Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: z0tBR5gbUUm4QlcrvLGm2gnxjK6DY0jSCxsMGpaB4pk=
Subject key identifier: 77:3D:2F:45:FF:F6:FE:D8:BE:27:38:9D:7A:43:55:07:B3:06:16:C4
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 0198748762E6FD9D034FBD32A4215FA028A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0D4C
Signing time: Mon 04 Aug 2025 10:01:26 +0000
Manifest this update: Mon 04 Aug 2025 10:01:26 +0000
Manifest next update: Tue 05 Aug 2025 10:01:26 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: GiaVW78B1av0dlKFNRbAAc8KBQ5oPckSJtO9mstkciQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:62:e6:fd:9d:03:4f:bd:32:a4:21:5f:a0:28:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Aug 4 10:01:26 2025 GMT
Not After : Aug 5 10:01:26 2025 GMT
Subject: CN=773d2f45fff6fed8be27389d7a435507b30616c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:ca:24:26:7b:b2:d5:34:30:b4:85:7a:47:
1a:58:2b:0a:44:8b:68:bf:48:c1:5a:0a:7f:3b:03:
1a:00:fc:d6:1c:38:ad:be:04:73:d2:16:67:35:91:
a1:64:24:f2:cc:13:38:c5:42:a2:0f:e2:59:f1:6e:
02:91:89:12:ce:8f:57:07:53:97:8c:f9:cb:0b:74:
cf:05:67:fc:e9:ea:bc:58:23:5e:3f:3b:d3:12:e0:
9e:50:80:74:bb:55:b3:ec:70:2d:3c:74:ed:8f:c7:
77:5f:ad:25:96:e8:87:8c:80:9a:8b:6e:57:98:77:
0d:c0:6f:7a:fa:d3:7b:9a:a8:28:3b:3c:f2:0e:13:
9d:63:f7:c4:a4:ff:4d:c0:ee:e9:7c:c2:aa:a5:fa:
8b:d3:f6:49:a8:c3:a4:dd:44:a2:47:21:f8:77:55:
ae:9f:3e:1c:c1:27:10:19:b5:e5:33:56:28:c2:60:
84:be:cc:84:a7:a1:e4:9f:3d:f4:3b:8e:35:cc:1a:
87:b2:26:9d:2a:08:16:5b:97:95:a2:61:0e:3b:28:
a7:8a:f0:41:c9:0b:23:49:39:dc:4b:e7:9d:18:c1:
a8:df:bd:51:cc:5b:4a:cd:e7:26:eb:74:83:28:0d:
28:3d:be:91:47:af:0e:dd:e5:29:bc:11:71:06:57:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:2F:45:FF:F6:FE:D8:BE:27:38:9D:7A:43:55:07:B3:06:16:C4
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e0:48:6a:d4:82:cb:03:bc:df:79:01:84:e1:8b:ed:78:35:
cb:d4:73:95:d3:2d:d5:2f:5d:79:05:02:e5:28:ea:16:df:db:
90:71:f8:01:d6:34:25:40:9f:f2:45:56:de:c6:dd:9b:7d:2d:
93:e2:00:c8:31:ed:2b:3f:21:6c:32:fe:a1:e2:6e:5e:59:7c:
4a:33:ec:22:91:99:5a:43:b2:eb:2a:81:d0:43:0c:10:7d:ab:
bb:07:d5:62:f4:b8:38:27:e9:a5:2f:05:05:87:c2:b0:c7:59:
0e:49:61:a5:e7:47:b2:d7:11:19:1a:29:11:d7:7a:87:3f:a5:
3b:b5:03:10:15:3b:ec:11:5b:30:ad:0d:b0:19:18:90:2c:26:
a8:70:ba:4c:ca:1d:d0:2e:ed:1e:d8:8e:75:71:56:2d:b8:ac:
34:ee:d9:b1:64:4b:6c:41:48:66:93:0a:5e:53:41:89:9b:48:
01:05:a4:26:97:0e:47:70:ab:0b:34:4f:80:ab:47:fb:fb:45:
87:e5:39:b7:03:75:85:d4:cb:f7:b8:5f:bf:27:d7:e6:52:2e:
bf:0c:f0:10:e0:62:15:2c:21:64:19:1c:58:59:4f:57:3f:7b:
d0:31:7b:41:97:e9:5b:a1:e5:b6:79:17:f4:e6:2b:a5:f9:85:
9e:49:9a:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0h2Lm/Z0DT70ypCFfoCiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2
ZWFkNWIwHhcNMjUwODA0MTAwMTI2WhcNMjUwODA1MTAwMTI2WjAzMTEwLwYDVQQD
Eyg3NzNkMmY0NWZmZjZmZWQ4YmUyNzM4OWQ3YTQzNTUwN2IzMDYxNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsvKJCZ7stU0MLSFekcaWCsKRIto
v0jBWgp/OwMaAPzWHDitvgRz0hZnNZGhZCTyzBM4xUKiD+JZ8W4CkYkSzo9XB1OX
jPnLC3TPBWf86eq8WCNePzvTEuCeUIB0u1Wz7HAtPHTtj8d3X60lluiHjICai25X
mHcNwG96+tN7mqgoOzzyDhOdY/fEpP9NwO7pfMKqpfqL0/ZJqMOk3USiRyH4d1Wu
nz4cwScQGbXlM1YowmCEvsyEp6Hknz30O441zBqHsiadKggWW5eVomEOOyinivBB
yQsjSTncS+edGMGo371RzFtKzecm63SDKA0oPb6RR68O3eUpvBFxBld1twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc9L0X/9v7Yvic4nXpDVQezBhbEMB8GA1UdIwQY
MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt
NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl
LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOBIatSC
ywO833kBhOGL7Xg1y9RzldMt1S9deQUC5SjqFt/bkHH4AdY0JUCf8kVW3sbdm30t
k+IAyDHtKz8hbDL+oeJuXll8SjPsIpGZWkOy6yqB0EMMEH2ruwfVYvS4OCfppS8F
BYfCsMdZDklhpedHstcRGRopEdd6hz+lO7UDEBU77BFbMK0NsBkYkCwmqHC6TMod
0C7tHtiOdXFWLbisNO7ZsWRLbEFIZpMKXlNBiZtIAQWkJpcOR3CrCzRPgKtH+/tF
h+U5twN1hdTL97hfvyfX5lIuvwzwEOBiFSwhZBkcWFlPVz970DF7QZfpW6HltnkX
9OYrpfmFnkmazg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:27 2025 by rpki-client