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: mQXDbenthuYDUrLxWK/3WKJJsLaCgA51x6D+/JvGGEg=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:20:6b:0c:85:38:17:7a:3a:a9:1b:01:7b:0d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=a44135522cfdd60073a607f2de8fb9350f788bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:79:10:e5:a0:d8:bc:e0:3a:32:c2:1f:63:
22:19:a4:a1:22:d6:a5:e9:ce:c3:0c:70:dd:f3:3a:
e8:22:a3:46:09:59:80:c5:c8:0f:91:04:6f:ad:06:
28:b0:d1:34:f8:22:22:e6:79:6b:7c:3f:7e:32:67:
c7:85:62:f0:67:f9:b9:3b:92:77:d6:ae:b0:5f:2b:
77:ca:d0:42:b7:91:21:7c:3a:db:ea:60:8a:75:60:
cd:e7:fa:3c:dc:cb:88:4a:a5:86:50:93:36:42:2a:
70:42:c9:86:94:1c:9f:90:74:d7:e6:49:ee:32:08:
19:03:79:b7:8b:30:a9:1e:1e:18:8e:a5:e8:62:f7:
78:05:d1:fc:2e:8a:25:ba:f9:e7:53:7f:eb:b4:71:
70:86:fd:a5:a9:95:86:28:6e:ea:b8:44:99:9b:5f:
19:38:4e:60:e8:97:63:27:0d:4f:c1:55:7f:19:f8:
96:35:fb:23:97:7b:07:18:43:a2:f8:fb:3e:3b:13:
72:e2:23:14:7a:96:ae:d2:e8:a5:35:71:d4:2a:08:
53:7e:9a:50:bc:8e:96:b8:f1:36:24:80:dd:20:e4:
f5:b5:40:48:6d:63:87:f9:98:57:be:57:4e:63:37:
0d:20:fe:ad:05:23:51:40:e5:b2:b2:e5:fd:c5:b8:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:41:35:52:2C:FD:D6:00:73:A6:07:F2:DE:8F:B9:35:0F:78:8B:BF
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:79:ae:e8:38:fe:47:8c:54:d5:d0:27:1e:64:48:e9:0d:a9:
37:14:71:a7:7b:41:a7:bb:e6:21:42:5b:5f:d7:ce:40:3a:f0:
63:a6:4d:99:6d:81:ef:b1:e8:8c:da:21:19:43:2a:fd:53:99:
59:a4:37:6e:08:d9:77:8c:d9:7d:86:d9:d3:dc:5d:71:dc:68:
93:a4:19:ca:01:ec:cf:0b:75:9e:4c:dd:7c:65:35:ce:30:7f:
8e:a3:7f:f5:b5:d3:15:74:df:02:c6:3c:9e:37:85:54:07:d1:
60:bd:16:79:6c:bf:60:b8:9d:93:c1:0c:99:a3:f9:bd:a7:95:
9d:e1:ef:38:44:84:30:73:9d:40:0f:52:98:f4:33:6e:55:5d:
61:20:1e:cf:75:39:7d:fe:12:a9:d9:a8:f6:d8:6e:d2:b3:95:
f7:89:52:6a:4f:40:aa:71:b6:9d:e3:41:ac:fd:10:96:e8:96:
db:17:0e:ed:ae:0c:e2:c9:51:7f:67:c3:1f:e6:0e:d5:13:eb:
6d:b8:47:50:89:42:56:41:1a:af:ef:0c:ae:68:2d:4a:2c:d9:
53:d4:60:74:7e:5d:a3:0c:a1:15:17:f9:8f:e3:15:6d:3b:fb:
c1:24:1a:52:67:e4:d6:0d:47:ab:8a:d1:2d:7e:78:c9:74:48:
fb:20:aa:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqCBrDIU4F3o6qRsBew0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODgzYTc5Nzg5ZDlmNjU4MTUyOTJmMThkNDk4MGJhOWM1
ZWQyMjEwHhcNMjUwODIzMDIwMDQ0WhcNMjUwODI0MDIwMDQ0WjAzMTEwLwYDVQQD
EyhhNDQxMzU1MjJjZmRkNjAwNzNhNjA3ZjJkZThmYjkzNTBmNzg4YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM95EOWg2LzgOjLCH2MiGaShItal
6c7DDHDd8zroIqNGCVmAxcgPkQRvrQYosNE0+CIi5nlrfD9+MmfHhWLwZ/m5O5J3
1q6wXyt3ytBCt5EhfDrb6mCKdWDN5/o83MuISqWGUJM2QipwQsmGlByfkHTX5knu
MggZA3m3izCpHh4YjqXoYvd4BdH8LooluvnnU3/rtHFwhv2lqZWGKG7quESZm18Z
OE5g6JdjJw1PwVV/GfiWNfsjl3sHGEOi+Ps+OxNy4iMUepau0uilNXHUKghTfppQ
vI6WuPE2JIDdIOT1tUBIbWOH+ZhXvldOYzcNIP6tBSNRQOWysuX9xbi8HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRBNVIs/dYAc6YH8t6PuTUPeIu/MB8GA1UdIwQY
MBaAFGOIOnl4nZ9lgVKS8Y1JgLqcXtIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYt
MzVkMDU5NWUxMmYwLzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYtMzVkMDU5NWUxMmYw
LzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXmu6Dj+
R4xU1dAnHmRI6Q2pNxRxp3tBp7vmIUJbX9fOQDrwY6ZNmW2B77HojNohGUMq/VOZ
WaQ3bgjZd4zZfYbZ09xdcdxok6QZygHszwt1nkzdfGU1zjB/jqN/9bXTFXTfAsY8
njeFVAfRYL0WeWy/YLidk8EMmaP5vaeVneHvOESEMHOdQA9SmPQzblVdYSAez3U5
ff4Sqdmo9thu0rOV94lSak9AqnG2neNBrP0QluiW2xcO7a4M4slRf2fDH+YO1RPr
bbhHUIlCVkEar+8MrmgtSizZU9RgdH5dowyhFRf5j+MVbTv7wSQaUmfk1g1Hq4rR
LX54yXRI+yCqVg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:57 2025 by rpki-client