Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier: r6xLXsjZpBHsVQtMDDnIdgFOmMHg8PZYX9wvI7E+S6c=
Subject key identifier: E1:9A:FA:71:79:55:41:F3:14:C8:E4:E4:9D:FB:E4:5A:27:71:BD:5C
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial: 0198D4A84AE2411E8A1A736B5C1BD84BEB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number: D6
Signing time: Sat 23 Aug 2025 02:00:55 +0000
Manifest this update: Sat 23 Aug 2025 02:00:55 +0000
Manifest next update: Sun 24 Aug 2025 02:00:55 +0000
Files and hashes: 1: IqlpwJ2xW0fAs8ZGPBfSTtIDhwE.roa (hash: qbO1Ww6u5GvjQ0O8Z6mDFqL7l1gHc63dxnum3Lg38lg=)
2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: f6bnU5tRgRvHCcpU7FvYiztL9qmhvrSLb8cDIAPCvTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:4a:e2:41:1e:8a:1a:73:6b:5c:1b:d8:4b:eb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Validity
Not Before: Aug 23 02:00:55 2025 GMT
Not After : Aug 24 02:00:55 2025 GMT
Subject: CN=e19afa71795541f314c8e4e49dfbe45a2771bd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:29:bf:3d:4f:86:05:d0:e9:e6:01:18:9d:
4a:dd:da:7f:92:c6:29:9e:4e:9f:76:a2:42:22:fc:
d2:92:4e:44:8b:10:6a:b4:83:8a:53:2a:e9:9c:87:
07:01:fa:30:45:68:db:eb:95:b1:98:a2:40:5f:f2:
d3:a7:98:ff:60:4a:01:8c:a2:07:9c:9a:06:aa:a8:
1d:65:6d:c9:59:c6:f4:f2:88:ae:ea:84:a5:dd:3b:
91:c0:72:08:89:05:fc:2d:15:13:eb:90:28:46:1d:
32:38:16:3f:ed:cb:12:c6:11:ca:1f:c8:52:ef:ad:
c8:f6:a0:51:21:4b:b8:1f:39:62:87:d9:03:43:c2:
d1:2e:ef:15:11:37:0b:f9:be:0d:5a:8c:9a:ae:55:
c8:bb:eb:58:25:50:20:3a:4e:0f:8c:cc:cc:5d:c1:
cb:10:cf:b1:33:8d:41:9b:7b:a0:13:30:83:c3:b5:
ec:7a:b2:19:b6:e1:1a:bf:eb:cc:87:8b:bd:e6:90:
a3:a5:b7:4d:2e:24:b2:98:79:a7:33:7d:d8:03:2c:
57:59:22:80:4d:5d:4c:e1:91:04:13:39:33:83:7b:
4d:5b:1d:c4:3d:d1:eb:15:5c:08:9f:d0:c9:f2:25:
9f:16:9d:d6:f0:47:ab:7a:c8:58:aa:2e:88:79:ea:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9A:FA:71:79:55:41:F3:14:C8:E4:E4:9D:FB:E4:5A:27:71:BD:5C
X509v3 Authority Key Identifier:
keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:28:b3:ea:9b:8f:39:45:2a:04:32:57:bb:e0:17:e5:dc:6d:
c8:c4:62:45:58:20:76:e6:7c:79:be:b1:a1:bf:c0:4b:e4:45:
a6:ec:f4:4f:a5:57:36:a3:0a:c3:06:f2:55:b9:4f:ad:49:de:
29:a2:67:69:9c:ce:c5:99:b3:b7:9a:86:df:7e:89:55:77:54:
d4:de:ab:53:f8:23:76:eb:b3:ce:60:01:03:43:e1:d3:09:8f:
b4:97:f5:ab:47:f4:4e:6a:3c:a3:c9:83:8a:9b:5b:90:40:3f:
29:4e:e6:b4:7a:09:5b:41:bd:f8:a7:4a:34:14:f2:1d:73:9f:
24:13:9f:a0:8a:4d:3c:74:50:00:43:ab:73:17:c3:df:38:69:
45:4b:a3:bf:57:23:ce:c4:db:6d:f1:23:3d:1b:0e:81:36:12:
73:14:6c:2f:63:93:92:39:5c:ad:95:76:b8:39:87:38:53:f8:
9d:1b:25:12:75:43:c2:27:76:51:d1:cc:5a:c5:6b:f6:21:d1:
83:9c:05:7e:c7:11:0e:01:d2:87:2d:58:36:30:a3:fd:1c:16:
5d:c8:b4:dc:b7:a2:7a:32:47:14:9d:dc:14:46:8f:a8:1d:19:
f8:a2:57:56:79:b8:90:1a:09:88:76:6c:aa:76:d2:9f:70:24:
43:ad:02:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEriQR6KGnNrXBvYS+tDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYWUzYTU0ZGQwMzg5NTY4M2VlZGJjMzc5ZDFlMGRiYjA2
YjliZGIwHhcNMjUwODIzMDIwMDU1WhcNMjUwODI0MDIwMDU1WjAzMTEwLwYDVQQD
EyhlMTlhZmE3MTc5NTU0MWYzMTRjOGU0ZTQ5ZGZiZTQ1YTI3NzFiZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmcpvz1PhgXQ6eYBGJ1K3dp/ksYp
nk6fdqJCIvzSkk5EixBqtIOKUyrpnIcHAfowRWjb65WxmKJAX/LTp5j/YEoBjKIH
nJoGqqgdZW3JWcb08oiu6oSl3TuRwHIIiQX8LRUT65AoRh0yOBY/7csSxhHKH8hS
763I9qBRIUu4Hzlih9kDQ8LRLu8VETcL+b4NWoyarlXIu+tYJVAgOk4PjMzMXcHL
EM+xM41Bm3ugEzCDw7XserIZtuEav+vMh4u95pCjpbdNLiSymHmnM33YAyxXWSKA
TV1M4ZEEEzkzg3tNWx3EPdHrFVwIn9DJ8iWfFp3W8EereshYqi6IeepmlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGa+nF5VUHzFMjk5J375Foncb1cMB8GA1UdIwQY
MBaAFMquOlTdA4lWg+7bw3nR4Nuwa5vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jODNkY2UtMjk1NS00OGU2LWJkN2Mt
NWJlYWZjODY2NTFiLzEveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jODNkY2UtMjk1NS00OGU2LWJkN2MtNWJlYWZjODY2NTFi
LzEveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCiz6puP
OUUqBDJXu+AX5dxtyMRiRVggduZ8eb6xob/AS+RFpuz0T6VXNqMKwwbyVblPrUne
KaJnaZzOxZmzt5qG336JVXdU1N6rU/gjduuzzmABA0Ph0wmPtJf1q0f0Tmo8o8mD
iptbkEA/KU7mtHoJW0G9+KdKNBTyHXOfJBOfoIpNPHRQAEOrcxfD3zhpRUujv1cj
zsTbbfEjPRsOgTYScxRsL2OTkjlcrZV2uDmHOFP4nRslEnVDwid2UdHMWsVr9iHR
g5wFfscRDgHShy1YNjCj/RwWXci03LeiejJHFJ3cFEaPqB0Z+KJXVnm4kBoJiHZs
qnbSn3AkQ60Cug==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:20 2025 by rpki-client