Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: +IuNtzafOGd5tGs97VkhMMAVD1us7QFtzrANb1h3pqs=
Subject key identifier: 8E:4C:6E:D3:A7:C4:A9:02:4E:87:F5:66:74:44:4E:32:70:40:00:10
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 0198752BF4C53415C73C06D7961F41E749FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 107E
Signing time: Mon 04 Aug 2025 13:01:11 +0000
Manifest this update: Mon 04 Aug 2025 13:01:11 +0000
Manifest next update: Tue 05 Aug 2025 13:01:11 +0000
Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: p4k8dIT4kpxdGAZNfv81tAbTbzM4CawyHw4iMZnraCw=)
2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=)
3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:f4:c5:34:15:c7:3c:06:d7:96:1f:41:e7:49:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Aug 4 13:01:11 2025 GMT
Not After : Aug 5 13:01:11 2025 GMT
Subject: CN=8e4c6ed3a7c4a9024e87f56674444e3270400010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:b3:7f:3c:73:cc:c2:9b:8f:54:23:0d:52:
ed:8a:a3:07:7d:b5:77:09:dd:d6:c1:12:ae:d0:4e:
40:fe:ef:41:b3:37:c3:49:11:eb:d8:c9:80:f0:9a:
fb:2e:ad:12:3a:5e:d7:2f:7d:7b:9f:83:d6:fe:93:
70:c1:73:08:dd:85:b8:4a:5c:b4:d4:63:e4:04:02:
bf:27:f9:ab:2b:70:b1:39:1e:5f:7a:13:e9:4a:7a:
79:65:c4:2b:7b:a1:f2:af:8c:13:7b:95:42:f4:a9:
68:87:e6:a7:6f:b3:96:01:46:4d:41:cb:12:eb:5e:
97:06:28:79:78:8f:10:4d:79:52:fa:b4:72:4e:20:
0a:2e:79:cb:d9:f2:ae:0b:dc:a6:d1:32:a2:ed:38:
52:1d:07:03:06:db:46:3e:f9:e8:4d:5d:e4:fd:7d:
e0:40:54:11:7f:09:58:c9:97:c3:1b:06:a3:74:15:
4e:7e:4f:3b:0c:a6:8f:61:5a:b6:25:d9:e6:e4:fc:
be:04:1b:a1:1c:6b:9c:1d:31:0f:0b:6b:01:9f:15:
b4:d9:02:4b:a3:c5:21:d1:06:93:bf:57:79:65:10:
73:3e:f2:fb:61:68:93:cd:81:a4:8a:ef:5c:da:ba:
ca:43:3f:3a:dc:c4:50:e0:da:8c:e1:b3:30:80:e1:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4C:6E:D3:A7:C4:A9:02:4E:87:F5:66:74:44:4E:32:70:40:00:10
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:43:16:47:87:51:5e:ba:5c:a7:1e:9b:d4:1a:c0:ec:ca:5b:
55:22:2c:90:ac:f7:e9:a5:c8:a2:d5:cd:5e:dd:6f:ef:46:73:
f3:3d:3a:49:87:7f:4c:01:b7:18:30:fc:fe:4b:4e:9e:fe:f9:
94:f0:b3:7e:41:c6:ef:e6:8e:3a:3b:65:0a:32:0b:d7:42:3b:
18:7c:f6:f1:13:04:07:12:e7:2b:92:27:8d:f7:f2:f0:a4:bc:
f9:c7:5e:d8:51:7f:8e:23:d7:1f:f1:13:48:00:5f:18:a7:e8:
98:83:89:bd:7b:66:97:62:bb:67:6e:a0:30:0a:7d:36:33:26:
0e:b4:2b:bf:f4:60:59:79:38:11:cf:5b:45:3a:77:b7:26:03:
ea:6e:37:dc:e0:ea:d0:df:00:7e:53:41:ba:83:83:8e:3b:17:
e2:a3:0e:c4:4c:63:1c:64:20:e9:da:72:2c:cd:58:e0:21:35:
68:a1:86:d9:0f:41:24:49:15:93:76:a3:9d:e7:20:52:24:02:
b3:39:ee:dc:40:e0:92:30:61:5b:05:7f:d6:0c:8b:71:b3:f6:
38:5a:6b:ce:c7:f7:50:81:7e:ed:45:13:82:55:77:97:13:d8:
9c:e9:27:57:1d:0d:7c:a5:52:63:4d:fe:ba:21:f5:c2:ef:62:
f7:49:e3:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K/TFNBXHPAbXlh9B50n6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTVlYzlkZjRkZDAzYjlmNTAwYTZhMDk0N2QxNDdiNmVk
MjE2NjYwHhcNMjUwODA0MTMwMTExWhcNMjUwODA1MTMwMTExWjAzMTEwLwYDVQQD
Eyg4ZTRjNmVkM2E3YzRhOTAyNGU4N2Y1NjY3NDQ0NGUzMjcwNDAwMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweyzfzxzzMKbj1QjDVLtiqMHfbV3
Cd3WwRKu0E5A/u9BszfDSRHr2MmA8Jr7Lq0SOl7XL317n4PW/pNwwXMI3YW4Sly0
1GPkBAK/J/mrK3CxOR5fehPpSnp5ZcQre6Hyr4wTe5VC9Kloh+anb7OWAUZNQcsS
616XBih5eI8QTXlS+rRyTiAKLnnL2fKuC9ym0TKi7ThSHQcDBttGPvnoTV3k/X3g
QFQRfwlYyZfDGwajdBVOfk87DKaPYVq2Jdnm5Py+BBuhHGucHTEPC2sBnxW02QJL
o8Uh0QaTv1d5ZRBzPvL7YWiTzYGkiu9c2rrKQz863MRQ4NqM4bMwgOHZUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5MbtOnxKkCTof1ZnRETjJwQAAQMB8GA1UdIwQY
MBaAFGLl7J303QO59QCmoJR9FHtu0hZmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQt
YTgxNTQ0ZWE1YjY3LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQtYTgxNTQ0ZWE1YjY3
LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUMWR4dR
Xrpcpx6b1BrA7MpbVSIskKz36aXIotXNXt1v70Zz8z06SYd/TAG3GDD8/ktOnv75
lPCzfkHG7+aOOjtlCjIL10I7GHz28RMEBxLnK5Injffy8KS8+cde2FF/jiPXH/ET
SABfGKfomIOJvXtml2K7Z26gMAp9NjMmDrQrv/RgWXk4Ec9bRTp3tyYD6m433ODq
0N8AflNBuoODjjsX4qMOxExjHGQg6dpyLM1Y4CE1aKGG2Q9BJEkVk3ajnecgUiQC
sznu3EDgkjBhWwV/1gyLcbP2OFprzsf3UIF+7UUTglV3lxPYnOknVx0NfKVSY03+
uiH1wu9i90njaA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:22 2025 by rpki-client