Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: bFLRIaIslqqvD+zUsQNpLYQd6dujYypxb3zCT4F2Y9M=
Subject key identifier: 34:F4:4B:87:AF:D4:9A:7A:BA:10:FA:02:F4:09:CF:BD:39:14:04:58
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 0198816754E426CD8CF99265002E3CCAB8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 22:01:29 +0000
Manifest this update: Wed 06 Aug 2025 22:01:29 +0000
Manifest next update: Thu 07 Aug 2025 22:01:29 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: ODN8Ve6kJlv62bgLn854KfeiQiNbj6aRTRqyK/SQ74c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:54:e4:26:cd:8c:f9:92:65:00:2e:3c:ca:b8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Aug 6 22:01:29 2025 GMT
Not After : Aug 7 22:01:29 2025 GMT
Subject: CN=34f44b87afd49a7aba10fa02f409cfbd39140458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:1e:19:f3:4a:45:3f:7e:35:f5:9e:ff:af:
0a:87:45:60:64:18:45:01:cf:3a:f5:cf:b7:e1:02:
b1:c0:77:bb:34:2b:3f:6d:44:a8:64:9d:c8:23:26:
a9:3a:52:3b:b1:9f:eb:56:31:fc:be:7b:f2:a5:72:
c9:2e:ac:fa:18:25:d0:41:fa:81:2f:73:a8:b2:01:
d2:52:7b:9a:31:72:d2:eb:6a:f0:6b:26:62:50:3d:
b8:1d:75:5d:11:6e:c6:0a:ea:53:63:a1:74:82:4f:
98:f9:d8:0b:7f:4b:4d:c1:9f:97:89:ca:32:28:90:
ad:52:45:13:7c:2b:67:36:42:9c:b9:cb:3d:df:7e:
5e:a5:f2:27:f1:b9:95:c6:ed:cd:26:c0:a8:29:71:
6b:88:73:40:94:91:3b:6b:f1:34:17:e7:60:cd:b5:
1f:88:2d:9a:59:4c:74:c7:66:c8:e8:8d:45:f5:a7:
df:d2:11:8f:28:2e:28:06:57:a7:3e:d3:0b:ca:09:
59:46:6e:bb:9b:98:2b:06:29:11:19:c3:0c:a8:08:
45:c4:f6:a7:90:4a:24:c0:d3:9a:2d:4d:a6:05:5b:
14:d4:7e:f5:36:3e:c7:74:bf:87:27:6a:d4:3f:1b:
0e:47:83:a3:04:9f:61:fc:36:49:c8:b0:f2:13:2b:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:4B:87:AF:D4:9A:7A:BA:10:FA:02:F4:09:CF:BD:39:14:04:58
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:19:46:b6:a8:f7:05:08:62:fa:2b:56:a8:18:8e:51:d5:
d5:fe:52:84:96:60:3c:dd:fa:7f:b6:71:ca:05:fb:d8:dd:6e:
fc:c6:70:c4:c5:e0:5c:f0:7a:76:e6:28:ec:a7:42:ad:8c:9d:
0a:b6:ad:f3:21:5a:df:00:58:46:e4:b6:eb:c2:58:24:9f:01:
82:85:8b:41:9b:dc:71:7b:e6:b8:88:cb:e6:db:cc:51:14:ed:
53:50:00:2e:c2:b3:48:ef:fd:e3:c7:a4:d9:ce:a0:77:94:45:
ad:ee:32:53:d9:a0:29:29:96:fb:b8:a1:f4:fe:8f:66:08:3a:
80:4e:dd:03:4d:b3:85:b1:0d:41:17:27:cc:88:2f:e7:39:e9:
40:eb:82:81:09:b7:88:02:ae:fa:fc:91:7e:1f:b7:5b:32:e8:
dd:9b:47:56:d8:9a:1b:ff:a8:92:4b:8c:6b:cb:81:4b:82:a4:
de:29:6f:d7:cb:c3:07:ea:b4:cf:56:1d:df:fd:97:28:61:ea:
a1:0b:11:8d:ac:39:92:5a:2e:73:e8:6b:eb:bf:92:54:dc:de:
de:31:1b:1b:ee:39:63:d4:24:15:48:17:78:d9:7b:75:fb:d6:
9a:f5:ef:c7:c7:4a:2c:b8:23:d5:24:7e:41:19:fb:2c:97:93:
7e:65:7b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ1TkJs2M+ZJlAC48yrjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZWQ0NDNmODVkMGVlYzY2MzY0Y2Q3NTM2ZjE4ODg4YWMx
Zjk5ZTMwHhcNMjUwODA2MjIwMTI5WhcNMjUwODA3MjIwMTI5WjAzMTEwLwYDVQQD
EygzNGY0NGI4N2FmZDQ5YTdhYmExMGZhMDJmNDA5Y2ZiZDM5MTQwNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoskeGfNKRT9+NfWe/68Kh0VgZBhF
Ac869c+34QKxwHe7NCs/bUSoZJ3IIyapOlI7sZ/rVjH8vnvypXLJLqz6GCXQQfqB
L3OosgHSUnuaMXLS62rwayZiUD24HXVdEW7GCupTY6F0gk+Y+dgLf0tNwZ+Xicoy
KJCtUkUTfCtnNkKcucs9335epfIn8bmVxu3NJsCoKXFriHNAlJE7a/E0F+dgzbUf
iC2aWUx0x2bI6I1F9aff0hGPKC4oBlenPtMLyglZRm67m5grBikRGcMMqAhFxPan
kEokwNOaLU2mBVsU1H71Nj7HdL+HJ2rUPxsOR4OjBJ9h/DZJyLDyEyt+FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT0S4ev1Jp6uhD6AvQJz705FARYMB8GA1UdIwQY
MBaAFMjtRD+F0O7GY2TNdTbxiIisH5njMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYt
NmQwNDMxMGUzNDJiLzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYtNmQwNDMxMGUzNDJi
LzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDkZRrao
9wUIYvorVqgYjlHV1f5ShJZgPN36f7ZxygX72N1u/MZwxMXgXPB6duYo7KdCrYyd
Crat8yFa3wBYRuS268JYJJ8BgoWLQZvccXvmuIjL5tvMURTtU1AALsKzSO/948ek
2c6gd5RFre4yU9mgKSmW+7ih9P6PZgg6gE7dA02zhbENQRcnzIgv5znpQOuCgQm3
iAKu+vyRfh+3WzLo3ZtHVtiaG/+okkuMa8uBS4Kk3ilv18vDB+q0z1Yd3/2XKGHq
oQsRjaw5klouc+hr67+SVNze3jEbG+45Y9QkFUgXeNl7dfvWmvXvx8dKLLgj1SR+
QRn7LJeTfmV79g==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:44 2025 by rpki-client