Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
File: yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json)
Hash identifier: WMORAbyP6N4WK4+YN8AYd/jXgGCfTBgNsV9jBSha3xA=
Subject key identifier: FD:72:36:80:D1:F6:00:93:7E:13:CC:E1:42:63:2C:DA:2E:38:41:33
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial: 01989600532E38979B93D7BA0D992469DCB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 22:01:00 +0000
Manifest this update: Sun 10 Aug 2025 22:01:00 +0000
Manifest next update: Mon 11 Aug 2025 22:01:00 +0000
Files and hashes: 1: usN8GZVfJ54q0l8hKewfBSWmGHw.roa (hash: IakOdZo+PiFdg1ApCygqDDOunMse1hhehFbuFFIfZ5o=)
2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: /rP4S/6dejNVTCvqJYGqxHJPC78VHtIgdZp1sEXvSqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:53:2e:38:97:9b:93:d7:ba:0d:99:24:69:dc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Validity
Not Before: Aug 10 22:01:00 2025 GMT
Not After : Aug 11 22:01:00 2025 GMT
Subject: CN=fd723680d1f600937e13cce142632cda2e384133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:34:f7:52:10:09:0c:dc:29:0d:58:42:75:
57:fa:62:fd:b0:4d:6a:28:f5:59:33:95:22:4d:80:
f6:bd:71:f6:34:9b:45:5d:9b:4e:0c:08:4a:34:b0:
de:35:32:91:ac:1a:c6:a6:fb:17:67:ef:16:1f:a3:
20:93:0c:b2:72:a4:56:3d:1d:fe:fd:ff:d2:a9:72:
e2:f4:8d:5d:8f:91:9a:39:fc:64:a8:fe:6e:ef:cc:
56:1d:87:2c:3a:3d:c2:f7:65:31:c0:14:33:ca:cc:
55:4a:31:b7:c7:e4:8d:44:61:b5:fe:24:1f:5b:4f:
1d:65:da:87:83:ed:59:d4:11:d1:6a:f0:ca:63:c8:
3d:36:7e:fe:a8:1a:69:fd:28:ee:98:5c:32:03:3e:
83:1c:b0:f9:78:18:37:1a:1d:39:89:7d:15:42:2d:
b2:a8:c9:e6:7c:fb:8f:e4:63:85:d1:26:c1:7d:35:
54:bb:fe:8d:4f:dc:00:52:73:cc:d3:2b:75:ab:c7:
6f:8d:5d:ab:bc:41:19:08:c0:b9:31:4b:ad:8d:0e:
cf:0e:26:95:02:24:16:28:27:f3:a4:9e:03:ee:d3:
6d:a7:d4:7f:9d:2b:65:61:1a:c8:87:48:0b:f5:9b:
fd:09:36:a9:46:c2:8e:85:2e:1e:21:0e:bc:37:b8:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:36:80:D1:F6:00:93:7E:13:CC:E1:42:63:2C:DA:2E:38:41:33
X509v3 Authority Key Identifier:
keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:08:8d:00:8d:e0:d0:23:23:90:46:75:06:ed:8f:1b:05:be:
0d:b6:57:7a:db:a7:bd:3f:20:21:8f:99:3c:86:92:95:b6:e4:
37:0e:90:74:2b:30:65:17:7d:8b:6b:4e:5a:93:3a:dc:89:6d:
cb:21:6a:51:fa:fe:31:f6:b8:19:4f:01:1e:a9:94:be:0b:21:
69:fb:92:85:33:62:0e:39:81:dd:46:b3:e5:f4:f9:b1:7d:e1:
ac:43:29:68:4f:c0:16:88:36:5b:f0:85:68:2d:01:fd:26:10:
03:2c:c6:db:d9:7d:df:55:fc:49:a4:9c:e9:3c:d5:48:c1:6c:
b2:b4:a8:26:58:f0:80:e3:54:2c:59:4f:0f:01:55:f4:94:80:
81:2d:6f:11:12:30:fa:82:25:d9:a5:5f:d0:50:43:32:98:ed:
fa:86:77:86:17:03:fe:7d:dc:d1:cc:cd:1a:7e:82:3d:10:8c:
a6:9c:0b:db:0b:4e:db:a0:82:a2:32:1d:35:34:b2:2c:4f:86:
ba:2b:1c:8f:ff:1f:11:aa:98:14:7a:d1:0f:25:e4:b1:93:01:
da:f1:06:0b:24:17:77:46:3b:aa:5c:a4:95:f5:77:1c:de:49:
e9:82:b6:2d:21:4d:ca:23:88:d2:d2:81:55:18:95:d8:f5:7e:
59:07:88:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWAFMuOJebk9e6DZkkadyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWM3N2RmNTllZDcyYTU0NTdkZWNlNmE1M2QwNWVkMGFl
NjAwYWEwHhcNMjUwODEwMjIwMTAwWhcNMjUwODExMjIwMTAwWjAzMTEwLwYDVQQD
EyhmZDcyMzY4MGQxZjYwMDkzN2UxM2NjZTE0MjYzMmNkYTJlMzg0MTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+A091IQCQzcKQ1YQnVX+mL9sE1q
KPVZM5UiTYD2vXH2NJtFXZtODAhKNLDeNTKRrBrGpvsXZ+8WH6MgkwyycqRWPR3+
/f/SqXLi9I1dj5GaOfxkqP5u78xWHYcsOj3C92UxwBQzysxVSjG3x+SNRGG1/iQf
W08dZdqHg+1Z1BHRavDKY8g9Nn7+qBpp/SjumFwyAz6DHLD5eBg3Gh05iX0VQi2y
qMnmfPuP5GOF0SbBfTVUu/6NT9wAUnPM0yt1q8dvjV2rvEEZCMC5MUutjQ7PDiaV
AiQWKCfzpJ4D7tNtp9R/nStlYRrIh0gL9Zv9CTapRsKOhS4eIQ68N7i0kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1yNoDR9gCTfhPM4UJjLNouOEEzMB8GA1UdIwQY
MBaAFMnsd99Z7XKlRX3s5qU9Be0K5gCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYt
M2ViMDllZGUzZWQ1LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYtM2ViMDllZGUzZWQ1
LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgiNAI3g
0CMjkEZ1Bu2PGwW+DbZXetunvT8gIY+ZPIaSlbbkNw6QdCswZRd9i2tOWpM63Ilt
yyFqUfr+Mfa4GU8BHqmUvgshafuShTNiDjmB3Uaz5fT5sX3hrEMpaE/AFog2W/CF
aC0B/SYQAyzG29l931X8SaSc6TzVSMFssrSoJljwgONULFlPDwFV9JSAgS1vERIw
+oIl2aVf0FBDMpjt+oZ3hhcD/n3c0czNGn6CPRCMppwL2wtO26CCojIdNTSyLE+G
uiscj/8fEaqYFHrRDyXksZMB2vEGCyQXd0Y7qlyklfV3HN5J6YK2LSFNyiOI0tKB
VRiV2PV+WQeIyQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 06:04:25 2025 by rpki-client