Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: MWv+2GCtdSB138X5SvL1gLYkJbOTmrrzfBG8VviOvhE=
Subject key identifier: 87:3D:61:8B:4C:2D:9D:A2:57:8D:4E:C2:31:03:E8:C8:4C:16:E9:B3
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 0198941207DF199279C2583D05A11CC187A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 1638
Signing time: Sun 10 Aug 2025 13:01:06 +0000
Manifest this update: Sun 10 Aug 2025 13:01:06 +0000
Manifest next update: Mon 11 Aug 2025 13:01:06 +0000
Files and hashes: 1: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=)
2: _Xj2eknSD0ggywf9BvZfFW4ND5Y.roa (hash: lqrmQ5OQaXV1qMgJ8jG3Tq4DJQ0kTl6M/TLRe7MYJpY=)
3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: fxbrm98y00Rr24532kOiOua+FLIbsbXqADXReAFF9as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:07:df:19:92:79:c2:58:3d:05:a1:1c:c1:87:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Aug 10 13:01:06 2025 GMT
Not After : Aug 11 13:01:06 2025 GMT
Subject: CN=873d618b4c2d9da2578d4ec23103e8c84c16e9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:04:df:fd:27:d3:ca:76:8e:75:b4:23:e9:
1e:80:3c:0d:9c:ea:72:4c:d8:c3:7c:bc:c5:f5:55:
bf:43:d1:6a:4b:97:d6:bc:cb:b5:09:ea:8b:63:4c:
36:f2:95:52:5a:3f:6e:2a:45:76:af:8a:f6:b3:03:
13:83:d7:0d:c5:e3:a2:d8:63:84:54:f8:9e:cf:f0:
9c:48:5c:18:b2:b3:b6:71:b7:8a:59:fa:21:16:90:
e7:70:21:dc:6c:72:74:f8:85:82:b1:8d:21:19:3b:
d8:b7:f0:47:1c:bc:ab:e3:b9:42:5f:e3:90:6c:fc:
3d:43:96:22:d7:66:7b:d4:70:e2:37:2c:8a:c4:bd:
c1:3b:d2:80:31:00:89:4f:da:04:6d:9c:34:33:97:
7e:46:7a:56:85:1f:65:b8:d3:3f:a0:cb:8a:f3:48:
2d:77:f5:b2:e7:86:3f:f5:db:ca:d4:ad:82:39:48:
73:60:ba:91:2d:25:57:13:a5:9f:fc:f3:a0:2d:24:
4c:a5:c2:95:0d:cc:20:81:55:ec:5d:ba:da:2a:65:
1e:41:0f:f9:fa:7b:8b:65:d7:59:ab:d7:5c:e8:18:
e8:c5:96:b5:0a:20:60:20:7f:93:4d:1d:89:a0:2d:
1e:b7:73:db:9d:e1:e5:eb:8b:4f:03:1f:e2:a4:3d:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3D:61:8B:4C:2D:9D:A2:57:8D:4E:C2:31:03:E8:C8:4C:16:E9:B3
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bb:39:8b:48:bb:4a:34:03:95:15:00:6f:8f:4e:da:ba:24:
a1:bd:a5:b4:87:ae:33:9a:9b:37:e9:95:2a:43:d2:a5:c4:7c:
2c:e5:07:d7:65:fb:0a:1f:ef:27:f6:a5:f6:6b:4d:fc:3f:11:
9a:1a:96:f2:09:2f:e1:71:d8:e3:d5:ad:ff:a8:f9:89:c8:7d:
e1:b6:bf:e3:5b:c5:f1:11:74:cf:27:23:2e:27:43:fc:6d:e8:
fd:3a:f3:44:28:6f:9d:30:eb:24:ec:98:56:18:ac:d2:17:f0:
c2:9c:71:ea:6b:32:60:db:2a:46:d2:ba:c5:ac:42:57:eb:e6:
11:d3:e2:86:ae:1a:8a:5d:91:b1:0e:66:da:da:db:92:97:09:
7f:74:ef:86:7e:df:b0:81:65:4f:57:87:9e:15:bb:2f:c4:ed:
44:a2:57:10:aa:ef:35:66:0c:29:af:10:3e:fc:29:8e:38:ba:
8e:48:ec:20:5c:14:fd:7c:d0:a5:a9:c1:e2:f4:fb:dd:bd:f3:
a6:8b:94:f6:b3:d0:75:e7:91:57:29:88:14:73:30:e0:97:fd:
b5:12:0b:c5:09:3f:42:8d:df:3e:f4:f4:e9:54:3e:6c:af:c2:
1d:07:44:80:c8:d4:29:79:43:83:99:5e:d8:10:e4:f1:ca:7b:
4f:c4:48:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEgffGZJ5wlg9BaEcwYenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz
Yzg4NWMwHhcNMjUwODEwMTMwMTA2WhcNMjUwODExMTMwMTA2WjAzMTEwLwYDVQQD
Eyg4NzNkNjE4YjRjMmQ5ZGEyNTc4ZDRlYzIzMTAzZThjODRjMTZlOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmgE3/0n08p2jnW0I+kegDwNnOpy
TNjDfLzF9VW/Q9FqS5fWvMu1CeqLY0w28pVSWj9uKkV2r4r2swMTg9cNxeOi2GOE
VPiez/CcSFwYsrO2cbeKWfohFpDncCHcbHJ0+IWCsY0hGTvYt/BHHLyr47lCX+OQ
bPw9Q5Yi12Z71HDiNyyKxL3BO9KAMQCJT9oEbZw0M5d+RnpWhR9luNM/oMuK80gt
d/Wy54Y/9dvK1K2COUhzYLqRLSVXE6Wf/POgLSRMpcKVDcwggVXsXbraKmUeQQ/5
+nuLZddZq9dc6BjoxZa1CiBgIH+TTR2JoC0et3PbneHl64tPAx/ipD2MqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIc9YYtMLZ2iV41OwjED6MhMFumzMB8GA1UdIwQY
MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt
ZDcxMmQ0NzM4MDQ2LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2
LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrs5i0i7
SjQDlRUAb49O2rokob2ltIeuM5qbN+mVKkPSpcR8LOUH12X7Ch/vJ/al9mtN/D8R
mhqW8gkv4XHY49Wt/6j5ich94ba/41vF8RF0zycjLidD/G3o/TrzRChvnTDrJOyY
Vhis0hfwwpxx6msyYNsqRtK6xaxCV+vmEdPihq4ail2RsQ5m2trbkpcJf3Tvhn7f
sIFlT1eHnhW7L8TtRKJXEKrvNWYMKa8QPvwpjji6jkjsIFwU/XzQpanB4vT73b3z
pouU9rPQdeeRVymIFHMw4Jf9tRILxQk/Qo3fPvT06VQ+bK/CHQdEgMjUKXlDg5le
2BDk8cp7T8RIIg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:53:55 2025 by rpki-client