Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: etvoZmcSe7I45Qlf8ypbcqIZaGp4EFq3NQscG7JSIOU=
Subject key identifier: B3:02:AD:BA:EA:D0:98:C5:23:5E:4D:93:CC:30:6D:84:58:65:EC:AC
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 01988AA0F28DBEE5EA3D46CADEC900736A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 1371
Signing time: Fri 08 Aug 2025 17:01:00 +0000
Manifest this update: Fri 08 Aug 2025 17:01:00 +0000
Manifest next update: Sat 09 Aug 2025 17:01:00 +0000
Files and hashes: 1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=)
2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: H1BDn8iRcMQNx4dGdr+hFk1Oz6w+d2zD7gMjdCSn/ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:f2:8d:be:e5:ea:3d:46:ca:de:c9:00:73:6a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Aug 8 17:01:00 2025 GMT
Not After : Aug 9 17:01:00 2025 GMT
Subject: CN=b302adbaead098c5235e4d93cc306d845865ecac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:cd:c0:27:e6:dc:6d:6b:18:a4:e0:d3:e0:
c5:22:2a:03:2a:cb:5c:da:de:70:77:50:cf:fa:da:
73:11:8d:33:6b:06:42:95:d4:bf:61:d7:ba:8f:5e:
10:72:99:97:f3:d4:f4:8a:10:1c:9e:1d:39:b8:a9:
37:d6:b3:e2:7b:11:4d:91:b8:1e:32:aa:eb:d5:50:
50:42:1b:a8:74:75:0e:2c:ac:30:02:82:a1:cb:ed:
a1:ea:5c:cc:63:65:f8:57:a0:82:3b:33:59:7d:06:
2b:7e:4d:2b:3b:c8:df:8c:2b:4b:c6:7c:cb:4b:51:
92:6c:aa:17:97:86:35:66:75:de:8e:20:4c:53:11:
ba:e4:bd:33:91:3a:a0:5e:e3:c1:e7:8e:7f:31:f4:
21:76:d7:77:8f:64:f2:90:7e:f6:55:30:c6:c0:20:
56:67:cf:da:6f:d9:47:25:6f:dd:9e:9d:58:c2:ad:
bd:72:24:67:a3:b9:99:a9:91:1a:ff:e7:49:47:ea:
c6:c2:78:51:ac:1e:24:0f:d8:17:f3:0a:4a:32:36:
ab:25:13:fe:89:e0:34:20:e1:90:a4:43:58:e7:4b:
d1:0c:03:2e:33:86:9f:58:bf:96:39:d7:73:fa:6a:
96:d1:c1:80:e5:3c:fd:d6:e4:bf:4c:16:34:35:60:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:AD:BA:EA:D0:98:C5:23:5E:4D:93:CC:30:6D:84:58:65:EC:AC
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d0:68:59:26:5b:67:5a:b3:cc:36:d6:47:bb:56:1e:cd:d1:
dc:08:4e:21:a2:e8:06:9f:62:ee:68:40:9e:2b:63:c6:61:d1:
bc:1e:1b:60:64:f8:f0:ed:03:3c:33:25:8d:bd:e3:bc:30:89:
46:eb:9d:29:bc:d4:ef:cb:c6:91:95:af:f2:3b:e9:f5:61:57:
6d:3a:ba:1e:0c:0e:60:40:9a:f9:bc:ec:2b:eb:0f:10:06:1c:
43:95:c1:80:aa:7d:a6:fd:6c:09:be:05:40:4c:d4:a8:c4:95:
ac:56:0d:bb:2a:b0:c4:cd:84:ad:c7:30:ee:2d:e2:38:7c:ac:
86:df:ce:f9:4f:30:c5:1d:20:82:48:c4:b0:7a:c3:03:1b:0c:
00:23:6d:05:4a:7d:d6:5d:26:f8:33:02:8d:71:92:6d:26:31:
82:af:24:17:b2:a6:9c:a9:cb:34:d2:ed:90:68:47:25:e5:c5:
f5:45:b7:5a:d4:db:85:3f:a2:da:2c:bd:ad:55:cf:e3:f4:35:
8d:3e:de:f3:d9:17:c2:41:f6:5e:60:8a:15:df:3b:ec:33:11:
11:0e:8b:5f:0d:93:aa:87:3d:0b:41:5f:26:7c:b0:98:17:3d:
db:35:bd:cb:6d:92:24:cb:27:4d:9e:2a:e2:8f:97:0f:37:bf:
cd:fd:80:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoPKNvuXqPUbK3skAc2pPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZDViNDg4NDgxMDdiODZlMTQyZDFjMDZjMjlkNGI3MGU3
Mzk0ZDMwHhcNMjUwODA4MTcwMTAwWhcNMjUwODA5MTcwMTAwWjAzMTEwLwYDVQQD
EyhiMzAyYWRiYWVhZDA5OGM1MjM1ZTRkOTNjYzMwNmQ4NDU4NjVlY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nvNwCfm3G1rGKTg0+DFIioDKstc
2t5wd1DP+tpzEY0zawZCldS/Yde6j14QcpmX89T0ihAcnh05uKk31rPiexFNkbge
Mqrr1VBQQhuodHUOLKwwAoKhy+2h6lzMY2X4V6CCOzNZfQYrfk0rO8jfjCtLxnzL
S1GSbKoXl4Y1ZnXejiBMUxG65L0zkTqgXuPB545/MfQhdtd3j2TykH72VTDGwCBW
Z8/ab9lHJW/dnp1Ywq29ciRno7mZqZEa/+dJR+rGwnhRrB4kD9gX8wpKMjarJRP+
ieA0IOGQpENY50vRDAMuM4afWL+WOddz+mqW0cGA5Tz91uS/TBY0NWBiawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMCrbrq0JjFI15Nk8wwbYRYZeysMB8GA1UdIwQY
MBaAFGPVtIhIEHuG4ULRwGwp1LcOc5TTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMmNkYzItNDBhOC00NzgxLTg2MGIt
MjM4OGM5MDZiYzYyLzEvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wMmNkYzItNDBhOC00NzgxLTg2MGItMjM4OGM5MDZiYzYy
LzEvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdBoWSZb
Z1qzzDbWR7tWHs3R3AhOIaLoBp9i7mhAnitjxmHRvB4bYGT48O0DPDMljb3jvDCJ
RuudKbzU78vGkZWv8jvp9WFXbTq6HgwOYECa+bzsK+sPEAYcQ5XBgKp9pv1sCb4F
QEzUqMSVrFYNuyqwxM2Erccw7i3iOHysht/O+U8wxR0ggkjEsHrDAxsMACNtBUp9
1l0m+DMCjXGSbSYxgq8kF7KmnKnLNNLtkGhHJeXF9UW3WtTbhT+i2iy9rVXP4/Q1
jT7e89kXwkH2XmCKFd877DMREQ6LXw2Tqoc9C0FfJnywmBc92zW9y22SJMsnTZ4q
4o+XDze/zf2Ayg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:50 2025 by rpki-client