Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: aeUP5eGhvkmuPn8Q1Lxb9w49IUzuq4ePKag3YQE9hGE=
Subject key identifier: AA:F1:02:A2:B1:44:CF:74:A3:EF:6B:1E:80:22:C6:34:7C:26:DF:13
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 0198812FA511FEA16997CC32E559EA5AC290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 09B1
Signing time: Wed 06 Aug 2025 21:00:39 +0000
Manifest this update: Wed 06 Aug 2025 21:00:39 +0000
Manifest next update: Thu 07 Aug 2025 21:00:39 +0000
Files and hashes: 1: 9-Jf83x4olz8Hfew1s_UNi3V90k.roa (hash: IKeSXJFCHy882FUnOTCs1ATh13Yeq7epWPgTRQh0CZE=)
2: ECPnWkDMI2_nTmbCZhDYVWDmDx4.roa (hash: Lpl7m/eZhYRN7DnJNG4Sw0QJsO8hvbMn/hQYBg/ViaI=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: 2byQT0efnVHVulvdnaOd9072KJhg/MF+cSOHHiG7MKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:2f:a5:11:fe:a1:69:97:cc:32:e5:59:ea:5a:c2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Aug 6 21:00:39 2025 GMT
Not After : Aug 7 21:00:39 2025 GMT
Subject: CN=aaf102a2b144cf74a3ef6b1e8022c6347c26df13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:80:c6:e0:93:5e:47:10:f0:27:9c:c0:bd:
5d:e5:80:fe:99:5b:03:b0:f4:e7:38:51:17:fa:e4:
3e:31:58:b1:fa:7c:77:4f:47:fa:e0:5e:53:57:00:
20:fe:c7:51:5e:ed:46:b5:48:84:78:86:a6:b3:7a:
ac:68:87:db:7c:05:71:cb:58:43:f1:1a:52:d5:84:
62:61:2e:d1:9b:6c:21:de:e1:6a:51:5e:62:be:f8:
12:64:1c:ac:18:a7:7b:c5:9c:69:ad:be:23:c7:84:
29:16:07:a8:b8:90:b7:9c:d4:c0:77:6b:02:68:6d:
bb:cb:97:73:24:2f:a7:a2:a9:b6:17:c6:1a:7a:ba:
ed:55:ce:ed:ce:2c:b5:5d:f9:98:05:b6:54:80:54:
02:5b:61:53:a5:76:a3:ff:9d:dc:c4:3f:6d:e1:6e:
76:da:ee:a8:d9:fa:18:cf:7b:2d:93:22:b3:93:af:
a8:24:b7:22:89:7c:45:41:6b:e7:e7:c7:48:ed:60:
9e:80:e5:49:67:4a:39:1a:22:9a:5b:ae:b9:de:62:
20:0d:ac:34:bc:02:27:d5:8a:b0:02:26:74:47:ff:
36:e7:7a:e5:27:04:b5:07:82:1d:97:c4:da:ac:33:
cf:52:cf:91:17:84:40:b1:f0:37:20:18:96:07:fd:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F1:02:A2:B1:44:CF:74:A3:EF:6B:1E:80:22:C6:34:7C:26:DF:13
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4e:bb:a8:8c:f8:56:1b:8f:28:1b:04:1a:7f:72:a5:79:d5:
0b:c4:ba:53:c6:f9:dc:8b:8e:f7:4b:27:fb:9f:92:44:87:53:
b4:f4:77:07:21:d9:20:ae:b2:af:9d:91:3c:c0:ec:06:b3:9d:
2b:f3:f0:d9:ce:fe:b3:4a:8d:12:73:af:32:45:1b:5e:3e:c6:
17:4d:d3:98:5f:7d:39:73:70:31:68:48:18:44:a8:81:4d:c8:
c4:90:d8:30:86:68:92:07:81:79:73:90:6d:ee:f5:23:7b:b8:
cc:62:c3:59:6f:6f:db:ac:4e:1e:c2:f1:39:e5:89:35:14:a3:
b8:43:8e:4d:3b:c5:29:ae:81:94:31:92:fd:40:79:3c:2f:66:
c3:e1:b3:3f:73:49:6a:84:15:c0:5c:ee:36:db:ae:54:03:5b:
e6:7a:0b:e8:56:92:04:6d:bf:3b:ef:e7:ab:ff:0c:35:36:0f:
fe:ae:12:47:e0:31:3d:5f:79:d8:de:35:34:62:33:bf:17:f3:
07:24:b9:32:d6:8a:77:f1:e6:55:bf:e3:ed:ed:18:f6:44:3c:
dc:7e:13:d5:ab:93:84:73:00:97:bc:8b:ca:7b:2a:3a:78:6c:
98:a8:00:79:27:c9:51:85:1b:3b:a1:0c:80:39:3a:47:87:4e:
70:b7:48:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBL6UR/qFpl8wy5VnqWsKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTc0MTNlZDc0YTM3MTYxZThiYjNmNjE1NjI1NDFkZDI4
OTA1YmUwHhcNMjUwODA2MjEwMDM5WhcNMjUwODA3MjEwMDM5WjAzMTEwLwYDVQQD
EyhhYWYxMDJhMmIxNDRjZjc0YTNlZjZiMWU4MDIyYzYzNDdjMjZkZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoguAxuCTXkcQ8CecwL1d5YD+mVsD
sPTnOFEX+uQ+MVix+nx3T0f64F5TVwAg/sdRXu1GtUiEeIams3qsaIfbfAVxy1hD
8RpS1YRiYS7Rm2wh3uFqUV5ivvgSZBysGKd7xZxprb4jx4QpFgeouJC3nNTAd2sC
aG27y5dzJC+noqm2F8YaerrtVc7tziy1XfmYBbZUgFQCW2FTpXaj/53cxD9t4W52
2u6o2foYz3stkyKzk6+oJLciiXxFQWvn58dI7WCegOVJZ0o5GiKaW6653mIgDaw0
vAIn1YqwAiZ0R/8253rlJwS1B4Idl8TarDPPUs+RF4RAsfA3IBiWB/3HRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrxAqKxRM90o+9rHoAixjR8Jt8TMB8GA1UdIwQY
MBaAFMmXQT7XSjcWHouz9hViVB3SiQW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgt
ZTQ5ZDQ2MWMzMTU0LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgtZTQ5ZDQ2MWMzMTU0
LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ067qIz4
VhuPKBsEGn9ypXnVC8S6U8b53IuO90sn+5+SRIdTtPR3ByHZIK6yr52RPMDsBrOd
K/Pw2c7+s0qNEnOvMkUbXj7GF03TmF99OXNwMWhIGESogU3IxJDYMIZokgeBeXOQ
be71I3u4zGLDWW9v26xOHsLxOeWJNRSjuEOOTTvFKa6BlDGS/UB5PC9mw+GzP3NJ
aoQVwFzuNtuuVANb5noL6FaSBG2/O+/nq/8MNTYP/q4SR+AxPV952N41NGIzvxfz
ByS5MtaKd/HmVb/j7e0Y9kQ83H4T1auThHMAl7yLynsqOnhsmKgAeSfJUYUbO6EM
gDk6R4dOcLdIrg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:14:59 2025 by rpki-client