Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
File: YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json)
Hash identifier: kBiBx2NrzGE17D4iPkbIrYTpSGtAXP9F9XZKNal4Hr4=
Subject key identifier: A4:9C:88:F4:63:F5:1A:1E:B9:05:57:9F:93:DD:3E:7F:9F:FE:12:21
Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
Certificate issuer: /CN=6007365e0cf30ca8fce98c62660d186a979bc959
Certificate serial: 0198D54E1C4970257BD0649C10543A8F67A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
Manifest number: 09A7
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: Oc_LJaADC2cknQ1kKmCdsTOaMZk.roa (hash: JMTbvNQOvHmoLJzyFa8UDUWlgTHr2CpWgpqDOMIvsck=)
2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: pcVeXFm7V6d4BfAihjqGPqpdDxqmdlAH1/P/ZuCKzpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1c:49:70:25:7b:d0:64:9c:10:54:3a:8f:67:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=a49c88f463f51a1eb905579f93dd3e7f9ffe1221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:72:be:00:b8:e1:1e:f9:89:6f:73:6c:c5:
88:37:07:c9:5a:73:40:a6:a8:78:d8:5b:5d:25:49:
d6:5f:3a:eb:c4:9e:ce:0b:00:67:97:e3:1e:14:e6:
75:12:e4:2f:67:8a:2b:98:b1:fd:83:1f:c0:ad:ee:
28:cd:97:af:c2:dd:78:a9:47:89:a5:15:85:17:67:
be:e2:ff:16:59:06:46:7f:4f:42:9f:8d:cc:a6:93:
63:71:d4:ba:ea:95:e1:49:51:74:a3:e4:0c:08:00:
fe:82:3d:2a:e2:15:8a:6c:ca:eb:ee:ef:34:30:0c:
f1:ea:bb:13:0a:c6:b7:c9:af:90:ad:d8:c3:57:3e:
a2:97:c4:b7:24:af:b3:1f:43:87:f0:8a:b5:5f:ca:
43:c1:ef:02:83:f4:a5:21:28:ed:bd:8f:4d:66:af:
23:c7:68:c8:06:8a:a2:22:6f:e7:e7:8b:10:7d:ef:
14:a2:8b:b0:a9:54:0f:6b:13:a1:ce:e9:b4:df:40:
24:72:8c:b2:44:37:b2:c9:82:cd:36:7f:75:bc:4c:
f1:4a:f4:74:df:b5:b7:24:ae:0c:68:47:80:28:9d:
b8:2d:db:8b:bb:d5:18:82:51:67:88:35:ce:e3:70:
6d:78:20:a8:0b:62:4f:e1:60:7e:f4:95:70:17:c3:
0a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:88:F4:63:F5:1A:1E:B9:05:57:9F:93:DD:3E:7F:9F:FE:12:21
X509v3 Authority Key Identifier:
keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:30:10:20:43:27:d3:a9:f1:ba:f6:de:96:52:b8:92:c1:f7:
9a:5d:8e:25:bc:22:f5:81:46:9e:27:b9:e0:32:90:ef:30:ba:
52:7e:c4:75:f9:2b:88:83:be:c6:23:09:a8:00:59:59:08:32:
b1:5f:76:e9:eb:51:e9:47:1d:49:ee:8b:6d:46:48:06:0e:22:
88:b4:96:7f:e8:b2:f6:1d:61:5e:c0:a2:74:09:63:c5:07:a1:
1b:e3:d4:de:46:1f:be:2a:c9:c5:ea:d4:80:e8:25:a7:f5:55:
28:52:dc:e9:f3:47:70:8b:01:59:12:12:21:de:ff:25:eb:77:
c9:49:06:24:56:2a:cd:76:bd:3a:f3:30:bf:0e:ec:12:03:73:
1d:5f:25:b3:54:3c:0b:86:d4:ae:d1:b7:fd:c1:a0:e6:a3:7d:
75:cb:3c:72:4b:91:f0:8a:f1:71:85:b1:3a:a0:2d:5b:be:22:
d4:a9:3c:fe:42:12:32:fa:b5:1c:6e:ad:41:2b:25:7c:2f:4f:
5d:b9:f9:d8:68:04:03:70:90:97:91:b0:36:4c:51:22:d8:34:
3f:a5:72:29:f2:0d:f0:ed:bf:2f:74:eb:f2:9e:03:37:4d:25:
47:a6:d5:86:43:3f:32:4e:dc:50:6a:c7:a2:8f:50:b6:48:f8:
40:47:56:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVThxJcCV70GScEFQ6j2elMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDczNjVlMGNmMzBjYThmY2U5OGM2MjY2MGQxODZhOTc5
YmM5NTkwHhcNMjUwODIzMDUwMjAyWhcNMjUwODI0MDUwMjAyWjAzMTEwLwYDVQQD
EyhhNDljODhmNDYzZjUxYTFlYjkwNTU3OWY5M2RkM2U3ZjlmZmUxMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykNyvgC44R75iW9zbMWINwfJWnNA
pqh42FtdJUnWXzrrxJ7OCwBnl+MeFOZ1EuQvZ4ormLH9gx/Are4ozZevwt14qUeJ
pRWFF2e+4v8WWQZGf09Cn43MppNjcdS66pXhSVF0o+QMCAD+gj0q4hWKbMrr7u80
MAzx6rsTCsa3ya+QrdjDVz6il8S3JK+zH0OH8Iq1X8pDwe8Cg/SlISjtvY9NZq8j
x2jIBoqiIm/n54sQfe8UoouwqVQPaxOhzum030AkcoyyRDeyyYLNNn91vEzxSvR0
37W3JK4MaEeAKJ24LduLu9UYglFniDXO43BteCCoC2JP4WB+9JVwF8MK7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSciPRj9RoeuQVXn5PdPn+f/hIhMB8GA1UdIwQY
MBaAFGAHNl4M8wyo/OmMYmYNGGqXm8lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MjZlZWItMGJiMi00MmE4LTg0ZTIt
Yjc1YjQ5MDQ5ODJmLzEvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84MjZlZWItMGJiMi00MmE4LTg0ZTItYjc1YjQ5MDQ5ODJm
LzEvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTAQIEMn
06nxuvbellK4ksH3ml2OJbwi9YFGnie54DKQ7zC6Un7EdfkriIO+xiMJqABZWQgy
sV926etR6UcdSe6LbUZIBg4iiLSWf+iy9h1hXsCidAljxQehG+PU3kYfvirJxerU
gOglp/VVKFLc6fNHcIsBWRISId7/Jet3yUkGJFYqzXa9OvMwvw7sEgNzHV8ls1Q8
C4bUrtG3/cGg5qN9dcs8ckuR8IrxcYWxOqAtW74i1Kk8/kISMvq1HG6tQSslfC9P
Xbn52GgEA3CQl5GwNkxRItg0P6VyKfIN8O2/L3Tr8p4DN00lR6bVhkM/Mk7cUGrH
oo9Qtkj4QEdWDA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:15 2025 by rpki-client