Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: GS86HrQkZMp1F/Sat3af3PB3UZ29vrEcOKbRPsUwlz4=
Subject key identifier: 50:EA:14:9A:0E:96:7B:0A:6F:26:15:96:02:59:40:5C:95:E0:CE:64
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 0198D5163A26D1F626FEDC5D74D1467EC329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 13B4
Signing time: Sat 23 Aug 2025 04:01:00 +0000
Manifest this update: Sat 23 Aug 2025 04:01:00 +0000
Manifest next update: Sun 24 Aug 2025 04:01:00 +0000
Files and hashes: 1: 1-sSgE0HM8DI5OGWGz8Ys0s4rul4.roa (hash: H9QCxfs9A7ILRXrbCUmxWpocaR5zmO3JmxQzjRfE7KE=)
2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: yc3HyvRyjiJz0I+p/u4X7y7p+f9uIQ14mZA9jJLPul0=)
3: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (hash: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=)
4: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (hash: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=)
5: WezcbaDCWCglJVxlkqENoVQ5GlY.roa (hash: kXoxzzMiFtQKZOeEaMcNXCC2S+tWWgxtkN6qKdf+Gxc=)
6: bLJ_1uTmZ_Woe95GKroEXOKfXRc.roa (hash: D/qqGavjudHHAFM94s9+FB+kKIVF4We10px0uVymkXM=)
7: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (hash: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=)
8: cuPytutt2n0eGvtmlKhIAPwMjik.roa (hash: nLVXqcqfXAYczwV0A/DG7UlQnOtJTTZ+GUSbi/wO1E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:3a:26:d1:f6:26:fe:dc:5d:74:d1:46:7e:c3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Aug 23 04:01:00 2025 GMT
Not After : Aug 24 04:01:00 2025 GMT
Subject: CN=50ea149a0e967b0a6f2615960259405c95e0ce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:35:c2:95:88:ea:09:ad:cf:ec:67:d4:39:
fd:12:ab:80:e8:69:73:1e:73:28:20:ab:d2:87:f1:
d3:de:37:40:4e:51:9a:24:2d:27:46:1a:8d:21:53:
cb:73:63:46:cf:b6:5f:9f:e8:5b:78:40:49:87:cb:
16:82:f6:03:dd:db:53:3b:0c:5d:3f:b2:2b:54:d2:
92:b9:5f:5d:b0:48:d9:0d:5e:f8:9e:2e:f7:6b:1d:
fa:71:e1:e7:8f:8b:4a:27:c3:4a:b8:91:45:e7:81:
cb:b7:15:01:56:7b:c9:61:c7:61:2e:fe:5e:97:64:
8c:90:c7:42:e9:6f:ae:1d:87:0e:69:e3:81:1c:85:
26:0b:73:98:22:fb:1e:63:29:b4:31:b1:34:a3:72:
e5:5d:cd:87:74:a4:e4:0a:29:47:f2:bf:af:b4:a5:
47:57:37:39:f5:f2:52:cb:05:aa:09:2b:09:1a:05:
07:7c:52:47:40:13:1f:2b:ed:af:0a:c0:57:b5:52:
b4:a0:82:74:6c:8f:82:ab:b9:4c:1e:58:89:17:d7:
94:ed:83:94:64:4b:31:a9:97:47:e6:dd:76:4b:39:
60:e2:14:e8:fe:23:f0:6e:0d:3e:f2:bb:92:f0:5f:
fe:d1:38:63:3c:e7:52:3c:cd:2b:ed:ba:03:b9:d8:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:14:9A:0E:96:7B:0A:6F:26:15:96:02:59:40:5C:95:E0:CE:64
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:60:39:11:bc:6a:aa:63:48:ee:8b:b3:35:e5:97:1f:c7:3e:
7b:31:a5:b8:f3:ec:30:bb:71:dc:d3:1b:2e:82:69:8d:23:9c:
95:bf:1c:ab:94:ea:c8:fb:9f:39:29:9a:18:ad:75:28:2c:df:
c3:f2:79:b1:9d:50:57:85:eb:a6:a2:e4:00:75:95:c6:ce:66:
3c:0d:c3:06:c1:a6:9a:0c:d6:37:da:c1:56:b9:23:64:cf:ac:
1b:e3:57:ed:d8:cc:0a:d8:2c:62:5d:96:3d:1c:a4:78:db:90:
3b:f2:0e:5e:9d:d0:f9:73:94:35:4c:94:74:c8:90:1c:4e:7b:
43:d6:6c:16:ed:1f:7e:a4:c5:6f:4b:0f:b2:1f:1e:7c:a2:48:
8e:6f:f0:a5:f2:6b:2a:29:35:17:a5:88:dc:9a:55:19:15:0c:
61:22:3f:57:7e:fb:3e:13:d1:a0:fe:2b:a0:36:b4:bd:3c:e6:
a3:1c:ba:a0:89:09:d9:9a:ae:a4:5e:c1:60:d2:4e:dc:5e:fd:
04:20:10:47:68:8f:38:01:d9:1c:bf:0c:bb:43:9e:39:01:88:
44:05:21:01:1b:5d:32:24:da:e8:5a:81:58:6a:5f:94:04:15:
9c:b4:7d:67:19:ad:b6:2f:b3:9f:e7:cc:db:21:22:fd:c4:9e:
40:cf:2b:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFjom0fYm/txddNFGfsMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjUwODIzMDQwMTAwWhcNMjUwODI0MDQwMTAwWjAzMTEwLwYDVQQD
Eyg1MGVhMTQ5YTBlOTY3YjBhNmYyNjE1OTYwMjU5NDA1Yzk1ZTBjZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ac1wpWI6gmtz+xn1Dn9EquA6Glz
HnMoIKvSh/HT3jdATlGaJC0nRhqNIVPLc2NGz7Zfn+hbeEBJh8sWgvYD3dtTOwxd
P7IrVNKSuV9dsEjZDV74ni73ax36ceHnj4tKJ8NKuJFF54HLtxUBVnvJYcdhLv5e
l2SMkMdC6W+uHYcOaeOBHIUmC3OYIvseYym0MbE0o3LlXc2HdKTkCilH8r+vtKVH
Vzc59fJSywWqCSsJGgUHfFJHQBMfK+2vCsBXtVK0oIJ0bI+Cq7lMHliJF9eU7YOU
ZEsxqZdH5t12Szlg4hTo/iPwbg0+8ruS8F/+0ThjPOdSPM0r7boDudhqTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDqFJoOlnsKbyYVlgJZQFyV4M5kMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWA5Ebxq
qmNI7ouzNeWXH8c+ezGluPPsMLtx3NMbLoJpjSOclb8cq5TqyPufOSmaGK11KCzf
w/J5sZ1QV4XrpqLkAHWVxs5mPA3DBsGmmgzWN9rBVrkjZM+sG+NX7djMCtgsYl2W
PRykeNuQO/IOXp3Q+XOUNUyUdMiQHE57Q9ZsFu0ffqTFb0sPsh8efKJIjm/wpfJr
Kik1F6WI3JpVGRUMYSI/V377PhPRoP4roDa0vTzmoxy6oIkJ2ZqupF7BYNJO3F79
BCAQR2iPOAHZHL8Mu0OeOQGIRAUhARtdMiTa6FqBWGpflAQVnLR9Zxmtti+zn+fM
2yEi/cSeQM8rdw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:01 2025 by rpki-client