Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/85df14-a815-4691-a923-46e65c95f83a/1/yM7BO9bzBCDedNLDFWTa3aCOAU0.mft
File: yM7BO9bzBCDedNLDFWTa3aCOAU0.mft (raw, json)
Hash identifier: 9Ht8U0wMlUyiafh0Q5PK04WaB2rSH5xQvAUhVhYy+uQ=
Subject key identifier: 7A:0D:47:E0:D8:6C:34:C5:B5:37:A9:C8:14:9E:74:D7:EC:D3:0E:E1
Authority key identifier: C8:CE:C1:3B:D6:F3:04:20:DE:74:D2:C3:15:64:DA:DD:A0:8E:01:4D
Certificate issuer: /CN=c8cec13bd6f30420de74d2c31564dadda08e014d
Certificate serial: 0198838C04CEBFBCCF6ACE3ED78C87FB960F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yM7BO9bzBCDedNLDFWTa3aCOAU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/85df14-a815-4691-a923-46e65c95f83a/1/yM7BO9bzBCDedNLDFWTa3aCOAU0.mft
Manifest number: 49
Signing time: Thu 07 Aug 2025 08:00:48 +0000
Manifest this update: Thu 07 Aug 2025 08:00:48 +0000
Manifest next update: Fri 08 Aug 2025 08:00:48 +0000
Files and hashes: 1: yM7BO9bzBCDedNLDFWTa3aCOAU0.crl (hash: bgPXF/2YT1l90fz+LpQyDfdTkgEJeOxn7ZJYg0LNFMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/85df14-a815-4691-a923-46e65c95f83a/1/yM7BO9bzBCDedNLDFWTa3aCOAU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/85df14-a815-4691-a923-46e65c95f83a/1/yM7BO9bzBCDedNLDFWTa3aCOAU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yM7BO9bzBCDedNLDFWTa3aCOAU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:04:ce:bf:bc:cf:6a:ce:3e:d7:8c:87:fb:96:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cec13bd6f30420de74d2c31564dadda08e014d
Validity
Not Before: Aug 7 08:00:48 2025 GMT
Not After : Aug 8 08:00:48 2025 GMT
Subject: CN=7a0d47e0d86c34c5b537a9c8149e74d7ecd30ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:26:ec:6d:c4:0c:36:69:65:34:69:66:10:3b:
3f:54:0f:5f:1e:d4:af:03:21:41:dc:51:6b:9e:f0:
30:00:e4:1a:d2:0a:50:3e:37:b8:bf:fd:45:44:8b:
4e:e2:00:9c:89:01:12:9f:ad:82:55:aa:f9:ab:d6:
77:3d:b0:6d:ed:73:8a:d5:36:cc:07:03:e7:76:c7:
4c:6a:00:d9:66:4c:dd:77:75:17:e2:1b:f0:87:04:
ac:99:63:d2:da:e1:7d:a4:6a:51:b3:74:5d:54:12:
68:3b:cd:c5:03:9e:e4:5a:cc:58:5f:e4:1e:5f:20:
d3:86:19:1b:74:f3:a9:43:04:17:5c:ec:11:4a:43:
4f:ac:b2:63:44:12:b4:a3:36:df:7b:df:24:99:26:
c4:37:9a:90:9d:b6:cd:02:6c:eb:a0:13:6e:6b:03:
47:dd:1b:81:af:b6:0e:88:9f:6e:90:d4:40:68:b0:
cf:51:1d:50:2a:9a:30:00:51:06:62:46:a3:39:35:
15:60:64:cc:51:1c:60:5b:b5:eb:97:b4:96:90:17:
f7:d0:21:cd:e3:e6:a6:58:ac:2d:74:aa:ed:0e:01:
13:30:a7:ed:5b:81:ca:04:2b:47:9a:d2:fb:93:26:
7a:94:ab:0e:69:e3:e3:34:a0:f8:ab:78:48:16:43:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0D:47:E0:D8:6C:34:C5:B5:37:A9:C8:14:9E:74:D7:EC:D3:0E:E1
X509v3 Authority Key Identifier:
keyid:C8:CE:C1:3B:D6:F3:04:20:DE:74:D2:C3:15:64:DA:DD:A0:8E:01:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yM7BO9bzBCDedNLDFWTa3aCOAU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/85df14-a815-4691-a923-46e65c95f83a/1/yM7BO9bzBCDedNLDFWTa3aCOAU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/85df14-a815-4691-a923-46e65c95f83a/1/yM7BO9bzBCDedNLDFWTa3aCOAU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:80:6a:e8:18:fe:51:2d:21:b3:9e:fd:66:df:25:77:93:f4:
1b:52:50:13:71:47:c5:82:3f:40:1b:d3:0f:cd:f7:0e:7d:4f:
85:7f:7c:a2:ad:bb:6e:6c:f2:93:49:22:f4:1c:73:60:ec:f7:
8a:5c:71:1b:52:d5:12:33:b5:7f:81:db:f8:d2:69:d7:8f:ca:
90:c4:3b:b1:3e:b4:1a:b4:25:5f:12:ed:ce:10:8f:34:48:49:
36:19:14:c3:5d:fc:cc:1d:3d:05:40:dc:13:a3:38:a0:6b:3b:
46:0b:8a:5c:d0:44:f3:54:5a:cf:b0:c1:a1:01:7a:8f:55:01:
ca:20:2c:12:71:2b:09:7c:84:ba:6a:e6:3d:04:37:31:54:8a:
1d:0c:67:50:ab:22:09:da:86:89:79:64:86:00:5e:88:c8:39:
74:66:ec:5b:be:c2:0f:e8:93:32:9a:b3:60:32:23:9c:96:22:
be:cd:eb:47:16:3c:2b:58:f7:1e:1d:f5:05:68:36:23:15:c3:
0a:b2:08:78:21:3d:db:af:24:a1:1e:46:50:83:56:89:3d:13:
c5:c7:bb:0b:f9:bc:5f:bd:15:70:6a:e5:83:fa:46:73:bd:07:
9a:b4:e6:bd:75:fa:ab:52:7c:cb:83:32:a2:3d:00:dc:79:6e:
1f:ae:ec:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDjATOv7zPas4+14yH+5YPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2VjMTNiZDZmMzA0MjBkZTc0ZDJjMzE1NjRkYWRkYTA4
ZTAxNGQwHhcNMjUwODA3MDgwMDQ4WhcNMjUwODA4MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg3YTBkNDdlMGQ4NmMzNGM1YjUzN2E5YzgxNDllNzRkN2VjZDMwZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSbsbcQMNmllNGlmEDs/VA9fHtSv
AyFB3FFrnvAwAOQa0gpQPje4v/1FRItO4gCciQESn62CVar5q9Z3PbBt7XOK1TbM
BwPndsdMagDZZkzdd3UX4hvwhwSsmWPS2uF9pGpRs3RdVBJoO83FA57kWsxYX+Qe
XyDThhkbdPOpQwQXXOwRSkNPrLJjRBK0ozbfe98kmSbEN5qQnbbNAmzroBNuawNH
3RuBr7YOiJ9ukNRAaLDPUR1QKpowAFEGYkajOTUVYGTMURxgW7Xrl7SWkBf30CHN
4+amWKwtdKrtDgETMKftW4HKBCtHmtL7kyZ6lKsOaePjNKD4q3hIFkNBKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoNR+DYbDTFtTepyBSedNfs0w7hMB8GA1UdIwQY
MBaAFMjOwTvW8wQg3nTSwxVk2t2gjgFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU03Qk85YnpCQ0RlZE5MREZXVGEzYUNPQVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84NWRmMTQtYTgxNS00NjkxLWE5MjMt
NDZlNjVjOTVmODNhLzEveU03Qk85YnpCQ0RlZE5MREZXVGEzYUNPQVUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84NWRmMTQtYTgxNS00NjkxLWE5MjMtNDZlNjVjOTVmODNh
LzEveU03Qk85YnpCQ0RlZE5MREZXVGEzYUNPQVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4Bq6Bj+
US0hs579Zt8ld5P0G1JQE3FHxYI/QBvTD833Dn1PhX98oq27bmzyk0ki9BxzYOz3
ilxxG1LVEjO1f4Hb+NJp14/KkMQ7sT60GrQlXxLtzhCPNEhJNhkUw138zB09BUDc
E6M4oGs7RguKXNBE81Raz7DBoQF6j1UByiAsEnErCXyEumrmPQQ3MVSKHQxnUKsi
CdqGiXlkhgBeiMg5dGbsW77CD+iTMpqzYDIjnJYivs3rRxY8K1j3Hh31BWg2IxXD
CrIIeCE9268koR5GUINWiT0Txce7C/m8X70VcGrlg/pGc70HmrTmvXX6q1J8y4My
oj0A3HluH67s3Q==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:17:42 2025 by rpki-client