Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier: CpohjhIfW+m7RMZC17UVD5CM3BDmQS64OvQJENmtkn4=
Subject key identifier: 90:C8:57:EB:21:A1:29:8D:F1:51:6B:C3:12:50:69:DF:90:44:31:AA
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 0198D4DFD1A3E715CF5F1E48E231E5425780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number: 0DE3
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=)
2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=)
3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: A8zSY7e2gRyUrel7dJvZ36vqOPIF9jwoHwaEPArrd0I=)
4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d1:a3:e7:15:cf:5f:1e:48:e2:31:e5:42:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=90c857eb21a1298df1516bc3125069df904431aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:aa:b3:f4:c0:c9:6a:25:2f:fb:00:d9:38:
8f:62:a7:4f:dd:82:b5:ae:6c:e0:03:8f:c3:4c:90:
8d:2f:fc:8b:01:8e:4f:55:a9:9c:28:47:bb:3e:4a:
85:d6:b2:52:b0:4e:36:00:a2:e5:89:7e:84:bd:30:
26:a2:c9:bd:49:d3:bf:ac:6f:ec:b7:68:85:8d:5d:
b1:96:c7:55:17:6e:ea:69:3c:9c:f6:3c:50:e8:12:
17:fa:a4:f0:34:3b:63:e7:24:3d:40:95:58:5b:67:
22:83:dc:c4:a2:52:49:25:85:f1:8c:a3:c8:19:dc:
6a:31:c0:b7:d1:54:bc:fd:49:b9:31:4b:5b:52:81:
06:a6:35:28:8b:cd:0a:a3:e1:11:a1:59:88:fc:d5:
a5:a9:5f:f6:1a:83:29:bc:ac:f8:ce:81:8f:47:ac:
14:f5:1d:eb:97:66:0a:29:4b:0c:e9:16:40:50:b9:
dd:0e:ac:c9:74:9e:00:96:d9:eb:08:3b:46:c1:02:
ba:cf:88:71:e1:91:f2:41:15:c7:51:da:ba:cd:94:
64:75:db:71:bd:c2:8a:29:eb:35:68:ba:b1:38:14:
54:53:f8:3d:f8:60:ab:05:0e:0a:d3:ab:70:fa:d5:
28:f7:f8:e5:d6:5f:e2:d0:77:e6:ae:89:fd:b8:f6:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C8:57:EB:21:A1:29:8D:F1:51:6B:C3:12:50:69:DF:90:44:31:AA
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3f:81:c6:dd:d7:ae:80:bd:a0:ee:04:dd:7e:57:a8:67:8c:
5f:c2:99:cf:3a:30:a4:a9:e3:a8:06:a4:65:ad:39:f0:63:6d:
47:7f:b8:d4:16:2b:34:ba:10:e9:3d:cf:26:53:75:22:80:34:
3c:2b:b1:36:a0:c5:a9:80:76:70:79:86:fc:29:bf:ec:8d:21:
59:1b:a9:01:fe:97:a8:74:4f:53:6d:d3:e8:ff:ed:03:98:79:
d2:52:68:46:6e:7c:32:7f:ff:39:2b:ab:e1:5a:4e:db:eb:de:
ae:be:d7:28:09:84:51:6d:ec:30:0f:86:e3:6c:81:b3:7c:c1:
15:f0:de:8c:7e:a3:19:b0:44:dc:05:95:d2:a4:42:dc:d4:6b:
f5:6b:64:e4:d4:28:1d:53:9c:df:a0:04:18:2c:b0:ab:37:05:
7c:6c:b2:a4:52:f1:cc:42:a0:5a:84:f2:d5:54:2d:7e:05:71:
d5:53:16:21:25:59:82:13:49:fc:a9:37:1d:cc:37:1d:fb:f0:
9a:9d:e1:9b:fa:bb:d9:88:14:fa:be:b1:cf:3b:5c:fc:51:3b:
98:04:49:dc:97:6f:9b:8b:81:da:1a:37:a6:fa:fa:33:b7:e7:
c9:1b:f9:0a:57:b3:8d:27:6c:ae:1a:b8:7b:e7:e6:34:e4:fd:
c3:de:f1:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU39Gj5xXPXx5I4jHlQleAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGUxOWEyMjc1ODE2YTI4ZTVlODBjOGY5YTI4Y2M1YTFk
OWMwZDUwHhcNMjUwODIzMDMwMTM0WhcNMjUwODI0MDMwMTM0WjAzMTEwLwYDVQQD
Eyg5MGM4NTdlYjIxYTEyOThkZjE1MTZiYzMxMjUwNjlkZjkwNDQzMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgGqs/TAyWolL/sA2TiPYqdP3YK1
rmzgA4/DTJCNL/yLAY5PVamcKEe7PkqF1rJSsE42AKLliX6EvTAmosm9SdO/rG/s
t2iFjV2xlsdVF27qaTyc9jxQ6BIX+qTwNDtj5yQ9QJVYW2cig9zEolJJJYXxjKPI
GdxqMcC30VS8/Um5MUtbUoEGpjUoi80Ko+ERoVmI/NWlqV/2GoMpvKz4zoGPR6wU
9R3rl2YKKUsM6RZAULndDqzJdJ4AltnrCDtGwQK6z4hx4ZHyQRXHUdq6zZRkddtx
vcKKKes1aLqxOBRUU/g9+GCrBQ4K06tw+tUo9/jl1l/i0Hfmron9uPYIMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDIV+shoSmN8VFrwxJQad+QRDGqMB8GA1UdIwQY
MBaAFGFOGaInWBaijl6AyPmijMWh2cDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAt
ODcwNTQ0Y2FhZmFiLzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAtODcwNTQ0Y2FhZmFi
LzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwT+Bxt3X
roC9oO4E3X5XqGeMX8KZzzowpKnjqAakZa058GNtR3+41BYrNLoQ6T3PJlN1IoA0
PCuxNqDFqYB2cHmG/Cm/7I0hWRupAf6XqHRPU23T6P/tA5h50lJoRm58Mn//OSur
4VpO2+verr7XKAmEUW3sMA+G42yBs3zBFfDejH6jGbBE3AWV0qRC3NRr9Wtk5NQo
HVOc36AEGCywqzcFfGyypFLxzEKgWoTy1VQtfgVx1VMWISVZghNJ/Kk3Hcw3Hfvw
mp3hm/q72YgU+r6xzztc/FE7mARJ3Jdvm4uB2ho3pvr6M7fnyRv5ClezjSdsrhq4
e+fmNOT9w97xeg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:46 2025 by rpki-client