Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier: OB99FVHSUHL8vseAILGFyvBfg+ltXyDjCjnrsNUBGTw=
Subject key identifier: 79:F0:AB:33:66:D6:20:F2:FA:40:AB:BF:B1:4F:16:0D:CB:6E:97:3F
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial: 01987306EA1FA22E7FE6FC740B6B7594CBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number: 04
Signing time: Mon 04 Aug 2025 03:01:29 +0000
Manifest this update: Mon 04 Aug 2025 03:01:29 +0000
Manifest next update: Tue 05 Aug 2025 03:01:29 +0000
Files and hashes: 1: EXTeJ0xnJWTRkgHDu_AxpeIu9iA.roa (hash: qrWsqJSnf72iIeO/vT24niegliGNcW4B28Wyc7Pg4x4=)
2: X9W0b9P6Ek_A8a9BpsvnX133VZw.roa (hash: 8NxMp0DgdQySkZvwKlqGylrfX1726nGJj79qXZbDO7M=)
3: xs2uXZDt7cVA7jwMLyODUbD1r5A.roa (hash: CK+GsD3c++kM/6BpDz2kJy3N5LQsGAx/QUYH0SzjPAM=)
4: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: UWGJS6TZ40xnNfCjz/y0j48O1sEAHmVinnrfVdKjP0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:ea:1f:a2:2e:7f:e6:fc:74:0b:6b:75:94:cb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Validity
Not Before: Aug 4 03:01:29 2025 GMT
Not After : Aug 5 03:01:29 2025 GMT
Subject: CN=79f0ab3366d620f2fa40abbfb14f160dcb6e973f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:7b:e2:54:8c:54:a5:46:06:eb:c7:83:75:
1c:34:f7:a5:46:00:c4:00:9d:55:b0:20:f8:a5:48:
ac:63:10:06:22:72:9f:92:df:76:ae:f1:42:79:0f:
dd:24:61:a8:54:23:f4:bb:e6:a8:72:e4:02:ad:f8:
4d:08:89:8a:5b:a6:03:f1:3c:6a:bd:5b:2b:6b:cd:
ff:0d:47:f2:0d:e4:d8:5f:3e:bc:db:57:05:a2:cf:
c1:b5:7b:a8:6b:e4:fb:21:f2:cd:fc:07:d3:0f:ac:
85:4d:60:42:6f:c3:a0:db:7b:1f:27:76:9e:1c:cc:
2c:7e:57:59:f4:a3:0d:a4:bb:27:0d:2d:75:63:fd:
d4:12:e5:02:ea:23:18:65:44:68:76:66:c5:93:04:
0f:29:c1:a6:c6:1d:c1:11:e3:24:bc:b0:1e:19:a0:
fe:c9:2e:1c:44:3b:2c:7c:9e:07:aa:93:3f:a9:47:
ef:38:e4:5c:81:25:c5:84:f7:6b:a5:9d:20:7c:55:
ac:d4:f0:6e:db:b7:13:c1:2f:ae:73:70:58:7c:59:
cf:e1:0b:86:16:0b:a2:69:ad:f4:e5:c8:88:38:c4:
46:df:b1:99:43:2e:9d:b3:da:2f:22:c3:94:3b:92:
05:2a:9b:de:a6:04:99:e8:9b:58:73:33:43:18:28:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F0:AB:33:66:D6:20:F2:FA:40:AB:BF:B1:4F:16:0D:CB:6E:97:3F
X509v3 Authority Key Identifier:
keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f8:60:df:c6:af:44:65:3b:af:8c:a0:0e:39:54:03:f9:a6:
05:11:e8:36:9e:a9:f2:86:88:f9:42:da:b5:0d:ae:5e:48:08:
71:b5:a4:00:64:84:4d:2b:4f:25:e5:2c:a6:17:c7:2b:fc:41:
d2:03:17:1f:1a:e1:6e:60:71:a5:f5:b4:ef:ff:29:6b:f8:3f:
17:ce:c6:d5:93:0a:42:f7:a2:52:0e:e9:8b:b5:db:b7:44:32:
ae:62:b0:10:68:76:b6:22:87:59:43:b9:a4:20:47:0e:d0:03:
47:f0:67:44:79:e7:cb:6d:0c:1e:a7:d6:c5:86:38:3a:06:b8:
c7:55:b2:2b:03:a8:8b:b4:8d:48:14:22:b2:55:97:8e:e7:2c:
fa:8b:48:fe:2d:2a:c7:c0:7c:c0:cb:f7:0d:60:a6:f1:d6:f6:
be:9d:28:88:37:2f:7e:27:49:ea:a7:9e:9e:f1:7c:b6:80:1f:
98:1a:d5:02:36:6e:34:2a:d5:4e:5a:34:9f:91:cb:b1:27:54:
cb:cc:ce:6c:17:03:9d:3b:17:05:44:69:36:15:cb:2f:8f:25:
2b:4f:69:59:f5:bc:39:d4:9e:4c:03:85:ef:30:4d:2e:06:6d:
04:df:47:aa:4e:32:5e:60:db:1d:f6:fe:d2:69:ee:06:d6:eb:
ed:25:06:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBuofoi5/5vx0C2t1lMvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYzgzYzM5MmM1NDIxYzU5NWNkNWZiNzk0MjhlODI3NWJk
YjU5NGMwHhcNMjUwODA0MDMwMTI5WhcNMjUwODA1MDMwMTI5WjAzMTEwLwYDVQQD
Eyg3OWYwYWIzMzY2ZDYyMGYyZmE0MGFiYmZiMTRmMTYwZGNiNmU5NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptN74lSMVKVGBuvHg3UcNPelRgDE
AJ1VsCD4pUisYxAGInKfkt92rvFCeQ/dJGGoVCP0u+aocuQCrfhNCImKW6YD8Txq
vVsra83/DUfyDeTYXz6821cFos/BtXuoa+T7IfLN/AfTD6yFTWBCb8Og23sfJ3ae
HMwsfldZ9KMNpLsnDS11Y/3UEuUC6iMYZURodmbFkwQPKcGmxh3BEeMkvLAeGaD+
yS4cRDssfJ4HqpM/qUfvOORcgSXFhPdrpZ0gfFWs1PBu27cTwS+uc3BYfFnP4QuG
Fguiaa305ciIOMRG37GZQy6ds9ovIsOUO5IFKpvepgSZ6JtYczNDGCjF9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnwqzNm1iDy+kCrv7FPFg3Lbpc/MB8GA1UdIwQY
MBaAFMvIPDksVCHFlc1ft5Qo6Cdb21lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAt
OWFkMzNhZTY1M2FkLzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAtOWFkMzNhZTY1M2Fk
LzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwvhg38av
RGU7r4ygDjlUA/mmBRHoNp6p8oaI+ULatQ2uXkgIcbWkAGSETStPJeUsphfHK/xB
0gMXHxrhbmBxpfW07/8pa/g/F87G1ZMKQveiUg7pi7Xbt0QyrmKwEGh2tiKHWUO5
pCBHDtADR/BnRHnny20MHqfWxYY4Oga4x1WyKwOoi7SNSBQislWXjucs+otI/i0q
x8B8wMv3DWCm8db2vp0oiDcvfidJ6qeenvF8toAfmBrVAjZuNCrVTlo0n5HLsSdU
y8zObBcDnTsXBURpNhXLL48lK09pWfW8OdSeTAOF7zBNLgZtBN9Hqk4yXmDbHfb+
0mnuBtbr7SUGAQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:18 2025 by rpki-client