
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: kagFnKY/y+lQhVYvSQn47uEu+i5lVW/BDHqRGkmi5+c=
Subject key identifier: F1:66:82:7A:D9:3E:DE:91:C3:44:8F:D8:C9:D6:EB:10:E0:D8:EA:A6
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 0198D5F13D00B7ABCE35A8C6BF14A5DF4BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: JVTx7HRqtduGHpSzolLJRTz+qIRRbKcX/uBnlgmPokE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3d:00:b7:ab:ce:35:a8:c6:bf:14:a5:df:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=f166827ad93ede91c3448fd8c9d6eb10e0d8eaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:e8:0e:69:c9:36:0e:da:43:6e:33:e4:7e:
7c:5b:28:c3:af:96:d2:09:bb:62:65:af:e4:3d:76:
6e:70:2e:12:45:4c:ce:43:93:5a:1b:79:08:d8:f1:
b2:c6:89:e8:63:bb:04:fa:33:30:19:6a:75:03:c0:
c0:51:e8:94:91:7a:56:8f:6e:a6:ef:47:7e:81:16:
89:95:13:07:b9:4a:d9:ed:9d:49:4a:40:38:04:1a:
4f:48:9a:5f:7f:c5:87:cb:d8:80:af:b0:93:50:18:
b0:1b:f7:a2:36:45:2d:39:c2:64:d9:5d:d3:31:13:
c1:18:4e:e7:a9:c9:ce:9c:dc:a5:64:12:3d:d8:5e:
b2:7a:c2:11:4b:19:51:f5:55:91:04:92:78:31:47:
59:1b:22:89:b2:71:2e:e1:4a:63:82:0b:48:84:9b:
18:f2:01:e5:96:67:50:6a:b6:31:cc:56:94:bf:88:
93:7b:43:22:9b:d1:a7:09:da:3c:77:9e:04:51:1c:
54:86:13:d9:3e:e5:cf:19:f1:41:6d:37:0b:ff:97:
13:af:e7:17:b2:ea:e5:f0:04:4f:f9:45:6e:48:83:
12:83:10:ff:f3:45:d1:41:51:72:18:77:56:34:3b:
e9:70:05:21:1c:5e:d6:6c:35:b0:85:a2:9f:64:78:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:82:7A:D9:3E:DE:91:C3:44:8F:D8:C9:D6:EB:10:E0:D8:EA:A6
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:eb:6d:a7:d3:4b:aa:cf:0d:00:54:de:78:86:09:f7:be:
5b:0d:8b:41:cd:62:57:56:f7:ed:07:38:5c:59:5d:49:16:25:
d5:f7:07:00:73:2b:05:23:c1:fe:97:df:59:8d:c2:c8:b1:16:
e3:1e:9c:ff:c5:af:a6:eb:3b:14:ea:ff:5f:3e:22:28:e1:85:
38:03:83:bb:20:9c:70:c2:c4:73:ae:b7:2e:36:1a:50:c8:42:
85:04:69:dd:77:b7:c3:e5:ca:b7:a6:11:dc:ff:c4:42:17:8c:
3c:f9:b6:fa:75:31:f6:bf:44:e2:28:fb:16:f1:c2:bc:d3:44:
ca:f8:a2:ce:bf:89:ab:f6:e9:bb:a3:7d:ce:37:f6:90:0c:50:
67:06:c9:ee:0b:5f:02:73:50:a7:9b:dc:c6:39:8b:39:de:94:
fe:17:26:2d:6d:56:6f:95:d8:80:ad:36:fc:51:f4:ca:31:8e:
93:a8:62:1d:7e:ca:15:a7:fd:fb:7d:6c:84:99:fb:ab:50:e6:
41:fa:cf:42:35:22:4c:12:5e:31:c5:fb:8b:59:bc:a3:ad:5b:
15:76:d4:c1:df:dc:5f:a6:38:2d:5f:21:79:ff:04:ac:4c:e3:
b4:1d:7c:10:95:d7:c8:5a:2a:58:13:71:59:06:73:29:1d:10:
25:05:92:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8T0At6vONajGvxSl30v9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNWUzZWM1YTkwNjIzY2NiOTc3ODRkM2NlZjI0MjEyYTMx
Y2JhZjEwHhcNMjUwODIzMDgwMDEzWhcNMjUwODI0MDgwMDEzWjAzMTEwLwYDVQQD
EyhmMTY2ODI3YWQ5M2VkZTkxYzM0NDhmZDhjOWQ2ZWIxMGUwZDhlYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHLoDmnJNg7aQ24z5H58WyjDr5bS
CbtiZa/kPXZucC4SRUzOQ5NaG3kI2PGyxonoY7sE+jMwGWp1A8DAUeiUkXpWj26m
70d+gRaJlRMHuUrZ7Z1JSkA4BBpPSJpff8WHy9iAr7CTUBiwG/eiNkUtOcJk2V3T
MRPBGE7nqcnOnNylZBI92F6yesIRSxlR9VWRBJJ4MUdZGyKJsnEu4UpjggtIhJsY
8gHllmdQarYxzFaUv4iTe0Mim9GnCdo8d54EURxUhhPZPuXPGfFBbTcL/5cTr+cX
surl8ARP+UVuSIMSgxD/80XRQVFyGHdWNDvpcAUhHF7WbDWwhaKfZHg0RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFmgnrZPt6Rw0SP2MnW6xDg2OqmMB8GA1UdIwQY
MBaAFMpePsWpBiPMuXeE087yQhKjHLrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMt
NmYzMWY2ZjdmMTZiLzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMtNmYzMWY2ZjdmMTZi
LzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0vrbafT
S6rPDQBU3niGCfe+Ww2LQc1iV1b37Qc4XFldSRYl1fcHAHMrBSPB/pffWY3CyLEW
4x6c/8Wvpus7FOr/Xz4iKOGFOAODuyCccMLEc663LjYaUMhChQRp3Xe3w+XKt6YR
3P/EQheMPPm2+nUx9r9E4ij7FvHCvNNEyviizr+Jq/bpu6N9zjf2kAxQZwbJ7gtf
AnNQp5vcxjmLOd6U/hcmLW1Wb5XYgK02/FH0yjGOk6hiHX7KFaf9+31shJn7q1Dm
QfrPQjUiTBJeMcX7i1m8o61bFXbUwd/cX6Y4LV8hef8ErEzjtB18EJXXyFoqWBNx
WQZzKR0QJQWSLQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:07 2025 by rpki-client