Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
File: yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json)
Hash identifier: dapS3+5sXvoUTK80yleB4W9Mh02CfBAtLm6AIEUb7NM=
Subject key identifier: 7B:99:32:04:ED:C4:36:0D:1C:3B:B7:D9:91:9A:0E:CD:42:97:7E:11
Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Certificate issuer: /CN=c8f180dd489675d4793525fee6cfff46972ff33c
Certificate serial: 01987A1AF0CA7D65E8D1AB57FDD07C4A2680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 12:00:42 +0000
Manifest this update: Tue 05 Aug 2025 12:00:42 +0000
Manifest next update: Wed 06 Aug 2025 12:00:42 +0000
Files and hashes: 1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: 9ulMNKKQmbWNi4NKIDDZnQmY2QvZortShaG7JsLP3Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1a:f0:ca:7d:65:e8:d1:ab:57:fd:d0:7c:4a:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c
Validity
Not Before: Aug 5 12:00:42 2025 GMT
Not After : Aug 6 12:00:42 2025 GMT
Subject: CN=7b993204edc4360d1c3bb7d9919a0ecd42977e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e0:04:85:77:4a:96:17:16:d3:c7:a0:46:93:
2a:86:54:11:46:d9:d0:a6:fc:93:26:fc:0d:90:3e:
f9:eb:88:b2:c0:6e:86:58:60:94:4a:63:b4:53:7f:
e6:b6:c7:23:a8:92:a6:5f:03:95:30:8c:5b:42:81:
96:d3:3a:91:df:e9:d3:bf:8e:5a:47:14:0f:3e:d4:
f4:9b:a2:93:40:59:41:f5:8f:d4:63:39:58:c9:c2:
bc:b1:d2:28:42:a9:87:e3:b3:76:de:20:0a:f0:30:
44:70:7a:22:39:18:2c:6d:4e:83:ec:68:bf:0a:72:
81:c5:89:27:99:a5:74:59:4b:df:8c:32:ba:af:c6:
d2:b3:87:f1:6b:4c:d7:fa:69:c6:97:3b:62:72:aa:
e5:58:36:06:b9:4f:39:fc:f3:d9:ee:33:57:d4:72:
86:bd:c0:c7:6d:fb:3b:0f:5e:e8:0f:41:aa:ff:a7:
43:6f:09:2a:5e:1a:13:2c:f0:30:51:0d:27:00:29:
a4:ff:7f:8a:92:ae:89:7a:52:b0:10:e4:5c:88:65:
60:2c:18:00:72:dd:2b:df:dc:2f:6b:6f:6a:b7:60:
7e:d4:c1:bc:11:36:4d:24:c8:5f:fa:d2:2b:99:60:
e3:9e:26:b5:89:8b:e7:cf:84:8f:4d:cf:24:90:f1:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:32:04:ED:C4:36:0D:1C:3B:B7:D9:91:9A:0E:CD:42:97:7E:11
X509v3 Authority Key Identifier:
keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3e:3c:db:10:64:ee:d1:25:4d:be:9a:ea:13:aa:05:b9:e1:
72:8b:b0:10:60:25:f6:ea:c4:9d:3b:9a:aa:04:7f:08:fd:b3:
7e:ca:59:53:ab:82:f9:ad:85:2b:00:e4:10:0d:ff:d6:7c:92:
ac:4f:88:24:ef:a4:e6:22:28:12:30:1f:cf:77:ac:97:3a:fa:
4c:96:c5:cb:6e:9a:26:be:f9:4d:75:e2:d0:ea:46:63:b3:a1:
06:73:9a:42:27:59:2e:f8:54:85:97:2d:c5:56:f0:ea:92:92:
96:48:5d:92:0a:3d:ab:f0:41:ae:ac:29:a6:af:4e:6e:05:b8:
61:53:ca:58:83:f0:79:b5:c7:f2:a5:8d:9c:8a:d4:da:85:65:
09:44:ec:af:6a:87:1f:89:3e:d9:d5:26:42:1b:ad:17:e4:4f:
87:2e:da:83:f6:c7:22:12:75:55:a2:da:01:cb:8c:87:94:c0:
9f:a5:7a:53:45:c8:79:2c:f4:01:e1:1f:81:b3:b0:53:66:23:
3d:e4:cb:e9:46:42:41:7f:66:bd:4b:bd:48:a5:6f:de:18:02:
a3:89:76:1a:d0:1d:dc:9b:9b:c7:c1:ff:4b:5f:7f:65:ea:50:
f4:c7:d0:3c:94:16:b1:1e:c7:f0:ea:73:ee:24:2d:44:8f:8b:
e9:bd:f0:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6GvDKfWXo0atX/dB8SiaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjE4MGRkNDg5Njc1ZDQ3OTM1MjVmZWU2Y2ZmZjQ2OTcy
ZmYzM2MwHhcNMjUwODA1MTIwMDQyWhcNMjUwODA2MTIwMDQyWjAzMTEwLwYDVQQD
Eyg3Yjk5MzIwNGVkYzQzNjBkMWMzYmI3ZDk5MTlhMGVjZDQyOTc3ZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OAEhXdKlhcW08egRpMqhlQRRtnQ
pvyTJvwNkD7564iywG6GWGCUSmO0U3/mtscjqJKmXwOVMIxbQoGW0zqR3+nTv45a
RxQPPtT0m6KTQFlB9Y/UYzlYycK8sdIoQqmH47N23iAK8DBEcHoiORgsbU6D7Gi/
CnKBxYknmaV0WUvfjDK6r8bSs4fxa0zX+mnGlzticqrlWDYGuU85/PPZ7jNX1HKG
vcDHbfs7D17oD0Gq/6dDbwkqXhoTLPAwUQ0nACmk/3+Kkq6JelKwEORciGVgLBgA
ct0r39wva29qt2B+1MG8ETZNJMhf+tIrmWDjnia1iYvnz4SPTc8kkPE7/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuZMgTtxDYNHDu32ZGaDs1Cl34RMB8GA1UdIwQY
MBaAFMjxgN1IlnXUeTUl/ubP/0aXL/M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82N2YxYzUtODIyOS00MTczLTk5YzEt
ZGJkNzYwMDQ1ZWI3LzEveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82N2YxYzUtODIyOS00MTczLTk5YzEtZGJkNzYwMDQ1ZWI3
LzEveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACD482xBk
7tElTb6a6hOqBbnhcouwEGAl9urEnTuaqgR/CP2zfspZU6uC+a2FKwDkEA3/1nyS
rE+IJO+k5iIoEjAfz3eslzr6TJbFy26aJr75TXXi0OpGY7OhBnOaQidZLvhUhZct
xVbw6pKSlkhdkgo9q/BBrqwppq9ObgW4YVPKWIPwebXH8qWNnIrU2oVlCUTsr2qH
H4k+2dUmQhutF+RPhy7ag/bHIhJ1VaLaAcuMh5TAn6V6U0XIeSz0AeEfgbOwU2Yj
PeTL6UZCQX9mvUu9SKVv3hgCo4l2GtAd3Jubx8H/S19/ZepQ9MfQPJQWsR7H8Opz
7iQtRI+L6b3wxw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:40:49 2025 by rpki-client