Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: n/qd2RNGBiUDzE5VP4QGkVTGfur05tNZyHZ0ODmEIzM=
Subject key identifier: DF:C7:80:88:44:99:42:4F:E3:8F:D9:69:54:6D:E7:09:69:5C:C3:B5
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 0198745037547D0DA60B8663E51DBDA59B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 85
Signing time: Mon 04 Aug 2025 09:01:10 +0000
Manifest this update: Mon 04 Aug 2025 09:01:10 +0000
Manifest next update: Tue 05 Aug 2025 09:01:10 +0000
Files and hashes: 1: XeHwlV4_nC5T8BptDxih7yIgLeg.roa (hash: SOsMIv7q0cLJ7sDVkddmO8lkJPy7j4qBPOmyU0Pco9g=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: jN/CzdtNJ9iRu9v94vOGtjppP9BJyU6MK/LGGdmiji0=)
3: _CP3e0WLgHreGwKUhpdfEeFss0U.roa (hash: QypuSrQ37amqxwFK8xiRJM3wGtIQUHMjSUwWELe4qw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:37:54:7d:0d:a6:0b:86:63:e5:1d:bd:a5:9b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Aug 4 09:01:10 2025 GMT
Not After : Aug 5 09:01:10 2025 GMT
Subject: CN=dfc780884499424fe38fd969546de709695cc3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:f2:55:d2:9c:3a:25:76:ba:12:6a:0c:67:
35:33:df:d0:02:a2:f7:26:1f:bd:85:3e:4a:ea:05:
20:75:ce:4e:ab:04:b2:45:b8:2a:f0:41:3f:b0:a6:
44:c3:df:2d:69:29:94:34:41:aa:e4:e6:5f:b4:9e:
d6:9e:df:3f:ef:49:85:5e:0e:81:c8:99:a9:17:87:
7d:6f:cf:c2:1e:23:fa:c3:6f:91:93:24:3c:bc:32:
26:5c:8f:a9:cf:26:08:e1:20:43:ba:09:84:c8:d4:
1f:f1:75:2f:0d:62:5c:31:78:2f:ae:d9:08:15:3d:
54:75:70:33:ff:dd:aa:5b:8f:7d:15:55:9b:73:9d:
51:d3:b6:86:7f:94:c2:81:5a:35:97:bc:51:99:58:
70:61:c1:6a:9d:11:2d:93:41:e7:40:7c:63:eb:cb:
8b:d0:95:98:ec:85:fa:bd:2c:04:ad:30:22:a4:19:
c3:7d:06:07:61:89:59:5c:01:c4:ce:8b:ba:cc:25:
9b:69:33:7d:e5:d7:52:6d:23:5a:02:e7:1c:08:01:
2d:b2:b8:97:03:73:98:39:8b:84:a3:b2:c2:81:eb:
c4:c3:18:fc:81:15:37:cb:f0:df:94:ea:b6:81:0e:
7a:5d:3e:13:9e:06:c2:58:df:51:38:30:01:09:ce:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:80:88:44:99:42:4F:E3:8F:D9:69:54:6D:E7:09:69:5C:C3:B5
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:75:8c:d9:c3:92:39:b5:e7:e7:71:3d:d3:f6:fd:62:af:bf:
5d:1a:54:84:bd:95:13:df:27:d7:60:39:3d:3e:a9:a2:02:12:
20:2c:3d:5f:5a:42:c8:18:d9:fc:93:42:fc:17:3f:5b:94:4a:
25:72:73:3f:f4:6d:61:de:53:1a:1c:cb:cb:bd:f2:4f:4a:e4:
8f:e8:4a:bf:ee:82:21:c2:3d:32:a6:03:13:65:7f:c3:a2:ac:
85:5d:2b:ce:35:43:86:54:70:4b:46:42:f8:51:e6:65:31:fa:
99:c3:6d:59:1d:f2:cc:b5:12:6c:0b:31:c0:ec:ea:69:3c:e0:
45:40:61:a4:be:f7:1a:50:26:9e:e8:fb:e8:94:53:d5:85:87:
c2:4a:4d:25:bb:cb:bc:be:0f:2c:6b:60:28:c6:6f:4f:ca:e5:
05:7c:cc:99:a1:b7:8e:f7:09:4b:f6:b8:56:e4:96:28:8f:4d:
6d:c7:04:97:ee:4e:12:8f:eb:15:c8:cb:e0:57:86:ca:ee:9b:
f5:e6:9b:a4:7c:b1:f1:a0:1d:f1:6d:28:4b:df:45:0e:e4:65:
17:7e:65:00:5d:45:36:b4:bf:7e:7c:b1:55:e7:f1:d2:96:a5:
43:c0:02:9f:cf:fa:08:32:d1:dc:b9:b8:dd:48:8d:b6:bc:56:
a6:da:19:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UDdUfQ2mC4Zj5R29pZtqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOWVhN2FiYWZjNTJjN2ZmYTIwYTdhNmFhZTRhZTJkMjYy
NTIwNzYwHhcNMjUwODA0MDkwMTEwWhcNMjUwODA1MDkwMTEwWjAzMTEwLwYDVQQD
EyhkZmM3ODA4ODQ0OTk0MjRmZTM4ZmQ5Njk1NDZkZTcwOTY5NWNjM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu/yVdKcOiV2uhJqDGc1M9/QAqL3
Jh+9hT5K6gUgdc5OqwSyRbgq8EE/sKZEw98taSmUNEGq5OZftJ7Wnt8/70mFXg6B
yJmpF4d9b8/CHiP6w2+RkyQ8vDImXI+pzyYI4SBDugmEyNQf8XUvDWJcMXgvrtkI
FT1UdXAz/92qW499FVWbc51R07aGf5TCgVo1l7xRmVhwYcFqnREtk0HnQHxj68uL
0JWY7IX6vSwErTAipBnDfQYHYYlZXAHEzou6zCWbaTN95ddSbSNaAuccCAEtsriX
A3OYOYuEo7LCgevEwxj8gRU3y/DflOq2gQ56XT4TngbCWN9RODABCc7yPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/HgIhEmUJP44/ZaVRt5wlpXMO1MB8GA1UdIwQY
MBaAFGCep6uvxSx/+iCnpqrkri0mJSB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEt
NDE3MGI4MmFkZjVkLzEvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEtNDE3MGI4MmFkZjVk
LzEvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3WM2cOS
ObXn53E90/b9Yq+/XRpUhL2VE98n12A5PT6pogISICw9X1pCyBjZ/JNC/Bc/W5RK
JXJzP/RtYd5TGhzLy73yT0rkj+hKv+6CIcI9MqYDE2V/w6KshV0rzjVDhlRwS0ZC
+FHmZTH6mcNtWR3yzLUSbAsxwOzqaTzgRUBhpL73GlAmnuj76JRT1YWHwkpNJbvL
vL4PLGtgKMZvT8rlBXzMmaG3jvcJS/a4VuSWKI9NbccEl+5OEo/rFcjL4FeGyu6b
9eabpHyx8aAd8W0oS99FDuRlF35lAF1FNrS/fnyxVefx0palQ8ACn8/6CDLR3Lm4
3UiNtrxWptoZ9w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:21 2025 by rpki-client