
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: 2Pgd3jv0x+p26MEjKmK4CoMUA46kKUlhXheJiIQjLOM=
Subject key identifier: 09:5F:A5:B5:89:6B:E0:58:B4:0A:2C:32:DA:AA:35:FF:17:C4:2A:99
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019880C1D7789B7C6CB3C8D5C07BB08CC9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 15B2
Signing time: Wed 06 Aug 2025 19:00:43 +0000
Manifest this update: Wed 06 Aug 2025 19:00:43 +0000
Manifest next update: Thu 07 Aug 2025 19:00:43 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: bUF7UykT9t6H4v3ccgJ7Yz5y5wBQMiYig+uMuq/+o2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:d7:78:9b:7c:6c:b3:c8:d5:c0:7b:b0:8c:c9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Aug 6 19:00:43 2025 GMT
Not After : Aug 7 19:00:43 2025 GMT
Subject: CN=095fa5b5896be058b40a2c32daaa35ff17c42a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:a3:68:12:b9:d1:88:f0:b0:4d:eb:39:b5:
35:c0:2b:66:4e:5b:81:00:47:a3:21:3e:5c:85:a3:
31:0d:5b:ab:8d:02:53:2d:82:ec:1e:38:d9:d6:4e:
fe:9a:b1:67:64:fb:8e:f6:27:59:4c:b1:95:cd:b6:
04:36:ee:a0:3e:ac:14:99:ac:e4:5c:76:1b:91:6d:
36:57:f6:8d:8d:01:cc:00:54:dc:81:61:61:12:fe:
1c:04:13:39:7a:ee:15:fc:fc:8a:ef:26:d0:8d:56:
31:bc:95:32:02:a7:dc:25:ea:a5:51:0a:6d:f2:f8:
6d:d1:e6:18:55:17:ac:d5:e8:76:d1:a6:8b:48:cb:
be:39:05:50:bc:84:ea:6b:f5:41:0a:26:6d:1e:3c:
71:1b:f6:0a:ed:7e:e1:ea:7c:a9:56:cc:9d:78:18:
42:69:a4:85:e0:ac:0a:b6:62:4c:3c:45:55:c7:55:
e5:06:1b:07:d0:50:23:90:64:10:9f:0c:8b:3c:9d:
2f:8e:72:ef:2b:24:19:aa:9d:13:ae:da:49:5f:27:
77:c4:ff:04:ad:76:96:e2:16:e5:22:21:76:20:ed:
d6:26:77:6a:b2:72:da:1f:ce:5a:9a:88:fd:6a:9c:
2d:3c:c9:84:1a:16:ca:1d:d2:6f:27:3a:a7:6d:22:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5F:A5:B5:89:6B:E0:58:B4:0A:2C:32:DA:AA:35:FF:17:C4:2A:99
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:17:37:d1:c6:d8:d2:88:ba:ce:68:69:0d:1b:87:67:8f:1d:
21:4b:4d:bc:08:d6:37:90:8c:14:88:b4:32:c7:11:bc:43:f4:
88:a1:93:19:cd:39:ba:c6:a1:ef:49:4a:82:18:8a:b3:b8:87:
ad:37:b1:bf:62:35:73:9f:b9:5c:b6:73:21:56:9b:4d:fd:ef:
17:4e:9b:40:27:2b:4c:a2:73:01:06:e7:2b:7d:9d:d4:9e:b4:
06:69:8c:c7:2e:b9:91:2d:d2:84:d9:63:42:4a:49:38:fb:b3:
a8:1d:01:34:64:8d:ec:74:81:e2:5b:cc:39:48:43:6b:9e:05:
58:a1:99:7e:a7:4d:e9:fb:8d:f6:95:e7:aa:37:51:60:c7:f0:
aa:bb:cf:54:af:39:f9:1c:b4:21:58:04:8e:6d:e6:14:98:c1:
c7:c9:de:92:65:fb:86:47:2f:c3:2a:df:8a:85:df:6c:7d:06:
cd:3d:04:bf:1f:9a:0a:e1:a8:e2:3c:7c:b5:8a:2d:8e:af:23:
ac:69:e0:a2:bb:f0:df:86:f4:d5:1e:c3:ce:d9:8d:f2:d9:63:
57:78:95:55:49:0f:1b:d6:78:2e:73:94:99:c4:90:65:7f:1d:
78:93:ad:fe:59:63:d6:b3:a0:39:9d:eb:ec:03:c9:b3:53:b8:
2c:c1:7d:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwdd4m3xss8jVwHuwjMnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2JjYTg3NjQ5NDY5MzJiYTJkYThiZGI3ZDEzY2Q4Njg5
NWFmNjkwHhcNMjUwODA2MTkwMDQzWhcNMjUwODA3MTkwMDQzWjAzMTEwLwYDVQQD
EygwOTVmYTViNTg5NmJlMDU4YjQwYTJjMzJkYWFhMzVmZjE3YzQyYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyOjaBK50YjwsE3rObU1wCtmTluB
AEejIT5chaMxDVurjQJTLYLsHjjZ1k7+mrFnZPuO9idZTLGVzbYENu6gPqwUmazk
XHYbkW02V/aNjQHMAFTcgWFhEv4cBBM5eu4V/PyK7ybQjVYxvJUyAqfcJeqlUQpt
8vht0eYYVRes1eh20aaLSMu+OQVQvITqa/VBCiZtHjxxG/YK7X7h6nypVsydeBhC
aaSF4KwKtmJMPEVVx1XlBhsH0FAjkGQQnwyLPJ0vjnLvKyQZqp0TrtpJXyd3xP8E
rXaW4hblIiF2IO3WJndqsnLaH85amoj9apwtPMmEGhbKHdJvJzqnbSLGDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlfpbWJa+BYtAosMtqqNf8XxCqZMB8GA1UdIwQY
MBaAFMo7yodklGkyui2ovbfRPNhola9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAt
MDEyZGRlYWRmNzVlLzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAtMDEyZGRlYWRmNzVl
LzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahc30cbY
0oi6zmhpDRuHZ48dIUtNvAjWN5CMFIi0MscRvEP0iKGTGc05usah70lKghiKs7iH
rTexv2I1c5+5XLZzIVabTf3vF06bQCcrTKJzAQbnK32d1J60BmmMxy65kS3ShNlj
QkpJOPuzqB0BNGSN7HSB4lvMOUhDa54FWKGZfqdN6fuN9pXnqjdRYMfwqrvPVK85
+Ry0IVgEjm3mFJjBx8nekmX7hkcvwyrfioXfbH0GzT0Evx+aCuGo4jx8tYotjq8j
rGngorvw34b01R7DztmN8tljV3iVVUkPG9Z4LnOUmcSQZX8deJOt/llj1rOgOZ3r
7APJs1O4LMF9mg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:34 2025 by rpki-client