Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: tgGJ6mVbrzNcQhwmC+mSvcsmptYQ2j77yBzzRH/DyWw=
Subject key identifier: 91:0B:DF:26:D8:B2:AB:27:55:75:6A:CF:B5:94:60:66:05:22:7D:80
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 0198D54EA123E1FA4BED8FCB211C9FBBF0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0AB3
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: VVt0fpxsgcoNspgNcgFPtXeNljBzAwxbbxLfOS8eZTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a1:23:e1:fa:4b:ed:8f:cb:21:1c:9f:bb:f0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=910bdf26d8b2ab2755756acfb594606605227d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:50:4a:c2:38:a0:29:ea:21:87:de:5b:ba:
b2:8b:69:65:e0:7f:c9:cb:2e:97:f2:b1:6f:5d:25:
f1:6a:0b:46:8a:a4:51:97:1d:41:6b:ef:ca:11:84:
7c:87:b9:7e:55:a9:31:fb:32:29:66:c5:d5:1f:10:
8e:94:b9:6f:13:93:8e:c2:13:95:5f:d1:85:0d:e9:
29:96:ef:88:be:7c:b1:3c:f3:e1:d4:31:7c:26:cb:
dd:49:e6:de:66:22:80:71:9e:df:f3:dd:bd:23:85:
f7:18:b8:13:b2:d1:dd:06:62:7c:54:c4:b4:7e:e2:
04:e9:df:2b:8d:31:5c:cc:de:f9:f5:6a:99:d9:e6:
99:bc:4a:7d:af:d8:04:ce:bf:b6:58:6c:ca:3e:ae:
06:d1:ae:06:8a:3f:a2:76:56:03:e5:46:72:d2:54:
28:b5:e3:9e:4a:a8:30:f3:45:e2:3d:b4:84:7f:6e:
8e:ca:fd:6c:9a:50:65:12:2c:cf:0f:d3:cc:37:6e:
5b:9b:37:b5:01:87:ce:9e:02:24:c1:df:e7:24:46:
77:89:a1:f6:c5:3c:92:8f:7f:df:18:5f:10:9a:ab:
d5:89:d1:7f:aa:03:48:10:fe:c2:1d:c7:33:64:a5:
64:2c:36:17:99:3e:b5:aa:a9:16:29:71:69:51:0c:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0B:DF:26:D8:B2:AB:27:55:75:6A:CF:B5:94:60:66:05:22:7D:80
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d3:36:6e:f1:34:62:d7:cc:53:b1:5a:57:79:bb:87:2f:c2:
9a:dd:76:ea:d5:97:4d:8b:85:8c:38:dd:55:c6:cb:cd:fe:c4:
e2:50:0b:7b:da:5e:7c:0e:2a:68:3a:7a:4f:9a:53:8e:ad:21:
d9:9b:29:71:9a:36:dd:c8:a2:de:41:a9:9d:97:50:05:3b:6c:
db:7f:af:e1:92:47:a3:f6:92:60:56:8f:a7:49:f3:9c:71:b8:
53:98:92:25:61:ae:a9:35:6d:08:60:4e:4b:6f:62:85:c7:8f:
2d:44:67:6b:d9:65:2a:99:4f:30:d6:b2:b3:ee:05:2b:3b:27:
6b:ab:96:d9:97:e2:45:ff:a2:c2:53:e4:76:72:83:9a:2b:8b:
72:b1:a1:f6:da:e5:3c:e0:97:00:e9:bf:3e:0c:53:8f:98:a7:
16:ed:95:f8:d9:70:bc:c2:b6:73:81:b4:8d:34:6a:e2:a9:b8:
fa:79:62:98:56:65:d4:e6:aa:55:da:d0:94:12:8a:15:0a:48:
8b:54:81:8f:e1:16:76:bb:33:a8:14:5f:e5:52:c4:bc:56:18:
37:53:7e:1e:4b:ea:5b:c8:c5:b8:68:73:54:05:aa:c6:67:e9:
30:10:cd:29:9b:39:9a:f5:c7:d7:c5:8b:5c:7e:c8:16:b6:0c:
b6:b4:41:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqEj4fpL7Y/LIRyfu/DQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzdkMjRiMWQ3MWMwMjE0NzY5ZjExOWRmNzI5OGZmMGNm
ODk3YjAwHhcNMjUwODIzMDUwMjM2WhcNMjUwODI0MDUwMjM2WjAzMTEwLwYDVQQD
Eyg5MTBiZGYyNmQ4YjJhYjI3NTU3NTZhY2ZiNTk0NjA2NjA1MjI3ZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuJQSsI4oCnqIYfeW7qyi2ll4H/J
yy6X8rFvXSXxagtGiqRRlx1Ba+/KEYR8h7l+Vakx+zIpZsXVHxCOlLlvE5OOwhOV
X9GFDekplu+IvnyxPPPh1DF8JsvdSebeZiKAcZ7f8929I4X3GLgTstHdBmJ8VMS0
fuIE6d8rjTFczN759WqZ2eaZvEp9r9gEzr+2WGzKPq4G0a4Gij+idlYD5UZy0lQo
teOeSqgw80XiPbSEf26Oyv1smlBlEizPD9PMN25bmze1AYfOngIkwd/nJEZ3iaH2
xTySj3/fGF8QmqvVidF/qgNIEP7CHcczZKVkLDYXmT61qqkWKXFpUQzH8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEL3ybYsqsnVXVqz7WUYGYFIn2AMB8GA1UdIwQY
MBaAFMh30ksdccAhR2nxGd9ymP8M+JewMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhmU1N4MXh3Q0ZIYWZFWjMzS1lfd3o0bDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OTIzNGItMjBjNS00ZjViLWI4MDYt
OWVjMjhhZTY1NzQ1LzEveUhmU1N4MXh3Q0ZIYWZFWjMzS1lfd3o0bDdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84OTIzNGItMjBjNS00ZjViLWI4MDYtOWVjMjhhZTY1NzQ1
LzEveUhmU1N4MXh3Q0ZIYWZFWjMzS1lfd3o0bDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtM2bvE0
YtfMU7FaV3m7hy/Cmt126tWXTYuFjDjdVcbLzf7E4lALe9pefA4qaDp6T5pTjq0h
2ZspcZo23cii3kGpnZdQBTts23+v4ZJHo/aSYFaPp0nznHG4U5iSJWGuqTVtCGBO
S29ihcePLURna9llKplPMNays+4FKzsna6uW2ZfiRf+iwlPkdnKDmiuLcrGh9trl
POCXAOm/PgxTj5inFu2V+NlwvMK2c4G0jTRq4qm4+nlimFZl1OaqVdrQlBKKFQpI
i1SBj+EWdrszqBRf5VLEvFYYN1N+HkvqW8jFuGhzVAWqxmfpMBDNKZs5mvXH18WL
XH7IFrYMtrRBYw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:04 2025 by rpki-client