Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: T7DFMlPwSAbu2tuNl28pZtkx67kiXqHStRz2zGS+SQo=
Subject key identifier: B0:BC:66:37:2D:B1:37:77:7A:CC:91:12:F5:1F:21:CC:FE:32:60:D9
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 019880C27DE1C3A07C4C09530F88B769BC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0E8B
Signing time: Wed 06 Aug 2025 19:01:26 +0000
Manifest this update: Wed 06 Aug 2025 19:01:26 +0000
Manifest next update: Thu 07 Aug 2025 19:01:26 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: 6zD8XUp0RV+YMYxYd74FHdR5mdOfJwRcJl2ZB7cDaUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:7d:e1:c3:a0:7c:4c:09:53:0f:88:b7:69:bc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Aug 6 19:01:26 2025 GMT
Not After : Aug 7 19:01:26 2025 GMT
Subject: CN=b0bc66372db137777acc9112f51f21ccfe3260d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:51:71:88:08:ae:1f:82:60:32:0c:c5:e6:
54:60:70:96:c8:68:44:54:47:3a:ce:70:21:5d:a2:
f9:8b:fd:35:14:df:4a:e0:a7:a7:ec:c0:e8:3b:85:
42:2a:9b:a7:b8:9b:9d:31:d7:d6:8b:15:d8:0b:2d:
4e:d0:8a:11:50:0e:08:35:88:b9:02:0f:6a:03:06:
46:6c:06:4c:27:cc:38:10:3c:63:42:e6:38:a8:82:
85:c3:9d:40:1c:2c:ad:31:50:ed:42:98:48:3c:f3:
fc:ac:48:79:e1:6c:86:25:aa:e8:d7:6d:41:89:af:
73:38:e2:23:a2:d0:f6:25:89:b8:21:db:5f:c3:7b:
86:23:36:17:ea:94:ec:bd:58:0d:92:43:e2:8b:f4:
8a:bd:d9:2c:eb:aa:08:c4:ae:97:2b:63:bd:35:b8:
6f:30:ba:e8:71:ad:9e:82:6d:20:5a:a1:04:35:cf:
c4:ea:b9:16:6b:76:37:a5:9a:30:cc:87:2b:1a:61:
e5:16:60:57:6f:1e:af:43:8f:96:61:76:e3:2c:c4:
7f:88:45:70:a7:40:32:50:42:19:96:3b:dc:04:c1:
c4:9a:ea:fa:65:a2:2f:6b:5a:39:e7:53:97:80:d8:
7c:9f:38:e5:88:91:74:8b:8c:ba:57:45:6b:96:ac:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:66:37:2D:B1:37:77:7A:CC:91:12:F5:1F:21:CC:FE:32:60:D9
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a9:69:14:47:61:98:f7:f9:92:c4:af:cc:f9:a3:5c:54:13:
35:44:00:5c:68:af:6b:52:3f:31:e7:87:7b:42:b7:5b:37:b0:
8e:7d:9c:29:a4:8b:d3:9d:9c:d2:b1:ca:eb:4e:ca:33:b5:d1:
f9:a6:75:9f:55:00:cd:f7:c2:9c:24:c5:39:51:17:23:8c:62:
bf:d0:c6:ef:ab:58:bb:7e:91:f8:73:29:b6:40:69:d5:c4:5a:
4e:a5:2f:5f:2c:31:ee:ed:ac:db:58:70:37:c7:e3:00:11:20:
5f:58:94:c1:5f:4a:3b:37:0a:98:31:11:62:64:8a:b9:a1:fa:
c3:be:74:25:42:13:8c:18:17:c6:16:3b:3a:69:8d:da:6a:66:
28:bb:d1:ea:95:3d:94:89:6c:e3:59:39:93:c8:6b:8a:29:29:
e4:5c:5a:34:04:9f:ff:b5:73:f8:eb:80:78:98:d9:a0:ef:a4:
fb:b4:ae:48:4c:fd:2d:ee:03:31:80:1c:c8:8d:2b:8e:85:dc:
9c:be:01:3f:43:60:c6:a8:84:dc:9b:17:f3:65:6e:43:a8:4e:
58:d0:37:ae:37:6d:99:d2:bd:e3:d7:57:6e:43:2d:b6:e2:1c:
34:3a:1a:44:43:5d:75:bc:d3:24:08:3b:77:c0:38:b0:49:98:
c5:95:ca:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwn3hw6B8TAlTD4i3abxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDMzNTA0MTcxOGIxODgzMGIxZjU4YzE1ZDM1MTg1MTBm
ZTYxMTgwHhcNMjUwODA2MTkwMTI2WhcNMjUwODA3MTkwMTI2WjAzMTEwLwYDVQQD
EyhiMGJjNjYzNzJkYjEzNzc3N2FjYzkxMTJmNTFmMjFjY2ZlMzI2MGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG9RcYgIrh+CYDIMxeZUYHCWyGhE
VEc6znAhXaL5i/01FN9K4Ken7MDoO4VCKpunuJudMdfWixXYCy1O0IoRUA4INYi5
Ag9qAwZGbAZMJ8w4EDxjQuY4qIKFw51AHCytMVDtQphIPPP8rEh54WyGJaro121B
ia9zOOIjotD2JYm4Idtfw3uGIzYX6pTsvVgNkkPii/SKvdks66oIxK6XK2O9Nbhv
MLroca2egm0gWqEENc/E6rkWa3Y3pZowzIcrGmHlFmBXbx6vQ4+WYXbjLMR/iEVw
p0AyUEIZljvcBMHEmur6ZaIva1o551OXgNh8nzjliJF0i4y6V0Vrlqw4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC8ZjctsTd3esyREvUfIcz+MmDZMB8GA1UdIwQY
MBaAFMjTNQQXGLGIMLH1jBXTUYUQ/mEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQt
YTllODQ2ODcxMGEzLzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQtYTllODQ2ODcxMGEz
LzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKlpFEdh
mPf5ksSvzPmjXFQTNUQAXGiva1I/MeeHe0K3Wzewjn2cKaSL052c0rHK607KM7XR
+aZ1n1UAzffCnCTFOVEXI4xiv9DG76tYu36R+HMptkBp1cRaTqUvXywx7u2s21hw
N8fjABEgX1iUwV9KOzcKmDERYmSKuaH6w750JUITjBgXxhY7OmmN2mpmKLvR6pU9
lIls41k5k8hriikp5FxaNASf/7Vz+OuAeJjZoO+k+7SuSEz9Le4DMYAcyI0rjoXc
nL4BP0NgxqiE3JsX82VuQ6hOWNA3rjdtmdK949dXbkMttuIcNDoaRENddbzTJAg7
d8A4sEmYxZXKVA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:16:10 2025 by rpki-client