Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
File: YcXtDe2GJbMrZTMgcinyxGclmEg.mft (raw, json)
Hash identifier: hiwvmGwCUpQdLm+xBE5k/M/ZJX+kFT8FW6FajAcvtOg=
Subject key identifier: 48:8C:F6:4E:B6:4A:04:7C:F9:9B:49:4F:08:0A:5F:71:21:91:7B:8A
Authority key identifier: 61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
Certificate issuer: /CN=61c5ed0ded8625b32b6533207229f2c467259848
Certificate serial: 0198A1285A0A1CA46527A13F0DD2004B91E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
Manifest number: 162F
Signing time: Wed 13 Aug 2025 02:00:32 +0000
Manifest this update: Wed 13 Aug 2025 02:00:32 +0000
Manifest next update: Thu 14 Aug 2025 02:00:32 +0000
Files and hashes: 1: CYWLmYxcCQgki-Xk5YRvuSHALzs.roa (hash: 61Fic0FYH+kK7MaPnl8UV3ohGlvf2gRHDh8nlfVoQGY=)
2: YcXtDe2GJbMrZTMgcinyxGclmEg.crl (hash: DMQpf64l5cRAR41v53pOfUjoEDfVbA2kAZQcvWKCL8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:5a:0a:1c:a4:65:27:a1:3f:0d:d2:00:4b:91:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c5ed0ded8625b32b6533207229f2c467259848
Validity
Not Before: Aug 13 02:00:32 2025 GMT
Not After : Aug 14 02:00:32 2025 GMT
Subject: CN=488cf64eb64a047cf99b494f080a5f7121917b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:07:e9:f9:cd:7f:34:d2:ee:26:65:b3:42:
dd:27:d6:d9:e3:8f:8f:61:ed:61:5b:b2:8e:86:e6:
79:c9:df:8e:7c:f1:bc:ce:5a:43:a5:10:80:52:94:
28:8f:f8:5b:92:5b:cf:0e:a2:c4:2f:57:81:fa:79:
84:63:05:2d:ab:fe:a3:63:5f:d6:00:73:e6:e4:7f:
b8:19:5a:51:a2:ac:7e:af:39:8a:6d:18:e8:e4:3e:
3d:5c:02:d6:06:5e:a8:22:0d:54:84:51:be:5a:f3:
63:ae:4e:f0:f2:e5:bd:47:45:48:61:8e:85:49:46:
6b:88:51:46:a2:93:2c:71:bd:8b:e1:46:b2:a0:40:
0f:62:b1:e3:c4:01:b7:fc:40:b5:c9:1d:4f:79:3c:
af:0b:cf:ce:7c:8e:48:2c:ed:45:e6:16:94:a8:d3:
b8:46:c6:2b:2a:02:b6:0d:22:70:c2:3d:30:98:d6:
67:9d:2a:8a:51:be:d9:19:ba:7b:d2:f1:c1:7c:db:
08:f2:11:7c:fa:2e:fe:87:26:ee:e9:a7:3f:ea:bb:
b3:13:5c:72:72:32:be:62:5c:93:58:1b:e4:29:79:
fa:df:f9:82:9f:d2:76:6e:17:c8:17:d1:28:bd:95:
d7:4d:bf:61:c0:35:1f:79:95:f3:41:15:70:d6:1b:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:F6:4E:B6:4A:04:7C:F9:9B:49:4F:08:0A:5F:71:21:91:7B:8A
X509v3 Authority Key Identifier:
keyid:61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:26:9e:34:0b:3e:52:26:1b:af:c5:78:93:76:e1:a3:05:17:
32:23:58:99:27:6b:2d:71:76:11:6f:7f:64:37:f1:60:bb:40:
b9:04:8b:61:a0:ee:25:d7:6e:3d:3c:4a:90:6f:55:a5:c7:1d:
a3:91:0d:b6:9d:3f:ef:5b:38:26:6b:4d:db:2f:c9:6f:9a:20:
7f:1e:c3:05:e5:1c:ec:c9:ac:09:ee:39:e3:0d:e7:07:33:fa:
16:53:91:8a:67:ba:67:7c:64:37:18:3d:34:d1:f7:cb:57:d5:
3a:d7:ce:fb:e2:8b:db:91:17:f8:06:8c:d5:c7:33:7b:46:32:
66:16:46:b3:83:94:60:1a:5b:fe:1f:eb:d4:88:07:0b:2f:cb:
f9:6e:25:9a:bc:a6:53:6b:82:00:51:ea:8e:97:b8:82:1d:f7:
4c:80:e2:6c:50:c4:0a:c6:6e:5d:c7:0f:f9:b7:71:eb:29:fe:
0a:44:d7:ef:72:1e:e6:db:a8:0d:fd:b6:f7:49:66:9c:2b:5a:
2f:b8:f6:86:1f:42:66:b1:d8:2d:1b:c5:fc:b4:3a:f0:13:5d:
11:61:55:13:bb:d2:6c:18:56:ee:ab:c2:39:38:92:15:e6:da:
66:91:60:2f:4a:4f:90:bd:95:07:d9:03:d8:aa:05:02:a5:9b:
3e:82:ab:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZihKFoKHKRlJ6E/DdIAS5HiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYzVlZDBkZWQ4NjI1YjMyYjY1MzMyMDcyMjlmMmM0Njcy
NTk4NDgwHhcNMjUwODEzMDIwMDMyWhcNMjUwODE0MDIwMDMyWjAzMTEwLwYDVQQD
Eyg0ODhjZjY0ZWI2NGEwNDdjZjk5YjQ5NGYwODBhNWY3MTIxOTE3YjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8oH6fnNfzTS7iZls0LdJ9bZ44+P
Ye1hW7KOhuZ5yd+OfPG8zlpDpRCAUpQoj/hbklvPDqLEL1eB+nmEYwUtq/6jY1/W
AHPm5H+4GVpRoqx+rzmKbRjo5D49XALWBl6oIg1UhFG+WvNjrk7w8uW9R0VIYY6F
SUZriFFGopMscb2L4UayoEAPYrHjxAG3/EC1yR1PeTyvC8/OfI5ILO1F5haUqNO4
RsYrKgK2DSJwwj0wmNZnnSqKUb7ZGbp70vHBfNsI8hF8+i7+hybu6ac/6ruzE1xy
cjK+YlyTWBvkKXn63/mCn9J2bhfIF9EovZXXTb9hwDUfeZXzQRVw1hta4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiM9k62SgR8+ZtJTwgKX3EhkXuKMB8GA1UdIwQY
MBaAFGHF7Q3thiWzK2UzIHIp8sRnJZhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWNYdERlMkdKYk1yWlRNZ2Npbnl4R2NsbUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MDYyYWYtNTNiYy00MzVkLWI1ZmIt
YTExODQ5ODMyNWY3LzEvWWNYdERlMkdKYk1yWlRNZ2Npbnl4R2NsbUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MDYyYWYtNTNiYy00MzVkLWI1ZmItYTExODQ5ODMyNWY3
LzEvWWNYdERlMkdKYk1yWlRNZ2Npbnl4R2NsbUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiaeNAs+
UiYbr8V4k3bhowUXMiNYmSdrLXF2EW9/ZDfxYLtAuQSLYaDuJdduPTxKkG9Vpccd
o5ENtp0/71s4JmtN2y/Jb5ogfx7DBeUc7MmsCe454w3nBzP6FlORime6Z3xkNxg9
NNH3y1fVOtfO++KL25EX+AaM1ccze0YyZhZGs4OUYBpb/h/r1IgHCy/L+W4lmrym
U2uCAFHqjpe4gh33TIDibFDECsZuXccP+bdx6yn+CkTX73Ie5tuoDf2290lmnCta
L7j2hh9CZrHYLRvF/LQ68BNdEWFVE7vSbBhW7qvCOTiSFebaZpFgL0pPkL2VB9kD
2KoFAqWbPoKr7w==
-----END CERTIFICATE-----
Generated at Wed Aug 13 08:50:30 2025 by rpki-client