Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: +vnlpQ4GskxW8E9Q1wRvhcpZVdmoOSNxT2sGWUK9LmI=
Subject key identifier: BD:51:BA:98:BE:0D:7E:10:69:05:9F:CF:35:5F:1E:EA:7E:C6:AC:84
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 0198D4A7D980A399177721361D945D319478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 1669
Signing time: Sat 23 Aug 2025 02:00:26 +0000
Manifest this update: Sat 23 Aug 2025 02:00:26 +0000
Manifest next update: Sun 24 Aug 2025 02:00:26 +0000
Files and hashes: 1: BiH4T1QItrDeKmbSQQD10MbyJM0.roa (hash: 1DccZm+wbtnRwvwFHLQW36Ec7g4Qt5rsBnmXwCd1CCk=)
2: lIzlzaB9MfYSOvJtbmvms4JbSXQ.roa (hash: 7pNuzEMq5SGi7oY7hUTVuLhRAftrVbTi7LJ5DaYy2Z4=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: l1OlhlZ0RviHBgIurGrHi0lvdCGEQ3GyC2NszQDGbRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d9:80:a3:99:17:77:21:36:1d:94:5d:31:94:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Aug 23 02:00:26 2025 GMT
Not After : Aug 24 02:00:26 2025 GMT
Subject: CN=bd51ba98be0d7e1069059fcf355f1eea7ec6ac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:f2:fc:2f:b4:da:b0:3c:df:84:69:5a:d7:
b2:c1:5f:36:92:1a:dd:58:f2:d7:92:61:4e:2a:ee:
86:05:be:83:e7:1e:a2:ce:37:28:a9:1c:cf:c5:57:
64:9d:53:9d:91:bf:b5:27:43:dd:06:81:5f:ba:24:
91:f2:f7:bd:8a:e3:03:b9:54:e8:18:65:cd:0d:8e:
15:e3:46:63:cd:e5:60:14:6d:2f:9e:36:9b:a3:d9:
d0:0b:05:21:d4:b6:58:6f:db:12:73:e1:2d:9c:62:
5a:b9:4d:ba:60:70:1c:9b:22:01:9d:39:a0:f6:a2:
22:d3:be:45:5c:4b:6a:55:a4:bc:ee:cd:63:24:18:
59:8d:0f:95:75:aa:97:a5:ba:14:a7:a3:95:dd:be:
4f:a6:54:ed:c0:6c:7f:4c:34:e5:5a:2a:6b:77:7a:
05:2f:94:83:28:29:2d:a3:4b:99:32:e2:89:b5:0a:
71:7b:87:19:33:49:3f:cf:db:d1:d1:6a:a1:6a:6d:
12:85:57:8c:87:bd:e9:97:32:de:2b:ba:33:e3:77:
51:59:57:ec:3e:6e:9c:a1:61:49:c8:ec:da:4b:ba:
d3:b5:cf:67:4f:8a:1e:e9:ed:15:ec:5e:7e:f1:1b:
02:f0:3c:e6:e6:1b:03:0d:72:8e:bb:29:e5:7d:66:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:51:BA:98:BE:0D:7E:10:69:05:9F:CF:35:5F:1E:EA:7E:C6:AC:84
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:22:a9:47:e8:a4:a5:ad:62:b5:09:81:e9:15:62:cf:d4:5d:
01:9a:9e:cf:31:50:6b:e3:66:21:13:b9:9f:c4:fc:0e:16:3f:
6f:09:94:f9:ec:33:7d:93:de:90:e2:49:3e:7a:a6:dd:19:74:
47:97:a2:7a:3e:c3:99:04:03:ba:1b:43:0e:d4:eb:16:a2:6a:
14:ef:29:e9:47:83:09:f9:f3:4d:79:9a:8b:cd:31:2a:19:73:
69:87:3f:bb:2f:97:b1:be:96:53:6f:ad:64:a5:52:d0:eb:8d:
17:71:39:5d:ea:c3:44:f1:39:be:3b:49:4c:2f:d1:fd:38:15:
f8:26:1c:64:08:f2:69:59:3f:e0:ce:bc:cd:e7:95:9c:dd:55:
95:37:3a:52:6f:55:10:8d:fd:3e:d4:ff:78:aa:69:c8:8b:c2:
e2:c9:42:0d:1d:5c:f7:1a:09:41:f8:d9:89:c7:47:ff:a0:d3:
d2:d3:34:f0:ce:26:9c:f0:47:7b:6c:41:3c:29:0d:03:fb:0b:
38:06:51:61:62:59:7c:12:21:d8:f3:5b:fd:3f:53:46:81:e7:
02:0c:f2:9c:ac:63:a3:7d:04:1c:c9:84:f9:fc:3e:62:2a:fb:
e8:71:92:a6:f0:ce:05:4b:82:a4:16:46:ed:c8:92:15:47:a2:
54:4a:df:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp9mAo5kXdyE2HZRdMZR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjhjYTgyMTQ3ZWQyMjc3YjRiY2M2OWE1Mjg1YmFlNzM1
ZjJlNDQwHhcNMjUwODIzMDIwMDI2WhcNMjUwODI0MDIwMDI2WjAzMTEwLwYDVQQD
EyhiZDUxYmE5OGJlMGQ3ZTEwNjkwNTlmY2YzNTVmMWVlYTdlYzZhYzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFry/C+02rA834RpWteywV82khrd
WPLXkmFOKu6GBb6D5x6izjcoqRzPxVdknVOdkb+1J0PdBoFfuiSR8ve9iuMDuVTo
GGXNDY4V40ZjzeVgFG0vnjabo9nQCwUh1LZYb9sSc+EtnGJauU26YHAcmyIBnTmg
9qIi075FXEtqVaS87s1jJBhZjQ+VdaqXpboUp6OV3b5PplTtwGx/TDTlWiprd3oF
L5SDKCkto0uZMuKJtQpxe4cZM0k/z9vR0Wqham0ShVeMh73plzLeK7oz43dRWVfs
Pm6coWFJyOzaS7rTtc9nT4oe6e0V7F5+8RsC8Dzm5hsDDXKOuynlfWbPjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1Rupi+DX4QaQWfzzVfHup+xqyEMB8GA1UdIwQY
MBaAFMhoyoIUftIne0vMaaUoW65zXy5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTIt
NjY4NDkwMTk2MjdlLzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTItNjY4NDkwMTk2Mjdl
LzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCKpR+ik
pa1itQmB6RViz9RdAZqezzFQa+NmIRO5n8T8DhY/bwmU+ewzfZPekOJJPnqm3Rl0
R5eiej7DmQQDuhtDDtTrFqJqFO8p6UeDCfnzTXmai80xKhlzaYc/uy+Xsb6WU2+t
ZKVS0OuNF3E5XerDRPE5vjtJTC/R/TgV+CYcZAjyaVk/4M68zeeVnN1VlTc6Um9V
EI39PtT/eKppyIvC4slCDR1c9xoJQfjZicdH/6DT0tM08M4mnPBHe2xBPCkNA/sL
OAZRYWJZfBIh2PNb/T9TRoHnAgzynKxjo30EHMmE+fw+Yir76HGSpvDOBUuCpBZG
7ciSFUeiVErfuQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:35 2025 by rpki-client