Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: JRpz1nc7jb9SPi6o6dYt3zOm5aur+rt8UrsTa/cuQ1Y=
Subject key identifier: 57:C9:CF:23:8E:13:E5:E8:F2:B6:AC:FA:36:AE:AC:A0:C9:E3:C1:39
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 019873748E4756B724CD1067D4A6DD399E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 05:01:15 +0000
Manifest this update: Mon 04 Aug 2025 05:01:15 +0000
Manifest next update: Tue 05 Aug 2025 05:01:15 +0000
Files and hashes: 1: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (hash: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: vB73xoysBB/XtqX2eZxVvhh5BV9I8/sG5DNrOVe2MQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:8e:47:56:b7:24:cd:10:67:d4:a6:dd:39:9e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Aug 4 05:01:15 2025 GMT
Not After : Aug 5 05:01:15 2025 GMT
Subject: CN=57c9cf238e13e5e8f2b6acfa36aeaca0c9e3c139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:ef:50:1c:3e:c3:90:66:c7:b5:de:6f:c7:
08:36:b8:5b:4e:4a:16:78:c8:a9:38:5e:b0:d0:3b:
48:93:f5:1d:9d:e4:40:0b:4b:26:50:01:21:85:e9:
61:17:0b:61:83:a0:12:a0:2a:f4:90:78:e2:d0:97:
3b:f5:48:38:e5:9f:da:34:ee:af:49:df:fb:e7:df:
fe:15:48:03:de:20:ba:40:ed:d1:e1:7c:79:3e:ba:
85:e8:0e:f3:d6:52:d2:68:53:0d:d1:ef:d0:09:40:
63:f6:b0:6c:31:41:ad:ab:df:e5:5e:8e:45:0a:9a:
e9:df:c7:53:be:11:a2:4e:00:bb:b2:77:56:12:ec:
e6:85:c3:5d:8b:e5:3d:ec:bf:de:18:1f:20:66:14:
28:e4:13:6c:ef:88:a2:a6:bc:ea:42:65:fe:de:de:
af:79:1b:5b:75:d8:1f:2e:e1:ae:b1:45:56:4a:35:
f3:16:d2:2c:a3:64:3a:f3:c3:14:cc:64:29:1f:e5:
6b:6d:ec:52:f8:6b:cd:c1:f1:cb:b3:47:a7:83:c6:
60:cc:97:66:b5:fd:92:8d:c5:64:cc:99:04:37:ff:
ac:83:59:ff:d1:c1:4a:fc:24:77:0d:2a:5f:c5:6e:
12:8e:be:55:3b:fc:81:5c:77:84:90:c9:30:27:14:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C9:CF:23:8E:13:E5:E8:F2:B6:AC:FA:36:AE:AC:A0:C9:E3:C1:39
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1c:ab:e4:a0:aa:72:43:c9:cc:5d:c2:b0:82:08:8b:f2:cd:
94:27:e6:d1:56:d7:13:87:47:e0:53:f6:c3:1a:25:81:5d:ba:
8f:29:0e:18:4c:8c:13:c7:4a:02:9b:8b:79:cb:b6:ee:a3:7a:
04:19:07:e7:9c:5a:5b:05:fc:82:38:f2:9c:8a:76:64:8d:0d:
e6:6c:81:bc:d9:47:63:12:d8:e6:0b:78:f8:ea:fc:4b:66:07:
53:ce:a9:be:26:7c:f3:81:59:85:80:6e:27:ba:72:8c:1c:3c:
1b:ec:57:b7:d3:9a:77:78:84:a9:b3:18:b5:22:2e:5d:e3:4e:
67:c5:38:06:de:d1:c8:5a:64:b0:7a:70:e0:a5:7a:ac:9b:a1:
f8:8a:d0:c4:89:a3:95:31:a2:4a:2b:3b:8b:aa:ec:ed:56:d1:
c4:4c:2b:bd:9d:d4:c0:b1:fe:2c:50:f6:54:8f:3b:af:f4:52:
f4:fd:30:0d:9c:07:9c:eb:37:71:88:24:35:66:9c:0f:e5:20:
24:8f:95:25:81:9c:2e:be:b8:03:38:70:9a:94:38:83:f0:35:
6b:89:2f:7f:7d:d9:69:f8:de:ab:fc:04:0c:f1:e5:45:06:9d:
47:6e:2d:5e:84:d9:03:2d:35:ad:90:a2:7c:6a:2f:94:5c:c4:
48:5e:00:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdI5HVrckzRBn1KbdOZ44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTkzOTIzMjU3YjIwZWRhNGFhNGJjM2M0YTBjMzBkODQ5
MGVhNTYwHhcNMjUwODA0MDUwMTE1WhcNMjUwODA1MDUwMTE1WjAzMTEwLwYDVQQD
Eyg1N2M5Y2YyMzhlMTNlNWU4ZjJiNmFjZmEzNmFlYWNhMGM5ZTNjMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnTvUBw+w5Bmx7Xeb8cINrhbTkoW
eMipOF6w0DtIk/UdneRAC0smUAEhhelhFwthg6ASoCr0kHji0Jc79Ug45Z/aNO6v
Sd/759/+FUgD3iC6QO3R4Xx5PrqF6A7z1lLSaFMN0e/QCUBj9rBsMUGtq9/lXo5F
Cprp38dTvhGiTgC7sndWEuzmhcNdi+U97L/eGB8gZhQo5BNs74iiprzqQmX+3t6v
eRtbddgfLuGusUVWSjXzFtIso2Q688MUzGQpH+VrbexS+GvNwfHLs0eng8ZgzJdm
tf2SjcVkzJkEN/+sg1n/0cFK/CR3DSpfxW4Sjr5VO/yBXHeEkMkwJxS/mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfJzyOOE+Xo8ras+jaurKDJ48E5MB8GA1UdIwQY
MBaAFMhZOSMleyDtpKpLw8Sgww2EkOpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZrNUl5VjdJTzJrcWt2RHhLREREWVNRNmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hMDQ5NTYtNzQ2Mi00OWViLWE5ZGIt
ZGM2YmU4Y2U1ZmIyLzEveUZrNUl5VjdJTzJrcWt2RHhLREREWVNRNmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hMDQ5NTYtNzQ2Mi00OWViLWE5ZGItZGM2YmU4Y2U1ZmIy
LzEveUZrNUl5VjdJTzJrcWt2RHhLREREWVNRNmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxyr5KCq
ckPJzF3CsIIIi/LNlCfm0VbXE4dH4FP2wxolgV26jykOGEyME8dKApuLecu27qN6
BBkH55xaWwX8gjjynIp2ZI0N5myBvNlHYxLY5gt4+Or8S2YHU86pviZ884FZhYBu
J7pyjBw8G+xXt9Oad3iEqbMYtSIuXeNOZ8U4Bt7RyFpksHpw4KV6rJuh+IrQxImj
lTGiSis7i6rs7VbRxEwrvZ3UwLH+LFD2VI87r/RS9P0wDZwHnOs3cYgkNWacD+Ug
JI+VJYGcLr64AzhwmpQ4g/A1a4kvf33Zafjeq/wEDPHlRQadR24tXoTZAy01rZCi
fGovlFzESF4Adg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:54 2025 by rpki-client