Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
File: yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json)
Hash identifier: H+1VMPoi/3cvA085PRSi9QO2fG4PLCngDwzVKH6uKSw=
Subject key identifier: 3D:6E:F4:50:B8:A2:D2:44:84:CD:FF:6E:C9:69:BF:50:08:54:30:45
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial: 0198D4E01E8B3B4D3625F859DBF86154B97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
Manifest number: 15C9
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: 1-uz2QLGD_Zd1L5FYfBI3cC6XHM8.roa (hash: t1w40I15hLlr7dv8d0uJE/Dz2j4qqNVpP8R3SOXwVvk=)
2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: GmdjAOMHNLjmdOYOU6YyBO/gPRTb4qKIBI5jwsp51s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1e:8b:3b:4d:36:25:f8:59:db:f8:61:54:b9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=3d6ef450b8a2d24484cdff6ec969bf5008543045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:c0:98:e3:bc:d4:1b:eb:94:27:23:b0:97:
41:16:4e:bf:ec:a0:d7:81:36:4f:19:68:42:4a:32:
df:5c:61:f1:1d:09:f7:72:46:3e:0a:2c:2d:d5:07:
bf:dd:08:d1:ad:3b:38:e9:e5:56:12:f5:1a:b7:ba:
ee:50:fc:15:be:48:38:3b:22:95:db:6f:41:6c:1c:
24:1d:76:f0:96:15:fb:16:36:0d:f2:72:fb:02:1f:
93:41:20:81:c1:41:c7:0f:7e:65:81:19:b4:43:57:
c5:25:5e:d7:2b:34:dc:6a:bd:68:2f:45:6d:d9:78:
e8:5f:11:4b:b4:94:94:48:7f:72:9e:77:1b:a1:84:
e2:89:8d:dc:e8:49:04:eb:45:64:20:fa:58:55:09:
17:13:cc:38:78:62:be:2e:ed:4f:94:24:f1:6d:14:
ba:0a:72:e5:44:de:b1:58:fd:3d:d7:ff:f4:6d:66:
b0:89:a7:6f:d7:1a:23:ff:36:ba:74:72:38:c3:78:
4a:81:a2:ac:1e:23:87:b4:87:c5:cd:9d:e7:ba:b7:
93:a6:06:0b:5e:c7:a9:ac:95:87:d8:1b:0f:fb:23:
6d:e1:ea:fe:57:3e:f8:d7:75:8d:cf:b2:60:0e:47:
b5:f7:7d:5d:ee:cd:47:c3:47:08:32:b5:90:0b:da:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6E:F4:50:B8:A2:D2:44:84:CD:FF:6E:C9:69:BF:50:08:54:30:45
X509v3 Authority Key Identifier:
keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:da:29:de:fa:82:e7:1b:50:f3:89:b0:37:47:f6:57:08:a0:
39:8c:69:d5:d8:c3:c8:f5:47:46:66:cf:08:ec:90:8a:f8:69:
2a:42:70:eb:d2:dc:41:25:15:0c:9c:69:19:07:36:94:04:20:
74:89:03:ae:f4:c6:63:11:06:d3:2d:20:99:9a:86:19:cc:e2:
b3:54:c1:25:66:36:c3:97:ea:4f:67:2a:80:77:d4:38:a8:34:
9e:68:37:b6:bc:04:d2:70:4b:1b:f2:b0:63:e2:d5:6e:a5:4f:
22:3a:69:cb:55:58:ab:b2:40:3f:2b:ae:45:0d:b3:20:de:09:
40:df:15:7d:8c:4d:23:ff:2e:7c:21:cc:5e:d2:d9:07:f8:78:
a0:7a:e1:76:8a:44:35:40:8f:8b:9b:e5:57:49:6a:28:5d:23:
91:38:a2:8e:e2:81:fc:51:18:fa:33:4d:65:ac:a1:09:54:c4:
2b:bb:41:f4:42:13:a4:8b:b0:90:1a:09:46:c4:17:a3:05:90:
22:c7:22:9f:09:9d:17:91:43:af:be:8d:a9:f2:b4:f4:74:3b:
59:96:94:13:e8:8b:7b:12:29:72:ef:57:f5:aa:ab:53:21:fd:
59:36:45:65:49:bc:5e:1a:4e:87:c9:57:11:29:c0:16:64:f4:
58:5c:04:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4B6LO002JfhZ2/hhVLl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjI0ZWEzODU3MmVhMGRhMDJmNDljZjRkNjdhM2NiYjdj
NmUxNDAwHhcNMjUwODIzMDMwMTU0WhcNMjUwODI0MDMwMTU0WjAzMTEwLwYDVQQD
EygzZDZlZjQ1MGI4YTJkMjQ0ODRjZGZmNmVjOTY5YmY1MDA4NTQzMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8XAmOO81BvrlCcjsJdBFk6/7KDX
gTZPGWhCSjLfXGHxHQn3ckY+Ciwt1Qe/3QjRrTs46eVWEvUat7ruUPwVvkg4OyKV
229BbBwkHXbwlhX7FjYN8nL7Ah+TQSCBwUHHD35lgRm0Q1fFJV7XKzTcar1oL0Vt
2XjoXxFLtJSUSH9ynncboYTiiY3c6EkE60VkIPpYVQkXE8w4eGK+Lu1PlCTxbRS6
CnLlRN6xWP091//0bWawiadv1xoj/za6dHI4w3hKgaKsHiOHtIfFzZ3nureTpgYL
XseprJWH2BsP+yNt4er+Vz7413WNz7JgDke1931d7s1Hw0cIMrWQC9qcLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1u9FC4otJEhM3/bslpv1AIVDBFMB8GA1UdIwQY
MBaAFMsiTqOFcuoNoC9Jz01no8u3xuFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNTAzZWUtNWI4Mi00MjMxLWI1N2Et
MWZkMjliMTA4YTIxLzEveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNTAzZWUtNWI4Mi00MjMxLWI1N2EtMWZkMjliMTA4YTIx
LzEveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9op3vqC
5xtQ84mwN0f2VwigOYxp1djDyPVHRmbPCOyQivhpKkJw69LcQSUVDJxpGQc2lAQg
dIkDrvTGYxEG0y0gmZqGGczis1TBJWY2w5fqT2cqgHfUOKg0nmg3trwE0nBLG/Kw
Y+LVbqVPIjppy1VYq7JAPyuuRQ2zIN4JQN8VfYxNI/8ufCHMXtLZB/h4oHrhdopE
NUCPi5vlV0lqKF0jkTiijuKB/FEY+jNNZayhCVTEK7tB9EITpIuwkBoJRsQXowWQ
IscinwmdF5FDr76NqfK09HQ7WZaUE+iLexIpcu9X9aqrUyH9WTZFZUm8XhpOh8lX
ESnAFmT0WFwEoQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:21 2025 by rpki-client