Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier: Ni3ta0ZgMBRrJB3FCIAIxRGNGGGmw6ziAv4pDJL8iM4=
Subject key identifier: F8:EF:CF:0A:82:30:79:C4:ED:BB:C3:83:B5:D4:45:0D:42:62:7B:F3
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 0198D4E0C5E9F9706B57A585F0BBD807D8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 03:02:37 +0000
Manifest this update: Sat 23 Aug 2025 03:02:37 +0000
Manifest next update: Sun 24 Aug 2025 03:02:37 +0000
Files and hashes: 1: 08KPrzvK2WRWpD6p5CJ-Ul7cl9I.roa (hash: sfh9qqw8GmrlQX4Jo45lPqyd4sncTsU6nFud/SZKyQU=)
2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=)
3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: Mn92brZIUVREYTz2BRV1UCz/gusk8gJB8cvPOKSuB10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c5:e9:f9:70:6b:57:a5:85:f0:bb:d8:07:d8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Aug 23 03:02:37 2025 GMT
Not After : Aug 24 03:02:37 2025 GMT
Subject: CN=f8efcf0a823079c4edbbc383b5d4450d42627bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:64:ee:59:ee:31:89:a8:f3:b3:69:69:24:
a3:a9:02:f2:07:f2:99:a5:a0:29:fb:c1:4e:6a:41:
03:59:05:0a:11:8d:c5:b2:f9:c9:e3:76:62:cb:32:
89:ba:c5:70:df:61:13:28:b4:ee:0a:e0:db:d7:15:
33:b0:82:9a:95:5f:e6:c0:af:01:73:3e:d2:5d:4a:
12:e0:2f:ee:cf:a4:89:13:bd:42:1c:2b:c3:ad:b3:
58:29:b3:8b:86:b6:bc:57:17:fe:6a:3c:39:d7:2f:
d2:dc:c8:cc:8a:46:92:02:ce:88:51:98:ba:06:73:
f9:f6:f2:b0:e0:f2:28:45:13:bf:80:de:e9:55:c3:
ae:79:08:5f:d1:fb:86:89:91:2d:ec:da:16:1b:b3:
f4:38:e3:4a:4a:d5:77:85:7a:72:ac:d8:95:fd:03:
c5:a5:05:09:d3:c6:48:07:8e:70:f0:d8:98:ab:3f:
b5:06:86:74:28:d0:9a:84:0e:59:2a:c0:32:15:8e:
e3:c8:78:f4:8f:b1:1f:8d:6c:2b:29:08:92:b3:c0:
e8:ef:2a:cf:53:e4:32:26:93:6a:bf:d3:3e:47:33:
e9:e7:bc:ee:b1:d8:c4:f7:c8:26:11:32:78:22:ff:
f4:09:30:cc:97:21:4f:2a:a6:18:eb:a7:a3:30:f0:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EF:CF:0A:82:30:79:C4:ED:BB:C3:83:B5:D4:45:0D:42:62:7B:F3
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:80:00:bc:9e:9a:b7:27:ba:f7:d9:61:8a:bc:b1:a3:dd:87:
0a:08:65:2d:46:da:72:1e:8f:bc:93:5e:70:da:85:f6:25:82:
4c:5e:b7:34:21:4a:f5:f5:62:32:03:ca:d0:8b:93:7b:e9:8c:
1a:85:c5:8e:8f:75:08:f8:e0:f5:74:4a:28:5e:60:54:a2:1d:
14:f4:fe:42:c8:92:37:3c:09:5e:8e:b4:bf:01:95:77:64:08:
1d:e2:de:51:79:be:0f:91:38:58:8c:d1:c3:50:2a:60:b8:6b:
7e:6a:65:5f:21:ef:bd:0b:d1:16:47:9b:c4:cc:b6:f9:bd:79:
a6:6a:50:7a:c5:cd:6f:84:ce:11:7a:68:d8:3a:a6:46:a0:fe:
a8:a5:a7:e2:8b:c9:c3:d6:34:25:ec:94:5e:31:7a:d1:63:09:
a2:59:8e:c5:f3:7e:38:06:4e:e7:fb:4f:ac:ad:ee:85:3d:e6:
53:31:18:f4:00:88:fa:4a:80:b2:84:dd:3e:a1:40:fb:19:54:
11:15:fa:a0:f9:f3:06:6c:2f:86:11:9a:e7:c9:16:26:11:06:
8c:c1:06:b7:e8:26:bf:c1:78:5e:6e:6e:fb:57:30:ea:9e:9d:
c7:b5:49:97:04:47:bc:d7:5f:57:cb:1b:d8:89:0f:2b:72:ce:
02:ba:02:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4MXp+XBrV6WF8LvYB9jIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGNiNjk1YzcwZGI0Yjk2MzcwNjAwNzUwOTE4YTRiM2E4
YTIxYTkwHhcNMjUwODIzMDMwMjM3WhcNMjUwODI0MDMwMjM3WjAzMTEwLwYDVQQD
EyhmOGVmY2YwYTgyMzA3OWM0ZWRiYmMzODNiNWQ0NDUwZDQyNjI3YmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jtk7lnuMYmo87NpaSSjqQLyB/KZ
paAp+8FOakEDWQUKEY3FsvnJ43ZiyzKJusVw32ETKLTuCuDb1xUzsIKalV/mwK8B
cz7SXUoS4C/uz6SJE71CHCvDrbNYKbOLhra8Vxf+ajw51y/S3MjMikaSAs6IUZi6
BnP59vKw4PIoRRO/gN7pVcOueQhf0fuGiZEt7NoWG7P0OONKStV3hXpyrNiV/QPF
pQUJ08ZIB45w8NiYqz+1BoZ0KNCahA5ZKsAyFY7jyHj0j7EfjWwrKQiSs8Do7yrP
U+QyJpNqv9M+RzPp57zusdjE98gmETJ4Iv/0CTDMlyFPKqYY66ejMPBQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjvzwqCMHnE7bvDg7XURQ1CYnvzMB8GA1UdIwQY
MBaAFMnctpXHDbS5Y3BgB1CRiks6iiGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTIt
ZWNhOTc4YzNjYjg1LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTItZWNhOTc4YzNjYjg1
LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoAAvJ6a
tye699lhiryxo92HCghlLUbach6PvJNecNqF9iWCTF63NCFK9fViMgPK0IuTe+mM
GoXFjo91CPjg9XRKKF5gVKIdFPT+QsiSNzwJXo60vwGVd2QIHeLeUXm+D5E4WIzR
w1AqYLhrfmplXyHvvQvRFkebxMy2+b15pmpQesXNb4TOEXpo2DqmRqD+qKWn4ovJ
w9Y0JeyUXjF60WMJolmOxfN+OAZO5/tPrK3uhT3mUzEY9ACI+kqAsoTdPqFA+xlU
ERX6oPnzBmwvhhGa58kWJhEGjMEGt+gmv8F4Xm5u+1cw6p6dx7VJlwRHvNdfV8sb
2IkPK3LOAroCRg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:55 2025 by rpki-client