Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: ost0TNyuOBRdOi5RemKmZPW/FCJJhmwMVPfNlyIi/oI=
Subject key identifier: 84:E8:91:1B:F2:6D:65:EE:67:97:80:F3:C7:16:0F:40:E7:77:B7:8F
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 0198D73B0870F39BA9351F945501ECCD1CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 02CB
Signing time: Sat 23 Aug 2025 14:00:26 +0000
Manifest this update: Sat 23 Aug 2025 14:00:26 +0000
Manifest next update: Sun 24 Aug 2025 14:00:26 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: qdhSiJIakZn74l28FfNNMs1ZP5IuGUTRlbldl+0Ufo8=)
2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:08:70:f3:9b:a9:35:1f:94:55:01:ec:cd:1c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Aug 23 14:00:26 2025 GMT
Not After : Aug 24 14:00:26 2025 GMT
Subject: CN=84e8911bf26d65ee679780f3c7160f40e777b78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:86:2a:47:47:46:b1:2c:b8:6d:81:d9:ec:
86:21:60:c7:be:0d:19:0a:67:d5:95:29:d3:6a:ca:
98:29:26:8c:2a:7d:98:05:cc:e6:7c:31:01:42:68:
c2:69:1e:99:a4:9c:99:ee:d3:3c:7e:08:f5:9b:f4:
29:40:a9:79:aa:59:7b:8e:03:a1:53:46:f9:96:7f:
8f:96:a6:ae:f0:77:e4:2c:cb:3f:c2:98:3b:72:dc:
76:d8:e6:6a:db:c0:81:bc:0c:d7:43:5a:d2:be:2a:
bb:89:39:17:a6:f9:c6:a1:d3:87:94:9a:31:8f:8a:
cb:d6:74:0a:8c:b7:d3:5a:0a:d8:7b:48:42:35:d6:
d2:dc:25:e6:32:dd:c7:fa:69:19:61:63:24:c4:e4:
5b:f2:bb:a2:94:42:51:d0:a7:06:eb:87:2e:df:40:
ba:95:1f:73:5c:40:c3:43:f6:4a:9b:a7:43:3c:f1:
6c:93:c6:81:35:75:36:aa:8c:42:ee:ef:a7:9d:80:
98:25:6d:0d:77:12:5a:19:ee:76:5c:8b:63:ff:21:
a3:ac:06:f6:66:fb:1b:c3:e2:f4:9c:53:5b:50:ab:
9d:49:da:a6:8f:a1:7c:71:9b:a8:05:a0:33:1a:93:
af:c5:10:55:af:9b:81:b7:08:7f:a7:bd:9c:72:65:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:91:1B:F2:6D:65:EE:67:97:80:F3:C7:16:0F:40:E7:77:B7:8F
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d8:52:e3:5b:ad:f3:6a:9a:70:98:fc:54:d9:bc:25:c9:23:
9f:1b:80:cb:7b:5b:9b:a7:69:75:1c:54:93:a3:32:80:de:ce:
73:a5:aa:eb:33:e9:9a:9d:58:a4:89:22:72:9a:a2:ec:8b:bc:
bb:ef:c0:19:6c:58:17:d9:6f:dc:7f:23:73:26:f6:ac:f4:91:
4c:86:dc:93:9e:6c:b0:87:5d:36:f6:bd:a2:45:ab:c0:16:37:
89:f1:6c:c5:9b:8c:b8:e1:f7:d2:38:cf:16:16:d2:b1:0b:f2:
4c:d3:bb:0a:f0:f2:3a:d4:83:71:de:64:e3:1f:ed:70:41:a2:
2c:b4:59:56:66:f8:8c:c8:79:2b:45:90:9d:e9:41:78:b6:5a:
36:6e:b2:7b:e9:3c:dc:da:28:cd:e7:dd:2a:d4:5a:ab:b9:02:
13:4f:91:a6:ee:07:62:ae:86:c3:fd:c8:8d:6c:b2:b9:ac:43:
5e:e5:91:1e:a9:6f:b8:18:79:49:7d:ba:e8:38:30:6e:91:72:
1f:d9:70:89:b1:87:91:21:db:1c:f0:6f:92:bd:78:4f:ba:e6:
d6:13:af:1e:e3:81:42:d5:38:36:8b:9c:ab:37:81:78:e5:d6:
ad:00:54:3c:dd:3f:c0:93:54:8d:96:7b:d0:d4:64:86:d8:eb:
8e:94:12:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOwhw85upNR+UVQHszRzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOWNmOWE5ZTBiNjQ2MWFkODMzODc1YWMxMTY4Zjg5MjNm
ZDU1MGIwHhcNMjUwODIzMTQwMDI2WhcNMjUwODI0MTQwMDI2WjAzMTEwLwYDVQQD
Eyg4NGU4OTExYmYyNmQ2NWVlNjc5NzgwZjNjNzE2MGY0MGU3NzdiNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiKGKkdHRrEsuG2B2eyGIWDHvg0Z
CmfVlSnTasqYKSaMKn2YBczmfDEBQmjCaR6ZpJyZ7tM8fgj1m/QpQKl5qll7jgOh
U0b5ln+Plqau8HfkLMs/wpg7ctx22OZq28CBvAzXQ1rSviq7iTkXpvnGodOHlJox
j4rL1nQKjLfTWgrYe0hCNdbS3CXmMt3H+mkZYWMkxORb8ruilEJR0KcG64cu30C6
lR9zXEDDQ/ZKm6dDPPFsk8aBNXU2qoxC7u+nnYCYJW0NdxJaGe52XItj/yGjrAb2
Zvsbw+L0nFNbUKudSdqmj6F8cZuoBaAzGpOvxRBVr5uBtwh/p72ccmUzpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITokRvybWXuZ5eA88cWD0Dnd7ePMB8GA1UdIwQY
MBaAFGGc+angtkYa2DOHWsEWj4kj/VULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzIt
MTRhZmFlOTEzMzZkLzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzItMTRhZmFlOTEzMzZk
LzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdhS41ut
82qacJj8VNm8JckjnxuAy3tbm6dpdRxUk6MygN7Oc6Wq6zPpmp1YpIkicpqi7Iu8
u+/AGWxYF9lv3H8jcyb2rPSRTIbck55ssIddNva9okWrwBY3ifFsxZuMuOH30jjP
FhbSsQvyTNO7CvDyOtSDcd5k4x/tcEGiLLRZVmb4jMh5K0WQnelBeLZaNm6ye+k8
3NoozefdKtRaq7kCE0+Rpu4HYq6Gw/3IjWyyuaxDXuWRHqlvuBh5SX266DgwbpFy
H9lwibGHkSHbHPBvkr14T7rm1hOvHuOBQtU4NoucqzeBeOXWrQBUPN0/wJNUjZZ7
0NRkhtjrjpQSlw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:59 2025 by rpki-client