Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: yQlZdX56RexJjrHI/DPKLDw4INIGy/Peh2/aevi/8ag=
Subject key identifier: A4:57:64:89:CF:BC:61:BE:F9:66:E9:60:9D:B4:9C:B4:14:C6:33:DF
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 0198D4E07C9D8140F3F6960E776A31839236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 0632
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: HQp_yUg92FF87DlWPtvQf8oIbtU.roa (hash: WdzVBva5nz5iKOf23yLPoQ+M9QxUiJxb8xYxHWes+RI=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: /WB+vaX7oeXB7Toy0w5g+4u7O47aZEy8VBbVcFxtNCs=)
3: zCw-9AZjP26xMi8ifkh6cllXO9s.roa (hash: D1nIK1UZwod09XQftoKXhB7rZyXrZ+n2IZxVQbyl2wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7c:9d:81:40:f3:f6:96:0e:77:6a:31:83:92:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=a4576489cfbc61bef966e9609db49cb414c633df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:7e:45:3a:5d:aa:ec:ae:1f:06:8b:dc:bf:
0c:6e:23:6b:8c:03:80:d4:e4:bc:9c:9e:83:4c:40:
fc:e5:09:23:6c:c5:8e:66:d8:d4:e9:04:eb:f0:f7:
8e:54:2f:d7:07:e5:2b:d9:49:66:f9:90:7c:1d:ac:
c8:7c:26:9e:09:9a:79:2d:9a:2c:4d:9f:63:5c:3b:
09:50:e7:7f:ad:99:49:3a:44:50:28:74:d7:9d:fb:
70:4a:a1:5f:94:cd:41:25:1f:c5:0c:10:0f:cd:99:
11:7d:6e:e7:d6:e8:01:13:17:61:2a:9d:d7:e0:06:
65:dc:62:4d:d3:b4:a7:e8:3c:89:bb:f5:31:4d:04:
76:b7:0e:89:68:be:c6:e5:c5:2b:08:79:1b:d1:ea:
f2:4f:90:42:3d:a9:73:34:71:3c:b6:84:b2:d0:68:
56:ab:a7:0b:68:81:4f:44:d3:4d:1e:66:09:55:8d:
03:1e:db:fb:2f:6f:88:e0:e9:8f:e3:7e:58:56:63:
d8:b3:78:b1:80:f4:83:fe:bb:85:a9:cd:60:e9:9f:
c8:32:73:e2:3b:5c:ab:ec:1e:7e:f7:f6:18:27:ed:
49:57:27:39:5b:cb:ea:c6:67:22:17:b9:45:c8:c2:
20:b7:26:73:a3:47:0e:e7:80:c9:e1:03:5d:15:27:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:57:64:89:CF:BC:61:BE:F9:66:E9:60:9D:B4:9C:B4:14:C6:33:DF
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:78:70:b1:83:e1:c9:56:cc:92:2b:02:74:e4:c5:d8:c8:72:
4d:b5:ed:56:f5:8d:b6:74:07:b4:6b:3f:27:a7:2a:1b:26:29:
cb:16:d1:9d:d3:96:d5:c3:e5:4f:6d:37:56:93:fb:4d:a8:df:
58:e5:bf:3a:e2:c3:5b:45:d4:47:d7:bf:f8:1c:a5:fa:9b:f3:
52:32:5c:92:55:8a:ce:5b:47:35:b6:2f:c2:f6:17:cb:d2:6c:
f2:20:37:87:db:06:76:23:df:5b:44:73:dd:8f:41:46:d6:69:
d4:ae:30:6c:60:1d:1d:d7:6d:7a:55:54:a4:b6:51:42:38:fc:
55:97:c7:e9:b9:3b:49:82:b8:34:8d:f7:81:19:98:45:99:dc:
72:db:c5:43:30:c3:b4:17:87:f0:0a:ea:5b:35:14:35:48:1d:
b6:86:21:09:78:5d:7d:83:f1:fc:8c:79:13:37:90:70:b9:b7:
c5:2b:4e:13:f4:a2:21:f4:70:be:44:8c:16:0c:72:2c:15:5d:
fd:33:d9:11:2b:c5:6a:e3:4d:25:53:89:73:79:66:c9:87:25:
73:eb:2b:be:a2:e0:ae:c1:71:47:ff:bf:b6:e2:6f:63:84:a7:
a6:d9:ec:b4:91:40:1f:68:a4:e8:a0:d9:6b:4f:8b:b2:3d:f4:
b5:f1:fc:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4HydgUDz9pYOd2oxg5I2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDAzODg4YTQwNWU2MWI4N2QxNzA2ZjkzM2IzNjZhODZm
YjQyOTUwHhcNMjUwODIzMDMwMjE4WhcNMjUwODI0MDMwMjE4WjAzMTEwLwYDVQQD
EyhhNDU3NjQ4OWNmYmM2MWJlZjk2NmU5NjA5ZGI0OWNiNDE0YzYzM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszJ+RTpdquyuHwaL3L8MbiNrjAOA
1OS8nJ6DTED85QkjbMWOZtjU6QTr8PeOVC/XB+Ur2Ulm+ZB8HazIfCaeCZp5LZos
TZ9jXDsJUOd/rZlJOkRQKHTXnftwSqFflM1BJR/FDBAPzZkRfW7n1ugBExdhKp3X
4AZl3GJN07Sn6DyJu/UxTQR2tw6JaL7G5cUrCHkb0eryT5BCPalzNHE8toSy0GhW
q6cLaIFPRNNNHmYJVY0DHtv7L2+I4OmP435YVmPYs3ixgPSD/ruFqc1g6Z/IMnPi
O1yr7B5+9/YYJ+1JVyc5W8vqxmciF7lFyMIgtyZzo0cO54DJ4QNdFSd5WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRXZInPvGG++WbpYJ20nLQUxjPfMB8GA1UdIwQY
MBaAFGLQOIikBeYbh9Fwb5M7NmqG+0KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUt
NGQ2ODVhY2E4Mjc5LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUtNGQ2ODVhY2E4Mjc5
LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3hwsYPh
yVbMkisCdOTF2MhyTbXtVvWNtnQHtGs/J6cqGyYpyxbRndOW1cPlT203VpP7Tajf
WOW/OuLDW0XUR9e/+Byl+pvzUjJcklWKzltHNbYvwvYXy9Js8iA3h9sGdiPfW0Rz
3Y9BRtZp1K4wbGAdHddtelVUpLZRQjj8VZfH6bk7SYK4NI33gRmYRZncctvFQzDD
tBeH8ArqWzUUNUgdtoYhCXhdfYPx/Ix5EzeQcLm3xStOE/SiIfRwvkSMFgxyLBVd
/TPZESvFauNNJVOJc3lmyYclc+srvqLgrsFxR/+/tuJvY4SnptnstJFAH2ik6KDZ
a0+Lsj30tfH8dQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:02:33 2025 by rpki-client