Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier: U4Pse1LZ/7UENeeWIj7CQ5T++9CeYRz28t1rSNOj4eg=
Subject key identifier: 5E:04:DB:35:70:C1:AB:F5:1C:9E:68:D3:2E:93:54:5E:A4:C1:14:B5
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial: 0198D6610033EED5AB6F2C1749FEF28F7C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number: 125A
Signing time: Sat 23 Aug 2025 10:02:17 +0000
Manifest this update: Sat 23 Aug 2025 10:02:17 +0000
Manifest next update: Sun 24 Aug 2025 10:02:17 +0000
Files and hashes: 1: FMnMJSika8qzHn3rA1gugh6bskk.roa (hash: ifB+hpHW1Zidp1iRq+x5utdXKTTiyitHTNMMB+oocZw=)
2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: ZWNknqheod8DN+l7+CDG+1haoITOHO/o1w88p6wrGng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:00:33:ee:d5:ab:6f:2c:17:49:fe:f2:8f:7c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Validity
Not Before: Aug 23 10:02:17 2025 GMT
Not After : Aug 24 10:02:17 2025 GMT
Subject: CN=5e04db3570c1abf51c9e68d32e93545ea4c114b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:01:81:c7:d9:87:ed:0f:5a:8b:08:5d:a6:
59:43:f3:65:8d:ee:f8:de:a9:43:1e:7f:77:5a:c6:
cc:63:01:de:02:94:fc:02:43:de:a6:20:e0:bc:b3:
d8:cf:9e:3c:8e:29:9f:f0:77:8f:2c:03:47:bb:0b:
ed:86:b0:5f:3d:5a:67:69:2a:9d:b2:79:9e:48:e7:
7e:dc:2c:a1:8b:af:88:c9:99:f2:15:42:33:a8:72:
ed:8d:09:ff:ca:e4:c0:9d:1e:c8:87:38:31:f5:e9:
80:c0:75:d1:3e:9d:30:1d:c0:81:fa:2e:b3:76:d2:
35:02:9d:86:14:7c:46:c7:89:d5:fb:1f:61:b0:9a:
b8:93:03:76:5c:15:d8:a0:48:88:40:14:3d:3b:ac:
97:ea:75:a9:ac:9e:48:d1:72:f2:1d:12:0e:8d:75:
45:f5:1c:8f:14:ad:5b:15:6a:e5:c9:3d:4c:eb:92:
e0:5a:e8:7d:a3:3f:58:7f:33:37:4e:ae:90:aa:cc:
6f:12:bb:2a:78:15:65:3d:34:ff:85:d0:3f:ee:80:
b4:ce:03:f7:a7:0d:53:aa:ec:14:b2:f4:49:a6:f6:
2a:f0:ce:92:89:52:a2:17:32:b1:7b:9e:82:f2:2e:
20:11:67:e4:e5:53:11:3d:33:72:fc:1c:4f:b3:1d:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:DB:35:70:C1:AB:F5:1C:9E:68:D3:2E:93:54:5E:A4:C1:14:B5
X509v3 Authority Key Identifier:
keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e8:d5:46:3e:b2:97:2e:de:48:b8:43:0a:9b:0d:50:49:17:
13:c4:57:f8:69:e5:67:35:4d:b2:e8:4c:2c:68:03:56:5f:db:
dc:4c:80:98:ad:d6:20:25:39:2c:1b:e1:47:c7:19:59:df:03:
f3:9c:04:7d:8b:fb:15:a9:60:18:65:b7:5d:a1:e4:6f:00:08:
68:ee:5f:c4:ba:77:8f:f4:6d:f6:cd:16:00:ab:37:bf:a6:7b:
f9:38:1d:fc:f5:24:5b:56:85:d6:c1:fe:2b:6f:71:17:5f:c8:
19:58:df:e6:5b:74:61:fb:1b:0e:cd:ea:12:28:ea:7c:de:02:
84:61:cc:59:ab:13:8f:88:db:04:23:4e:d9:3f:71:6a:54:54:
3d:a6:f2:88:9d:3d:74:73:5b:a5:7e:77:8f:7e:7f:73:01:6e:
8f:13:25:5e:a0:de:ec:fc:b8:d3:25:e9:80:9d:ce:f7:75:33:
1c:24:a2:fc:2f:79:2a:4f:ab:b8:c8:3f:0a:91:c0:42:c7:32:
18:c8:4e:9d:c1:a1:37:6e:3a:c8:3d:bf:3c:7b:74:65:95:c9:
61:70:52:b2:8b:0f:f7:7d:55:e8:49:b8:8e:eb:d3:b6:93:32:
dc:1a:c6:f2:7a:45:47:ba:20:9c:f4:5c:93:a7:d0:62:20:2d:
8b:59:37:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYQAz7tWrbywXSf7yj3whMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl
ZWRiNjQwHhcNMjUwODIzMTAwMjE3WhcNMjUwODI0MTAwMjE3WjAzMTEwLwYDVQQD
Eyg1ZTA0ZGIzNTcwYzFhYmY1MWM5ZTY4ZDMyZTkzNTQ1ZWE0YzExNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylkBgcfZh+0PWosIXaZZQ/Nlje74
3qlDHn93WsbMYwHeApT8AkPepiDgvLPYz548jimf8HePLANHuwvthrBfPVpnaSqd
snmeSOd+3Cyhi6+IyZnyFUIzqHLtjQn/yuTAnR7Ihzgx9emAwHXRPp0wHcCB+i6z
dtI1Ap2GFHxGx4nV+x9hsJq4kwN2XBXYoEiIQBQ9O6yX6nWprJ5I0XLyHRIOjXVF
9RyPFK1bFWrlyT1M65LgWuh9oz9YfzM3Tq6QqsxvErsqeBVlPTT/hdA/7oC0zgP3
pw1TquwUsvRJpvYq8M6SiVKiFzKxe56C8i4gEWfk5VMRPTNy/BxPsx1FZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4E2zVwwav1HJ5o0y6TVF6kwRS1MB8GA1UdIwQY
MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt
ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi
LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOjVRj6y
ly7eSLhDCpsNUEkXE8RX+GnlZzVNsuhMLGgDVl/b3EyAmK3WICU5LBvhR8cZWd8D
85wEfYv7FalgGGW3XaHkbwAIaO5fxLp3j/Rt9s0WAKs3v6Z7+Tgd/PUkW1aF1sH+
K29xF1/IGVjf5lt0YfsbDs3qEijqfN4ChGHMWasTj4jbBCNO2T9xalRUPabyiJ09
dHNbpX53j35/cwFujxMlXqDe7Py40yXpgJ3O93UzHCSi/C95Kk+ruMg/CpHAQscy
GMhOncGhN246yD2/PHt0ZZXJYXBSsosP931V6Em4juvTtpMy3BrG8npFR7ognPRc
k6fQYiAti1k3lQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:09 2025 by rpki-client