Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File: y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier: lJ/flt1oQbuQOG18SZPllWpRYRiWGOl+JWQBP3B1Rao=
Subject key identifier: 45:7A:B5:0F:2B:D1:BD:29:FD:C3:AE:FA:8B:FE:10:C8:C0:2C:A0:86
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 0198D5F1517D9F0FC305C6FC23F293522D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: DEsj2pi06b/1byp3Z7kR1TawDEFi9CtIcHSjZQIIhoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:51:7d:9f:0f:c3:05:c6:fc:23:f2:93:52:2d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=457ab50f2bd1bd29fdc3aefa8bfe10c8c02ca086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:ce:ed:e0:e4:b9:69:87:1d:7d:1b:f2:ce:
24:37:c1:58:23:cf:f6:e7:16:f9:5b:86:c0:55:3d:
73:75:c3:4b:b2:ef:79:bc:82:10:2d:ec:23:63:77:
04:59:1d:9c:c2:a6:5b:3a:ca:d1:15:78:30:8c:89:
ba:9f:ea:63:e4:55:c2:84:b8:d0:a4:d6:c1:69:b2:
7a:4c:60:69:c1:ad:44:97:f3:a9:82:a9:17:ac:86:
81:f3:82:71:e8:b8:64:79:77:23:cb:02:d1:2b:1d:
df:83:dc:3c:15:52:c1:70:80:6d:84:e3:ed:b3:1f:
84:44:38:88:25:7b:ba:fa:70:63:b2:e1:e5:86:79:
9a:d2:45:68:21:9b:7f:ce:09:dd:20:9d:16:58:dc:
14:94:ea:7d:1b:59:b4:30:0d:59:09:cb:b7:cc:50:
ed:f9:42:df:b1:19:dd:88:d3:92:9c:df:4b:cb:3f:
f8:1e:25:bb:12:ff:d8:21:99:dd:25:f8:96:0f:c7:
4c:20:a1:6b:b9:41:76:32:7e:85:c1:63:82:b8:5e:
fc:1e:eb:81:09:16:a4:5d:4f:8c:44:03:0d:03:dd:
e3:70:ff:73:3e:90:ac:47:7f:87:84:f3:4f:24:89:
df:cb:1d:61:74:fe:02:7f:0b:9d:d3:6f:32:37:3a:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7A:B5:0F:2B:D1:BD:29:FD:C3:AE:FA:8B:FE:10:C8:C0:2C:A0:86
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:77:91:27:28:7f:02:51:97:9d:e1:e4:28:a7:a5:a0:28:c3:
08:4f:e0:07:de:b8:01:15:dd:75:27:7f:18:a0:9c:48:d1:8d:
76:f7:ef:d1:58:1b:b3:30:2f:ff:3f:6e:a2:49:6b:12:d8:9e:
c6:fe:c9:a6:83:39:79:f9:f4:d6:38:a5:cf:11:d4:7d:4d:b2:
9a:2a:80:cd:63:81:ad:19:14:6f:57:82:bb:17:70:a4:a3:53:
d1:51:83:54:6b:d2:a1:53:4e:0b:c0:be:fc:b6:3e:39:b6:5d:
9b:d4:25:b6:48:46:d1:2f:77:f2:97:b7:d8:f1:bf:10:5e:98:
8c:5a:eb:03:69:af:21:7e:a7:b6:6a:4a:13:f4:b6:94:64:8d:
c2:59:95:97:b1:56:5b:93:ae:7c:a9:ba:44:c8:36:7f:d2:a7:
aa:b7:db:ad:d8:5f:54:28:1f:1b:74:a3:62:f0:1a:66:dc:c9:
fd:2a:49:f8:e3:41:61:fe:50:5f:ee:2f:81:4a:60:05:fd:fe:
fa:17:5c:00:bb:c1:4d:a2:1f:71:cd:81:17:cc:8c:1f:16:f6:
ba:5f:47:a0:2e:43:55:c5:3b:a0:1a:36:05:19:9a:3f:d0:cc:
18:12:0e:17:39:ac:22:fe:dc:c8:0d:89:2b:cd:70:fd:43:ed:
59:6e:17:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8VF9nw/DBcb8I/KTUi1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmYyMDQwZDk0Yzk5NWIwNDYxZGM1MTE0YTRjMDg3MzUx
ZTk5ZjIwHhcNMjUwODIzMDgwMDE4WhcNMjUwODI0MDgwMDE4WjAzMTEwLwYDVQQD
Eyg0NTdhYjUwZjJiZDFiZDI5ZmRjM2FlZmE4YmZlMTBjOGMwMmNhMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3bO7eDkuWmHHX0b8s4kN8FYI8/2
5xb5W4bAVT1zdcNLsu95vIIQLewjY3cEWR2cwqZbOsrRFXgwjIm6n+pj5FXChLjQ
pNbBabJ6TGBpwa1El/OpgqkXrIaB84Jx6LhkeXcjywLRKx3fg9w8FVLBcIBthOPt
sx+ERDiIJXu6+nBjsuHlhnma0kVoIZt/zgndIJ0WWNwUlOp9G1m0MA1ZCcu3zFDt
+ULfsRndiNOSnN9Lyz/4HiW7Ev/YIZndJfiWD8dMIKFruUF2Mn6FwWOCuF78HuuB
CRakXU+MRAMNA93jcP9zPpCsR3+HhPNPJInfyx1hdP4Cfwud028yNzoDqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV6tQ8r0b0p/cOu+ov+EMjALKCGMB8GA1UdIwQY
MBaAFMtvIEDZTJlbBGHcURSkwIc1HpnyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81MTRhYTUtYzUxZC00OGIxLWFlMDYt
MTk4MDhiZjQ0NDcxLzEveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81MTRhYTUtYzUxZC00OGIxLWFlMDYtMTk4MDhiZjQ0NDcx
LzEveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwneRJyh/
AlGXneHkKKeloCjDCE/gB964ARXddSd/GKCcSNGNdvfv0VgbszAv/z9uoklrEtie
xv7JpoM5efn01jilzxHUfU2ymiqAzWOBrRkUb1eCuxdwpKNT0VGDVGvSoVNOC8C+
/LY+ObZdm9QltkhG0S938pe32PG/EF6YjFrrA2mvIX6ntmpKE/S2lGSNwlmVl7FW
W5OufKm6RMg2f9KnqrfbrdhfVCgfG3SjYvAaZtzJ/SpJ+ONBYf5QX+4vgUpgBf3+
+hdcALvBTaIfcc2BF8yMHxb2ul9HoC5DVcU7oBo2BRmaP9DMGBIOFzmsIv7cyA2J
K81w/UPtWW4XXQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:32 2025 by rpki-client