Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier: X3ugjbAcMmP9I/zy/GfeNYG9K8Y0VVr0G7o6hPsc88M=
Subject key identifier: 2C:4A:F9:BB:3C:6B:FE:6E:F2:5A:5B:90:68:81:B2:8C:3F:99:E4:21
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 01987261807807051F5F1DA67C6A3B5FB875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 00:00:49 +0000
Manifest this update: Mon 04 Aug 2025 00:00:49 +0000
Manifest next update: Tue 05 Aug 2025 00:00:49 +0000
Files and hashes: 1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: WfTWubsL8Lly3y3EQfYiK+0tfnIKyKo8r0n4TFzXE6o=)
2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=)
3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:80:78:07:05:1f:5f:1d:a6:7c:6a:3b:5f:b8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Aug 4 00:00:49 2025 GMT
Not After : Aug 5 00:00:49 2025 GMT
Subject: CN=2c4af9bb3c6bfe6ef25a5b906881b28c3f99e421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:6a:ae:6e:9e:2a:db:e5:dc:a9:e9:95:eb:
a2:d1:26:c7:b8:a5:35:60:93:e7:f9:05:57:02:6d:
05:e3:41:0b:0c:f6:af:9d:96:98:df:00:ce:34:5b:
8e:0a:85:95:79:0a:06:95:b9:bd:99:5b:0e:f0:27:
71:8b:2d:c4:36:a8:98:2f:a7:fd:34:b5:13:01:ef:
18:0a:bf:64:71:03:1f:43:43:8c:35:59:7c:0f:a4:
00:b7:71:54:ed:70:5d:74:eb:b6:16:42:09:5c:9e:
9e:a5:b3:d5:52:98:aa:d1:3c:08:94:82:b8:2b:37:
03:9c:42:d6:4b:96:eb:da:f5:c8:cf:4a:8a:7f:50:
88:b6:5e:9a:da:7e:b7:22:4e:8b:41:5d:67:f3:9a:
23:6f:1a:a1:c8:58:97:aa:22:a3:4c:09:90:5e:67:
df:2d:68:48:66:8d:73:aa:52:82:6b:c3:39:1a:9b:
2c:ab:ce:06:76:8e:e1:8f:32:0f:e1:ea:47:6f:9c:
e4:f2:b3:12:82:41:9d:24:dc:69:81:bb:e2:d2:bb:
fe:41:51:74:34:66:c3:a6:5e:8f:b1:00:af:b8:bd:
a7:c6:7c:4b:be:59:2c:07:f7:29:15:0d:63:96:ce:
0a:91:7e:7e:a9:af:19:e1:f1:c0:30:3e:b2:4f:dc:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:F9:BB:3C:6B:FE:6E:F2:5A:5B:90:68:81:B2:8C:3F:99:E4:21
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:90:1e:55:be:4c:c3:9a:8a:88:cb:d7:4a:a2:5a:4f:7c:ea:
4e:0a:0b:ed:c3:75:50:fa:5f:33:1e:85:da:15:e2:05:b7:1b:
ee:57:d8:36:cd:dd:82:be:4d:2e:a1:d4:04:b3:04:1d:71:71:
0b:f6:e1:47:71:42:7f:e9:fa:09:cf:44:29:5d:10:67:a2:b0:
6c:d9:a0:23:6e:22:46:61:e1:5d:69:43:8d:fd:36:79:92:ea:
ec:22:98:01:1f:df:03:92:9f:63:de:ea:21:53:7e:3a:a9:d2:
8b:fc:4e:c6:32:47:29:47:4c:3e:72:38:d3:00:43:5d:64:e8:
0c:f1:ed:a0:98:af:40:a0:e3:24:0d:0d:e0:e2:1a:10:cd:54:
d7:35:dd:f9:6c:76:17:ae:a6:47:8d:a4:a0:10:a4:59:28:af:
bc:d0:03:f0:35:09:d9:cf:95:36:be:42:8d:27:bf:1b:3f:b5:
ba:86:57:50:3a:92:9b:2d:26:4d:ed:7b:8a:88:08:5e:6b:31:
24:f2:76:6d:26:74:5b:a0:86:4c:f0:a9:7c:7d:ef:17:83:0f:
5c:4d:5b:1c:82:8b:31:02:3e:c5:6f:b7:06:e5:a9:df:80:a3:
ea:f1:53:ca:30:02:97:92:dc:39:cb:48:f7:51:09:bf:ef:6f:
30:ad:22:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYYB4BwUfXx2mfGo7X7h1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5
ZjBhOTMwHhcNMjUwODA0MDAwMDQ5WhcNMjUwODA1MDAwMDQ5WjAzMTEwLwYDVQQD
EygyYzRhZjliYjNjNmJmZTZlZjI1YTViOTA2ODgxYjI4YzNmOTllNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKdqrm6eKtvl3Knpleui0SbHuKU1
YJPn+QVXAm0F40ELDPavnZaY3wDONFuOCoWVeQoGlbm9mVsO8Cdxiy3ENqiYL6f9
NLUTAe8YCr9kcQMfQ0OMNVl8D6QAt3FU7XBddOu2FkIJXJ6epbPVUpiq0TwIlIK4
KzcDnELWS5br2vXIz0qKf1CItl6a2n63Ik6LQV1n85ojbxqhyFiXqiKjTAmQXmff
LWhIZo1zqlKCa8M5Gpssq84Gdo7hjzIP4epHb5zk8rMSgkGdJNxpgbvi0rv+QVF0
NGbDpl6PsQCvuL2nxnxLvlksB/cpFQ1jls4KkX5+qa8Z4fHAMD6yT9w4+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxK+bs8a/5u8lpbkGiBsow/meQhMB8GA1UdIwQY
MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt
N2NmZDk1N2YwOGZmLzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm
LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJAeVb5M
w5qKiMvXSqJaT3zqTgoL7cN1UPpfMx6F2hXiBbcb7lfYNs3dgr5NLqHUBLMEHXFx
C/bhR3FCf+n6Cc9EKV0QZ6KwbNmgI24iRmHhXWlDjf02eZLq7CKYAR/fA5KfY97q
IVN+OqnSi/xOxjJHKUdMPnI40wBDXWToDPHtoJivQKDjJA0N4OIaEM1U1zXd+Wx2
F66mR42koBCkWSivvNAD8DUJ2c+VNr5CjSe/Gz+1uoZXUDqSmy0mTe17iogIXmsx
JPJ2bSZ0W6CGTPCpfH3vF4MPXE1bHIKLMQI+xW+3BuWp34Cj6vFTyjACl5LcOctI
91EJv+9vMK0iRA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:26 2025 by rpki-client