Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: mcFDgfBvZOoi618UY+5XxIjiDT2cXDUacBK03Loc/vE=
Subject key identifier: 1C:52:CF:50:28:B3:81:3D:C0:D1:A3:8D:13:FF:CD:86:5C:AE:25:2C
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 0198D472E734B3191A5AC3AB135EFC264E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 0FCC
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: wDvIF8IUEQhjnYm69O7DnmCZNJY.roa (hash: AHCZUkCpuvskw07HtMA8aALHO5a1ETyk504pdPIdAIc=)
2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: UvDUex0+acLv5qbfM3l7ZkfPXilNL+dCKId9wIdPgdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e7:34:b3:19:1a:5a:c3:ab:13:5e:fc:26:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=1c52cf5028b3813dc0d1a38d13ffcd865cae252c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:3d:8c:9c:81:5b:29:a1:27:28:82:8e:4a:
db:a4:79:e7:45:80:d4:7a:c8:ec:85:e7:3e:e4:f3:
d8:af:6f:ad:ce:e9:42:08:26:19:2c:ac:0f:76:65:
cb:66:94:3a:03:00:7b:f6:b7:be:a6:5a:ac:c7:65:
f2:9a:7f:e2:91:38:0f:da:d5:af:cc:94:5c:11:f4:
1b:27:e6:55:f8:1d:91:eb:11:df:f5:59:03:23:1e:
f9:eb:cd:ad:cf:50:50:9f:0d:4c:3e:c8:7d:4e:d2:
72:ad:a9:36:5c:82:a7:a4:2a:71:d9:c5:13:56:9c:
e4:90:87:b1:3e:bd:22:2c:4f:37:9f:fe:32:1a:87:
46:2e:16:f6:51:eb:a0:22:62:97:29:a7:9e:bb:cf:
ae:38:3c:99:77:10:68:ef:32:4c:55:a7:fc:53:af:
9b:55:5f:07:a5:44:2b:3f:d8:30:b4:2f:01:00:f6:
43:06:c1:49:26:6c:b6:36:a9:b9:80:fc:c0:c1:0b:
45:0a:9a:20:98:ae:26:4c:77:dc:c1:67:4a:2f:b6:
1a:18:2f:18:1f:25:e9:d1:f2:9f:86:f4:5d:4f:c7:
85:b4:cd:cd:e5:d9:be:ff:f7:8f:80:a9:5a:f4:cd:
71:70:6c:99:ae:5b:b1:dd:a7:bc:38:62:20:b3:9e:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:52:CF:50:28:B3:81:3D:C0:D1:A3:8D:13:FF:CD:86:5C:AE:25:2C
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0c:38:87:e3:dc:75:31:e0:f4:3e:71:c9:ea:9b:fb:a2:00:
7b:77:27:b3:58:87:d1:79:7f:1f:fc:63:bb:40:a7:ba:01:87:
db:c5:d0:9e:5b:d7:52:94:17:16:ef:80:55:37:40:a0:d6:3b:
79:94:ff:f1:a9:52:ac:ff:f7:7f:68:9d:46:36:df:e4:fe:ab:
88:e8:05:9a:4a:c1:21:8f:01:4f:d7:27:49:b4:4f:56:aa:1c:
c4:55:e6:0e:14:97:ae:6d:34:e2:9c:ca:6b:43:10:c1:b6:b6:
8e:78:ab:72:b4:6a:cf:cc:a9:a0:01:db:52:8f:3b:5c:68:1e:
07:48:d6:7c:b9:a9:49:ce:a8:ee:d1:c1:df:41:87:51:b2:b9:
2c:05:6e:40:cb:16:b5:b9:44:63:a4:09:a9:d5:8a:d9:f3:75:
35:0a:c4:a0:9c:a6:8d:7f:8f:4b:86:31:a9:93:40:70:4f:bb:
e6:d7:8d:74:82:86:47:cc:10:0b:e9:7c:cd:2a:12:c5:6e:0c:
f0:57:55:cd:a3:c0:c8:95:12:23:82:4d:fa:b9:c9:59:0f:ca:
78:c0:bb:4c:39:d9:db:2f:88:65:93:37:7b:a9:ed:99:42:d3:
5f:55:b1:97:c8:a4:24:ba:a0:88:55:63:fd:fc:41:4d:01:1b:
8a:e0:f0:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcuc0sxkaWsOrE178Jk6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDc0NWViZmNlYzM4MmRmMjUyYzJmNzUwZGI2NDhmNGYw
MzRhYmYwHhcNMjUwODIzMDEwMjM2WhcNMjUwODI0MDEwMjM2WjAzMTEwLwYDVQQD
EygxYzUyY2Y1MDI4YjM4MTNkYzBkMWEzOGQxM2ZmY2Q4NjVjYWUyNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj49jJyBWymhJyiCjkrbpHnnRYDU
esjshec+5PPYr2+tzulCCCYZLKwPdmXLZpQ6AwB79re+plqsx2Xymn/ikTgP2tWv
zJRcEfQbJ+ZV+B2R6xHf9VkDIx75682tz1BQnw1MPsh9TtJyrak2XIKnpCpx2cUT
VpzkkIexPr0iLE83n/4yGodGLhb2UeugImKXKaeeu8+uODyZdxBo7zJMVaf8U6+b
VV8HpUQrP9gwtC8BAPZDBsFJJmy2Nqm5gPzAwQtFCpogmK4mTHfcwWdKL7YaGC8Y
HyXp0fKfhvRdT8eFtM3N5dm+//ePgKla9M1xcGyZrlux3ae8OGIgs54hxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxSz1Aos4E9wNGjjRP/zYZcriUsMB8GA1UdIwQY
MBaAFMvXRev87Dgt8lLC91DbZI9PA0q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUt
OTJiNjc5NmM3N2NjLzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUtOTJiNjc5NmM3N2Nj
LzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAw4h+Pc
dTHg9D5xyeqb+6IAe3cns1iH0Xl/H/xju0CnugGH28XQnlvXUpQXFu+AVTdAoNY7
eZT/8alSrP/3f2idRjbf5P6riOgFmkrBIY8BT9cnSbRPVqocxFXmDhSXrm004pzK
a0MQwba2jnircrRqz8ypoAHbUo87XGgeB0jWfLmpSc6o7tHB30GHUbK5LAVuQMsW
tblEY6QJqdWK2fN1NQrEoJymjX+PS4YxqZNAcE+75teNdIKGR8wQC+l8zSoSxW4M
8FdVzaPAyJUSI4JN+rnJWQ/KeMC7TDnZ2y+IZZM3e6ntmULTX1Wxl8ikJLqgiFVj
/fxBTQEbiuDwWw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:43 2025 by rpki-client