Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: Jr0z49dNOdIzaaU8PnusYw8/4CrQBKhsNjIYGlknVqI=
Subject key identifier: B6:3C:27:E1:80:E2:65:7C:F3:2A:2A:D5:0E:EC:73:5B:96:24:F1:1B
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 01988D6B76502E32BBCDBA159622F9D08FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 06:01:26 +0000
Manifest this update: Sat 09 Aug 2025 06:01:26 +0000
Manifest next update: Sun 10 Aug 2025 06:01:26 +0000
Files and hashes: 1: vKmVyZKo1mVbWaxUYsU2k0zxDdU.roa (hash: gYV9eOLfrWkPtH6rFSHehM6qyeO4Oplr2KmQKju1kVs=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: 2vMTAFuRLXPC8snNnQaqicfYRuwFXe4H/tdVUl/hazc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:76:50:2e:32:bb:cd:ba:15:96:22:f9:d0:8f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: Aug 9 06:01:26 2025 GMT
Not After : Aug 10 06:01:26 2025 GMT
Subject: CN=b63c27e180e2657cf32a2ad50eec735b9624f11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:48:40:e5:52:aa:c2:f6:af:28:0c:71:3c:
c5:93:0d:77:47:70:f2:43:93:6d:0c:e6:db:9f:a6:
80:fe:3f:1c:89:78:c2:23:f6:4c:10:ff:c7:4c:cb:
62:5c:3a:cb:a5:e3:44:ee:78:dc:c3:ab:d4:b4:6f:
68:e2:d7:e7:aa:1e:9e:bd:0d:3e:6a:05:d4:50:c1:
b5:ef:b7:f4:97:6b:ee:ef:c2:ed:be:84:bb:2b:a2:
22:68:a9:42:24:b0:89:be:42:88:76:ee:9a:df:de:
64:56:45:2e:ae:e9:6b:55:24:d8:4d:50:4f:1d:b7:
62:fb:e0:e7:42:68:45:d6:0e:7b:df:03:d7:7f:c6:
cc:7a:2b:1a:5d:3a:83:68:ed:3e:05:61:c4:ac:87:
0b:f5:b8:00:39:eb:3c:1c:3d:21:62:02:40:db:3c:
d5:df:bf:49:cc:82:ac:86:14:50:2e:7f:80:68:90:
5a:86:aa:54:48:06:66:de:50:c2:ec:88:d0:64:69:
82:a0:b8:e5:d1:fb:78:9e:d1:f2:63:b9:51:34:df:
a9:a3:69:7d:c7:5e:21:d6:b9:9b:47:fb:12:a2:69:
d8:71:be:c6:09:cb:fd:33:33:6e:52:64:b1:2e:e2:
42:f1:a4:5d:ba:05:8e:be:eb:08:12:12:f5:3f:2f:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:27:E1:80:E2:65:7C:F3:2A:2A:D5:0E:EC:73:5B:96:24:F1:1B
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:17:d9:b9:82:da:a6:e9:52:14:cc:ab:29:1a:85:dc:52:71:
c1:52:92:00:cf:ac:7f:78:59:e1:0d:a3:9a:f9:f6:73:64:76:
43:e5:ef:71:6a:81:13:80:22:42:1e:ee:2d:bb:12:2e:70:98:
28:54:eb:5b:45:ce:50:58:30:c0:16:c5:a1:d7:fb:20:61:65:
00:f0:49:18:2a:40:8a:b3:60:98:70:98:6d:4d:e4:c4:85:98:
a5:34:4f:92:01:bd:99:45:87:0f:88:90:62:b7:d1:90:e3:aa:
c3:50:2c:61:37:23:fb:b5:70:3a:93:3b:e2:c2:6b:8f:a6:ac:
bb:79:95:4d:2e:77:45:ee:03:82:98:ee:90:4e:82:f0:90:6a:
bf:9a:9f:7f:52:0a:5f:8a:38:b6:17:da:47:a8:2b:74:c7:50:
c9:a9:de:a8:1a:57:89:16:c6:f1:de:1b:59:49:96:c2:41:0f:
11:9c:f2:95:14:65:2f:c9:b2:b0:d0:dc:05:a0:15:1c:fe:19:
10:af:89:0c:ee:47:32:4a:02:7c:d6:b6:20:d8:e1:ec:74:83:
03:0f:5c:44:29:01:46:33:cc:fa:0a:4d:7f:b3:08:06:6e:ab:
8c:8b:0d:89:ac:b9:31:97:2e:f2:51:87:1d:12:5a:7e:42:c8:
a1:93:6d:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNa3ZQLjK7zboVliL50I+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWQxNTE5NDI3OGEyOWFhZDU3Y2EzNzVmOTk1ODhiOTc2
ZWY4MjkwHhcNMjUwODA5MDYwMTI2WhcNMjUwODEwMDYwMTI2WjAzMTEwLwYDVQQD
EyhiNjNjMjdlMTgwZTI2NTdjZjMyYTJhZDUwZWVjNzM1Yjk2MjRmMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArphIQOVSqsL2rygMcTzFkw13R3Dy
Q5NtDObbn6aA/j8ciXjCI/ZMEP/HTMtiXDrLpeNE7njcw6vUtG9o4tfnqh6evQ0+
agXUUMG177f0l2vu78LtvoS7K6IiaKlCJLCJvkKIdu6a395kVkUurulrVSTYTVBP
Hbdi++DnQmhF1g573wPXf8bMeisaXTqDaO0+BWHErIcL9bgAOes8HD0hYgJA2zzV
379JzIKshhRQLn+AaJBahqpUSAZm3lDC7IjQZGmCoLjl0ft4ntHyY7lRNN+po2l9
x14h1rmbR/sSomnYcb7GCcv9MzNuUmSxLuJC8aRdugWOvusIEhL1Py8+eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY8J+GA4mV88yoq1Q7sc1uWJPEbMB8GA1UdIwQY
MBaAFMsdFRlCeKKarVfKN1+ZWIuXbvgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYjIzNjEtOGQzNC00ZmY0LWIzZDEt
MWZiMzg0MzVhZjc3LzEveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lYjIzNjEtOGQzNC00ZmY0LWIzZDEtMWZiMzg0MzVhZjc3
LzEveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRfZuYLa
pulSFMyrKRqF3FJxwVKSAM+sf3hZ4Q2jmvn2c2R2Q+XvcWqBE4AiQh7uLbsSLnCY
KFTrW0XOUFgwwBbFodf7IGFlAPBJGCpAirNgmHCYbU3kxIWYpTRPkgG9mUWHD4iQ
YrfRkOOqw1AsYTcj+7VwOpM74sJrj6asu3mVTS53Re4DgpjukE6C8JBqv5qff1IK
X4o4thfaR6grdMdQyaneqBpXiRbG8d4bWUmWwkEPEZzylRRlL8mysNDcBaAVHP4Z
EK+JDO5HMkoCfNa2INjh7HSDAw9cRCkBRjPM+gpNf7MIBm6rjIsNiay5MZcu8lGH
HRJafkLIoZNt3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:57 2025 by rpki-client