Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json)
Hash identifier: v3Q77Ykap/Os8T537olWvNJ9SrtU4y9CqeFve4uKjvo=
Subject key identifier: 47:31:B8:63:ED:24:12:3B:D3:79:4F:7E:CE:2B:6D:CB:54:FA:13:A6
Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74
Certificate serial: 0198D4E0207E39854C9345FE9E07144BA236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
Manifest number: 03D7
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: VtOuk7rnW3N7QtcUs1M38VIwLfrKhnJkvFm/hvEq1mA=)
2: sqHnWw_DTKSgc5zNQG4iPku5PBw.roa (hash: w6R1JeMOp3KdC2WjMvic0T8urUWBQwEZKMQrdXTts0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:20:7e:39:85:4c:93:45:fe:9e:07:14:4b:a2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=4731b863ed24123bd3794f7ece2b6dcb54fa13a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:07:c5:6c:3d:4e:cb:46:0c:bc:3d:cb:3a:48:
09:99:b8:95:59:9a:74:19:c1:d7:98:ab:7f:f8:6e:
00:b7:8a:8e:39:41:99:33:d2:ea:84:24:3d:97:1f:
84:64:a6:82:e4:64:89:39:4d:91:b3:4b:73:de:0f:
1a:ed:d5:4a:96:e8:8f:ff:8c:26:04:cc:b4:1e:e0:
9c:b4:fa:f8:32:8c:b3:fb:54:65:21:d1:94:1e:26:
e4:a3:4d:09:dd:43:ee:16:9f:e4:03:6f:02:59:07:
4d:eb:de:26:e6:bf:0a:c3:76:77:15:0b:21:4c:a4:
94:8a:86:23:c2:61:57:f9:5f:ef:b0:db:54:d0:e9:
34:a2:6b:71:c1:fa:1a:95:81:16:3b:a0:17:78:7f:
9c:40:05:9d:03:ae:af:a4:69:70:a3:7b:16:fd:88:
0c:cf:1b:b4:d9:6a:bc:5a:e0:50:bb:28:4a:15:b1:
dd:2a:92:c7:85:29:f1:b4:21:3a:fd:f6:f0:be:29:
78:75:cb:d7:15:64:0f:6e:4d:d5:49:03:6d:2d:82:
f8:c6:59:fd:15:83:bc:35:2f:55:39:e3:fc:64:95:
39:03:0b:c2:72:6e:4c:c4:88:95:8b:99:2b:ef:8b:
55:12:2a:33:18:0e:2b:40:64:a2:84:5d:fc:88:d3:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:31:B8:63:ED:24:12:3B:D3:79:4F:7E:CE:2B:6D:CB:54:FA:13:A6
X509v3 Authority Key Identifier:
keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:61:ff:48:f4:e4:dc:5c:f7:79:e4:b2:fa:8b:f3:60:e8:0f:
48:48:2c:57:ac:1e:6f:5a:25:a6:94:50:71:7b:4f:47:a6:e7:
77:ff:03:f5:fe:19:53:1a:78:c7:b8:b6:1b:bd:02:91:0d:d9:
c2:d7:04:f0:1b:0d:de:9f:9e:4e:bd:31:d3:03:10:6b:6e:fe:
77:eb:4b:e2:c7:cd:d3:65:f4:08:bf:9e:5c:2b:57:af:f6:58:
f2:1e:4b:5e:9c:52:d6:f6:1e:a0:7a:09:61:44:49:e6:e2:7e:
24:a8:8f:14:ea:3f:6c:a8:70:a3:f1:3c:5b:a0:78:22:b6:1d:
cf:b1:d2:23:3d:8d:77:1b:97:27:b6:ce:40:43:ff:b9:31:f5:
59:a1:d4:91:41:f3:2a:89:81:cf:71:6b:2a:27:9a:df:5b:e3:
1b:99:64:0e:ab:bc:af:78:34:d8:7e:54:80:3c:08:ea:7b:8b:
df:4a:90:e4:b6:23:0a:93:0b:3a:12:4c:91:05:f0:87:18:03:
3d:cf:54:9b:6b:07:ca:6a:25:43:74:6d:7d:17:1b:71:ba:e2:
de:ad:46:73:f1:80:aa:03:7f:9d:53:05:d5:5d:3e:8d:a7:18:
41:1b:87:8c:7f:aa:05:fc:4f:1b:b6:76:c0:b0:d2:b6:79:34:
ce:01:0f:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4CB+OYVMk0X+ngcUS6I2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjE2NWJmYjIzZGRhMWY5ODcwYjI0MTdmNDk2NDg1ZTZj
MDhhNzQwHhcNMjUwODIzMDMwMTU0WhcNMjUwODI0MDMwMTU0WjAzMTEwLwYDVQQD
Eyg0NzMxYjg2M2VkMjQxMjNiZDM3OTRmN2VjZTJiNmRjYjU0ZmExM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AfFbD1Oy0YMvD3LOkgJmbiVWZp0
GcHXmKt/+G4At4qOOUGZM9LqhCQ9lx+EZKaC5GSJOU2Rs0tz3g8a7dVKluiP/4wm
BMy0HuCctPr4Moyz+1RlIdGUHibko00J3UPuFp/kA28CWQdN694m5r8Kw3Z3FQsh
TKSUioYjwmFX+V/vsNtU0Ok0omtxwfoalYEWO6AXeH+cQAWdA66vpGlwo3sW/YgM
zxu02Wq8WuBQuyhKFbHdKpLHhSnxtCE6/fbwvil4dcvXFWQPbk3VSQNtLYL4xln9
FYO8NS9VOeP8ZJU5AwvCcm5MxIiVi5kr74tVEiozGA4rQGSihF38iNM/WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcxuGPtJBI703lPfs4rbctU+hOmMB8GA1UdIwQY
MBaAFGJhZb+yPdofmHCyQX9JZIXmwIp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAt
NDYwZmI0YmFjMmRiLzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAtNDYwZmI0YmFjMmRi
LzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGH/SPTk
3Fz3eeSy+ovzYOgPSEgsV6web1olppRQcXtPR6bnd/8D9f4ZUxp4x7i2G70CkQ3Z
wtcE8BsN3p+eTr0x0wMQa27+d+tL4sfN02X0CL+eXCtXr/ZY8h5LXpxS1vYeoHoJ
YURJ5uJ+JKiPFOo/bKhwo/E8W6B4IrYdz7HSIz2NdxuXJ7bOQEP/uTH1WaHUkUHz
KomBz3FrKiea31vjG5lkDqu8r3g02H5UgDwI6nuL30qQ5LYjCpMLOhJMkQXwhxgD
Pc9Um2sHymolQ3RtfRcbcbri3q1Gc/GAqgN/nVMF1V0+jacYQRuHjH+qBfxPG7Z2
wLDStnk0zgEPjw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:36 2025 by rpki-client