Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: 5QRhAXsT1F4I9W31GQ3oaq+RW2kBVN4QKGBrL2m//V0=
Subject key identifier: 14:20:F5:18:7B:1B:3A:81:7B:61:ED:16:C9:40:5F:F0:F3:B9:7F:98
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 01987F0AD4CCDD278B42D52CC1747BDE3740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 11:01:12 +0000
Manifest this update: Wed 06 Aug 2025 11:01:12 +0000
Manifest next update: Thu 07 Aug 2025 11:01:12 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: 3KjQdnroed3SYwa7+eKE6/RZWMcHpPKzZo6KJTximKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:d4:cc:dd:27:8b:42:d5:2c:c1:74:7b:de:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Aug 6 11:01:12 2025 GMT
Not After : Aug 7 11:01:12 2025 GMT
Subject: CN=1420f5187b1b3a817b61ed16c9405ff0f3b97f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:72:d2:6f:30:94:51:f4:66:de:9b:4b:9c:
42:44:1a:4c:80:70:d6:1f:1c:65:04:1e:4a:a2:8f:
01:8d:87:76:25:20:68:f0:34:82:59:2a:65:b1:a6:
e0:99:36:fd:c0:9c:6b:e2:6b:b0:a6:ee:ed:e2:45:
d3:b8:e9:0d:8c:8d:d5:93:f2:a1:2c:6e:ee:19:b8:
28:08:7b:5f:90:dc:1a:80:cd:9a:12:5c:8d:af:3e:
41:e4:6c:33:22:1c:15:63:e0:7d:38:fd:eb:ea:67:
7b:96:09:1b:d7:72:f1:b9:3a:b3:5e:75:1e:37:59:
9d:23:10:ae:f2:a6:e6:34:bc:7b:2f:2c:c1:c1:aa:
af:71:1d:41:42:9a:de:05:81:3e:61:92:24:0d:43:
47:c5:d7:bf:64:49:e7:d2:01:1c:eb:58:16:1e:34:
0b:05:9c:27:78:27:54:e1:ca:6e:3d:a6:75:0d:0f:
52:d9:17:84:1d:5f:ee:7f:f9:b6:67:74:44:13:b7:
be:e7:0c:ca:38:03:27:f3:37:f6:20:49:db:79:27:
75:fc:06:e6:2f:86:79:8a:7a:37:e9:f1:1b:06:29:
09:e6:6d:85:2e:aa:54:93:d9:bb:83:8e:03:d9:7a:
4b:39:98:34:64:69:c2:9a:a9:76:3d:74:66:8b:c7:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:F5:18:7B:1B:3A:81:7B:61:ED:16:C9:40:5F:F0:F3:B9:7F:98
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:91:2b:8b:e4:20:b2:e6:dd:66:9f:59:b3:13:7c:69:a9:65:
2b:ac:1b:f5:fe:ec:68:45:15:e2:ac:75:4e:d8:58:c4:b7:fe:
9f:93:b4:97:ca:a4:0c:f1:28:51:3f:a5:2e:8c:9e:17:f1:45:
5e:3d:c4:49:6d:c2:01:2e:6f:11:88:31:18:e4:08:f1:5c:17:
43:ef:99:89:22:77:f3:e0:03:e2:0a:38:bf:20:7d:f1:33:21:
41:e7:4b:c8:55:a0:58:a9:18:02:89:b3:24:41:ce:f4:c7:6d:
26:56:65:fb:02:fa:95:f0:c9:bc:af:9f:be:6a:e8:11:c5:0a:
46:aa:f2:f8:14:a5:77:cf:84:32:ef:a0:90:72:13:d8:97:df:
b0:b5:c9:8b:70:96:5e:58:0a:99:e4:bd:4d:88:43:ea:d1:bd:
98:85:1e:d7:18:62:c6:d7:53:e7:a0:ae:e4:97:9e:e2:40:9f:
dd:da:41:ff:98:b5:0d:ad:fd:29:3a:f8:1b:c0:ee:b3:cc:c9:
8a:a1:69:32:95:84:ef:1b:2c:7e:fa:51:06:56:93:1f:e1:5e:
e8:9f:1e:8c:64:42:d3:28:02:62:46:a1:96:44:50:d6:34:c0:
2e:89:54:90:36:a0:8b:62:ca:4a:93:35:ee:18:af:49:4b:eb:
94:09:a5:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/CtTM3SeLQtUswXR73jdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzVmY2U3N2RkZTRlMmVlNGZkNjUzNTEwMDUyOWMyZjQ0
NGQ3OWEwHhcNMjUwODA2MTEwMTEyWhcNMjUwODA3MTEwMTEyWjAzMTEwLwYDVQQD
EygxNDIwZjUxODdiMWIzYTgxN2I2MWVkMTZjOTQwNWZmMGYzYjk3Zjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRVy0m8wlFH0Zt6bS5xCRBpMgHDW
HxxlBB5Koo8BjYd2JSBo8DSCWSplsabgmTb9wJxr4muwpu7t4kXTuOkNjI3Vk/Kh
LG7uGbgoCHtfkNwagM2aElyNrz5B5GwzIhwVY+B9OP3r6md7lgkb13LxuTqzXnUe
N1mdIxCu8qbmNLx7LyzBwaqvcR1BQpreBYE+YZIkDUNHxde/ZEnn0gEc61gWHjQL
BZwneCdU4cpuPaZ1DQ9S2ReEHV/uf/m2Z3REE7e+5wzKOAMn8zf2IEnbeSd1/Abm
L4Z5ino36fEbBikJ5m2FLqpUk9m7g44D2XpLOZg0ZGnCmql2PXRmi8fGGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQg9Rh7GzqBe2HtFslAX/DzuX+YMB8GA1UdIwQY
MBaAFGLF/Od93k4u5P1lNRAFKcL0RNeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQt
YWY2YmU5MDU3OTlkLzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQtYWY2YmU5MDU3OTlk
LzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapEri+Qg
subdZp9ZsxN8aallK6wb9f7saEUV4qx1TthYxLf+n5O0l8qkDPEoUT+lLoyeF/FF
Xj3ESW3CAS5vEYgxGOQI8VwXQ++ZiSJ38+AD4go4vyB98TMhQedLyFWgWKkYAomz
JEHO9MdtJlZl+wL6lfDJvK+fvmroEcUKRqry+BSld8+EMu+gkHIT2JffsLXJi3CW
XlgKmeS9TYhD6tG9mIUe1xhixtdT56Cu5Jee4kCf3dpB/5i1Da39KTr4G8Dus8zJ
iqFpMpWE7xssfvpRBlaTH+Fe6J8ejGRC0ygCYkahlkRQ1jTALolUkDagi2LKSpM1
7hivSUvrlAmlUA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:48:47 2025 by rpki-client