Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: IV/R76ict6IngyhK16bXABRwZ6dnuKkh+gbgfFwJuEc=
Subject key identifier: 0B:20:2A:CD:EA:65:EF:32:15:D0:FB:33:0F:F3:7F:42:49:84:F6:3C
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 0198D472B11A7A9FFD48CBA708332E77D85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:02:22 +0000
Manifest this update: Sat 23 Aug 2025 01:02:22 +0000
Manifest next update: Sun 24 Aug 2025 01:02:22 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: 6yhkZkGrB6GqryzUIzs1uCtTKCTSsHhxtHfUKDJTwwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b1:1a:7a:9f:fd:48:cb:a7:08:33:2e:77:d8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Aug 23 01:02:22 2025 GMT
Not After : Aug 24 01:02:22 2025 GMT
Subject: CN=0b202acdea65ef3215d0fb330ff37f424984f63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:77:12:e6:2e:5c:de:6b:bf:1e:ee:1d:fb:
d9:43:d6:8c:36:c0:c9:5a:85:2a:40:a9:f2:77:9d:
91:db:83:fb:d6:e5:a2:c4:e9:b5:4f:05:48:1c:92:
a9:9b:e7:09:cd:c4:60:67:88:80:9d:fb:6b:3e:40:
33:05:36:5f:16:46:d6:06:f0:1f:a5:78:d9:ff:7a:
e0:74:3e:6b:f1:1c:12:91:2f:ea:4b:d4:e2:d1:53:
68:e9:e3:7f:85:3e:11:b3:d8:fe:75:4f:22:ba:02:
a8:59:b8:db:5b:e2:5d:ea:b7:0f:9b:ce:eb:13:6c:
f8:42:57:d4:2f:90:12:54:b5:c8:ff:dc:95:5b:90:
a2:48:eb:af:a4:df:36:c6:ee:53:8b:4d:d7:6f:51:
86:89:7f:8b:51:1a:a6:83:56:79:93:67:98:b6:18:
07:30:a0:c8:30:83:2b:cf:8b:a6:f6:63:1f:8b:08:
62:c1:20:10:dd:86:8d:4d:19:14:93:d4:09:2b:af:
51:14:6b:7a:4f:c0:c9:88:6a:f2:7c:ae:0b:49:e0:
44:dc:e1:f1:80:46:8a:f5:26:cc:96:d6:8f:28:91:
c9:2c:1c:c4:c9:cf:16:f5:cd:1f:23:94:61:3d:86:
36:f9:ed:ad:4f:dd:b5:cb:89:56:d2:b4:b6:3b:2b:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:20:2A:CD:EA:65:EF:32:15:D0:FB:33:0F:F3:7F:42:49:84:F6:3C
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8b:a3:ec:a7:aa:3d:93:e0:5c:e0:c2:0f:ee:2e:48:60:06:
05:6b:69:a5:43:10:1d:0a:f1:52:06:29:04:87:a7:eb:a1:63:
26:b7:c2:ed:5e:ce:5e:df:1e:c3:8c:13:0a:af:14:4a:69:0c:
10:d3:85:ca:4a:d4:bf:56:eb:95:a9:0a:cf:45:4a:68:ea:fd:
9d:0a:70:0d:8d:60:66:e4:2c:56:34:57:38:e6:19:bf:3c:3c:
a2:50:28:e9:ca:5e:fa:f9:82:c8:e4:ad:d2:87:e0:51:ad:c0:
84:d9:04:02:20:b5:d5:9e:fd:02:57:f4:63:3f:b3:55:ff:50:
ec:41:28:21:a7:26:01:a1:8b:f3:c1:44:fb:55:a0:60:cf:12:
7e:91:6a:1c:fd:1f:e5:d5:df:94:c6:a6:13:00:ae:6f:64:01:
fd:71:aa:30:be:08:b2:06:f8:f5:85:a0:77:ca:b9:28:0a:ae:
b2:43:a7:18:48:bf:fe:2f:85:4d:cd:ef:73:c5:7d:fe:a6:17:
99:e6:ee:c5:12:3a:3e:61:7f:25:f1:86:37:f9:89:a8:80:5d:
0f:66:30:59:2c:30:7e:5f:fa:25:f8:d4:58:34:be:8c:ff:b3:
db:f7:e9:05:45:7f:6e:1a:95:05:da:55:39:08:53:d4:aa:d7:
fc:a3:05:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcrEaep/9SMunCDMud9hbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzc4NDNmMDc1MjIyNDQ1OWU2MDM0NTY5YTIxN2M4YjYx
MTU2NGIwHhcNMjUwODIzMDEwMjIyWhcNMjUwODI0MDEwMjIyWjAzMTEwLwYDVQQD
EygwYjIwMmFjZGVhNjVlZjMyMTVkMGZiMzMwZmYzN2Y0MjQ5ODRmNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllF3EuYuXN5rvx7uHfvZQ9aMNsDJ
WoUqQKnyd52R24P71uWixOm1TwVIHJKpm+cJzcRgZ4iAnftrPkAzBTZfFkbWBvAf
pXjZ/3rgdD5r8RwSkS/qS9Ti0VNo6eN/hT4Rs9j+dU8iugKoWbjbW+Jd6rcPm87r
E2z4QlfUL5ASVLXI/9yVW5CiSOuvpN82xu5Ti03Xb1GGiX+LURqmg1Z5k2eYthgH
MKDIMIMrz4um9mMfiwhiwSAQ3YaNTRkUk9QJK69RFGt6T8DJiGryfK4LSeBE3OHx
gEaK9SbMltaPKJHJLBzEyc8W9c0fI5RhPYY2+e2tT921y4lW0rS2Oyvy+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsgKs3qZe8yFdD7Mw/zf0JJhPY8MB8GA1UdIwQY
MBaAFMo3hD8HUiJEWeYDRWmiF8i2EVZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUt
OGZlNzg0ZTMxZTVkLzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUtOGZlNzg0ZTMxZTVk
LzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWouj7Keq
PZPgXODCD+4uSGAGBWtppUMQHQrxUgYpBIen66FjJrfC7V7OXt8ew4wTCq8USmkM
ENOFykrUv1brlakKz0VKaOr9nQpwDY1gZuQsVjRXOOYZvzw8olAo6cpe+vmCyOSt
0ofgUa3AhNkEAiC11Z79Alf0Yz+zVf9Q7EEoIacmAaGL88FE+1WgYM8SfpFqHP0f
5dXflMamEwCub2QB/XGqML4Isgb49YWgd8q5KAquskOnGEi//i+FTc3vc8V9/qYX
mebuxRI6PmF/JfGGN/mJqIBdD2YwWSwwfl/6JfjUWDS+jP+z2/fpBUV/bhqVBdpV
OQhT1KrX/KMF+A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:32 2025 by rpki-client