Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: RrsYJv0Kv9JGQXEspJaaMMdR07aVnqGH577Tr7yzB/k=
Subject key identifier: EA:5A:0B:CC:FF:8F:24:B6:18:AD:25:6D:FD:51:7C:95:77:7D:93:94
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 0198D6CD51F5AEBB9DA51E3669BC624BCB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 15BF
Signing time: Sat 23 Aug 2025 12:00:36 +0000
Manifest this update: Sat 23 Aug 2025 12:00:36 +0000
Manifest next update: Sun 24 Aug 2025 12:00:36 +0000
Files and hashes: 1: kclBuRKTMfByXqrmrwIbc_lZEnM.roa (hash: MQr5fqlXn7Xd/Z8IgiENjDF+OVj4PMx+/5QB1sHm+8E=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: ZW9jdDn3gtzVqAaHBuzMH17UheGBxQALsgxwXEO8u9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:51:f5:ae:bb:9d:a5:1e:36:69:bc:62:4b:cb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Aug 23 12:00:36 2025 GMT
Not After : Aug 24 12:00:36 2025 GMT
Subject: CN=ea5a0bccff8f24b618ad256dfd517c95777d9394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:95:16:5d:8c:05:53:0f:db:e3:87:86:7a:
cf:8a:28:d6:b8:84:a1:0d:81:58:ae:23:79:0c:18:
64:8b:f1:ff:7a:e8:2b:43:3d:80:60:ce:c9:f8:be:
df:76:14:65:78:c8:c2:85:0d:3e:11:be:7f:16:55:
0e:5e:10:87:70:0b:8a:c8:0e:1d:1d:c0:72:ee:e7:
f9:15:a8:90:cf:9d:9e:71:99:59:3e:54:45:c1:51:
9f:c3:69:be:d5:35:c1:9f:75:fb:d9:5c:02:b0:1f:
c7:ef:0d:79:1f:0e:8a:73:cd:4a:32:b3:44:89:9d:
61:26:23:43:37:a4:19:8b:9a:db:be:de:2b:22:2b:
db:d4:28:f5:c8:65:a2:91:de:dd:82:22:8b:e7:bd:
4a:2d:58:ba:30:ef:f3:4c:52:51:67:9b:a8:09:fe:
9d:3d:cb:a9:2d:cb:93:e6:6d:ef:1d:ff:52:f7:4f:
c6:01:21:2e:1e:a5:8d:77:1d:47:35:d7:a6:4f:96:
8c:a1:26:6c:f0:f7:7a:2d:e8:36:a8:03:f1:22:1b:
0b:04:02:3c:39:18:a2:b6:5a:d9:05:1a:f5:22:61:
53:b4:d4:98:0b:b4:75:21:ca:c8:de:d0:9d:80:9f:
b6:78:5f:d3:55:cc:d5:8d:d3:5d:6e:df:fa:b7:20:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5A:0B:CC:FF:8F:24:B6:18:AD:25:6D:FD:51:7C:95:77:7D:93:94
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:74:91:50:6e:8b:17:c5:50:55:74:5e:85:6e:38:b6:84:f3:
e5:8a:ac:45:44:92:ab:9d:99:51:89:d5:df:dc:0b:c1:85:a4:
82:71:93:7e:68:1d:f6:fc:20:47:9f:a8:c4:1f:ba:02:b5:3a:
f8:c7:82:5d:bb:7e:51:af:90:4e:ad:d2:be:69:20:25:66:3e:
13:b2:f6:5c:7e:40:bc:a0:21:db:dc:e4:87:54:01:30:e6:ae:
f2:eb:65:ce:0d:d6:bb:9a:1e:d4:0f:f8:ff:a5:55:fc:36:9d:
03:14:64:1f:08:0a:81:b9:71:f1:5e:4d:4d:1b:e6:55:7f:71:
e1:08:46:6e:31:60:ca:e1:53:98:15:23:c2:21:8f:0e:49:03:
34:7d:42:55:87:7b:50:85:79:6f:7e:24:31:07:3b:0f:9b:11:
0b:9d:7e:55:5d:67:7b:6a:8e:69:0e:85:60:de:5d:15:1a:2f:
2b:86:32:16:0c:0b:7b:8e:2f:0b:53:8b:03:11:30:57:8f:9b:
b5:d1:a0:b0:25:32:ac:c6:dd:df:5a:74:3c:de:02:5d:b0:dc:
95:2d:d1:0f:c1:09:ed:1e:08:1d:06:43:c8:91:d8:98:d4:54:
f7:1b:ec:69:ed:4a:ec:0a:8f:3c:9d:d8:1e:e9:d6:81:d7:35:
04:cb:c7:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzVH1rrudpR42abxiS8uKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZTUwY2ExNzEzNDgzN2E1MGQzMDYzZDQzZDQ0MzM4NWFi
ZTZmNDkwHhcNMjUwODIzMTIwMDM2WhcNMjUwODI0MTIwMDM2WjAzMTEwLwYDVQQD
EyhlYTVhMGJjY2ZmOGYyNGI2MThhZDI1NmRmZDUxN2M5NTc3N2Q5Mzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc+VFl2MBVMP2+OHhnrPiijWuISh
DYFYriN5DBhki/H/eugrQz2AYM7J+L7fdhRleMjChQ0+Eb5/FlUOXhCHcAuKyA4d
HcBy7uf5FaiQz52ecZlZPlRFwVGfw2m+1TXBn3X72VwCsB/H7w15Hw6Kc81KMrNE
iZ1hJiNDN6QZi5rbvt4rIivb1Cj1yGWikd7dgiKL571KLVi6MO/zTFJRZ5uoCf6d
PcupLcuT5m3vHf9S90/GASEuHqWNdx1HNdemT5aMoSZs8Pd6Leg2qAPxIhsLBAI8
ORiitlrZBRr1ImFTtNSYC7R1IcrI3tCdgJ+2eF/TVczVjdNdbt/6tyARFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpaC8z/jyS2GK0lbf1RfJV3fZOUMB8GA1UdIwQY
MBaAFMjlDKFxNIN6UNMGPUPUQzhavm9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUt
NWVmZjczZTg5ZmJiLzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUtNWVmZjczZTg5ZmJi
LzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3SRUG6L
F8VQVXRehW44toTz5YqsRUSSq52ZUYnV39wLwYWkgnGTfmgd9vwgR5+oxB+6ArU6
+MeCXbt+Ua+QTq3SvmkgJWY+E7L2XH5AvKAh29zkh1QBMOau8utlzg3Wu5oe1A/4
/6VV/DadAxRkHwgKgblx8V5NTRvmVX9x4QhGbjFgyuFTmBUjwiGPDkkDNH1CVYd7
UIV5b34kMQc7D5sRC51+VV1ne2qOaQ6FYN5dFRovK4YyFgwLe44vC1OLAxEwV4+b
tdGgsCUyrMbd31p0PN4CXbDclS3RD8EJ7R4IHQZDyJHYmNRU9xvsae1K7AqPPJ3Y
HunWgdc1BMvHnw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:32 2025 by rpki-client