Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: 3jqL40fZVHTevhq8J07i7OUbfqBV/Mg+D2NrcIKuXAA=
Subject key identifier: 22:94:9D:D0:6D:15:6F:43:59:75:EE:14:E5:DB:AC:BA:AC:AE:B9:A0
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 0198D7A8F23888640F944AA6CEB727DDB63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 165B
Signing time: Sat 23 Aug 2025 16:00:30 +0000
Manifest this update: Sat 23 Aug 2025 16:00:30 +0000
Manifest next update: Sun 24 Aug 2025 16:00:30 +0000
Files and hashes: 1: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=)
2: _Xj2eknSD0ggywf9BvZfFW4ND5Y.roa (hash: lqrmQ5OQaXV1qMgJ8jG3Tq4DJQ0kTl6M/TLRe7MYJpY=)
3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: EqqN7wRUHOg+vnPKQ9vmNj5IaKzBV0rQLaCddsP//zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:f2:38:88:64:0f:94:4a:a6:ce:b7:27:dd:b6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Aug 23 16:00:30 2025 GMT
Not After : Aug 24 16:00:30 2025 GMT
Subject: CN=22949dd06d156f435975ee14e5dbacbaacaeb9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:4f:13:d9:aa:db:1c:50:64:4e:cb:9a:b2:
a7:a4:48:30:03:d8:2e:7f:2d:15:65:69:56:58:0e:
c5:7e:4b:aa:76:e7:37:b4:1d:a0:73:de:32:37:ed:
c5:f1:fe:87:9c:51:0b:93:69:44:a7:76:18:30:1d:
ef:9b:1f:6f:f8:37:b0:3a:c9:2b:b5:ce:81:09:4a:
b4:67:cd:ab:46:00:a6:72:7f:fe:65:67:74:d3:bc:
79:3a:33:39:89:4a:25:d4:2e:17:c0:9e:62:60:9b:
0b:8a:33:98:65:70:b6:cb:16:85:21:02:cf:b8:cb:
ee:33:39:69:d7:64:92:b7:3a:3a:b2:12:de:8a:eb:
64:3d:0a:d9:66:a7:ec:a3:cd:1b:85:2e:13:a0:ae:
ad:12:b5:83:39:d7:69:ed:3c:2d:d2:31:6b:49:97:
78:15:cd:6a:c8:5b:66:38:92:1a:ba:8d:5e:fe:58:
6f:c2:64:ca:22:bf:39:6e:4a:7c:0c:0a:fd:7e:d8:
37:6c:11:2f:d0:bd:a5:1b:1b:c1:39:73:e6:46:0a:
3c:67:1d:f1:0e:0f:ec:97:ff:f2:de:46:f3:bd:21:
e3:12:3a:97:d3:33:ee:a4:0f:0d:f5:9d:83:9d:ed:
68:3e:47:08:3e:ab:a4:c0:b8:1a:03:fb:cf:4f:24:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:9D:D0:6D:15:6F:43:59:75:EE:14:E5:DB:AC:BA:AC:AE:B9:A0
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:05:2a:73:65:68:e7:c3:31:5e:d1:82:be:fe:5a:b3:e8:72:
22:5a:3c:f5:e6:ff:9b:1b:a2:2b:ec:8e:eb:89:13:a8:66:39:
fd:4a:2c:60:e8:e5:21:24:79:e5:f7:9b:01:52:79:c6:5e:ee:
75:5d:d9:49:b3:e6:07:72:50:21:bb:7f:1b:7d:30:9c:8e:a8:
c3:d4:56:bb:1f:0b:53:02:b1:9c:75:c7:be:38:c5:d8:d3:15:
d7:3c:7d:99:40:a9:48:c5:7d:aa:6c:f7:52:bf:d9:59:75:53:
ee:77:77:47:1d:b9:30:1a:1b:14:c2:c5:d9:c2:aa:72:62:73:
5d:ca:86:f7:d0:6e:ca:a3:ec:dc:53:a8:cb:10:bd:aa:6d:7b:
e0:f9:cb:92:97:6b:7e:50:b3:be:90:5d:c9:62:36:8b:f1:15:
99:6f:e1:fb:2e:df:d7:43:e8:a2:2f:00:4a:b7:79:2c:36:11:
0f:3e:a0:71:d7:c3:ba:2e:2f:a2:2e:38:eb:d7:71:0e:a3:bf:
45:20:52:05:c2:ac:68:a0:b3:e4:6a:a0:40:47:1a:2d:6f:45:
b9:f4:0c:e5:2f:bd:dd:4a:d8:0a:17:2c:e1:9b:62:d3:7b:b8:
ae:03:dc:fe:44:f9:c7:c5:f7:af:6b:4a:31:5d:65:92:46:69:
58:38:29:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqPI4iGQPlEqmzrcn3bY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz
Yzg4NWMwHhcNMjUwODIzMTYwMDMwWhcNMjUwODI0MTYwMDMwWjAzMTEwLwYDVQQD
EygyMjk0OWRkMDZkMTU2ZjQzNTk3NWVlMTRlNWRiYWNiYWFjYWViOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFFPE9mq2xxQZE7LmrKnpEgwA9gu
fy0VZWlWWA7Ffkuqduc3tB2gc94yN+3F8f6HnFELk2lEp3YYMB3vmx9v+DewOskr
tc6BCUq0Z82rRgCmcn/+ZWd007x5OjM5iUol1C4XwJ5iYJsLijOYZXC2yxaFIQLP
uMvuMzlp12SStzo6shLeiutkPQrZZqfso80bhS4ToK6tErWDOddp7Twt0jFrSZd4
Fc1qyFtmOJIauo1e/lhvwmTKIr85bkp8DAr9ftg3bBEv0L2lGxvBOXPmRgo8Zx3x
Dg/sl//y3kbzvSHjEjqX0zPupA8N9Z2Dne1oPkcIPqukwLgaA/vPTyTJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKUndBtFW9DWXXuFOXbrLqsrrmgMB8GA1UdIwQY
MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt
ZDcxMmQ0NzM4MDQ2LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2
LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQUqc2Vo
58MxXtGCvv5as+hyIlo89eb/mxuiK+yO64kTqGY5/UosYOjlISR55febAVJ5xl7u
dV3ZSbPmB3JQIbt/G30wnI6ow9RWux8LUwKxnHXHvjjF2NMV1zx9mUCpSMV9qmz3
Ur/ZWXVT7nd3Rx25MBobFMLF2cKqcmJzXcqG99BuyqPs3FOoyxC9qm174PnLkpdr
flCzvpBdyWI2i/EVmW/h+y7f10Pooi8ASrd5LDYRDz6gcdfDui4voi4469dxDqO/
RSBSBcKsaKCz5GqgQEcaLW9FufQM5S+93UrYChcs4Zti03u4rgPc/kT5x8X3r2tK
MV1lkkZpWDgptw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:13 2025 by rpki-client