Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: z8K474PGSpWVO7NBshtBkyjM2Mn6rpxvxFAqlqkyMVc=
Subject key identifier: 33:5B:82:29:EE:87:F4:37:B4:48:13:14:00:D3:73:08:93:B5:0B:FC
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 019888B236025C049EB14AE487BBD11B883E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 14D3
Signing time: Fri 08 Aug 2025 08:00:37 +0000
Manifest this update: Fri 08 Aug 2025 08:00:37 +0000
Manifest next update: Sat 09 Aug 2025 08:00:37 +0000
Files and hashes: 1: 47Lsjeq5DX4wkpatXUE_-iIQY9Q.roa (hash: 4K/nWKrcsaLST8bPt6ayJw8vMIxal4U4+r8J15AVgP8=)
2: IM8VWz4L8uTjG3ZXrmr-hQCDEpU.roa (hash: mPn7wlOGgWBcgNZKFj/CLgGSvVpk3XUPtLV9M7i6VUo=)
3: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: BPGEw8U3QfIDa6vReLAbfFnYjQq+SugL5pL/omReaao=)
4: dbiwvrIUEB3DJnzikNFfso5iId8.roa (hash: iE+EP1DWoHf3NMKkX22W/jzavybl3y9slyLbgbFYb6M=)
5: sP5nildmZqp3srG2whATaK4yFJ0.roa (hash: 8RcLa/XNj+cj8Nd5KnP9mKP7qKdpC46YG8NrNsESEAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:36:02:5c:04:9e:b1:4a:e4:87:bb:d1:1b:88:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Aug 8 08:00:37 2025 GMT
Not After : Aug 9 08:00:37 2025 GMT
Subject: CN=335b8229ee87f437b448131400d3730893b50bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0c:a8:51:2f:84:a9:b6:5e:c7:9b:64:c1:ea:
f0:74:3a:e2:ba:aa:25:eb:df:ac:67:f1:d8:83:e4:
65:3d:15:e6:f5:71:9f:b2:25:aa:b4:53:bd:4d:ee:
aa:ac:66:85:83:7d:4a:c0:11:ec:aa:e4:f8:42:2c:
61:a9:b5:1e:e7:fd:55:b0:9d:62:9e:cc:aa:cc:1f:
4d:bb:9d:89:cd:b1:a2:c5:f1:a4:d5:8a:e5:e2:e0:
f0:9a:cf:3e:48:f1:cd:e0:8d:cf:29:6f:0e:44:96:
72:e9:d7:14:29:91:92:49:68:bf:1f:2b:84:87:c4:
81:a7:ff:13:d1:e8:b8:94:96:33:fd:73:82:69:07:
b8:2a:ae:5e:de:0d:5a:95:c0:e1:b7:fb:10:67:f9:
92:f8:ab:1e:74:b2:79:2b:8b:5d:24:66:90:7d:79:
df:ca:00:56:82:77:30:6c:de:14:e4:3d:8b:34:ca:
31:48:19:dc:3f:db:77:51:04:d3:74:de:18:6e:c5:
09:12:91:6a:a3:44:f9:89:3b:e0:04:f3:a5:3e:1f:
99:df:f8:80:b4:dd:b8:4a:56:b8:e2:7f:d6:99:db:
69:34:31:2e:f3:8c:0f:b3:a4:43:fa:35:c4:0c:04:
2f:5e:c4:90:d5:40:a8:e4:98:0e:c0:5b:80:a1:1a:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5B:82:29:EE:87:F4:37:B4:48:13:14:00:D3:73:08:93:B5:0B:FC
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6a:28:4b:c9:96:b4:e0:39:ec:24:16:1c:fd:6a:d2:1d:8e:
84:ef:3a:02:d8:7f:71:07:21:cf:da:15:83:23:28:fb:a1:24:
52:e1:ef:2c:39:b4:5a:ed:89:05:3b:d9:5d:66:83:64:50:f5:
7b:df:3c:47:52:31:a0:f1:21:19:37:9d:90:47:0f:1a:96:73:
a3:c4:84:4e:a4:a9:69:3b:b8:a3:ea:82:57:cb:60:c0:c5:ce:
3f:f7:8a:64:e2:bc:d9:23:99:4c:0d:b9:a2:e7:e5:0a:6e:15:
e4:e1:d4:69:f9:fe:9b:be:81:f2:4b:eb:59:8f:e1:78:46:5a:
52:82:1d:64:10:cf:db:0e:a9:dc:fd:7a:43:6d:d5:69:8c:5d:
14:79:19:c9:17:50:49:58:50:31:4d:78:aa:6d:03:1e:3a:3b:
39:54:a7:3d:23:88:e7:8f:d7:bc:8f:75:14:f5:2c:2d:22:cb:
22:58:f3:bc:75:f1:58:58:04:67:99:9a:ad:e1:0a:27:55:02:
ca:78:aa:87:fa:2a:23:30:d4:0e:65:3d:04:b7:25:4d:5f:d6:
98:42:a8:a8:73:70:81:04:ef:f7:0b:98:44:17:b7:39:7b:5e:
a7:0d:27:cc:a4:68:78:c2:3b:86:ee:b9:6d:25:56:66:58:3f:
ce:b2:8d:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIsjYCXASesUrkh7vRG4g+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzI1YzIxZDJmYWZlNzQzMzk4ZGMxZTU1NzQ0MzMyODAx
MTA0NjkwHhcNMjUwODA4MDgwMDM3WhcNMjUwODA5MDgwMDM3WjAzMTEwLwYDVQQD
EygzMzViODIyOWVlODdmNDM3YjQ0ODEzMTQwMGQzNzMwODkzYjUwYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+wyoUS+EqbZex5tkwerwdDriuqol
69+sZ/HYg+RlPRXm9XGfsiWqtFO9Te6qrGaFg31KwBHsquT4QixhqbUe5/1VsJ1i
nsyqzB9Nu52JzbGixfGk1Yrl4uDwms8+SPHN4I3PKW8ORJZy6dcUKZGSSWi/HyuE
h8SBp/8T0ei4lJYz/XOCaQe4Kq5e3g1alcDht/sQZ/mS+KsedLJ5K4tdJGaQfXnf
ygBWgncwbN4U5D2LNMoxSBncP9t3UQTTdN4YbsUJEpFqo0T5iTvgBPOlPh+Z3/iA
tN24Sla44n/WmdtpNDEu84wPs6RD+jXEDAQvXsSQ1UCo5JgOwFuAoRq0PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNbginuh/Q3tEgTFADTcwiTtQv8MB8GA1UdIwQY
MBaAFGAyXCHS+v50M5jcHlV0QzKAEQRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQt
YzU4ZTk1Y2Q0Mjc3LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQtYzU4ZTk1Y2Q0Mjc3
LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGooS8mW
tOA57CQWHP1q0h2OhO86Ath/cQchz9oVgyMo+6EkUuHvLDm0Wu2JBTvZXWaDZFD1
e988R1IxoPEhGTedkEcPGpZzo8SETqSpaTu4o+qCV8tgwMXOP/eKZOK82SOZTA25
ouflCm4V5OHUafn+m76B8kvrWY/heEZaUoIdZBDP2w6p3P16Q23VaYxdFHkZyRdQ
SVhQMU14qm0DHjo7OVSnPSOI54/XvI91FPUsLSLLIljzvHXxWFgEZ5mareEKJ1UC
yniqh/oqIzDUDmU9BLclTV/WmEKoqHNwgQTv9wuYRBe3OXtepw0nzKRoeMI7hu65
bSVWZlg/zrKNmg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:14 2025 by rpki-client