Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
File: YhuOSG7srmEk3hBJT9OROe1KN8s.mft (raw, json)
Hash identifier: NWpUO1f1nc5RuX5rcm8wLoxN5xN5GIet3XWGVJHlpXg=
Subject key identifier: 53:A6:97:B8:2A:F3:85:4F:78:9A:5E:3A:A6:B7:B0:01:DC:DA:13:11
Authority key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
Certificate issuer: /CN=621b8e486eecae6124de10494fd39139ed4a37cb
Certificate serial: 0198741923AC2A15063FFA3799BC51141889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 08:01:01 +0000
Manifest this update: Mon 04 Aug 2025 08:01:01 +0000
Manifest next update: Tue 05 Aug 2025 08:01:01 +0000
Files and hashes: 1: YhuOSG7srmEk3hBJT9OROe1KN8s.crl (hash: S8HINeqhV6SumOa3Apz4r+kx2d4AEMyFkef+AGHV+40=)
2: eKGme1_RE2Cve029wfoTPnjkx8E.roa (hash: 7e5ken09Fa398flHkK+xPpARVfWAIKVd53mQhTUCt6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:23:ac:2a:15:06:3f:fa:37:99:bc:51:14:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621b8e486eecae6124de10494fd39139ed4a37cb
Validity
Not Before: Aug 4 08:01:01 2025 GMT
Not After : Aug 5 08:01:01 2025 GMT
Subject: CN=53a697b82af3854f789a5e3aa6b7b001dcda1311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:d7:54:d8:f4:d7:52:39:4d:6c:bd:7b:cd:
c6:81:7c:0b:5c:56:f4:aa:e7:ac:93:ab:1b:a4:38:
03:6a:ff:d3:d1:0b:cb:22:4d:6a:22:24:60:cd:1d:
8a:24:91:95:4d:00:da:4b:b1:a8:b8:c9:c0:95:f2:
04:a9:5e:58:cb:8e:7d:c4:bc:30:47:24:e5:e3:7a:
6e:f9:9b:fb:8c:5f:85:1e:d9:d8:1f:b5:67:3f:bf:
59:1a:b7:e3:b1:37:f4:95:59:87:e2:26:e9:54:eb:
a2:a9:e8:dd:77:ac:c5:27:1f:60:73:6c:4b:f3:1a:
00:8c:43:42:cb:43:1c:91:8e:3b:25:73:d4:72:81:
f6:e1:c4:52:48:ce:f2:ba:74:c3:ae:88:30:8b:47:
dc:72:40:b3:df:ce:fa:24:34:a2:73:b4:4f:de:fb:
e1:6c:59:26:86:b7:11:df:a4:88:f6:65:f1:b8:d5:
a0:b4:f9:6e:4b:db:53:4b:2c:74:d3:9f:70:19:c9:
d9:f7:16:2d:c2:06:9a:9d:dd:ce:3f:c7:de:ea:b4:
0c:a1:e5:a6:5b:91:13:6b:d7:84:2b:08:94:b0:4f:
e4:fd:8d:e9:c6:2a:46:56:47:aa:07:7b:2a:47:b6:
a2:4f:1c:eb:9e:c5:71:4c:4f:0f:2d:70:11:49:26:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A6:97:B8:2A:F3:85:4F:78:9A:5E:3A:A6:B7:B0:01:DC:DA:13:11
X509v3 Authority Key Identifier:
keyid:62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:28:62:44:a1:83:3e:5e:ae:3f:d1:66:1d:6c:13:74:97:e4:
d1:6c:f0:16:5b:2b:d1:11:5b:dd:49:45:b7:52:ba:5d:49:d6:
1b:d7:65:83:22:a1:35:ad:78:88:37:01:7c:31:24:52:cd:ba:
62:25:f1:d4:2c:d2:da:e0:82:59:5c:5f:82:96:0e:ae:18:49:
79:9a:cc:a7:23:7b:3b:6b:85:64:b1:05:27:ed:a4:e2:eb:b9:
82:b3:a4:aa:cd:59:6f:4f:52:bf:69:d8:0a:9a:35:5a:bd:10:
e1:27:53:db:5f:cc:c1:54:ad:21:a2:b1:6d:cd:a5:11:bf:67:
76:3a:95:49:cb:34:08:69:ea:70:72:6b:a5:ff:0f:12:e3:4f:
12:59:5a:19:ab:db:8b:ae:d6:ce:fc:f8:74:21:bc:71:67:3f:
81:b0:19:dd:20:a8:97:db:8d:40:4b:3b:97:e1:c5:2b:5d:f9:
a9:02:d9:29:c4:09:75:96:f8:0f:77:ab:21:82:86:b4:35:ad:
14:8e:8b:b7:03:0a:b8:ac:13:ce:ec:ec:e5:c8:db:e2:17:d4:
cd:8f:ae:7b:f8:8f:4d:b1:26:4e:25:cd:e2:60:d1:cd:14:a4:
ed:6b:9f:d7:1b:da:9e:3d:ad:05:28:40:44:46:1f:75:22:54:
cd:8f:ec:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GSOsKhUGP/o3mbxRFBiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMWI4ZTQ4NmVlY2FlNjEyNGRlMTA0OTRmZDM5MTM5ZWQ0
YTM3Y2IwHhcNMjUwODA0MDgwMTAxWhcNMjUwODA1MDgwMTAxWjAzMTEwLwYDVQQD
Eyg1M2E2OTdiODJhZjM4NTRmNzg5YTVlM2FhNmI3YjAwMWRjZGExMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwPXVNj011I5TWy9e83GgXwLXFb0
quesk6sbpDgDav/T0QvLIk1qIiRgzR2KJJGVTQDaS7GouMnAlfIEqV5Yy459xLww
RyTl43pu+Zv7jF+FHtnYH7VnP79ZGrfjsTf0lVmH4ibpVOuiqejdd6zFJx9gc2xL
8xoAjENCy0MckY47JXPUcoH24cRSSM7yunTDrogwi0fcckCz3876JDSic7RP3vvh
bFkmhrcR36SI9mXxuNWgtPluS9tTSyx0059wGcnZ9xYtwgaand3OP8fe6rQMoeWm
W5ETa9eEKwiUsE/k/Y3pxipGVkeqB3sqR7aiTxzrnsVxTE8PLXARSSYJqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOml7gq84VPeJpeOqa3sAHc2hMRMB8GA1UdIwQY
MBaAFGIbjkhu7K5hJN4QSU/TkTntSjfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWh1T1NHN3NybUVrM2hCSlQ5T1JPZTFLTjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81NDIxM2QtYzNlZC00ZDY3LWI5YmYt
N2JhMTM2ZjUxZWY5LzEvWWh1T1NHN3NybUVrM2hCSlQ5T1JPZTFLTjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81NDIxM2QtYzNlZC00ZDY3LWI5YmYtN2JhMTM2ZjUxZWY5
LzEvWWh1T1NHN3NybUVrM2hCSlQ5T1JPZTFLTjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANihiRKGD
Pl6uP9FmHWwTdJfk0WzwFlsr0RFb3UlFt1K6XUnWG9dlgyKhNa14iDcBfDEkUs26
YiXx1CzS2uCCWVxfgpYOrhhJeZrMpyN7O2uFZLEFJ+2k4uu5grOkqs1Zb09Sv2nY
Cpo1Wr0Q4SdT21/MwVStIaKxbc2lEb9ndjqVScs0CGnqcHJrpf8PEuNPEllaGavb
i67Wzvz4dCG8cWc/gbAZ3SCol9uNQEs7l+HFK135qQLZKcQJdZb4D3erIYKGtDWt
FI6LtwMKuKwTzuzs5cjb4hfUzY+ue/iPTbEmTiXN4mDRzRSk7Wuf1xvanj2tBShA
REYfdSJUzY/sgQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:17 2025 by rpki-client