Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: LNRhEfEXW1dMFlij+zFvqfkg0oddyI1u81i7MlrRijI=
Subject key identifier: EE:03:12:02:57:48:F5:4A:8F:EB:07:42:26:1D:E4:18:BC:89:57:A8
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 0198D8BDEEF110EB2FA38A098102401201B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 05E1
Signing time: Sat 23 Aug 2025 21:03:02 +0000
Manifest this update: Sat 23 Aug 2025 21:03:02 +0000
Manifest next update: Sun 24 Aug 2025 21:03:02 +0000
Files and hashes: 1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: Lid8CJslHJKGY3q/KK8mLzXLrRIss/AeUuYPn36rDQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:ee:f1:10:eb:2f:a3:8a:09:81:02:40:12:01:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Aug 23 21:03:02 2025 GMT
Not After : Aug 24 21:03:02 2025 GMT
Subject: CN=ee0312025748f54a8feb0742261de418bc8957a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:66:82:03:b2:1b:b9:15:d6:e0:f0:dc:61:3d:
3e:cf:dd:1b:0c:1c:03:ac:8e:dd:26:a7:d9:a0:cc:
a3:8c:38:0e:19:9b:e9:c7:62:75:94:21:cd:03:30:
ce:89:7a:80:74:11:6f:74:3e:fd:7c:db:c5:16:0d:
82:31:79:67:ac:6d:91:cb:d3:b0:b4:95:00:b5:00:
6c:ff:7e:56:c9:a8:c9:0a:c6:fd:d5:3c:20:1a:15:
36:40:17:0d:d9:eb:de:ff:99:17:ff:95:09:69:aa:
15:9b:8b:b3:f3:7e:93:c5:40:b6:f7:85:44:93:e9:
95:b7:38:f9:6c:a2:45:6f:ca:94:67:ca:cb:49:12:
f1:c8:d7:0d:dc:12:f4:45:79:99:f9:65:50:f0:22:
49:95:b6:58:5f:0e:d2:e0:2b:59:1d:25:74:a1:d2:
24:b1:e8:c5:b2:f3:30:10:ef:e4:31:3e:84:50:59:
db:15:7f:85:fb:97:7d:fd:cd:12:a0:03:74:34:d7:
0b:c7:c0:ad:f2:7c:ee:70:11:20:8a:c9:3c:e4:72:
3d:a3:fa:d7:df:f7:6c:10:9e:d9:6f:be:2d:21:90:
1d:0d:d7:28:6d:cd:b5:44:07:ba:9d:91:f9:80:c4:
00:c4:8b:6d:79:db:99:2e:32:90:2a:61:b2:5a:7a:
c8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:03:12:02:57:48:F5:4A:8F:EB:07:42:26:1D:E4:18:BC:89:57:A8
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:34:4d:f5:94:94:86:3a:2d:fb:db:65:6c:d4:e6:2a:72:ac:
46:95:88:44:8d:2a:8e:3f:cc:29:30:a5:c5:8b:91:d6:98:60:
a5:43:bd:2d:68:10:e5:75:57:ab:61:d3:be:8b:78:4d:d9:18:
0e:bc:8f:85:06:1a:90:af:ae:f6:25:87:c2:d0:c7:a7:60:41:
7a:ac:35:41:d2:0b:b1:33:f2:c0:2b:63:f7:4c:cc:92:8d:e4:
14:4e:6f:74:64:35:55:5b:f8:39:37:2b:b3:4d:51:dc:0e:5b:
85:02:67:e5:80:d7:9a:de:2f:c0:14:34:f3:4f:d4:2b:05:64:
04:3b:79:23:b5:1a:bc:5c:8a:8b:3e:dd:8b:4a:85:eb:e2:8d:
82:b7:13:57:88:fd:4d:2c:67:cf:0b:64:43:3a:59:8f:1a:f3:
46:c0:56:0d:9b:84:b2:87:62:b5:8e:de:ac:7d:1d:10:07:ea:
e3:06:ba:f8:2b:e2:73:dc:c6:23:58:c3:23:a2:d6:44:5e:f6:
8a:20:13:6c:23:58:3b:7c:c4:13:fd:4c:07:c9:d2:a0:53:e8:
2e:72:97:d8:cd:45:69:72:ff:6e:51:63:cd:3b:79:5b:cb:d8:
ad:cc:1b:58:19:80:48:85:70:cb:e1:47:aa:c3:28:ab:96:51:
18:be:3e:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYve7xEOsvo4oJgQJAEgGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZWI1ZmI3MzNhYmIzZTA3ZDc1ZmE4MGQ3YmU5Y2IxODEz
Y2QzZTAwHhcNMjUwODIzMjEwMzAyWhcNMjUwODI0MjEwMzAyWjAzMTEwLwYDVQQD
EyhlZTAzMTIwMjU3NDhmNTRhOGZlYjA3NDIyNjFkZTQxOGJjODk1N2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WaCA7IbuRXW4PDcYT0+z90bDBwD
rI7dJqfZoMyjjDgOGZvpx2J1lCHNAzDOiXqAdBFvdD79fNvFFg2CMXlnrG2Ry9Ow
tJUAtQBs/35WyajJCsb91TwgGhU2QBcN2eve/5kX/5UJaaoVm4uz836TxUC294VE
k+mVtzj5bKJFb8qUZ8rLSRLxyNcN3BL0RXmZ+WVQ8CJJlbZYXw7S4CtZHSV0odIk
sejFsvMwEO/kMT6EUFnbFX+F+5d9/c0SoAN0NNcLx8Ct8nzucBEgisk85HI9o/rX
3/dsEJ7Zb74tIZAdDdcobc21RAe6nZH5gMQAxItteduZLjKQKmGyWnrIjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4DEgJXSPVKj+sHQiYd5Bi8iVeoMB8GA1UdIwQY
MBaAFMvrX7czq7PgfXX6gNe+nLGBPNPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQt
MmNjZmIzYjQxMjYwLzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQtMmNjZmIzYjQxMjYw
LzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjRN9ZSU
hjot+9tlbNTmKnKsRpWIRI0qjj/MKTClxYuR1phgpUO9LWgQ5XVXq2HTvot4TdkY
DryPhQYakK+u9iWHwtDHp2BBeqw1QdILsTPywCtj90zMko3kFE5vdGQ1VVv4OTcr
s01R3A5bhQJn5YDXmt4vwBQ080/UKwVkBDt5I7UavFyKiz7di0qF6+KNgrcTV4j9
TSxnzwtkQzpZjxrzRsBWDZuEsoditY7erH0dEAfq4wa6+Cvic9zGI1jDI6LWRF72
iiATbCNYO3zEE/1MB8nSoFPoLnKX2M1FaXL/blFjzTt5W8vYrcwbWBmASIVwy+FH
qsMoq5ZRGL4+cQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:06:16 2025 by rpki-client