Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: gdfsnJlXEIjmVnT/WXm4rkBcTBXFtpBPxGfy3RXivuI=
Subject key identifier: D0:14:69:02:75:93:20:AC:F9:16:ED:7B:87:BE:3E:99:0C:A7:EE:85
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 0198A0840C1FCBDCCBF8B194DFC334D2F60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 02EC
Signing time: Tue 12 Aug 2025 23:01:04 +0000
Manifest this update: Tue 12 Aug 2025 23:01:04 +0000
Manifest next update: Wed 13 Aug 2025 23:01:04 +0000
Files and hashes: 1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: 2BbaL8YpDtZMfbDBHGj33YUsCTa+3Kzd1hq5FrGJpq8=)
2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:0c:1f:cb:dc:cb:f8:b1:94:df:c3:34:d2:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Aug 12 23:01:04 2025 GMT
Not After : Aug 13 23:01:04 2025 GMT
Subject: CN=d0146902759320acf916ed7b87be3e990ca7ee85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:4b:96:3e:58:a2:3b:76:8b:cf:a4:0c:99:
a5:9b:43:a2:95:78:da:80:b8:3f:8d:6f:95:a1:32:
e2:6c:d7:c6:96:95:5b:58:bf:7d:23:8f:f3:e4:dc:
e2:cb:96:68:23:ed:fe:a7:f5:d5:4e:92:79:d0:cf:
48:7e:81:e6:30:4e:ac:da:e5:39:77:fd:58:67:9c:
44:96:60:9f:f1:fa:e6:37:21:79:8a:4a:d8:7b:e6:
34:4d:41:95:0c:7e:0d:59:e4:86:67:33:e2:9f:c8:
e0:93:f3:ea:79:b2:8f:5f:7f:a6:8d:5b:a0:93:8d:
22:99:1d:55:b4:e7:de:b7:d7:8c:6c:19:a2:49:d1:
fd:27:7b:9a:25:7e:6d:48:3b:98:ef:a3:db:90:f8:
49:78:6b:dc:20:ed:d7:63:09:f5:44:37:01:55:cb:
b8:c8:86:3e:d7:03:3d:0b:83:72:4a:16:27:86:10:
1b:f3:28:f2:eb:05:ea:47:69:8e:77:75:80:7d:08:
39:f4:b9:9c:8e:05:a8:16:8e:86:e9:8e:4f:95:9a:
01:01:0e:c3:68:d9:39:dd:e5:11:46:36:3a:f1:a3:
c2:1f:89:02:e7:cd:e1:ff:62:d0:7e:1c:a3:e3:e3:
f1:ef:78:8b:95:e9:d2:6f:96:ce:cd:64:f3:2c:a2:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:14:69:02:75:93:20:AC:F9:16:ED:7B:87:BE:3E:99:0C:A7:EE:85
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ce:59:2a:2d:c0:49:b0:2e:71:78:c2:f7:13:16:4a:e1:22:
85:95:f9:b3:04:3a:e7:18:92:0b:0c:e0:ca:61:c9:bf:2b:69:
84:39:00:0c:c6:ac:db:86:06:90:c4:a6:c1:2f:12:bd:a0:42:
bf:21:9a:dc:26:b4:3a:70:77:60:55:19:30:ab:78:be:a2:63:
bf:73:31:41:8d:05:da:5c:45:a6:7d:fd:9a:47:5a:68:b0:ad:
28:aa:0c:0d:ed:a3:43:74:78:b9:ef:75:8f:44:e9:5b:a8:b0:
84:2c:a4:db:ac:ff:58:54:81:b4:73:a5:ef:98:2d:8f:d6:93:
2e:03:af:b1:a1:78:cd:5f:68:e6:a6:be:d6:50:88:63:73:30:
3d:c8:01:df:da:78:13:59:e2:c3:b5:91:2c:33:ad:06:a9:be:
bb:32:58:5c:3c:00:2b:9b:35:ed:dc:84:c9:68:ac:42:10:52:
31:60:af:47:df:1b:3d:85:89:85:a2:6a:aa:ac:c0:90:e0:d7:
68:06:a0:61:2f:3a:5a:63:9c:17:9a:df:b0:e3:4a:fe:23:8f:
b7:d7:92:c2:69:61:96:6d:f7:7f:a6:9a:ab:ac:c3:c3:2a:0f:
8b:e9:c4:3f:f3:b7:30:30:7f:f9:fa:35:98:14:80:fb:e6:03:
2b:9d:c2:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZighAwfy9zL+LGU38M00vYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzIzMzk3ZDZlNTI5ZGZmMDZjN2NmMTRkMTc2MGQ2ZTcw
NmFhNmYwHhcNMjUwODEyMjMwMTA0WhcNMjUwODEzMjMwMTA0WjAzMTEwLwYDVQQD
EyhkMDE0NjkwMjc1OTMyMGFjZjkxNmVkN2I4N2JlM2U5OTBjYTdlZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1JLlj5Yojt2i8+kDJmlm0OilXja
gLg/jW+VoTLibNfGlpVbWL99I4/z5Nziy5ZoI+3+p/XVTpJ50M9IfoHmME6s2uU5
d/1YZ5xElmCf8frmNyF5ikrYe+Y0TUGVDH4NWeSGZzPin8jgk/PqebKPX3+mjVug
k40imR1VtOfet9eMbBmiSdH9J3uaJX5tSDuY76PbkPhJeGvcIO3XYwn1RDcBVcu4
yIY+1wM9C4NyShYnhhAb8yjy6wXqR2mOd3WAfQg59LmcjgWoFo6G6Y5PlZoBAQ7D
aNk53eURRjY68aPCH4kC583h/2LQfhyj4+Px73iLlenSb5bOzWTzLKIQSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAUaQJ1kyCs+Rbte4e+PpkMp+6FMB8GA1UdIwQY
MBaAFGEyM5fW5Snf8Gx88U0XYNbnBqpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEt
ZWYzM2Q4NWE0YTg2LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEtZWYzM2Q4NWE0YTg2
LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJc5ZKi3A
SbAucXjC9xMWSuEihZX5swQ65xiSCwzgymHJvytphDkADMas24YGkMSmwS8SvaBC
vyGa3Ca0OnB3YFUZMKt4vqJjv3MxQY0F2lxFpn39mkdaaLCtKKoMDe2jQ3R4ue91
j0TpW6iwhCyk26z/WFSBtHOl75gtj9aTLgOvsaF4zV9o5qa+1lCIY3MwPcgB39p4
E1niw7WRLDOtBqm+uzJYXDwAK5s17dyEyWisQhBSMWCvR98bPYWJhaJqqqzAkODX
aAagYS86WmOcF5rfsONK/iOPt9eSwmlhlm33f6aaq6zDwyoPi+nEP/O3MDB/+fo1
mBSA++YDK53CfQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:37 2025 by rpki-client