Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: ifPaOlHpgyeDzngqGYh2whSsKVCp6LvBKfFSihqxo7I=
Subject key identifier: D3:4C:8D:EB:25:28:10:6A:6D:76:9C:09:D0:75:AD:54:21:CB:C8:1D
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 019894B7C746F1FF23FE1328DE17D7D762F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 16:02:08 +0000
Manifest this update: Sun 10 Aug 2025 16:02:08 +0000
Manifest next update: Mon 11 Aug 2025 16:02:08 +0000
Files and hashes: 1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: cZDrWVcL25uXY4+bt+hVRwU5Ile8VLO0UvRV6BgzcKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:c7:46:f1:ff:23:fe:13:28:de:17:d7:d7:62:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Aug 10 16:02:08 2025 GMT
Not After : Aug 11 16:02:08 2025 GMT
Subject: CN=d34c8deb2528106a6d769c09d075ad5421cbc81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:b4:3a:b8:6c:fb:74:8e:dc:db:5d:60:00:
70:eb:4b:4c:8b:4b:cd:69:b0:5c:be:7c:34:38:cb:
58:65:c9:a9:d0:b8:85:ec:a9:02:38:d1:b8:ea:78:
fb:cd:f5:06:3b:6f:a1:cf:2c:1a:bf:55:f0:88:ac:
61:a5:33:b6:6c:9c:ce:c4:b0:9c:13:c0:92:54:77:
3e:dd:9c:9b:df:6e:a4:1f:9e:75:6c:be:ea:55:c5:
b4:84:4f:4e:b5:28:de:8c:fd:27:7f:1c:5c:66:df:
d2:92:0b:b8:3e:98:79:c1:2d:80:dd:73:13:03:62:
32:ba:58:d3:17:e9:20:34:c4:64:72:c0:18:3f:89:
e6:a7:62:63:86:b1:56:de:3e:65:94:03:13:7a:0e:
7b:4a:f7:fe:5d:37:53:45:16:4d:c2:00:d4:d5:00:
d2:1f:d0:2f:4e:41:a1:16:e1:95:c1:69:ed:b6:11:
de:69:ea:47:b6:1f:d6:be:41:27:4c:11:9e:bb:7b:
85:76:1a:3e:ca:66:2f:f0:53:a9:bf:46:b0:34:4f:
e1:4d:c3:d6:20:d0:fd:18:52:07:46:6c:b3:56:f6:
9e:64:2c:b3:93:09:e1:a9:fe:82:39:99:01:16:fd:
67:f2:51:55:eb:52:7a:14:f3:fc:99:82:c9:e5:47:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:8D:EB:25:28:10:6A:6D:76:9C:09:D0:75:AD:54:21:CB:C8:1D
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ca:57:53:0f:98:2f:40:56:14:f9:cd:da:49:77:fc:48:dd:
90:a6:36:a0:20:73:8d:18:32:ec:10:02:d0:a4:86:b9:90:0e:
2c:f2:b5:24:60:d8:ae:6d:e9:25:9d:a4:f1:7a:a2:1f:7e:d7:
4f:83:9c:b1:73:95:4e:f7:8a:77:31:12:e9:9a:f1:73:71:d1:
a9:b5:eb:5a:f1:cb:0e:28:4b:e0:8c:f7:27:4a:95:f5:41:61:
49:ef:51:ca:0e:42:59:a6:2b:4c:fd:8f:40:ac:f9:e6:2d:5f:
47:ab:55:72:82:11:eb:4c:57:4a:9d:65:0b:88:13:d1:5f:9a:
0e:b5:83:e7:e7:ea:28:7b:b8:83:3f:d1:15:df:fa:20:1c:41:
0e:8b:fc:23:24:50:da:52:97:7e:12:55:dd:04:5a:a6:a0:9f:
77:01:56:23:fa:9d:f5:50:8d:d4:ae:06:56:4b:2a:6f:00:ad:
30:7c:61:a8:24:3f:f2:f8:7c:29:49:31:75:38:c9:e5:55:32:
a0:a7:30:1b:24:37:35:24:ee:53:ff:e2:44:ba:69:e7:b4:f6:
e6:ec:64:38:53:42:83:71:cf:3e:c0:84:4f:a2:7b:9e:98:e7:
89:57:00:f8:38:63:9d:e6:39:f7:ae:d5:19:20:a4:51:91:bf:
e8:c8:5c:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUt8dG8f8j/hMo3hfX12L5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OGU5Y2IyN2YzZDFhYmNjNGNjNjFjM2MxYmJmZGM3MjYy
OGU1N2IwHhcNMjUwODEwMTYwMjA4WhcNMjUwODExMTYwMjA4WjAzMTEwLwYDVQQD
EyhkMzRjOGRlYjI1MjgxMDZhNmQ3NjljMDlkMDc1YWQ1NDIxY2JjODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub+0Orhs+3SO3NtdYABw60tMi0vN
abBcvnw0OMtYZcmp0LiF7KkCONG46nj7zfUGO2+hzywav1XwiKxhpTO2bJzOxLCc
E8CSVHc+3Zyb326kH551bL7qVcW0hE9OtSjejP0nfxxcZt/Skgu4Pph5wS2A3XMT
A2IyuljTF+kgNMRkcsAYP4nmp2JjhrFW3j5llAMTeg57Svf+XTdTRRZNwgDU1QDS
H9AvTkGhFuGVwWntthHeaepHth/WvkEnTBGeu3uFdho+ymYv8FOpv0awNE/hTcPW
IND9GFIHRmyzVvaeZCyzkwnhqf6COZkBFv1n8lFV61J6FPP8mYLJ5UfKNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNMjeslKBBqbXacCdB1rVQhy8gdMB8GA1UdIwQY
MBaAFJmOnLJ/PRq8xMxhw8G7/ccmKOV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODct
NTJkNmIzZTQ3ODlmLzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODctNTJkNmIzZTQ3ODlm
LzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwMpXUw+Y
L0BWFPnN2kl3/EjdkKY2oCBzjRgy7BAC0KSGuZAOLPK1JGDYrm3pJZ2k8XqiH37X
T4OcsXOVTveKdzES6Zrxc3HRqbXrWvHLDihL4Iz3J0qV9UFhSe9Ryg5CWaYrTP2P
QKz55i1fR6tVcoIR60xXSp1lC4gT0V+aDrWD5+fqKHu4gz/RFd/6IBxBDov8IyRQ
2lKXfhJV3QRapqCfdwFWI/qd9VCN1K4GVksqbwCtMHxhqCQ/8vh8KUkxdTjJ5VUy
oKcwGyQ3NSTuU//iRLpp57T25uxkOFNCg3HPPsCET6J7npjniVcA+DhjneY5967V
GSCkUZG/6MhcCg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:38 2025 by rpki-client