Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: auFJgMQuRV32+6ZXpIN4S8MuKDt45AGqXxFuag9OKFQ=
Subject key identifier: 3C:ED:8B:85:AF:6A:C4:2F:03:B3:36:7F:DA:CD:2F:6B:E8:25:E9:22
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 0198D5F15A05CD54A146DDC1AA65ED8CC6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 06F5
Signing time: Sat 23 Aug 2025 08:00:20 +0000
Manifest this update: Sat 23 Aug 2025 08:00:20 +0000
Manifest next update: Sun 24 Aug 2025 08:00:20 +0000
Files and hashes: 1: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (hash: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=)
2: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (hash: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: z2zPFQWEEFh0vNJQ0JDAFdG1KPzLeOWUwPx2WE/3fcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5a:05:cd:54:a1:46:dd:c1:aa:65:ed:8c:c6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Aug 23 08:00:20 2025 GMT
Not After : Aug 24 08:00:20 2025 GMT
Subject: CN=3ced8b85af6ac42f03b3367fdacd2f6be825e922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:19:97:40:0d:8a:6f:67:76:5e:5a:1d:4a:
2f:83:66:0a:c3:4b:21:4d:8c:ca:33:34:45:33:45:
f2:58:e9:8d:f9:83:b1:48:5b:f8:fd:25:41:cb:b2:
72:06:fd:09:c6:9c:e2:ba:50:94:20:9d:4b:0c:2d:
7c:cd:2e:d7:87:48:66:a9:84:3d:62:9a:a1:09:97:
4c:3c:c3:d8:99:c4:5c:04:20:6f:5f:e0:6a:bd:c6:
f0:a6:c4:ad:3d:d7:14:f9:9b:44:cf:1f:de:1c:26:
d5:67:7c:0a:a8:b0:94:e5:f0:11:52:97:b6:97:a9:
fc:12:5f:a7:d7:b1:ee:22:66:96:ce:c7:57:a3:16:
46:35:fc:53:6d:7c:94:68:43:46:14:48:04:0e:14:
c1:f0:c6:a6:1a:b6:c4:f9:1a:b3:6c:aa:2e:6b:1b:
f3:45:d4:4c:95:6b:95:9d:15:f2:9b:d6:32:eb:ef:
8f:b5:b1:76:ae:b5:67:eb:0e:50:2e:c6:4b:7b:14:
e5:fc:aa:51:96:a7:81:a6:e1:e6:6e:f0:d7:99:fb:
a0:aa:e1:64:34:ed:ad:4b:0a:fc:1b:c1:00:71:fd:
61:5d:3b:94:ea:f9:2e:71:a8:23:70:72:89:da:8c:
29:40:c9:37:cf:a2:82:a8:86:97:b1:9a:9b:24:c0:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:ED:8B:85:AF:6A:C4:2F:03:B3:36:7F:DA:CD:2F:6B:E8:25:E9:22
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6a:75:60:94:d0:f6:bb:e5:15:89:3a:8b:2e:9f:fd:58:02:
99:a0:90:3a:b0:38:da:48:c3:55:5e:d3:04:54:39:f7:59:ad:
c2:4c:26:db:12:91:12:58:e9:55:fc:65:5a:aa:54:bb:fc:5f:
a1:78:b1:d3:7f:72:e5:8a:ca:7c:a5:69:b6:b3:70:0a:dc:27:
5f:cf:cc:4f:4d:95:7c:d2:c2:7d:a8:14:c2:37:7c:02:ad:e5:
ca:7c:73:48:a8:de:5b:51:72:8a:5c:3a:a3:12:2f:61:b8:1f:
a9:27:f9:52:24:90:00:59:9b:04:64:cf:86:71:aa:22:fb:a9:
42:71:e2:49:db:3b:6b:dc:2d:2f:c9:72:55:7c:2c:8c:6c:7a:
2a:91:8a:01:20:a6:c3:b2:e5:41:9f:4d:f3:5e:81:64:5d:57:
43:64:a9:5b:25:e8:20:52:2a:97:e7:c3:61:ff:87:6c:41:7a:
6a:40:da:b9:31:04:a1:8b:cb:6c:14:8a:8c:61:7f:37:af:22:
b8:89:47:c7:db:32:e1:a1:15:dc:69:d9:21:46:d4:61:91:aa:
44:61:ec:79:7d:05:ed:9c:27:f3:b5:94:fc:91:b1:75:2c:50:
46:8c:5d:5b:ac:38:6d:6f:60:5c:f2:97:11:6a:7f:19:8a:66:
80:8c:a9:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8VoFzVShRt3BqmXtjMamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTQ0Yzc3ODE1MmYwZmQ4NWU1ZGNiNDQ5MDRmMDAxZTU5
ODc0MjQwHhcNMjUwODIzMDgwMDIwWhcNMjUwODI0MDgwMDIwWjAzMTEwLwYDVQQD
EygzY2VkOGI4NWFmNmFjNDJmMDNiMzM2N2ZkYWNkMmY2YmU4MjVlOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK4Zl0ANim9ndl5aHUovg2YKw0sh
TYzKMzRFM0XyWOmN+YOxSFv4/SVBy7JyBv0JxpziulCUIJ1LDC18zS7Xh0hmqYQ9
YpqhCZdMPMPYmcRcBCBvX+BqvcbwpsStPdcU+ZtEzx/eHCbVZ3wKqLCU5fARUpe2
l6n8El+n17HuImaWzsdXoxZGNfxTbXyUaENGFEgEDhTB8MamGrbE+RqzbKouaxvz
RdRMlWuVnRXym9Yy6++PtbF2rrVn6w5QLsZLexTl/KpRlqeBpuHmbvDXmfugquFk
NO2tSwr8G8EAcf1hXTuU6vkucagjcHKJ2owpQMk3z6KCqIaXsZqbJMBaoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzti4WvasQvA7M2f9rNL2voJekiMB8GA1UdIwQY
MBaAFMhUTHeBUvD9heXctEkE8AHlmHQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMt
ZDk0MDA1MGU1NmNhLzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMtZDk0MDA1MGU1NmNh
LzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmp1YJTQ
9rvlFYk6iy6f/VgCmaCQOrA42kjDVV7TBFQ591mtwkwm2xKREljpVfxlWqpUu/xf
oXix039y5YrKfKVptrNwCtwnX8/MT02VfNLCfagUwjd8Aq3lynxzSKjeW1Fyilw6
oxIvYbgfqSf5UiSQAFmbBGTPhnGqIvupQnHiSds7a9wtL8lyVXwsjGx6KpGKASCm
w7LlQZ9N816BZF1XQ2SpWyXoIFIql+fDYf+HbEF6akDauTEEoYvLbBSKjGF/N68i
uIlHx9sy4aEV3GnZIUbUYZGqRGHseX0F7Zwn87WU/JGxdSxQRoxdW6w4bW9gXPKX
EWp/GYpmgIypvA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:14 2025 by rpki-client