Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
File: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json)
Hash identifier: FnAf0B7BAyAW1Xen4au3FF65QSJT5PW4bo2AEUlJcjU=
Subject key identifier: 1E:9A:D1:AF:6E:4D:67:DA:B1:12:09:D1:D9:BC:BF:3C:47:80:19:7A
Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Certificate issuer: /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Certificate serial: 0198959228E91FD5D6D63528A7655B06CFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
Manifest number: 15B7
Signing time: Sun 10 Aug 2025 20:00:40 +0000
Manifest this update: Sun 10 Aug 2025 20:00:40 +0000
Manifest next update: Mon 11 Aug 2025 20:00:40 +0000
Files and hashes: 1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: Z0tV1mseaFQTdl7y3q6+9CCnCsCWY07YnUpDQ9hBvyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:28:e9:1f:d5:d6:d6:35:28:a7:65:5b:06:cf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Validity
Not Before: Aug 10 20:00:40 2025 GMT
Not After : Aug 11 20:00:40 2025 GMT
Subject: CN=1e9ad1af6e4d67dab11209d1d9bcbf3c4780197a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:b0:b3:c5:01:88:a5:e0:fd:9e:a6:19:13:
de:cf:95:80:c3:41:ed:c7:a6:ec:3c:ac:e9:85:1f:
b9:d3:0c:e6:0d:74:42:f8:74:d8:09:eb:45:b5:a9:
04:47:2e:9a:3d:91:b1:82:0c:52:68:c0:95:d0:c3:
10:cb:a7:63:66:f9:a5:a0:ea:97:af:e7:3e:70:92:
fe:5a:d5:c3:84:24:12:b5:a3:ff:60:37:6d:cd:ed:
0c:21:b5:60:5b:55:07:6d:87:55:39:c9:f4:f0:81:
d8:bd:a1:ff:2b:53:ac:5c:b0:1a:cb:1c:a4:ae:2a:
27:e5:96:79:fa:44:7f:81:aa:58:16:9a:d6:1d:30:
6c:8f:38:92:bf:38:9d:3b:0d:43:09:12:ec:cf:d8:
52:c0:10:51:9f:6f:79:cb:b2:f5:ad:24:b4:31:91:
03:d9:fe:46:82:53:d1:9a:da:1f:7c:7a:43:41:0b:
23:88:e0:8b:37:75:0e:90:a9:a4:70:51:46:7e:23:
b1:99:0c:17:cc:9e:26:47:7d:0c:a2:0d:e0:d3:8a:
a0:77:86:cb:bc:77:d1:f6:a5:8d:8d:58:db:d9:2a:
eb:2b:8c:89:1f:db:f3:bc:f0:ad:12:6c:4f:d7:f9:
8b:dd:a6:ee:d9:a3:b2:5e:4c:61:e7:98:98:fc:41:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9A:D1:AF:6E:4D:67:DA:B1:12:09:D1:D9:BC:BF:3C:47:80:19:7A
X509v3 Authority Key Identifier:
keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5a:06:98:c9:d2:f8:d9:07:d4:85:d2:0f:53:6e:81:1e:91:
eb:e8:ea:1a:6f:ac:0b:ee:31:cd:31:97:d6:3d:d5:c1:eb:30:
d2:02:cc:10:d0:f3:e9:e8:15:49:06:7b:b3:dc:b4:6f:da:22:
1f:0a:ab:6f:69:f6:dc:d9:b4:5f:91:3d:5e:fb:40:8b:64:9e:
c0:6d:56:54:84:30:fa:6b:dc:1c:e2:c4:b6:a4:6a:7f:f7:85:
6b:73:ce:8d:96:1a:e8:66:bd:3c:2e:83:2a:ea:a1:9a:16:25:
d1:cc:87:19:d5:59:c1:5c:6d:73:b4:8e:2b:e8:e8:ab:d5:14:
ad:19:80:c6:e2:54:77:f5:15:b1:4c:bb:d7:98:cd:92:43:2a:
be:bf:68:97:99:4d:4d:2e:6e:89:d9:e0:36:bd:9d:e7:ef:2b:
8d:4b:d3:df:18:72:d7:83:7c:7b:47:d1:fc:f4:b7:16:f6:fd:
2a:3d:ce:13:f2:76:2c:b1:0c:08:fd:40:c8:4a:ea:8d:b5:41:
d0:e8:20:97:e7:0f:56:5a:16:f0:98:45:0f:c5:39:7f:6a:1c:
6a:04:f1:76:a1:e6:a0:a0:06:f1:6a:bc:70:d7:dd:b1:3a:7f:
b5:87:65:e9:ae:f2:7f:a9:30:59:a7:e5:92:0c:03:95:a3:5d:
ba:08:4e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVkijpH9XW1jUop2VbBs/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMTgzYTY2OTEzMDlhNzlkNmU2NjA1YjBkNWMxMWUzZmY3
ZTkxOTQwHhcNMjUwODEwMjAwMDQwWhcNMjUwODExMjAwMDQwWjAzMTEwLwYDVQQD
EygxZTlhZDFhZjZlNGQ2N2RhYjExMjA5ZDFkOWJjYmYzYzQ3ODAxOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuiws8UBiKXg/Z6mGRPez5WAw0Ht
x6bsPKzphR+50wzmDXRC+HTYCetFtakERy6aPZGxggxSaMCV0MMQy6djZvmloOqX
r+c+cJL+WtXDhCQStaP/YDdtze0MIbVgW1UHbYdVOcn08IHYvaH/K1OsXLAayxyk
rion5ZZ5+kR/gapYFprWHTBsjziSvzidOw1DCRLsz9hSwBBRn295y7L1rSS0MZED
2f5GglPRmtoffHpDQQsjiOCLN3UOkKmkcFFGfiOxmQwXzJ4mR30Mog3g04qgd4bL
vHfR9qWNjVjb2SrrK4yJH9vzvPCtEmxP1/mL3abu2aOyXkxh55iY/EGTxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6a0a9uTWfasRIJ0dm8vzxHgBl6MB8GA1UdIwQY
MBaAFMoYOmaRMJp51uZgWw1cEeP/fpGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNzc0YmItM2IwYi00ZjQ3LWIxNTEt
MTllNzA4NDY5Y2VlLzEveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wNzc0YmItM2IwYi00ZjQ3LWIxNTEtMTllNzA4NDY5Y2Vl
LzEveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFoGmMnS
+NkH1IXSD1NugR6R6+jqGm+sC+4xzTGX1j3Vwesw0gLMENDz6egVSQZ7s9y0b9oi
Hwqrb2n23Nm0X5E9XvtAi2SewG1WVIQw+mvcHOLEtqRqf/eFa3POjZYa6Ga9PC6D
KuqhmhYl0cyHGdVZwVxtc7SOK+joq9UUrRmAxuJUd/UVsUy715jNkkMqvr9ol5lN
TS5uidngNr2d5+8rjUvT3xhy14N8e0fR/PS3Fvb9Kj3OE/J2LLEMCP1AyErqjbVB
0Oggl+cPVloW8JhFD8U5f2ocagTxdqHmoKAG8Wq8cNfdsTp/tYdl6a7yf6kwWafl
kgwDlaNdughOWQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:14 2025 by rpki-client