
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: /eSApxF5FzCsbcd8ztjYxoueBkhqF/E7vVAyMpCR1TM=
Subject key identifier: F3:C4:86:F3:DC:AF:6B:F7:F0:40:65:5D:64:51:11:D2:B0:30:01:48
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019872CFD23B69E37956AA25E44BEE9BA251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0667
Signing time: Mon 04 Aug 2025 02:01:18 +0000
Manifest this update: Mon 04 Aug 2025 02:01:18 +0000
Manifest next update: Tue 05 Aug 2025 02:01:18 +0000
Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: YuRPR9jh1V/6cNHr8ktg20xzaBPrs3HPe6OSY45MxoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d2:3b:69:e3:79:56:aa:25:e4:4b:ee:9b:a2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Aug 4 02:01:18 2025 GMT
Not After : Aug 5 02:01:18 2025 GMT
Subject: CN=f3c486f3dcaf6bf7f040655d645111d2b0300148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:65:62:fe:72:0e:c3:52:ca:f1:8d:2d:c7:
39:a2:ee:99:b9:97:ee:c0:67:a5:6d:9a:53:4b:2b:
91:1b:7d:44:6c:7a:f3:26:0b:fb:77:f3:71:66:a8:
68:de:47:8f:76:33:d3:a8:6d:cc:af:dc:55:6c:77:
0f:7b:f7:41:18:3d:09:46:d0:aa:c4:02:a1:d4:c1:
71:77:78:58:97:1f:00:a7:46:6c:b7:d8:61:05:5a:
59:8e:02:ba:84:bd:37:99:a4:49:e0:cc:fd:53:e2:
37:b1:e8:33:06:bc:67:7a:30:36:4d:96:ae:08:2e:
37:ec:3f:05:7a:a7:6c:48:40:ec:fe:31:2a:92:b2:
ba:dc:f1:f2:7f:4e:ae:db:34:4c:c6:d9:db:af:ae:
b3:33:20:c8:ef:95:08:f6:6b:b5:c3:ac:56:6a:b7:
c4:cb:9b:89:39:14:6a:b6:c0:50:75:cb:4a:43:0a:
b5:5c:79:d3:82:7b:59:c8:27:34:94:6b:c0:6e:d2:
88:d9:0c:18:0a:8b:c3:f3:a0:42:e4:87:24:7d:d1:
2c:ae:49:33:5b:e2:61:e9:16:df:6f:3b:97:d6:34:
63:67:eb:4c:86:9d:04:01:e4:7d:82:f1:86:66:e8:
3c:2b:86:07:f1:1a:4f:15:d0:11:a2:ab:61:29:9d:
55:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C4:86:F3:DC:AF:6B:F7:F0:40:65:5D:64:51:11:D2:B0:30:01:48
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d6:ce:b8:33:13:a6:6c:1c:a3:9f:de:c9:fb:8b:25:ac:78:
0b:f8:f4:5e:9d:c3:9d:43:d4:5d:36:9c:85:1b:09:10:91:9d:
17:fb:c2:19:58:9b:54:68:c1:ba:8e:87:16:d3:5a:e1:7e:d3:
27:e3:dd:5d:26:c7:6c:ea:a7:77:e6:91:26:03:29:6a:d1:57:
dc:6c:59:c6:6b:04:b1:b2:d5:74:5c:00:8b:33:9f:d7:72:8d:
d4:d2:86:f2:78:f0:28:2c:22:c6:c7:e8:d2:72:ff:ca:e8:8f:
e6:ec:b9:c0:60:54:dd:5d:d0:d5:18:75:10:f3:6b:bd:c0:7d:
b9:de:71:ba:75:6d:c1:f9:17:08:cf:4d:a2:e4:76:7a:1f:ee:
d7:3b:5c:77:4a:7d:d2:75:c0:16:21:bd:a9:c2:e0:be:f5:d8:
f9:0a:62:c4:86:e1:e3:cd:1d:95:ad:e2:63:94:bd:02:fb:e0:
bc:b1:65:06:bd:fc:06:39:b9:3c:85:c6:6d:c6:7a:62:9e:30:
f5:53:80:c5:ce:9c:02:f9:ac:7e:3f:0f:3a:61:1b:9e:3b:1f:
13:e1:b9:e1:95:07:9b:cd:e2:22:e2:83:5f:be:ed:ec:43:77:
2e:d2:8c:3a:6a:85:6c:19:19:b5:6e:4d:27:42:55:46:a8:86:
bc:2f:ec:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz9I7aeN5Vqol5Evum6JRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzI0NTU1OTQwYWU1MWFmNWQxZjQyYmQ1YWM3MTU4NjRm
YTE4MjkwHhcNMjUwODA0MDIwMTE4WhcNMjUwODA1MDIwMTE4WjAzMTEwLwYDVQQD
EyhmM2M0ODZmM2RjYWY2YmY3ZjA0MDY1NWQ2NDUxMTFkMmIwMzAwMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihllYv5yDsNSyvGNLcc5ou6ZuZfu
wGelbZpTSyuRG31EbHrzJgv7d/NxZqho3kePdjPTqG3Mr9xVbHcPe/dBGD0JRtCq
xAKh1MFxd3hYlx8Ap0Zst9hhBVpZjgK6hL03maRJ4Mz9U+I3segzBrxnejA2TZau
CC437D8FeqdsSEDs/jEqkrK63PHyf06u2zRMxtnbr66zMyDI75UI9mu1w6xWarfE
y5uJORRqtsBQdctKQwq1XHnTgntZyCc0lGvAbtKI2QwYCovD86BC5IckfdEsrkkz
W+Jh6RbfbzuX1jRjZ+tMhp0EAeR9gvGGZug8K4YH8RpPFdARoqthKZ1V+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPEhvPcr2v38EBlXWRREdKwMAFIMB8GA1UdIwQY
MBaAFMsyRVWUCuUa9dH0K9WscVhk+hgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAt
MjAyYzI2ODlkZmEwLzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAtMjAyYzI2ODlkZmEw
LzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9bOuDMT
pmwco5/eyfuLJax4C/j0Xp3DnUPUXTachRsJEJGdF/vCGVibVGjBuo6HFtNa4X7T
J+PdXSbHbOqnd+aRJgMpatFX3GxZxmsEsbLVdFwAizOf13KN1NKG8njwKCwixsfo
0nL/yuiP5uy5wGBU3V3Q1Rh1EPNrvcB9ud5xunVtwfkXCM9NouR2eh/u1ztcd0p9
0nXAFiG9qcLgvvXY+QpixIbh480dla3iY5S9AvvgvLFlBr38Bjm5PIXGbcZ6Yp4w
9VOAxc6cAvmsfj8POmEbnjsfE+G54ZUHm83iIuKDX77t7EN3LtKMOmqFbBkZtW5N
J0JVRqiGvC/sgQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:38 2025 by rpki-client