Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: zFm2306e7Q13SfW11f58J92skDh1HF6Y+nAL0rYlEiE=
Subject key identifier: 0A:FF:37:20:84:4A:82:CE:A9:72:E2:18:5A:E1:9C:11:3D:D0:B8:87
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019899018705205D59BDBE9958029F4A0A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 12:01:10 +0000
Manifest this update: Mon 11 Aug 2025 12:01:10 +0000
Manifest next update: Tue 12 Aug 2025 12:01:10 +0000
Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=)
2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: AxGvLRV3LcSoc+V6+gePvOFPL3yXR47eLRVvnJpK39Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:01:87:05:20:5d:59:bd:be:99:58:02:9f:4a:0a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Aug 11 12:01:10 2025 GMT
Not After : Aug 12 12:01:10 2025 GMT
Subject: CN=0aff3720844a82cea972e2185ae19c113dd0b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:b5:4b:43:80:6d:78:e9:b0:ab:ab:43:00:
f1:d9:17:29:54:19:b8:30:dd:13:1f:18:3f:52:d3:
dd:b9:a0:77:25:7e:18:1a:34:c5:29:47:e1:5c:f1:
e0:51:89:67:cd:67:f6:ce:be:3b:3c:f7:7d:fe:61:
39:33:1d:26:3b:6f:2d:ee:23:d0:28:05:76:4d:23:
62:3d:91:4c:cf:28:80:5d:41:3c:5c:b9:56:78:0d:
67:0c:eb:4a:8e:29:9e:34:9b:25:94:52:90:17:d7:
e7:87:ed:d1:1a:a7:ec:0b:74:b8:5f:05:c3:18:0d:
95:9b:0f:9d:cd:f2:7f:98:9c:cf:87:20:41:f1:0f:
6b:e1:78:32:b7:48:96:71:d9:61:d6:1b:30:dd:d6:
8e:d8:98:8a:8e:49:13:24:33:42:d0:10:2a:c8:f3:
bc:ba:19:54:2a:d8:4a:e6:66:48:f9:49:96:af:12:
d7:1a:30:f7:fb:41:d3:f0:84:6f:d7:d3:ee:34:d0:
22:51:f9:8b:82:3e:2e:e8:93:eb:ce:ca:0e:ec:1f:
23:7e:90:b3:5a:0b:7b:8e:94:16:55:31:8f:45:6a:
cd:93:bb:c1:72:f0:2f:27:33:ef:17:ec:f1:d2:62:
45:9e:25:0a:91:76:03:ce:73:e2:68:02:b7:a7:47:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FF:37:20:84:4A:82:CE:A9:72:E2:18:5A:E1:9C:11:3D:D0:B8:87
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:35:01:ab:fd:9a:fa:63:f9:ec:eb:9e:70:35:11:ce:27:18:
1c:61:98:a0:0e:df:80:9b:19:a4:b2:87:70:c9:c0:f0:ff:be:
31:cf:93:4d:13:01:16:7b:2c:5b:c8:fb:52:da:1b:6e:7a:2c:
fd:47:8d:76:58:91:b5:51:53:0c:81:f6:ed:55:06:6b:bd:86:
65:36:06:70:9e:d6:eb:ea:8d:0d:77:a1:7b:a5:d6:8e:42:e7:
cd:dc:7a:31:85:db:90:50:3e:17:5e:90:52:c3:72:9a:f5:17:
3c:4d:3d:39:ad:c4:3e:53:97:b1:6d:1f:f3:33:b3:d9:25:ee:
11:e1:12:08:be:30:6c:e2:a3:01:bb:3e:f2:8b:5b:b0:05:82:
f2:e7:e7:6c:39:e0:bb:df:a5:3f:4f:b5:e4:af:43:b8:78:a3:
34:32:d0:b1:e4:43:4c:7e:84:a5:97:c7:4d:78:f2:22:f7:9b:
d1:32:95:12:c0:68:a7:61:3e:1b:a1:42:e8:a5:14:19:75:6e:
7a:aa:26:e6:e7:36:76:fe:e6:6d:58:0b:fd:c1:ca:78:8e:f5:
fa:92:ef:95:41:11:3d:11:68:e8:41:22:4f:70:59:da:be:6e:
1b:4d:bf:69:8b:f9:00:bd:dc:fd:bd:12:e2:bc:15:8d:63:f3:
ef:1b:6b:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiZAYcFIF1Zvb6ZWAKfSgoMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDIxM2FiYTFlYTkyOGI5ZWQzMjQ5MWRlOWJhMTA0NjRi
MDYzNmMwHhcNMjUwODExMTIwMTEwWhcNMjUwODEyMTIwMTEwWjAzMTEwLwYDVQQD
EygwYWZmMzcyMDg0NGE4MmNlYTk3MmUyMTg1YWUxOWMxMTNkZDBiODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4W1S0OAbXjpsKurQwDx2RcpVBm4
MN0THxg/UtPduaB3JX4YGjTFKUfhXPHgUYlnzWf2zr47PPd9/mE5Mx0mO28t7iPQ
KAV2TSNiPZFMzyiAXUE8XLlWeA1nDOtKjimeNJsllFKQF9fnh+3RGqfsC3S4XwXD
GA2Vmw+dzfJ/mJzPhyBB8Q9r4Xgyt0iWcdlh1hsw3daO2JiKjkkTJDNC0BAqyPO8
uhlUKthK5mZI+UmWrxLXGjD3+0HT8IRv19PuNNAiUfmLgj4u6JPrzsoO7B8jfpCz
Wgt7jpQWVTGPRWrNk7vBcvAvJzPvF+zx0mJFniUKkXYDznPiaAK3p0fQXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAr/NyCESoLOqXLiGFrhnBE90LiHMB8GA1UdIwQY
MBaAFGMCE6uh6pKLntMkkd6boQRksGNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQt
OGY0YzU5ZWMyMGJlLzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQtOGY0YzU5ZWMyMGJl
LzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDUBq/2a
+mP57OuecDURzicYHGGYoA7fgJsZpLKHcMnA8P++Mc+TTRMBFnssW8j7Utobbnos
/UeNdliRtVFTDIH27VUGa72GZTYGcJ7W6+qNDXehe6XWjkLnzdx6MYXbkFA+F16Q
UsNymvUXPE09Oa3EPlOXsW0f8zOz2SXuEeESCL4wbOKjAbs+8otbsAWC8ufnbDng
u9+lP0+15K9DuHijNDLQseRDTH6EpZfHTXjyIveb0TKVEsBop2E+G6FC6KUUGXVu
eqom5uc2dv7mbVgL/cHKeI71+pLvlUERPRFo6EEiT3BZ2r5uG02/aYv5AL3c/b0S
4rwVjWPz7xtr/A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 14:49:53 2025 by rpki-client