Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: WpXjfqeerw9c/ALQzuAOBkXni/hs3ystOjK7dYvPeAA=
Subject key identifier: A8:A4:CE:54:47:D8:D1:65:0E:1E:FC:CE:5F:EB:3A:76:A6:A0:43:2A
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 0198A04EC1E8877006034F5CAB42863CD83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0BB2
Signing time: Tue 12 Aug 2025 22:02:52 +0000
Manifest this update: Tue 12 Aug 2025 22:02:52 +0000
Manifest next update: Wed 13 Aug 2025 22:02:52 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: 8h/0B8pTGKWxYz4c08Pp8XUbE+u01iC3s+R0o6ax0pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:c1:e8:87:70:06:03:4f:5c:ab:42:86:3c:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Aug 12 22:02:52 2025 GMT
Not After : Aug 13 22:02:52 2025 GMT
Subject: CN=a8a4ce5447d8d1650e1efcce5feb3a76a6a0432a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:04:6d:ea:da:e3:d3:83:8a:eb:3c:53:4b:
6d:9f:81:77:da:64:dd:d9:0a:6a:b3:a4:33:79:a3:
60:25:53:9c:c5:b9:67:55:0e:e9:af:d8:86:45:a8:
37:7e:2e:40:42:0c:fc:da:73:16:66:71:bb:6a:c1:
ab:82:3a:26:f6:f8:2e:d8:e3:df:37:85:4d:29:62:
fe:8d:39:14:8a:8e:3b:e0:04:2f:a9:43:7e:74:8f:
d2:52:c0:dc:d9:ad:fd:2f:81:f8:4f:6c:ea:a9:1a:
fa:64:f0:ae:22:83:4f:a1:65:be:85:ce:e1:9b:80:
0b:5e:d9:bb:8f:e4:e8:a2:ed:48:98:6b:b0:05:cb:
28:b3:23:a0:db:67:1a:d4:9a:70:67:57:74:09:98:
7d:27:e2:47:31:a1:65:1b:30:c5:b3:2b:d2:7b:2f:
b4:ff:88:21:3b:0e:24:99:71:b8:16:f2:60:bb:a6:
8a:35:a8:60:6e:e3:b6:29:03:37:6d:6b:28:58:6e:
29:33:2d:9a:ba:32:05:bb:7b:67:c8:9f:49:21:98:
a4:67:d1:f4:9f:02:a7:93:10:77:39:a4:3a:37:76:
05:38:00:4d:3d:58:6a:a2:05:c2:03:39:fd:7d:fa:
93:0b:9f:89:7b:1a:cb:d1:c3:11:17:e2:50:cb:3e:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A4:CE:54:47:D8:D1:65:0E:1E:FC:CE:5F:EB:3A:76:A6:A0:43:2A
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6d:57:cc:56:4a:51:26:82:04:02:19:ac:3b:72:73:c1:5a:
23:c0:43:f0:41:99:34:f6:60:e1:77:bd:4d:bb:34:b2:da:fe:
6d:40:52:a9:d4:4e:41:bb:1a:7a:e0:e3:b9:31:90:74:42:1c:
0d:35:b9:24:a5:a4:ee:32:64:6b:01:8e:c7:bc:a3:c9:9a:cc:
5e:59:26:14:0c:2a:30:dd:0d:d7:67:8b:71:94:84:ea:9c:39:
20:fa:04:44:3b:a4:5c:fa:ae:95:c7:4d:b6:2d:ae:06:2d:77:
68:30:ab:7c:87:b3:b8:f4:3f:0d:51:28:fb:8c:a2:81:59:39:
d9:d8:fc:c2:eb:be:c3:89:fb:50:8b:7c:66:d6:41:a4:70:d9:
1d:df:fe:4d:71:31:26:75:2c:f6:cf:e8:ef:b0:f4:b8:38:b8:
cc:cd:f0:98:a7:a0:86:4f:2a:89:ca:3c:0f:07:f7:4b:ec:45:
52:35:72:b4:17:10:a9:28:09:2c:8c:b2:3b:06:f1:0a:0c:fd:
5d:a7:ac:a2:a2:f9:f6:93:e2:e9:27:e5:b5:96:b6:6c:d2:fd:
47:04:f6:34:34:31:6b:59:da:94:81:64:17:76:0a:15:ba:da:
e3:9a:33:86:c2:d5:27:fd:ba:81:c1:2f:26:30:70:57:43:3a:
e9:1c:e5:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTsHoh3AGA09cq0KGPNg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODIyMjYzYTg3MDdjNzZmM2RiM2I2YmU3MTIyMjY5Yzgy
N2FlNTUwHhcNMjUwODEyMjIwMjUyWhcNMjUwODEzMjIwMjUyWjAzMTEwLwYDVQQD
EyhhOGE0Y2U1NDQ3ZDhkMTY1MGUxZWZjY2U1ZmViM2E3NmE2YTA0MzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2EEbera49ODius8U0ttn4F32mTd
2Qpqs6QzeaNgJVOcxblnVQ7pr9iGRag3fi5AQgz82nMWZnG7asGrgjom9vgu2OPf
N4VNKWL+jTkUio474AQvqUN+dI/SUsDc2a39L4H4T2zqqRr6ZPCuIoNPoWW+hc7h
m4ALXtm7j+Toou1ImGuwBcsosyOg22ca1JpwZ1d0CZh9J+JHMaFlGzDFsyvSey+0
/4ghOw4kmXG4FvJgu6aKNahgbuO2KQM3bWsoWG4pMy2aujIFu3tnyJ9JIZikZ9H0
nwKnkxB3OaQ6N3YFOABNPVhqogXCAzn9ffqTC5+JexrL0cMRF+JQyz40UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKikzlRH2NFlDh78zl/rOnamoEMqMB8GA1UdIwQY
MBaAFNGCImOocHx289s7a+cSImnIJ65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjIt
NGE3OTA0MTA2ZTNiLzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjItNGE3OTA0MTA2ZTNi
LzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPm1XzFZK
USaCBAIZrDtyc8FaI8BD8EGZNPZg4Xe9Tbs0str+bUBSqdROQbsaeuDjuTGQdEIc
DTW5JKWk7jJkawGOx7yjyZrMXlkmFAwqMN0N12eLcZSE6pw5IPoERDukXPqulcdN
ti2uBi13aDCrfIezuPQ/DVEo+4yigVk52dj8wuu+w4n7UIt8ZtZBpHDZHd/+TXEx
JnUs9s/o77D0uDi4zM3wmKeghk8qico8Dwf3S+xFUjVytBcQqSgJLIyyOwbxCgz9
XaesoqL59pPi6SfltZa2bNL9RwT2NDQxa1nalIFkF3YKFbra45ozhsLVJ/26gcEv
JjBwV0M66RzlJA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:32 2025 by rpki-client