Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json)
Hash identifier: gozV5r49BxY+ST6RVbev7YiqIgkIORMMkY/qbbL2m7c=
Subject key identifier: AF:04:79:F4:FC:D0:38:4E:99:7A:68:08:83:EF:5C:D2:CF:77:23:5E
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 0198D65FC3A00783DDFE338E03C252ED4E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:56 +0000
Manifest this update: Sat 23 Aug 2025 10:00:56 +0000
Manifest next update: Sun 24 Aug 2025 10:00:56 +0000
Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: KJa5BKczSYg5ieSS1/P6Va1dCFUt7Nmh04Z7q5ucK+0=)
2: doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa (hash: +MKv/V0IfbD2z8rIVhSAM4id+TCFCy9eVNZqs6dovHs=)
3: t9q3JQRIfHPbUTHA-7F2iigGH4c.roa (hash: s2L1muHfCT4EhX7O1DIS6+l6imOYfyQC+qFGEKmez7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c3:a0:07:83:dd:fe:33:8e:03:c2:52:ed:4e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Aug 23 10:00:56 2025 GMT
Not After : Aug 24 10:00:56 2025 GMT
Subject: CN=af0479f4fcd0384e997a680883ef5cd2cf77235e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:b4:ce:0c:70:ac:9a:d0:41:25:7c:ea:82:
a2:f3:73:47:69:14:6e:e4:28:80:c6:90:a6:a1:3e:
0b:8d:21:2e:78:bb:d5:5e:4d:a0:17:0e:2e:75:e0:
c3:b6:62:b3:ca:f7:29:e2:5a:1c:6c:9f:5b:e2:cf:
13:ce:0d:07:9c:18:30:67:ac:c9:02:c5:7c:3f:80:
60:9a:2b:e6:c6:74:f6:96:30:00:0c:e3:12:7e:6c:
ca:e7:af:3b:85:c5:71:1f:39:1e:77:95:97:59:71:
9c:0a:8a:87:f4:03:e8:33:18:32:ad:cd:ff:9b:7b:
e3:b7:a3:36:c1:e1:e1:c9:0d:4b:24:90:3b:55:2b:
b3:aa:e3:f1:1d:a5:3f:73:19:97:8c:7c:08:40:9e:
ce:e9:55:56:61:6c:24:74:c2:4b:e9:0d:8f:19:fa:
7c:0f:71:e5:2e:68:22:1b:7c:db:2d:86:85:85:41:
39:fe:61:2c:ce:e2:9c:52:7b:7f:38:2e:6a:76:34:
de:8f:eb:45:70:e7:05:d8:88:92:b3:5b:23:cc:e2:
c8:06:f4:ca:ce:2d:4b:9a:4c:ff:ff:2d:0e:04:11:
62:f7:c5:f7:1a:13:fd:a9:04:97:0d:32:9d:6d:05:
78:16:63:5f:b5:aa:8e:ab:5e:6d:1c:a6:ea:e7:b3:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:04:79:F4:FC:D0:38:4E:99:7A:68:08:83:EF:5C:D2:CF:77:23:5E
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:87:e7:94:b5:95:dc:d8:72:c5:74:a5:57:fb:43:10:8f:64:
e7:7c:8a:52:1f:1c:42:71:bb:5d:8d:ed:e0:48:da:16:6c:a4:
d4:67:b3:31:65:47:2f:37:f3:a2:34:9e:e4:95:31:4c:7a:96:
a9:f0:54:66:16:5b:db:bc:8a:ba:71:63:eb:1e:31:73:c1:fb:
a2:6b:27:86:a9:5e:b4:48:3c:da:8a:95:90:f9:a3:53:5d:59:
93:a8:cc:ae:38:e0:b7:5f:18:f2:ae:a2:e1:5c:ed:cf:b2:f0:
f4:ee:1e:bd:19:91:fb:65:b5:e4:76:9d:fa:95:8b:99:ce:38:
7f:2d:df:e0:21:44:eb:49:e1:5f:28:25:f9:17:11:f6:32:2c:
7d:27:45:74:7a:1a:43:6e:85:bc:53:da:e4:dc:ab:93:13:0a:
a4:4e:08:2f:99:bb:39:1f:19:72:ee:27:a2:c5:04:0d:27:3a:
ea:28:92:75:4f:3e:2c:8f:6a:4a:d9:d2:34:8f:06:86:4a:2b:
3d:20:28:6d:51:8a:40:aa:a5:89:f9:f2:4e:7a:0a:99:55:a2:
b5:ca:c3:08:67:3c:35:84:c0:4c:ff:9c:72:17:01:9a:c9:8b:
59:f1:45:41:d4:fb:db:26:1d:57:a0:cd:48:5e:b2:61:92:12:
74:22:34:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8OgB4Pd/jOOA8JS7U5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNzI1MmViYmIzMzQ4NGFkY2VjNzQwNWFkZWE0ZGUwOGEw
YWZiMDQwHhcNMjUwODIzMTAwMDU2WhcNMjUwODI0MTAwMDU2WjAzMTEwLwYDVQQD
EyhhZjA0NzlmNGZjZDAzODRlOTk3YTY4MDg4M2VmNWNkMmNmNzcyMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8a0zgxwrJrQQSV86oKi83NHaRRu
5CiAxpCmoT4LjSEueLvVXk2gFw4udeDDtmKzyvcp4locbJ9b4s8Tzg0HnBgwZ6zJ
AsV8P4BgmivmxnT2ljAADOMSfmzK5687hcVxHzked5WXWXGcCoqH9APoMxgyrc3/
m3vjt6M2weHhyQ1LJJA7VSuzquPxHaU/cxmXjHwIQJ7O6VVWYWwkdMJL6Q2PGfp8
D3HlLmgiG3zbLYaFhUE5/mEszuKcUnt/OC5qdjTej+tFcOcF2IiSs1sjzOLIBvTK
zi1Lmkz//y0OBBFi98X3GhP9qQSXDTKdbQV4FmNftaqOq15tHKbq57OVDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8EefT80DhOmXpoCIPvXNLPdyNeMB8GA1UdIwQY
MBaAFGFyUuu7M0hK3Ox0Ba3qTeCKCvsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMt
NjYzNWRlYmMzOTVjLzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMtNjYzNWRlYmMzOTVj
LzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4fnlLWV
3NhyxXSlV/tDEI9k53yKUh8cQnG7XY3t4EjaFmyk1GezMWVHLzfzojSe5JUxTHqW
qfBUZhZb27yKunFj6x4xc8H7omsnhqletEg82oqVkPmjU11Zk6jMrjjgt18Y8q6i
4Vztz7Lw9O4evRmR+2W15Had+pWLmc44fy3f4CFE60nhXygl+RcR9jIsfSdFdHoa
Q26FvFPa5NyrkxMKpE4IL5m7OR8Zcu4nosUEDSc66iiSdU8+LI9qStnSNI8Ghkor
PSAobVGKQKqlifnyTnoKmVWitcrDCGc8NYTATP+cchcBmsmLWfFFQdT72yYdV6DN
SF6yYZISdCI0bQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:39 2025 by rpki-client