Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: BR0Hf/RsBAL2i6GjAo3j5wESOqDGED2QpKBLWVdxmsc=
Subject key identifier: B9:78:52:7F:D8:D6:77:2A:6C:4A:B3:C6:95:4F:61:2E:20:DF:C5:00
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 01988B0FF3C836C425E7347E757FFA57A452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 19:02:14 +0000
Manifest this update: Fri 08 Aug 2025 19:02:14 +0000
Manifest next update: Sat 09 Aug 2025 19:02:14 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: ++tu/Y0maoHhhDUbqx6KlRwpySqCq2xhm3EldebqMWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:f3:c8:36:c4:25:e7:34:7e:75:7f:fa:57:a4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: Aug 8 19:02:14 2025 GMT
Not After : Aug 9 19:02:14 2025 GMT
Subject: CN=b978527fd8d6772a6c4ab3c6954f612e20dfc500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:4d:cc:78:b8:db:29:ae:69:b0:fb:56:0c:
0d:9e:bb:30:3a:2c:f2:c5:07:bd:31:9b:b0:9c:70:
f5:70:a7:01:a2:65:90:5c:10:74:51:2b:73:c2:86:
e9:94:66:e2:6a:3e:85:ce:72:04:57:45:54:a2:dd:
0a:4f:5f:45:47:9d:ad:af:26:80:6f:ec:76:7b:fc:
5f:10:fa:e3:13:0e:00:9f:52:f6:5d:4f:00:24:cd:
bc:e5:f8:29:91:97:03:ab:fa:47:6f:df:8c:c0:e7:
db:07:db:ff:39:5a:a4:96:ff:38:82:40:2c:0a:4a:
d5:ee:e0:c1:3a:34:5f:5d:a7:88:70:12:30:7c:2d:
d8:cd:1a:54:d2:7c:8b:88:4a:e5:50:35:ba:63:f7:
23:96:d5:f2:9c:02:87:20:79:16:32:a1:21:af:f3:
de:73:81:05:50:a9:58:c8:4a:a2:a4:fd:44:f0:fe:
2e:d2:c5:39:c9:69:87:83:4e:8b:41:f5:1f:5d:60:
0b:1f:15:1f:a6:12:50:a4:07:96:78:aa:aa:0f:9a:
e8:ce:6d:e1:8a:de:bb:70:03:4c:29:b8:80:bd:84:
db:25:69:ad:07:74:32:e6:25:50:8b:94:26:be:2d:
ae:18:40:0f:dd:68:af:67:71:0d:a4:c0:91:72:3a:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:78:52:7F:D8:D6:77:2A:6C:4A:B3:C6:95:4F:61:2E:20:DF:C5:00
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:92:76:8d:24:47:54:9a:46:97:48:60:b2:6d:6e:38:64:67:
67:dc:51:a2:b7:a5:9a:84:d2:9f:ba:c8:9f:81:40:33:25:6b:
90:67:26:a2:39:4c:e8:fc:97:91:52:d4:73:fb:bc:57:6c:df:
00:fa:6f:fd:5d:c9:81:f3:dc:be:eb:6a:16:84:35:2a:9c:4a:
d5:d8:ff:68:2a:e0:16:53:41:8b:9f:b6:69:e4:de:fb:09:87:
91:48:67:bd:ee:31:25:f8:95:2b:2a:77:de:22:31:db:fc:74:
fa:a0:d2:6b:ad:b2:52:7e:56:76:81:96:74:fb:51:22:22:2e:
c6:bc:50:8b:6c:04:ee:fc:31:21:09:09:c4:44:c3:9e:7b:00:
cf:a5:e2:8e:94:88:c9:d6:f2:7f:7c:22:a2:d7:60:c2:59:e4:
88:bb:21:e8:9a:30:62:1d:d0:04:51:a2:9c:f4:f5:68:84:da:
14:f9:9a:97:70:c3:0f:1a:5b:36:9f:96:74:00:71:7d:fa:b2:
23:47:53:c6:3e:6e:3a:dd:0c:a3:d7:3b:73:26:59:e9:62:1a:
d3:d7:9a:13:a7:8b:9d:63:2d:1b:4b:86:e0:8c:1a:04:dc:8a:
87:f1:9d:1e:65:2b:85:2c:ad:02:d0:c5:d2:d8:85:be:39:c4:
ce:da:5c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD/PINsQl5zR+dX/6V6RSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTNiZGVlYzdjNDI2OThkZjZhYzkwY2RkYzZjMDFiM2E3
ZjJjNDkwHhcNMjUwODA4MTkwMjE0WhcNMjUwODA5MTkwMjE0WjAzMTEwLwYDVQQD
EyhiOTc4NTI3ZmQ4ZDY3NzJhNmM0YWIzYzY5NTRmNjEyZTIwZGZjNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEBNzHi42ymuabD7VgwNnrswOizy
xQe9MZuwnHD1cKcBomWQXBB0UStzwobplGbiaj6FznIEV0VUot0KT19FR52tryaA
b+x2e/xfEPrjEw4An1L2XU8AJM285fgpkZcDq/pHb9+MwOfbB9v/OVqklv84gkAs
CkrV7uDBOjRfXaeIcBIwfC3YzRpU0nyLiErlUDW6Y/cjltXynAKHIHkWMqEhr/Pe
c4EFUKlYyEqipP1E8P4u0sU5yWmHg06LQfUfXWALHxUfphJQpAeWeKqqD5rozm3h
it67cANMKbiAvYTbJWmtB3Qy5iVQi5Qmvi2uGEAP3WivZ3ENpMCRcjq+vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl4Un/Y1ncqbEqzxpVPYS4g38UAMB8GA1UdIwQY
MBaAFMqTve7HxCaY32rJDN3GwBs6fyxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MDQ3NDYtYzFjMS00Y2I4LTgzZjEt
ZmFmZTJkMjA2M2NhLzEveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MDQ3NDYtYzFjMS00Y2I4LTgzZjEtZmFmZTJkMjA2M2Nh
LzEveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5J2jSRH
VJpGl0hgsm1uOGRnZ9xRorelmoTSn7rIn4FAMyVrkGcmojlM6PyXkVLUc/u8V2zf
APpv/V3JgfPcvutqFoQ1KpxK1dj/aCrgFlNBi5+2aeTe+wmHkUhnve4xJfiVKyp3
3iIx2/x0+qDSa62yUn5WdoGWdPtRIiIuxrxQi2wE7vwxIQkJxETDnnsAz6XijpSI
ydbyf3wiotdgwlnkiLsh6JowYh3QBFGinPT1aITaFPmal3DDDxpbNp+WdABxffqy
I0dTxj5uOt0Mo9c7cyZZ6WIa09eaE6eLnWMtG0uG4IwaBNyKh/GdHmUrhSytAtDF
0tiFvjnEztpcfg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:22 2025 by rpki-client