Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: MUuBQv++9kGTgzG4nwAKHzu/ytcx4CqQ2UDYe+YXXTk=
Subject key identifier: ED:03:91:AF:B8:40:EF:4C:50:BE:59:29:8B:80:0B:91:17:26:3F:60
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 019894B786EB018B793C8670F9375E0EF551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 16:01:52 +0000
Manifest this update: Sun 10 Aug 2025 16:01:52 +0000
Manifest next update: Mon 11 Aug 2025 16:01:52 +0000
Files and hashes: 1: UGjGolH12_x3cCDDDs-wfhhaN4U.roa (hash: FV6D5mk0nwiH6BRySmQ169aN1Z1SEVl4Kc/yfJEULos=)
2: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: l4qiUAzz4zq3A4x3P3rY5RpKGmRC5/Sc2FP6Uo9YzNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:86:eb:01:8b:79:3c:86:70:f9:37:5e:0e:f5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: Aug 10 16:01:52 2025 GMT
Not After : Aug 11 16:01:52 2025 GMT
Subject: CN=ed0391afb840ef4c50be59298b800b9117263f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:13:11:32:15:39:35:f2:70:d9:81:58:35:
d7:d3:ff:dd:db:61:5a:88:0c:f2:94:7b:38:75:91:
e0:cc:4f:17:1e:eb:58:28:5d:5a:ea:7a:f6:6a:c4:
f1:54:63:1b:5c:13:4d:72:2f:13:c6:dc:09:1c:e6:
77:3a:3f:de:91:14:15:e5:ef:eb:3a:41:2c:19:43:
70:4e:11:ef:9d:fe:b4:8b:9b:b5:a7:b0:48:02:a1:
c9:24:b4:03:39:5e:82:00:ae:65:7d:d0:77:02:02:
f9:b7:03:df:ad:2a:f8:41:25:6c:84:a8:e0:58:26:
e9:27:c9:59:75:7c:3a:1c:ac:c1:4a:19:94:b8:86:
6c:cf:9e:5e:76:bd:68:24:c3:15:be:a3:00:71:93:
ca:d1:29:08:f5:a9:42:65:74:84:a5:12:df:b2:21:
d2:3b:c1:44:89:e6:66:ef:93:19:04:61:8d:56:c6:
6a:b2:5d:c9:5b:28:b3:c8:4c:4a:f6:c6:4a:dd:95:
4d:a0:48:45:58:c5:94:a9:d0:5d:56:fe:68:4f:44:
b5:96:8e:55:8a:1c:2d:d9:80:41:93:44:63:89:a8:
b6:b3:08:72:39:98:89:7f:1c:17:ae:98:a6:ae:a9:
7d:d0:81:ac:84:bd:85:07:3d:ce:28:03:60:35:20:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:91:AF:B8:40:EF:4C:50:BE:59:29:8B:80:0B:91:17:26:3F:60
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:d7:42:fb:b9:c8:08:95:bf:fc:e0:d3:b6:04:7f:8c:c7:
5e:37:a5:b9:42:77:67:24:62:53:2e:b2:0e:39:d8:b4:3c:95:
49:e1:a9:ef:2b:5e:2c:51:f7:43:8e:20:19:44:e9:f4:52:f5:
75:e6:ae:49:fe:54:49:55:65:6a:bb:26:c9:e5:9d:1d:9e:80:
27:ff:63:65:fc:42:5f:d2:17:03:79:b0:e0:c2:76:9b:09:c7:
3e:61:36:ec:62:55:ff:b8:e7:91:bf:45:ce:47:bf:9b:0d:98:
31:28:dd:a7:77:31:58:96:79:5f:15:20:b8:e2:6f:4a:76:07:
12:0b:7c:eb:09:29:6b:d2:ec:f4:3c:18:cc:3a:31:20:02:af:
78:b8:e6:07:1d:30:5c:2a:26:51:f1:a7:45:5e:db:3f:6e:90:
21:24:ed:2d:f9:a0:82:ab:6c:d5:95:2c:ee:88:ec:2b:96:fc:
f4:e0:01:fa:00:3a:0d:78:a2:ef:61:71:d7:eb:18:2b:c9:69:
36:a5:18:1c:71:95:8b:4e:32:fd:f1:fd:d7:03:ea:09:30:45:
77:3d:40:dc:e2:5f:62:5c:9e:54:97:69:5e:ac:2f:10:43:46:
67:0f:82:cc:49:51:76:5e:90:1b:8b:b6:69:0a:50:b2:1c:05:
0d:62:ed:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUt4brAYt5PIZw+TdeDvVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTEwYTFjNjZhMGU2MDAyNGFiYWI2MmQzMzI2ODJjNzEz
YWEzNDcwHhcNMjUwODEwMTYwMTUyWhcNMjUwODExMTYwMTUyWjAzMTEwLwYDVQQD
EyhlZDAzOTFhZmI4NDBlZjRjNTBiZTU5Mjk4YjgwMGI5MTE3MjYzZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nYTETIVOTXycNmBWDXX0//d22Fa
iAzylHs4dZHgzE8XHutYKF1a6nr2asTxVGMbXBNNci8TxtwJHOZ3Oj/ekRQV5e/r
OkEsGUNwThHvnf60i5u1p7BIAqHJJLQDOV6CAK5lfdB3AgL5twPfrSr4QSVshKjg
WCbpJ8lZdXw6HKzBShmUuIZsz55edr1oJMMVvqMAcZPK0SkI9alCZXSEpRLfsiHS
O8FEieZm75MZBGGNVsZqsl3JWyizyExK9sZK3ZVNoEhFWMWUqdBdVv5oT0S1lo5V
ihwt2YBBk0Rjiai2swhyOZiJfxwXrpimrql90IGshL2FBz3OKANgNSA30QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0Dka+4QO9MUL5ZKYuAC5EXJj9gMB8GA1UdIwQY
MBaAFGDhChxmoOYAJKurYtMyaCxxOqNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2Mt
NjQxNzcwNzUxN2Q2LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2MtNjQxNzcwNzUxN2Q2
LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6XXQvu5
yAiVv/zg07YEf4zHXjeluUJ3ZyRiUy6yDjnYtDyVSeGp7yteLFH3Q44gGUTp9FL1
deauSf5USVVlarsmyeWdHZ6AJ/9jZfxCX9IXA3mw4MJ2mwnHPmE27GJV/7jnkb9F
zke/mw2YMSjdp3cxWJZ5XxUguOJvSnYHEgt86wkpa9Ls9DwYzDoxIAKveLjmBx0w
XComUfGnRV7bP26QISTtLfmggqts1ZUs7ojsK5b89OAB+gA6DXii72Fx1+sYK8lp
NqUYHHGVi04y/fH91wPqCTBFdz1A3OJfYlyeVJdpXqwvEENGZw+CzElRdl6QG4u2
aQpQshwFDWLtug==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:16 2025 by rpki-client