Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
File: r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json)
Hash identifier: rn1AUSMO6dcxQpMjfStiAZCcBTN79CtP7KyqA9IKZlY=
Subject key identifier: 25:F6:4B:82:B4:AB:85:A7:45:9C:32:81:54:60:A8:F7:3D:00:B0:C7
Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
Certificate issuer: /CN=affca7f6da689cc545bbbb950398bac407979aa3
Certificate serial: 0198D5158FAD2BFD54CF1E13B2E10F3ED08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
Manifest number: 03B3
Signing time: Sat 23 Aug 2025 04:00:16 +0000
Manifest this update: Sat 23 Aug 2025 04:00:16 +0000
Manifest next update: Sun 24 Aug 2025 04:00:16 +0000
Files and hashes: 1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: co49d4xWA53JPCqTrhK3pnlJIr6CEUZ+nGlImkukwwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8f:ad:2b:fd:54:cf:1e:13:b2:e1:0f:3e:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3
Validity
Not Before: Aug 23 04:00:16 2025 GMT
Not After : Aug 24 04:00:16 2025 GMT
Subject: CN=25f64b82b4ab85a7459c32815460a8f73d00b0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:04:86:51:9c:f0:a3:f6:eb:ff:22:72:a9:bf:
68:b9:f7:3c:20:7b:07:c0:31:a3:4a:54:c1:ec:eb:
34:c2:35:a2:32:66:6d:c1:ac:1b:2a:1a:6b:d4:b5:
f8:68:0f:1c:14:ed:e8:57:bd:a4:c1:bb:8b:ea:a3:
be:a4:e5:37:16:ae:d6:34:53:b2:ac:59:ae:11:3b:
9b:3f:56:c1:e2:5b:56:63:08:15:6c:6f:b5:5a:49:
fe:72:50:9a:0d:91:72:b7:5e:16:e5:8e:67:d3:bf:
06:65:1c:2e:20:b0:ba:ff:6f:69:87:77:03:57:b7:
f3:20:11:d8:54:48:4a:f3:9e:32:67:b1:78:46:29:
20:8d:fb:a9:ae:a9:60:4c:64:52:22:53:6a:3e:66:
a1:12:e1:2e:68:80:6d:41:5c:88:70:e5:0b:37:fb:
f9:dc:4e:4b:08:be:5d:03:a6:a5:8d:b4:ed:75:76:
86:93:44:04:79:55:00:a2:44:69:ba:15:ab:e8:27:
03:0d:3c:82:95:ce:5e:9a:12:b1:68:bb:11:41:e0:
ca:93:63:22:29:83:f6:7a:4f:c3:4e:99:7a:de:97:
1f:a3:a6:17:26:d6:27:76:88:38:2d:d6:62:27:43:
ca:d2:2a:26:b7:fc:19:9c:f6:96:9b:b4:b5:77:42:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:4B:82:B4:AB:85:A7:45:9C:32:81:54:60:A8:F7:3D:00:B0:C7
X509v3 Authority Key Identifier:
keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:30:23:32:46:86:8b:de:08:c6:6c:b5:00:ea:e8:f5:d9:b4:
78:de:cf:0e:42:af:90:df:9a:00:c3:73:5d:02:0d:e3:27:9d:
a8:b5:54:67:68:26:e2:2a:46:03:29:6e:54:89:f1:39:9f:1d:
74:9d:f0:69:14:31:c1:15:f3:73:f5:49:90:e9:e3:2c:ea:39:
98:4b:e3:ae:53:f4:37:e1:a8:f1:a7:18:20:7a:cf:16:86:39:
78:94:be:a7:c0:73:70:22:fb:11:a6:41:fc:cc:fb:fd:74:7c:
9e:8d:5d:be:bc:f9:14:d7:cf:72:19:51:cb:b5:33:1e:13:f9:
0b:ac:62:5b:f4:9b:2c:0a:5a:17:65:cb:8d:28:0e:bb:6b:90:
84:c5:54:23:05:5b:19:b6:33:65:4c:79:dc:fa:de:c9:07:03:
2e:34:80:89:5c:1a:0e:25:92:01:f2:a4:7b:8b:1a:70:a4:07:
82:6a:40:ac:f0:2c:16:89:19:bf:34:3c:c6:d1:0e:a5:38:9d:
94:8b:ac:9a:0d:a8:72:07:d1:14:b1:7e:92:79:b2:7a:b4:c4:
3d:b9:21:b1:8d:05:0e:be:b0:23:1e:38:b9:94:89:15:e0:80:
c9:72:06:99:64:ab:6a:3f:2d:47:1f:60:ce:dc:c3:33:64:59:
7b:f0:e1:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFY+tK/1Uzx4TsuEPPtCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmNhN2Y2ZGE2ODljYzU0NWJiYmI5NTAzOThiYWM0MDc5
NzlhYTMwHhcNMjUwODIzMDQwMDE2WhcNMjUwODI0MDQwMDE2WjAzMTEwLwYDVQQD
EygyNWY2NGI4MmI0YWI4NWE3NDU5YzMyODE1NDYwYThmNzNkMDBiMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wSGUZzwo/br/yJyqb9oufc8IHsH
wDGjSlTB7Os0wjWiMmZtwawbKhpr1LX4aA8cFO3oV72kwbuL6qO+pOU3Fq7WNFOy
rFmuETubP1bB4ltWYwgVbG+1Wkn+clCaDZFyt14W5Y5n078GZRwuILC6/29ph3cD
V7fzIBHYVEhK854yZ7F4RikgjfuprqlgTGRSIlNqPmahEuEuaIBtQVyIcOULN/v5
3E5LCL5dA6aljbTtdXaGk0QEeVUAokRpuhWr6CcDDTyClc5emhKxaLsRQeDKk2Mi
KYP2ek/DTpl63pcfo6YXJtYndog4LdZiJ0PK0iomt/wZnPaWm7S1d0JKowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCX2S4K0q4WnRZwygVRgqPc9ALDHMB8GA1UdIwQY
MBaAFK/8p/baaJzFRbu7lQOYusQHl5qjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xOWJhOTctMTlhZi00Zjg4LTk2YWEt
MTk4NWIwYjA4MjVlLzEvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xOWJhOTctMTlhZi00Zjg4LTk2YWEtMTk4NWIwYjA4MjVl
LzEvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDAjMkaG
i94Ixmy1AOro9dm0eN7PDkKvkN+aAMNzXQIN4yedqLVUZ2gm4ipGAyluVInxOZ8d
dJ3waRQxwRXzc/VJkOnjLOo5mEvjrlP0N+Go8acYIHrPFoY5eJS+p8BzcCL7EaZB
/Mz7/XR8no1dvrz5FNfPchlRy7UzHhP5C6xiW/SbLApaF2XLjSgOu2uQhMVUIwVb
GbYzZUx53PreyQcDLjSAiVwaDiWSAfKke4sacKQHgmpArPAsFokZvzQ8xtEOpTid
lIusmg2ocgfRFLF+knmyerTEPbkhsY0FDr6wIx44uZSJFeCAyXIGmWSraj8tRx9g
ztzDM2RZe/Dh4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:48 2025 by rpki-client