Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
File: ys4LZXV7SJmVtfwzShRV5KNfBks.mft (raw, json)
Hash identifier: vSwJ4zTFeaxFn9acFL6tS4jqslQ76Q0btVORHcmtGv8=
Subject key identifier: 9B:D4:02:FC:63:B0:C0:EA:53:3C:CB:0D:A5:10:A2:F3:16:6F:A7:96
Authority key identifier: CA:CE:0B:65:75:7B:48:99:95:B5:FC:33:4A:14:55:E4:A3:5F:06:4B
Certificate issuer: /CN=cace0b65757b489995b5fc334a1455e4a35f064b
Certificate serial: 0198D4046D0F16CBD4AB7307B27D8DFF7EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
Manifest number: B0
Signing time: Fri 22 Aug 2025 23:01:56 +0000
Manifest this update: Fri 22 Aug 2025 23:01:56 +0000
Manifest next update: Sat 23 Aug 2025 23:01:56 +0000
Files and hashes: 1: ys4LZXV7SJmVtfwzShRV5KNfBks.crl (hash: XyLluzxvsIHj5pXNaslR1kLg+41n/vQGVDDe11O5oX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:6d:0f:16:cb:d4:ab:73:07:b2:7d:8d:ff:7e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cace0b65757b489995b5fc334a1455e4a35f064b
Validity
Not Before: Aug 22 23:01:56 2025 GMT
Not After : Aug 23 23:01:56 2025 GMT
Subject: CN=9bd402fc63b0c0ea533ccb0da510a2f3166fa796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:b3:b6:a3:66:11:93:38:de:91:97:92:78:
53:37:fe:27:7b:ed:44:15:c8:9d:27:7c:73:a6:d6:
aa:cb:22:f8:c8:6b:52:8d:a9:bc:b6:02:2f:e3:05:
d2:2f:03:00:46:e5:4a:53:05:78:a9:30:49:75:99:
cc:19:54:a2:fb:ff:d6:8d:ba:d9:46:d6:d2:bf:49:
4a:12:c3:8e:dd:10:c8:76:50:cd:c4:49:9b:c9:95:
de:35:28:9d:fd:05:e3:4b:0f:5d:3f:24:f0:34:5a:
f9:71:3a:3b:00:dc:cd:19:52:70:72:49:07:c8:c0:
0d:07:b6:06:59:a7:c3:fe:04:c6:c8:a6:16:f5:11:
c4:35:03:2c:9c:1a:fa:86:78:20:11:18:63:23:38:
ce:80:34:f7:ca:96:89:f6:f0:15:5b:8a:bc:36:38:
bd:68:4c:98:df:87:d2:fc:9a:b1:81:29:13:97:bd:
61:14:2b:d7:6d:1a:fc:06:c2:3c:07:02:0e:75:bf:
94:3b:d1:58:0d:4c:01:d5:61:ea:b6:55:54:79:39:
39:d1:f3:d9:ad:73:fc:c1:d9:cc:c8:4b:10:9c:7a:
20:79:82:93:e7:c4:c7:a8:24:ce:dd:fd:de:1a:19:
f0:b3:b7:3a:9c:4c:b5:0f:07:a3:61:f2:e0:8a:76:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D4:02:FC:63:B0:C0:EA:53:3C:CB:0D:A5:10:A2:F3:16:6F:A7:96
X509v3 Authority Key Identifier:
keyid:CA:CE:0B:65:75:7B:48:99:95:B5:FC:33:4A:14:55:E4:A3:5F:06:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0b:6a:65:cc:a1:c7:3b:af:1b:31:2e:5b:98:4f:c6:6d:90:
f5:9c:a9:1e:a4:52:38:66:82:7a:0d:a7:93:ac:17:89:06:da:
42:d8:82:42:07:f3:ef:ce:1c:20:f9:c4:eb:50:ed:4b:09:b6:
2b:a2:33:c1:7b:05:95:6d:43:4a:25:05:03:e4:d3:89:35:48:
cb:46:b1:c1:80:78:b2:ce:dc:9e:88:9b:aa:33:af:77:ac:8f:
d4:7c:71:07:46:97:44:8a:0c:1c:3c:8a:a5:14:5b:f5:fb:0c:
78:39:3b:77:e7:57:cf:3d:9d:80:b1:ee:c8:07:50:5e:f8:70:
b5:34:5f:a9:4e:8b:40:8c:06:95:b3:63:21:47:d4:14:12:f5:
32:a0:13:40:94:ec:82:13:72:b2:b4:c1:8e:b3:b5:c1:03:06:
74:d2:6f:47:81:11:6f:02:99:84:71:03:41:05:57:e7:97:5e:
ef:52:78:4e:19:6c:bb:0b:5b:40:5e:f9:91:ac:8d:29:28:3b:
b9:0b:b0:d0:37:b4:7b:bc:a6:7c:d7:46:72:1f:4e:06:95:9f:
02:50:b6:cf:bf:df:96:47:cb:95:02:5e:9e:ab:cf:34:f2:ba:
a0:83:02:30:a2:8d:0c:c2:80:a9:97:f8:39:7a:25:8d:e9:b0:
77:e0:59:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBG0PFsvUq3MHsn2N/376MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhY2UwYjY1NzU3YjQ4OTk5NWI1ZmMzMzRhMTQ1NWU0YTM1
ZjA2NGIwHhcNMjUwODIyMjMwMTU2WhcNMjUwODIzMjMwMTU2WjAzMTEwLwYDVQQD
Eyg5YmQ0MDJmYzYzYjBjMGVhNTMzY2NiMGRhNTEwYTJmMzE2NmZhNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7iztqNmEZM43pGXknhTN/4ne+1E
FcidJ3xzptaqyyL4yGtSjam8tgIv4wXSLwMARuVKUwV4qTBJdZnMGVSi+//WjbrZ
RtbSv0lKEsOO3RDIdlDNxEmbyZXeNSid/QXjSw9dPyTwNFr5cTo7ANzNGVJwckkH
yMANB7YGWafD/gTGyKYW9RHENQMsnBr6hnggERhjIzjOgDT3ypaJ9vAVW4q8Nji9
aEyY34fS/JqxgSkTl71hFCvXbRr8BsI8BwIOdb+UO9FYDUwB1WHqtlVUeTk50fPZ
rXP8wdnMyEsQnHogeYKT58THqCTO3f3eGhnws7c6nEy1DwejYfLginZguwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvUAvxjsMDqUzzLDaUQovMWb6eWMB8GA1UdIwQY
MBaAFMrOC2V1e0iZlbX8M0oUVeSjXwZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXM0TFpYVjdTSm1WdGZ3elNoUlY1S05mQmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iZWQ5OWMtNmMyMi00NDk3LWE0ZDct
Y2UwOTYyYjI2YjhhLzEveXM0TFpYVjdTSm1WdGZ3elNoUlY1S05mQmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iZWQ5OWMtNmMyMi00NDk3LWE0ZDctY2UwOTYyYjI2Yjhh
LzEveXM0TFpYVjdTSm1WdGZ3elNoUlY1S05mQmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQtqZcyh
xzuvGzEuW5hPxm2Q9ZypHqRSOGaCeg2nk6wXiQbaQtiCQgfz784cIPnE61DtSwm2
K6IzwXsFlW1DSiUFA+TTiTVIy0axwYB4ss7cnoibqjOvd6yP1HxxB0aXRIoMHDyK
pRRb9fsMeDk7d+dXzz2dgLHuyAdQXvhwtTRfqU6LQIwGlbNjIUfUFBL1MqATQJTs
ghNysrTBjrO1wQMGdNJvR4ERbwKZhHEDQQVX55de71J4ThlsuwtbQF75kayNKSg7
uQuw0De0e7ymfNdGch9OBpWfAlC2z7/flkfLlQJenqvPNPK6oIMCMKKNDMKAqZf4
OXoljemwd+BZfw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:25 2025 by rpki-client