Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
File: y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft (raw, json)
Hash identifier: hJd3Cl2cIBYwa4wV4xKQNtt2+8eZjpe+QSYQUm+ea2c=
Subject key identifier: 58:61:6D:4D:92:18:ED:2C:E5:33:0F:B3:5B:D8:C3:68:D7:F7:52:33
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial: 01988B7CF5BC5B3725AE2651DF1A5DD7C535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
Manifest number: 133D
Signing time: Fri 08 Aug 2025 21:01:19 +0000
Manifest this update: Fri 08 Aug 2025 21:01:19 +0000
Manifest next update: Sat 09 Aug 2025 21:01:19 +0000
Files and hashes: 1: 01CdWbGh7Iblu72TWh19DMuKsTg.roa (hash: UMhszvGboz7Q5LH0CKudFHnP8+S6bLFVIG5m3eTTe34=)
2: BRkboOx_3fEjuYhSpVsqCaav6Nw.roa (hash: mmNeus1/l5cYym/HIYOW1rRfvqENuE8CN24AevBAmxw=)
3: y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl (hash: OPQqjov4sJysCxDjiSVCtonseGfn38vxW+qVOlkLvD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:f5:bc:5b:37:25:ae:26:51:df:1a:5d:d7:c5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Validity
Not Before: Aug 8 21:01:19 2025 GMT
Not After : Aug 9 21:01:19 2025 GMT
Subject: CN=58616d4d9218ed2ce5330fb35bd8c368d7f75233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:4f:6a:0c:6a:a5:a6:42:90:32:4c:a3:24:
6b:40:b9:55:bd:0f:c6:69:1f:7f:11:db:e1:62:b7:
4a:0d:04:85:40:e8:76:c7:0f:40:e4:4f:29:4c:ff:
e6:85:ca:5b:d2:43:9e:05:31:13:cc:c9:02:30:99:
7e:9a:e5:48:9b:53:82:69:89:88:cc:2d:30:c8:9f:
75:ec:d8:7f:c1:36:48:1c:83:7e:b0:f6:7f:69:7e:
20:3f:ce:56:28:8b:c8:72:21:d0:47:f4:00:ca:47:
05:a1:4a:7e:88:3f:a1:7c:f6:67:c4:1c:31:80:1a:
67:dc:5f:4c:5f:ac:3f:44:e8:77:59:8b:0f:89:8f:
0e:27:63:c5:13:c4:31:5f:4a:da:36:f1:59:f8:4e:
1d:76:af:50:4d:ef:81:02:46:72:b6:c9:60:68:8d:
b0:4e:ae:7f:8d:c7:16:8b:4c:de:50:ae:e0:07:7a:
b8:40:3c:f1:8f:57:47:64:0c:ab:be:c1:6c:9c:f2:
82:ed:82:94:19:37:af:c5:1f:a0:c9:59:63:fc:0b:
92:f0:46:a9:dd:ab:22:a8:79:1b:17:81:b0:bf:f0:
df:2f:d9:1a:9e:9d:3f:6f:1c:ca:bd:23:32:d4:6b:
a3:8c:91:a7:4d:3d:cf:d6:bc:d0:fc:52:90:71:a0:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:61:6D:4D:92:18:ED:2C:E5:33:0F:B3:5B:D8:C3:68:D7:F7:52:33
X509v3 Authority Key Identifier:
keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5e:27:80:fc:e1:2f:af:64:71:5f:c2:22:28:a9:a0:ad:06:
19:ff:0d:53:4b:6b:9a:cb:7a:87:37:23:88:9c:90:8b:c1:52:
a0:80:d3:d7:b4:b1:92:45:1e:a3:72:07:2a:cf:fd:45:4a:9a:
33:54:11:03:04:1a:83:ab:42:b9:12:3b:49:9c:a6:00:e7:ca:
b5:b2:0f:bb:89:7d:50:ea:cf:b8:01:0d:7c:a1:e1:0a:c9:b9:
7b:a6:62:4d:27:9a:f4:d8:72:95:65:1e:39:f2:ff:07:54:06:
85:84:9b:3a:d6:88:10:2a:9d:78:e1:fa:0f:15:28:e7:cb:d2:
46:70:b3:2a:97:e1:b4:31:50:3a:b8:66:c1:46:8f:94:a4:c9:
ba:b9:ba:2c:d5:fb:37:cb:ce:a8:dd:d8:98:5e:5b:24:96:59:
05:2a:c2:2f:05:6b:77:61:c3:38:35:c0:b2:9a:f1:40:aa:56:
61:70:38:a4:64:99:19:2f:33:46:8c:c1:65:60:1f:12:67:2c:
9d:28:2f:23:3f:41:5e:4f:b6:51:06:3d:c7:4e:1c:55:5f:29:
03:07:b2:5b:11:fc:2d:24:b8:05:2f:c1:cb:5b:ee:90:1c:2e:
6a:45:aa:6e:9b:c4:50:8d:3e:82:3f:5e:2e:70:b6:93:13:26:
71:1d:4b:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfPW8WzclriZR3xpd18U1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmJmMmI4OTU4NGVjOTYwODAwNDhkYzNmZGMyZTM5ODNj
Mjc3ZjMwHhcNMjUwODA4MjEwMTE5WhcNMjUwODA5MjEwMTE5WjAzMTEwLwYDVQQD
Eyg1ODYxNmQ0ZDkyMThlZDJjZTUzMzBmYjM1YmQ4YzM2OGQ3Zjc1MjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxpPagxqpaZCkDJMoyRrQLlVvQ/G
aR9/EdvhYrdKDQSFQOh2xw9A5E8pTP/mhcpb0kOeBTETzMkCMJl+muVIm1OCaYmI
zC0wyJ917Nh/wTZIHIN+sPZ/aX4gP85WKIvIciHQR/QAykcFoUp+iD+hfPZnxBwx
gBpn3F9MX6w/ROh3WYsPiY8OJ2PFE8QxX0raNvFZ+E4ddq9QTe+BAkZytslgaI2w
Tq5/jccWi0zeUK7gB3q4QDzxj1dHZAyrvsFsnPKC7YKUGTevxR+gyVlj/AuS8Eap
3asiqHkbF4Gwv/DfL9kanp0/bxzKvSMy1GujjJGnTT3P1rzQ/FKQcaDArwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhhbU2SGO0s5TMPs1vYw2jX91IzMB8GA1UdIwQY
MBaAFMtr8riVhOyWCABI3D/cLjmDwnfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2Qt
MTBmZGZjZTk0NTEzLzEveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2QtMTBmZGZjZTk0NTEz
LzEveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkF4ngPzh
L69kcV/CIiipoK0GGf8NU0trmst6hzcjiJyQi8FSoIDT17SxkkUeo3IHKs/9RUqa
M1QRAwQag6tCuRI7SZymAOfKtbIPu4l9UOrPuAENfKHhCsm5e6ZiTSea9NhylWUe
OfL/B1QGhYSbOtaIECqdeOH6DxUo58vSRnCzKpfhtDFQOrhmwUaPlKTJurm6LNX7
N8vOqN3YmF5bJJZZBSrCLwVrd2HDODXAsprxQKpWYXA4pGSZGS8zRozBZWAfEmcs
nSgvIz9BXk+2UQY9x04cVV8pAweyWxH8LSS4BS/By1vukBwuakWqbpvEUI0+gj9e
LnC2kxMmcR1LkA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:46 2025 by rpki-client