Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: r+fowL4i0KWZ2P/dLVUD1dcLXTzitxDdRlfO2nub4v0=
Subject key identifier: 54:35:D4:F9:15:CB:9D:B1:7F:DC:9C:A3:39:24:E9:A3:10:1D:20:DB
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 01987BD23DEC63A790FA1B81A881B71AFF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 20:00:32 +0000
Manifest this update: Tue 05 Aug 2025 20:00:32 +0000
Manifest next update: Wed 06 Aug 2025 20:00:32 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: Bq/hj1zOrUqPHmRMannncvMFOao7TGQGcTObUoRrU7Y=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:3d:ec:63:a7:90:fa:1b:81:a8:81:b7:1a:ff:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Aug 5 20:00:32 2025 GMT
Not After : Aug 6 20:00:32 2025 GMT
Subject: CN=5435d4f915cb9db17fdc9ca33924e9a3101d20db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:09:58:3c:97:89:19:4a:25:22:67:d2:a0:
ae:2f:e1:f2:11:cb:6f:c5:ad:6d:a6:18:9a:e9:ad:
ce:d3:46:4c:3c:02:34:a4:37:d4:6b:3d:e7:ad:4f:
bd:c3:71:89:54:3c:9c:60:2e:fc:92:15:b0:7e:3c:
4a:c5:5e:da:fe:42:81:76:13:00:97:55:84:03:8c:
b0:d0:25:cb:5a:65:25:1a:25:8e:5c:e6:bc:ca:6f:
74:8b:a4:34:cf:6e:fe:a1:9b:62:5f:cf:15:17:ef:
5a:bb:ae:50:06:d6:e3:56:29:ba:8c:11:05:a1:48:
89:7f:1f:c4:6e:db:b7:6f:3e:10:d7:fc:1a:35:23:
98:5f:99:71:0a:67:6a:79:d5:14:57:ab:b5:ba:0d:
a7:b2:08:0a:21:b0:bb:bc:9d:dc:91:ef:2c:30:4b:
ba:72:92:ab:af:69:3e:51:cf:65:12:0e:9e:ac:5d:
fd:4c:9d:f5:45:15:89:dc:38:5e:37:cc:0f:db:18:
02:c8:9b:b9:6b:45:96:d1:07:fe:c5:06:60:a3:96:
c6:b3:d8:f4:cd:31:a6:2f:56:7c:3a:cc:88:f4:f5:
0e:08:7a:a9:39:8c:4a:13:8b:54:15:c0:7d:e5:aa:
68:7d:be:cb:1b:b5:5d:d8:b8:a5:02:60:21:67:a0:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:35:D4:F9:15:CB:9D:B1:7F:DC:9C:A3:39:24:E9:A3:10:1D:20:DB
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:84:63:79:15:f5:c5:18:93:8b:7c:62:99:22:d2:a1:8b:db:
70:0a:57:e7:93:2d:d4:af:3e:27:c7:c5:e0:45:56:1d:e7:b8:
6c:ac:bd:c9:99:37:59:40:44:0a:1e:ae:51:e3:f8:6c:71:17:
bb:7c:ae:14:c6:9a:be:05:d5:4d:c5:94:d8:b6:51:af:b1:29:
85:4c:03:6a:bc:7a:2b:2d:c9:9f:74:79:a1:f2:4d:cb:d3:5b:
1d:0a:6d:96:55:2a:09:de:f0:a9:ec:bb:86:79:4d:a1:01:23:
fa:8a:48:4b:e8:b2:a6:0d:c0:8d:b5:8b:f4:52:70:68:4d:e8:
08:5f:b1:33:e2:c9:98:ea:37:a7:0a:70:ec:d0:7f:22:8b:19:
ae:cf:87:33:a4:00:25:d2:ce:c3:10:72:95:8f:9b:55:78:9e:
54:d2:52:cb:f8:28:de:31:2f:d8:5e:91:1a:7e:c5:13:c9:3c:
e9:d6:ad:41:4f:5e:c1:14:f9:fb:8a:2c:0e:fa:fd:28:4a:f0:
c8:9b:89:79:11:30:f7:38:d4:80:fc:61:aa:10:69:fd:17:7f:
7e:4b:c4:98:d3:80:19:13:e9:ea:cd:66:68:41:80:04:37:4a:
1e:b5:bd:97:43:9e:b5:3b:b2:bc:85:42:d3:e6:af:9d:de:a3:
c6:b4:83:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70j3sY6eQ+huBqIG3Gv9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGU4NWY1ODFjNzUxMzkwOGVhMDQ2NjVmZDIzNzI2ZmQ3
MGU2MmIwHhcNMjUwODA1MjAwMDMyWhcNMjUwODA2MjAwMDMyWjAzMTEwLwYDVQQD
Eyg1NDM1ZDRmOTE1Y2I5ZGIxN2ZkYzljYTMzOTI0ZTlhMzEwMWQyMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VwJWDyXiRlKJSJn0qCuL+HyEctv
xa1tphia6a3O00ZMPAI0pDfUaz3nrU+9w3GJVDycYC78khWwfjxKxV7a/kKBdhMA
l1WEA4yw0CXLWmUlGiWOXOa8ym90i6Q0z27+oZtiX88VF+9au65QBtbjVim6jBEF
oUiJfx/Ebtu3bz4Q1/waNSOYX5lxCmdqedUUV6u1ug2nsggKIbC7vJ3cke8sMEu6
cpKrr2k+Uc9lEg6erF39TJ31RRWJ3DheN8wP2xgCyJu5a0WW0Qf+xQZgo5bGs9j0
zTGmL1Z8OsyI9PUOCHqpOYxKE4tUFcB95apofb7LG7Vd2LilAmAhZ6DgOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQ11PkVy52xf9ycozkk6aMQHSDbMB8GA1UdIwQY
MBaAFGAOhfWBx1E5COoEZl/SNyb9cOYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDIt
NGNkYTc4OGZlODk5LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDItNGNkYTc4OGZlODk5
LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYRjeRX1
xRiTi3ximSLSoYvbcApX55Mt1K8+J8fF4EVWHee4bKy9yZk3WUBECh6uUeP4bHEX
u3yuFMaavgXVTcWU2LZRr7EphUwDarx6Ky3Jn3R5ofJNy9NbHQptllUqCd7wqey7
hnlNoQEj+opIS+iypg3AjbWL9FJwaE3oCF+xM+LJmOo3pwpw7NB/IosZrs+HM6QA
JdLOwxBylY+bVXieVNJSy/go3jEv2F6RGn7FE8k86datQU9ewRT5+4osDvr9KErw
yJuJeREw9zjUgPxhqhBp/Rd/fkvEmNOAGRPp6s1maEGABDdKHrW9l0OetTuyvIVC
0+avnd6jxrSDxQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:01:59 2025 by rpki-client