Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier: OUyRP6121QTxnRdt+UuSLAwnY/LxEgdDOZKiDRPZ3gw=
Subject key identifier: 27:A5:73:D2:FB:0B:C1:5F:2E:65:D2:53:8E:04:99:E4:2D:85:53:A8
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 01989411DE7D7C1C95382CA0EF253EAB3657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number: 0485
Signing time: Sun 10 Aug 2025 13:00:55 +0000
Manifest this update: Sun 10 Aug 2025 13:00:55 +0000
Manifest next update: Mon 11 Aug 2025 13:00:55 +0000
Files and hashes: 1: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (hash: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=)
2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: CPhWasqN89DWPGxcHipafN9XSEFZimZmlQ3/7FC+cCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:de:7d:7c:1c:95:38:2c:a0:ef:25:3e:ab:36:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: Aug 10 13:00:55 2025 GMT
Not After : Aug 11 13:00:55 2025 GMT
Subject: CN=27a573d2fb0bc15f2e65d2538e0499e42d8553a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:31:db:d7:07:07:47:36:77:56:0f:36:c7:c6:
03:60:e3:63:93:92:a6:ca:00:70:c5:99:0f:fe:c0:
bf:c0:6d:98:38:65:c1:45:23:e0:d9:49:ec:36:c6:
cc:7f:dd:56:0d:d1:96:26:d2:17:07:a8:fc:24:92:
ca:f9:3b:9f:88:87:cb:9a:01:67:00:9a:1b:eb:56:
4a:68:8f:24:1c:42:84:d2:3f:33:01:ab:dd:34:df:
33:e4:eb:e6:6c:6e:57:b6:c8:c0:d8:40:b6:70:e5:
cb:83:0a:b6:f2:86:60:6e:7e:c2:95:c8:7f:70:a5:
ed:c2:93:37:7b:4f:ba:bf:d9:b4:b4:59:e3:20:f4:
d6:f6:a4:0f:31:ca:43:0a:7a:33:23:3c:b2:74:71:
33:a1:ba:92:8f:ba:31:03:a2:d6:a1:82:a5:6f:67:
09:7b:67:2b:2b:65:f1:65:64:43:51:e2:fe:f1:b9:
d0:af:32:52:a4:00:87:1c:fd:73:12:2b:68:4f:c7:
81:42:29:e4:8f:27:2b:64:58:51:7c:e0:5e:b7:47:
a0:b4:46:71:2e:d8:07:c0:0c:71:a1:ed:98:d8:7e:
5a:42:69:0a:ff:92:2d:30:ec:e3:bb:c8:c1:99:b1:
66:31:14:6c:fc:f6:a2:a9:e7:80:d6:2a:42:2d:8d:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A5:73:D2:FB:0B:C1:5F:2E:65:D2:53:8E:04:99:E4:2D:85:53:A8
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5c:6f:37:08:8c:11:b2:b3:44:b0:98:e1:9e:1b:03:ad:cd:
0c:77:81:66:00:95:24:1f:66:2c:93:12:a5:b0:89:bb:fd:bc:
88:75:d8:3e:2b:66:c3:d7:bd:5d:3a:d9:ce:27:01:d7:76:64:
8e:db:89:5f:fc:ba:47:b1:14:a1:44:d2:ca:a6:cb:a0:e3:f1:
ee:c2:a6:db:bd:a2:e3:70:42:76:b9:83:f6:37:31:6e:53:fa:
8f:34:07:23:bf:1a:da:05:eb:ec:a2:e7:44:4c:ff:fb:46:2b:
f5:d8:ba:20:7c:87:15:14:12:93:91:6f:6e:cf:47:b7:e7:52:
cf:84:25:3e:f0:9a:43:e1:a2:88:bf:c1:46:10:83:3d:59:f1:
b0:57:94:60:ba:c6:5b:0b:a3:a5:a5:12:53:36:c5:6d:a0:af:
92:ee:df:3e:66:55:b0:11:09:0b:29:07:cc:1e:a9:7a:80:88:
da:72:13:ef:26:71:86:97:8b:1c:cd:e6:b8:1c:7a:b7:e9:50:
d3:87:db:d4:58:0d:ae:ad:fa:d5:95:07:58:7f:4f:74:5a:c0:
55:09:c9:a9:62:3d:e7:07:76:0f:b1:05:94:2b:72:42:85:ca:
32:d3:de:7e:73:d9:52:be:59:b9:87:67:af:eb:f8:c8:53:d2:
60:16:c2:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEd59fByVOCyg7yU+qzZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MjhiNjM0MTdhMmU3ODg1ZTMzODgxYTkyNGFhYzlkNDBh
YWNhNjAwHhcNMjUwODEwMTMwMDU1WhcNMjUwODExMTMwMDU1WjAzMTEwLwYDVQQD
EygyN2E1NzNkMmZiMGJjMTVmMmU2NWQyNTM4ZTA0OTllNDJkODU1M2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTHb1wcHRzZ3Vg82x8YDYONjk5Km
ygBwxZkP/sC/wG2YOGXBRSPg2UnsNsbMf91WDdGWJtIXB6j8JJLK+TufiIfLmgFn
AJob61ZKaI8kHEKE0j8zAavdNN8z5OvmbG5XtsjA2EC2cOXLgwq28oZgbn7Clch/
cKXtwpM3e0+6v9m0tFnjIPTW9qQPMcpDCnozIzyydHEzobqSj7oxA6LWoYKlb2cJ
e2crK2XxZWRDUeL+8bnQrzJSpACHHP1zEitoT8eBQinkjycrZFhRfOBet0egtEZx
LtgHwAxxoe2Y2H5aQmkK/5ItMOzju8jBmbFmMRRs/PaiqeeA1ipCLY09hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCelc9L7C8FfLmXSU44EmeQthVOoMB8GA1UdIwQY
MBaAFMkotjQXoueIXjOIGpJKrJ1AqspgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85ZDdlNmEtMGVhZS00MzRmLTlhMzUt
OGM5NzE2MWUwNjJmLzEveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi85ZDdlNmEtMGVhZS00MzRmLTlhMzUtOGM5NzE2MWUwNjJm
LzEveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFxvNwiM
EbKzRLCY4Z4bA63NDHeBZgCVJB9mLJMSpbCJu/28iHXYPitmw9e9XTrZzicB13Zk
jtuJX/y6R7EUoUTSyqbLoOPx7sKm272i43BCdrmD9jcxblP6jzQHI78a2gXr7KLn
REz/+0Yr9di6IHyHFRQSk5Fvbs9Ht+dSz4QlPvCaQ+GiiL/BRhCDPVnxsFeUYLrG
WwujpaUSUzbFbaCvku7fPmZVsBEJCykHzB6peoCI2nIT7yZxhpeLHM3muBx6t+lQ
04fb1FgNrq361ZUHWH9PdFrAVQnJqWI95wd2D7EFlCtyQoXKMtPefnPZUr5ZuYdn
r+v4yFPSYBbCBA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:08 2025 by rpki-client