Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: R2dv2SH2QzEDve3+dMKd6/0pY/1D5I+LtLomBX+8XYA=
Subject key identifier: 10:99:27:35:2C:5A:27:FE:50:8A:FE:6D:BE:76:79:D4:1C:D1:5D:B0
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 0198A0F177CE7DC45FF2F5D0F91F1B58DE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 073B
Signing time: Wed 13 Aug 2025 01:00:36 +0000
Manifest this update: Wed 13 Aug 2025 01:00:36 +0000
Manifest next update: Thu 14 Aug 2025 01:00:36 +0000
Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: FMklNJYEMmffSMKC6/ggl0NiKJJA+Ny8Ajgf7Qwv6sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:77:ce:7d:c4:5f:f2:f5:d0:f9:1f:1b:58:de:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Aug 13 01:00:36 2025 GMT
Not After : Aug 14 01:00:36 2025 GMT
Subject: CN=109927352c5a27fe508afe6dbe7679d41cd15db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:62:52:6e:70:80:c8:44:3f:d0:2d:8b:21:
fa:63:be:1b:7c:c7:ad:33:d0:58:42:1a:bc:37:f5:
ea:a1:f1:c1:47:63:06:64:31:c2:2f:d1:f2:d6:20:
fc:9a:86:5a:9e:3a:01:ab:0e:11:22:28:82:a9:83:
30:af:15:62:31:ff:c0:38:22:da:dc:65:33:6a:5f:
4d:42:9c:67:ab:e7:cb:17:5b:6c:da:19:ee:d8:d8:
0e:25:70:d2:45:9b:25:58:49:2a:13:2c:a8:16:ba:
77:99:97:2b:74:67:7e:e9:78:5b:84:ac:bc:84:ff:
e7:de:d7:e5:e8:b8:f2:49:95:e7:73:d9:66:99:19:
52:e8:0f:c5:15:cf:06:a7:f0:ad:53:37:69:1c:23:
23:96:36:09:4a:73:43:74:2f:d9:0e:6c:38:14:fc:
c3:b7:76:b1:be:9f:9b:ad:fc:6c:84:1b:70:85:04:
67:1e:62:56:34:85:2a:04:07:e3:eb:6b:1d:0b:e4:
2e:fa:63:d9:1b:a5:86:69:44:6e:fc:d1:9e:c5:19:
17:1a:bc:df:25:d4:1c:da:cc:75:67:7b:da:9f:30:
04:6e:f6:e4:a3:a4:f2:14:8b:f5:31:65:51:51:ad:
0d:a1:30:31:1b:52:a4:d2:2b:6a:a0:ef:0b:25:fa:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:99:27:35:2C:5A:27:FE:50:8A:FE:6D:BE:76:79:D4:1C:D1:5D:B0
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d8:a1:18:8a:8f:21:3c:e2:70:8b:20:6a:68:a1:aa:80:05:
93:bd:50:4e:ee:69:ba:e5:54:9f:73:5a:af:8c:ff:ee:35:01:
cf:29:03:86:7e:b3:14:3f:ed:c2:6e:d6:4b:91:25:ef:51:d5:
8a:d1:76:5b:e1:c8:b4:0e:6e:17:f6:3d:cf:19:e5:3a:df:fb:
0a:ff:b4:43:c3:62:8a:e3:e6:d5:db:09:5a:c6:b9:9b:f5:b1:
0b:16:2e:f5:29:56:0e:79:cf:35:ad:f3:98:c7:7a:32:e3:49:
e0:d5:ce:27:07:18:5a:51:e3:5c:02:b0:b5:61:f4:00:1c:a4:
72:e0:19:b4:ca:fc:ef:72:10:c8:91:c4:ed:98:90:66:78:13:
6c:89:40:aa:b4:fc:21:68:7d:32:ef:2b:eb:a2:ba:bb:dd:43:
19:cf:3a:f8:54:d1:61:e8:f6:9a:e9:f5:27:f7:2f:95:a7:0e:
92:77:81:10:2b:13:5a:df:36:0a:38:22:2f:26:f7:6e:20:78:
e9:40:9d:77:58:ff:2c:2d:44:df:98:d5:02:b1:fa:87:ab:56:
60:8d:c2:3e:1a:53:f0:46:cc:1f:38:45:1f:bc:a2:dd:41:36:
18:9d:4f:af:52:ed:7f:61:ef:1f:85:f0:2e:b6:c5:a3:43:65:
76:c3:aa:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8XfOfcRf8vXQ+R8bWN4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTYwZDRhZTcwZjZmNTU5OTg0Yzc2YjUyMWNlMzc3Y2Mx
ZWU3MjEwHhcNMjUwODEzMDEwMDM2WhcNMjUwODE0MDEwMDM2WjAzMTEwLwYDVQQD
EygxMDk5MjczNTJjNWEyN2ZlNTA4YWZlNmRiZTc2NzlkNDFjZDE1ZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz5iUm5wgMhEP9AtiyH6Y74bfMet
M9BYQhq8N/XqofHBR2MGZDHCL9Hy1iD8moZanjoBqw4RIiiCqYMwrxViMf/AOCLa
3GUzal9NQpxnq+fLF1ts2hnu2NgOJXDSRZslWEkqEyyoFrp3mZcrdGd+6XhbhKy8
hP/n3tfl6LjySZXnc9lmmRlS6A/FFc8Gp/CtUzdpHCMjljYJSnNDdC/ZDmw4FPzD
t3axvp+brfxshBtwhQRnHmJWNIUqBAfj62sdC+Qu+mPZG6WGaURu/NGexRkXGrzf
JdQc2sx1Z3vanzAEbvbko6TyFIv1MWVRUa0NoTAxG1Kk0itqoO8LJfqNkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCZJzUsWif+UIr+bb52edQc0V2wMB8GA1UdIwQY
MBaAFJvmDUrnD29VmYTHa1Ic43fMHuchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQt
Y2M4ODU4NTdmYWYyLzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQtY2M4ODU4NTdmYWYy
LzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9ihGIqP
ITzicIsgamihqoAFk71QTu5puuVUn3Nar4z/7jUBzykDhn6zFD/twm7WS5El71HV
itF2W+HItA5uF/Y9zxnlOt/7Cv+0Q8NiiuPm1dsJWsa5m/WxCxYu9SlWDnnPNa3z
mMd6MuNJ4NXOJwcYWlHjXAKwtWH0ABykcuAZtMr873IQyJHE7ZiQZngTbIlAqrT8
IWh9Mu8r66K6u91DGc86+FTRYej2mun1J/cvlacOkneBECsTWt82CjgiLyb3biB4
6UCdd1j/LC1E35jVArH6h6tWYI3CPhpT8EbMHzhFH7yi3UE2GJ1Pr1Ltf2HvH4Xw
LrbFo0NldsOqEw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:04 2025 by rpki-client