Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: t368CJmSj1K3qKR0FmqXv+zxiyVmwYvalQFMjKGucT0=
Subject key identifier: EB:70:A1:7B:7F:A8:1D:25:10:FF:7B:11:A1:BB:3B:73:1A:AF:AA:0F
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 0198D583F05F9A84227BD271870D6F4BB7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 120C
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: ITiio8Sk3LMA3Xs8Wfc8VD7obwiVwNcDxkSbs3V4g50=)
2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f0:5f:9a:84:22:7b:d2:71:87:0d:6f:4b:b7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=eb70a17b7fa81d2510ff7b11a1bb3b731aafaa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:7a:5d:69:ba:be:0c:ca:2f:a5:4e:49:07:
c5:45:cb:f9:bc:26:e5:b9:4c:e1:58:b6:29:4c:00:
55:03:bd:26:03:f0:74:2c:57:ae:54:49:72:0e:9e:
55:e2:ce:6c:39:01:52:50:23:3b:3b:d8:ab:e6:8f:
07:9b:a5:02:d5:8c:14:c8:04:d7:b9:8c:5c:4c:dd:
96:f1:c9:7b:74:46:0d:aa:c1:94:28:44:05:8a:67:
1b:4c:cd:fb:bf:c9:c1:bd:f4:47:86:3d:f1:05:39:
e2:3f:9a:d3:f2:30:46:5e:e8:b1:53:45:e4:b0:89:
d4:01:94:cc:19:fa:94:f8:00:f5:31:d1:43:48:c3:
db:65:61:3e:76:67:3f:79:3c:7e:fc:15:27:76:9e:
95:b0:99:55:28:05:34:65:dd:be:28:81:79:94:fe:
59:29:d5:c8:29:a6:ea:41:44:1e:c7:f2:37:ab:bb:
30:08:06:1d:74:bf:4b:65:61:85:16:9a:db:85:4b:
e8:13:54:c5:6b:fc:2b:a0:5b:e8:2c:21:0d:d9:42:
6a:14:7d:0b:41:b8:10:4c:dc:de:74:cc:34:04:96:
9e:09:bb:17:7a:e3:15:ee:90:63:76:2b:c3:59:67:
c1:47:9a:f0:96:94:2a:3b:3c:a5:ed:ff:d8:5d:7c:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:70:A1:7B:7F:A8:1D:25:10:FF:7B:11:A1:BB:3B:73:1A:AF:AA:0F
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:11:e9:db:00:6a:f5:89:48:cd:79:c7:be:f2:89:25:22:cf:
50:42:37:56:63:9e:54:6e:68:bf:0b:40:6b:ad:8d:95:37:be:
9c:40:ed:d5:41:09:26:9d:9c:52:5f:2a:f4:45:0c:7b:c7:cd:
ef:90:f7:d3:97:07:06:4e:94:27:bc:ec:9e:00:3e:28:fb:4d:
6b:19:99:81:1b:ba:3b:4a:4e:a8:62:9b:d8:37:88:b5:45:d5:
8b:09:75:c4:c2:1a:27:e3:7e:9e:3b:99:30:8c:a7:e3:c1:63:
ee:79:38:a3:8f:d9:f2:8c:0c:a7:f0:cf:57:6c:a9:3c:f8:c6:
4a:8d:a7:e1:d1:83:b3:24:ce:66:d2:21:40:b0:15:5e:78:11:
7b:bd:a7:ad:66:39:6e:6a:7e:22:d4:d1:ee:c9:47:b5:b3:b5:
c0:31:e2:55:5d:e2:4e:04:a3:95:1e:ae:79:13:84:06:a5:37:
b2:d5:36:c1:29:c1:57:d7:2c:0e:7a:24:27:0c:da:31:33:45:
33:9c:e2:ed:c3:b8:da:66:09:5a:34:45:d4:4d:fb:4e:99:d7:
03:30:0f:6b:ab:18:54:62:d1:41:e3:5e:a4:2d:2e:cf:74:4f:
ce:16:df:b9:c0:22:6a:fd:50:be:c7:d2:cd:59:5c:3f:bc:cf:
5b:fd:f4:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg/BfmoQie9Jxhw1vS7feMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2Q3YjBlNWZlNmQ2OWI0ZDc5N2RlYzNkMTEyYzQ3Yjhh
MTkyMjQwHhcNMjUwODIzMDYwMDUwWhcNMjUwODI0MDYwMDUwWjAzMTEwLwYDVQQD
EyhlYjcwYTE3YjdmYTgxZDI1MTBmZjdiMTFhMWJiM2I3MzFhYWZhYTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4p6XWm6vgzKL6VOSQfFRcv5vCbl
uUzhWLYpTABVA70mA/B0LFeuVElyDp5V4s5sOQFSUCM7O9ir5o8Hm6UC1YwUyATX
uYxcTN2W8cl7dEYNqsGUKEQFimcbTM37v8nBvfRHhj3xBTniP5rT8jBGXuixU0Xk
sInUAZTMGfqU+AD1MdFDSMPbZWE+dmc/eTx+/BUndp6VsJlVKAU0Zd2+KIF5lP5Z
KdXIKabqQUQex/I3q7swCAYddL9LZWGFFprbhUvoE1TFa/wroFvoLCEN2UJqFH0L
QbgQTNzedMw0BJaeCbsXeuMV7pBjdivDWWfBR5rwlpQqOzyl7f/YXXy5AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtwoXt/qB0lEP97EaG7O3Mar6oPMB8GA1UdIwQY
MBaAFGB9ew5f5tabTXl97D0RLEe4oZIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUt
YWUwNWFlMTI5MWYyLzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUtYWUwNWFlMTI5MWYy
LzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvxHp2wBq
9YlIzXnHvvKJJSLPUEI3VmOeVG5ovwtAa62NlTe+nEDt1UEJJp2cUl8q9EUMe8fN
75D305cHBk6UJ7zsngA+KPtNaxmZgRu6O0pOqGKb2DeItUXViwl1xMIaJ+N+njuZ
MIyn48Fj7nk4o4/Z8owMp/DPV2ypPPjGSo2n4dGDsyTOZtIhQLAVXngRe72nrWY5
bmp+ItTR7slHtbO1wDHiVV3iTgSjlR6ueROEBqU3stU2wSnBV9csDnokJwzaMTNF
M5zi7cO42mYJWjRF1E37TpnXAzAPa6sYVGLRQeNepC0uz3RPzhbfucAiav1QvsfS
zVlcP7zPW/30gA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:24 2025 by rpki-client