Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: B3jiDezdqbcrwP/LnxbSdtjLJ4iTyOn8MqIbPf2s8tc=
Subject key identifier: 76:2A:7F:89:2C:66:0C:95:5B:19:9C:E5:19:E0:B9:50:26:D8:50:7D
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 019880F942702310C597E0A434D27B1DAFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 20:01:15 +0000
Manifest this update: Wed 06 Aug 2025 20:01:15 +0000
Manifest next update: Thu 07 Aug 2025 20:01:15 +0000
Files and hashes: 1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: fhWkqstSBY+Vo7TRZUGGX9ndBIXSQxgAg16sTGu9Giw=)
2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:42:70:23:10:c5:97:e0:a4:34:d2:7b:1d:af:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Aug 6 20:01:15 2025 GMT
Not After : Aug 7 20:01:15 2025 GMT
Subject: CN=762a7f892c660c955b199ce519e0b95026d8507d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3c:e6:76:bd:ec:58:22:b4:eb:d0:1f:75:2b:
69:65:25:a3:14:98:be:c4:49:cb:72:90:30:c0:43:
2f:73:23:51:d2:26:e0:f2:3b:89:e6:1b:f1:77:2a:
12:e1:84:e0:34:07:53:f5:6b:f4:57:f3:fa:4b:e7:
47:22:87:a9:e9:10:55:41:85:bc:73:67:53:8e:18:
fe:aa:ea:07:9b:80:3a:a8:82:01:09:e3:87:3e:e2:
f8:b2:4d:98:66:ef:69:3a:51:a6:1c:33:64:99:25:
16:07:d5:3a:a2:02:48:cf:bb:10:e8:eb:96:e8:95:
7d:f3:2f:a4:a8:05:f4:80:2b:69:2f:a0:b6:76:fa:
d0:c2:5a:e4:43:c2:06:8b:15:fa:34:d8:17:0f:0a:
8e:8d:6b:7d:58:f4:29:7e:f5:2f:d0:e3:5c:b7:6c:
e8:d3:52:73:50:cd:35:97:bd:eb:53:e2:59:32:90:
d8:0b:79:51:ec:7c:bd:87:78:20:9d:a2:cc:e3:09:
7f:fd:72:77:4a:ad:b5:8e:6e:f2:03:2a:63:28:a1:
65:41:57:1d:3b:80:3d:05:06:31:90:01:ef:d0:b7:
47:3e:f4:9b:e6:ea:fa:aa:85:b6:8e:4a:71:1f:61:
00:a2:86:f5:c9:60:b6:d0:7e:41:de:18:37:0f:8f:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2A:7F:89:2C:66:0C:95:5B:19:9C:E5:19:E0:B9:50:26:D8:50:7D
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ec:80:a1:12:f3:68:ea:6f:cf:9d:e2:d1:fd:86:24:eb:53:
38:a3:7e:a3:45:ce:d0:24:e1:a1:20:10:e2:38:c7:a9:7b:48:
03:02:d9:b0:6e:b2:c2:ca:05:78:1f:76:fc:21:f1:53:46:b4:
da:27:8b:da:fb:af:22:bc:23:cd:2a:2d:24:64:06:ea:73:1a:
d6:00:cd:62:6c:fc:3c:4f:a7:01:c6:47:38:a4:4b:63:76:1f:
4f:b6:29:9a:9f:74:c8:5b:80:8f:a3:8e:de:af:c2:31:ea:66:
96:ab:eb:e6:4a:18:e9:8b:bc:8a:21:3d:35:05:a8:c6:e9:76:
75:e6:2e:96:23:8d:95:2a:34:53:70:28:03:ac:95:f9:51:9e:
41:3d:17:41:47:24:06:52:18:d4:9a:03:79:c4:81:4f:d1:6a:
be:68:a6:34:62:48:17:d8:59:1c:19:e3:e9:30:44:0d:9a:2e:
5e:e4:f6:46:8b:ae:ee:84:2e:7b:7c:d7:51:10:ab:b0:05:6f:
b6:0e:98:61:91:6f:dc:16:62:89:f4:cd:fc:3a:53:6b:ef:00:
60:e5:d5:7e:53:3f:f6:c7:11:68:9d:06:ad:b3:0c:d0:43:19:
34:07:89:7f:01:7f:70:9f:fe:c8:45:04:a3:06:de:b6:49:3a:
d2:ff:c7:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+UJwIxDFl+CkNNJ7Ha/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMWFjYTVmOWExZGNmYTE5NzA0ZDFmMDM3N2YxYjlmZTkx
NDVlMDgwHhcNMjUwODA2MjAwMTE1WhcNMjUwODA3MjAwMTE1WjAzMTEwLwYDVQQD
Eyg3NjJhN2Y4OTJjNjYwYzk1NWIxOTljZTUxOWUwYjk1MDI2ZDg1MDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjzmdr3sWCK069AfdStpZSWjFJi+
xEnLcpAwwEMvcyNR0ibg8juJ5hvxdyoS4YTgNAdT9Wv0V/P6S+dHIoep6RBVQYW8
c2dTjhj+quoHm4A6qIIBCeOHPuL4sk2YZu9pOlGmHDNkmSUWB9U6ogJIz7sQ6OuW
6JV98y+kqAX0gCtpL6C2dvrQwlrkQ8IGixX6NNgXDwqOjWt9WPQpfvUv0ONct2zo
01JzUM01l73rU+JZMpDYC3lR7Hy9h3ggnaLM4wl//XJ3Sq21jm7yAypjKKFlQVcd
O4A9BQYxkAHv0LdHPvSb5ur6qoW2jkpxH2EAoob1yWC20H5B3hg3D4/34QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYqf4ksZgyVWxmc5RnguVAm2FB9MB8GA1UdIwQY
MBaAFGMayl+aHc+hlwTR8Dd/G5/pFF4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTkt
ZDJiMDJhNDAzYzdiLzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTktZDJiMDJhNDAzYzdi
LzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOyAoRLz
aOpvz53i0f2GJOtTOKN+o0XO0CThoSAQ4jjHqXtIAwLZsG6ywsoFeB92/CHxU0a0
2ieL2vuvIrwjzSotJGQG6nMa1gDNYmz8PE+nAcZHOKRLY3YfT7Ypmp90yFuAj6OO
3q/CMepmlqvr5koY6Yu8iiE9NQWoxul2deYuliONlSo0U3AoA6yV+VGeQT0XQUck
BlIY1JoDecSBT9FqvmimNGJIF9hZHBnj6TBEDZouXuT2Rouu7oQue3zXURCrsAVv
tg6YYZFv3BZiifTN/DpTa+8AYOXVflM/9scRaJ0GrbMM0EMZNAeJfwF/cJ/+yEUE
owbetkk60v/Hiw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:20:11 2025 by rpki-client