Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: QVxWdLRmgayy9hwxJJ37yrJJmYj0VBdnLs5p8DP6Pns=
Subject key identifier: E9:40:0F:73:2A:9C:18:DC:2B:DD:4C:6D:F6:CC:76:37:29:DF:69:9B
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 0198861ED76535E92EA182A7372B21BC7B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 20:00:24 +0000
Manifest this update: Thu 07 Aug 2025 20:00:24 +0000
Manifest next update: Fri 08 Aug 2025 20:00:24 +0000
Files and hashes: 1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: mdgf97HuyilrI4J7zZhSmT0zmo53zg5ikKaQCZqvwVU=)
4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1e:d7:65:35:e9:2e:a1:82:a7:37:2b:21:bc:7b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Aug 7 20:00:24 2025 GMT
Not After : Aug 8 20:00:24 2025 GMT
Subject: CN=e9400f732a9c18dc2bdd4c6df6cc763729df699b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:d3:d5:1a:a8:82:b4:e2:3d:c5:f3:32:66:
42:8e:97:65:27:20:c2:b2:57:d4:47:13:23:cc:19:
1a:62:4e:f4:e7:0c:0f:88:ec:94:56:3e:84:59:e6:
89:95:d2:1c:d8:8a:aa:2e:96:60:11:27:fd:91:ba:
cb:5c:71:ed:e3:db:2b:e1:10:43:2f:88:9d:fa:da:
8c:78:cf:16:81:61:ab:6d:8f:b2:86:bb:0d:c9:90:
40:68:fa:6e:fd:7c:74:15:ea:05:ce:34:2c:a6:b8:
23:38:74:82:58:86:55:e5:0e:bf:c3:05:d0:88:0f:
66:16:1d:39:4b:a0:c7:76:6b:89:d6:55:89:26:94:
74:6d:5d:c0:a6:80:1f:9a:09:30:1d:d3:a3:98:78:
45:45:7c:a9:dc:45:df:b5:ce:28:ba:ec:b3:26:d7:
23:39:17:41:3b:49:fc:e3:eb:35:b1:b5:bb:7e:a9:
95:ac:11:48:4e:cd:f2:14:73:99:1f:46:ab:f7:0f:
8f:38:1f:68:61:12:94:1f:4b:bc:61:56:2f:82:20:
0a:fd:e1:54:ae:76:39:67:84:30:9b:37:31:e6:e1:
29:e0:34:11:68:a5:0c:8b:ac:86:95:6f:b6:da:a8:
21:8c:2a:78:fa:de:21:64:56:80:14:5d:b9:54:61:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:0F:73:2A:9C:18:DC:2B:DD:4C:6D:F6:CC:76:37:29:DF:69:9B
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ab:ff:25:b4:6b:52:42:93:04:81:ef:ba:21:b8:58:2a:08:
65:10:0b:3f:6a:18:44:4b:8e:48:71:ee:02:1c:a8:77:fd:89:
24:4b:b5:3a:ba:e0:ed:9e:86:2e:a9:89:e8:46:ae:97:e0:23:
a6:ce:5c:d0:44:c9:0c:d8:a9:10:81:e5:bd:17:3f:40:82:5a:
33:54:2e:fb:e2:09:17:05:80:33:4d:45:28:93:b0:32:cf:dc:
f5:a4:e4:06:98:4c:27:7b:b8:ca:c1:7b:5a:90:47:64:f9:de:
a6:07:31:41:8e:ec:40:66:82:a2:7f:9e:f5:a8:e3:b0:fd:29:
0b:0c:7f:2c:62:23:91:c6:bc:8d:2f:2d:fb:ed:93:79:a8:4a:
bd:db:46:33:e9:a9:b0:14:99:06:1c:af:81:59:a2:f0:2a:8e:
d2:1e:a6:6e:5c:fb:b9:78:63:09:4b:50:14:43:0d:51:b4:46:
25:4d:b0:cf:ee:4f:f9:04:d6:55:3a:f6:d3:ac:32:7c:cd:1a:
dd:89:b9:4a:fa:99:eb:b0:48:0c:a9:cc:9c:a5:6f:8d:c3:76:
65:c8:93:aa:d3:89:35:90:56:38:e3:a1:a5:e1:31:1b:e2:1d:
4e:55:33:5d:79:70:5a:c4:2d:35:88:0a:a7:d5:72:f5:97:46:
e5:90:49:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGHtdlNekuoYKnNyshvHtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOGU2YTZhNTQwMTdkZDNiOWIyY2NlMzVmZDVhOWE3ZjJh
NDU0OTgwHhcNMjUwODA3MjAwMDI0WhcNMjUwODA4MjAwMDI0WjAzMTEwLwYDVQQD
EyhlOTQwMGY3MzJhOWMxOGRjMmJkZDRjNmRmNmNjNzYzNzI5ZGY2OTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw87T1RqogrTiPcXzMmZCjpdlJyDC
slfURxMjzBkaYk705wwPiOyUVj6EWeaJldIc2IqqLpZgESf9kbrLXHHt49sr4RBD
L4id+tqMeM8WgWGrbY+yhrsNyZBAaPpu/Xx0FeoFzjQsprgjOHSCWIZV5Q6/wwXQ
iA9mFh05S6DHdmuJ1lWJJpR0bV3ApoAfmgkwHdOjmHhFRXyp3EXftc4ouuyzJtcj
ORdBO0n84+s1sbW7fqmVrBFITs3yFHOZH0ar9w+POB9oYRKUH0u8YVYvgiAK/eFU
rnY5Z4Qwmzcx5uEp4DQRaKUMi6yGlW+22qghjCp4+t4hZFaAFF25VGE5MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlAD3MqnBjcK91MbfbMdjcp32mbMB8GA1UdIwQY
MBaAFGCOampUAX3TubLM41/VqafypFSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2Et
MjMyNDk3N2M5MzkzLzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2EtMjMyNDk3N2M5Mzkz
LzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKv/JbRr
UkKTBIHvuiG4WCoIZRALP2oYREuOSHHuAhyod/2JJEu1Orrg7Z6GLqmJ6Eaul+Aj
ps5c0ETJDNipEIHlvRc/QIJaM1Qu++IJFwWAM01FKJOwMs/c9aTkBphMJ3u4ysF7
WpBHZPnepgcxQY7sQGaCon+e9ajjsP0pCwx/LGIjkca8jS8t++2TeahKvdtGM+mp
sBSZBhyvgVmi8CqO0h6mblz7uXhjCUtQFEMNUbRGJU2wz+5P+QTWVTr206wyfM0a
3Ym5SvqZ67BIDKnMnKVvjcN2ZciTqtOJNZBWOOOhpeExG+IdTlUzXXlwWsQtNYgK
p9Vy9ZdG5ZBJ8g==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:42:58 2025 by rpki-client