Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File: _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier: ULE61DCDOAujpQZEH01z5FtX37N8UZxsWzAqBHZr+4Q=
Subject key identifier: 94:90:AF:41:5C:B3:78:07:B8:89:B2:4C:54:11:8B:96:6F:B8:E7:C8
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer: /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial: 0198D4726FCE18B4B8E6599E85FE5537CB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number: 0E08
Signing time: Sat 23 Aug 2025 01:02:06 +0000
Manifest this update: Sat 23 Aug 2025 01:02:06 +0000
Manifest next update: Sun 24 Aug 2025 01:02:06 +0000
Files and hashes: 1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: oOwoycsRhmaVjfkg5GbGjvZA+wC+HnGiKU9T40UZMck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:6f:ce:18:b4:b8:e6:59:9e:85:fe:55:37:cb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
Validity
Not Before: Aug 23 01:02:06 2025 GMT
Not After : Aug 24 01:02:06 2025 GMT
Subject: CN=9490af415cb37807b889b24c54118b966fb8e7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:8a:79:7d:f3:11:ec:cf:c4:56:61:83:85:
34:b4:a3:cd:e9:21:38:e2:8b:5f:8a:29:bd:86:59:
e8:ea:87:ef:1f:9a:bc:ab:6e:77:02:33:3a:fe:8e:
58:cb:f1:56:7f:10:a0:fb:06:c3:0a:63:13:f2:08:
30:b9:d1:69:8d:d2:a1:fa:e6:2b:a8:c8:da:94:c1:
43:c0:cb:c4:36:9c:58:a6:19:87:72:7f:1b:83:3e:
0c:9f:d4:77:cc:31:f6:d6:9a:d7:e9:18:41:3d:5f:
ed:cf:25:f7:35:30:21:1c:0b:8a:4e:06:cc:5f:2c:
17:6e:73:c6:e7:80:b2:9f:a4:b2:38:8a:3d:42:3b:
16:d4:a8:f0:f3:0f:66:0e:86:5a:a7:c7:03:5b:91:
c5:ce:41:77:b5:a0:47:ed:47:07:b6:7d:55:d5:4a:
e8:28:1a:c1:d0:0e:bb:d1:4f:4b:a7:84:c8:0e:7a:
55:4a:6a:01:40:e3:be:23:8a:68:40:29:54:20:f0:
e2:57:44:8d:be:ae:63:b9:f1:a6:4b:7c:c0:b0:c4:
5f:a9:e0:54:40:81:95:5f:1a:c0:62:1a:f3:cc:f6:
96:88:4e:6c:2f:ab:d5:c0:04:11:03:d3:4a:c9:8a:
18:b4:6b:95:dd:62:66:cd:01:9b:ba:5f:77:81:20:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:AF:41:5C:B3:78:07:B8:89:B2:4C:54:11:8B:96:6F:B8:E7:C8
X509v3 Authority Key Identifier:
keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e4:c2:a4:cd:9d:c4:bb:5f:96:43:63:1f:b2:50:2a:73:b8:
1d:6a:de:4d:75:19:cc:71:df:f3:df:33:70:fe:da:c5:a5:ce:
0b:34:c3:fa:b5:39:d5:4d:49:36:93:76:8e:43:f8:04:77:ed:
b2:18:e6:82:97:8c:61:ae:75:dc:02:13:e8:14:89:98:9a:d0:
cd:40:eb:09:04:af:a7:ab:fa:71:7d:f5:9f:f9:73:b4:38:b2:
0d:5a:81:9a:73:ae:3b:f7:04:c0:12:d3:11:e7:53:db:23:e8:
f9:be:1d:ab:ea:8c:1d:38:17:ad:c6:e3:48:70:7b:51:01:7a:
8b:a3:a5:f4:76:de:3b:79:d2:ce:fc:51:2f:1c:20:43:37:23:
15:14:67:e0:21:83:b3:f1:25:8a:d7:25:a8:e9:5a:7e:0f:99:
06:96:d6:42:62:ef:3a:dc:2a:97:43:8f:1e:50:20:79:85:f6:
b5:f9:1f:bc:85:3e:82:ba:95:1e:b9:a7:b6:04:ff:80:ac:9c:
eb:4a:1d:79:47:23:f2:b7:fd:25:2f:72:9e:c8:67:3b:6f:ee:
cb:f7:1c:fa:46:70:36:f7:7f:10:2d:1f:96:53:ce:68:8a:c9:
be:bf:55:77:71:a1:bc:a2:d1:e2:6e:5b:be:7b:b4:29:46:f7:
3c:88:0d:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcm/OGLS45lmehf5VN8uOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjA2YmQxMDgzMWNhNzM3ODc1NmI1ZTE2MTczODk2YTYw
YjAxOTEwHhcNMjUwODIzMDEwMjA2WhcNMjUwODI0MDEwMjA2WjAzMTEwLwYDVQQD
Eyg5NDkwYWY0MTVjYjM3ODA3Yjg4OWIyNGM1NDExOGI5NjZmYjhlN2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkGKeX3zEezPxFZhg4U0tKPN6SE4
4otfiim9hlno6ofvH5q8q253AjM6/o5Yy/FWfxCg+wbDCmMT8ggwudFpjdKh+uYr
qMjalMFDwMvENpxYphmHcn8bgz4Mn9R3zDH21prX6RhBPV/tzyX3NTAhHAuKTgbM
XywXbnPG54Cyn6SyOIo9QjsW1Kjw8w9mDoZap8cDW5HFzkF3taBH7UcHtn1V1Uro
KBrB0A670U9Lp4TIDnpVSmoBQOO+I4poQClUIPDiV0SNvq5jufGmS3zAsMRfqeBU
QIGVXxrAYhrzzPaWiE5sL6vVwAQRA9NKyYoYtGuV3WJmzQGbul93gSAlwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSQr0Fcs3gHuImyTFQRi5ZvuOfIMB8GA1UdIwQY
MBaAFP8ga9EIMcpzeHVrXhYXOJamCwGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMzVkMzctNzQ0Ny00Y2Y0LTk4MmYt
NTBmMzk4YmIyNmU5LzEvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hMzVkMzctNzQ0Ny00Y2Y0LTk4MmYtNTBmMzk4YmIyNmU5
LzEvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeTCpM2d
xLtflkNjH7JQKnO4HWreTXUZzHHf898zcP7axaXOCzTD+rU51U1JNpN2jkP4BHft
shjmgpeMYa513AIT6BSJmJrQzUDrCQSvp6v6cX31n/lztDiyDVqBmnOuO/cEwBLT
EedT2yPo+b4dq+qMHTgXrcbjSHB7UQF6i6Ol9HbeO3nSzvxRLxwgQzcjFRRn4CGD
s/ElitclqOlafg+ZBpbWQmLvOtwql0OPHlAgeYX2tfkfvIU+grqVHrmntgT/gKyc
60odeUcj8rf9JS9ynshnO2/uy/cc+kZwNvd/EC0fllPOaIrJvr9Vd3GhvKLR4m5b
vnu0KUb3PIgNBw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:08 2025 by rpki-client