Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: /qAjaUJB42spuVefzWxkwgHI4hz4irnykqLQUgv2oyo=
Subject key identifier: ED:94:64:8A:BC:2F:21:A6:2B:5A:37:86:DA:F0:CB:F5:FA:A3:4D:3C
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 019875D0BD43FC6ACC17FF1CDB2FA4FBF40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 16:01:10 +0000
Manifest this update: Mon 04 Aug 2025 16:01:10 +0000
Manifest next update: Tue 05 Aug 2025 16:01:10 +0000
Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: kZNvFm6jP1PPPqWcNCKPQo/e77EsR5TYzXF5w1d98YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:bd:43:fc:6a:cc:17:ff:1c:db:2f:a4:fb:f4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Aug 4 16:01:10 2025 GMT
Not After : Aug 5 16:01:10 2025 GMT
Subject: CN=ed94648abc2f21a62b5a3786daf0cbf5faa34d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:80:6d:e5:88:c9:9c:11:54:6d:45:3f:3b:
f5:57:0d:52:b4:da:bd:9a:0f:b8:cd:14:34:55:a7:
37:9c:77:86:e8:e5:ac:0e:9e:1f:06:93:cd:49:5e:
ac:90:ea:f7:45:5b:92:58:88:b7:32:e4:1e:6c:41:
1a:64:27:fb:97:44:fb:48:d0:91:f5:ec:ea:b7:42:
a2:9f:ff:71:8f:b4:f0:96:b4:9c:02:73:f6:76:a5:
b0:c7:66:d3:09:69:cf:5f:9e:f6:2a:54:f4:c9:bf:
3a:90:54:f4:a7:a9:8a:01:1a:98:ba:5b:ba:a1:3a:
73:ef:fd:57:a1:05:96:dc:ad:4c:09:0b:c6:65:1e:
b1:b8:88:6a:fb:c4:ee:55:e5:28:af:f8:30:80:90:
b9:6f:d4:78:bb:72:33:0c:79:0d:ba:06:47:ed:f9:
ff:19:78:54:be:37:79:45:e0:c4:2d:0c:50:fc:8d:
50:88:07:15:51:c1:90:08:75:aa:4e:00:e6:ec:7e:
e5:17:d4:f3:77:5e:c1:0a:6a:fe:e4:8c:55:50:3e:
a8:6b:53:8f:cd:ed:c3:d3:b4:ff:d7:ca:78:20:2b:
6b:83:e5:39:b6:00:32:a2:03:ff:95:3f:9f:d8:fd:
4e:75:cc:e4:0c:6c:92:77:cd:d5:4e:0a:01:00:e0:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:94:64:8A:BC:2F:21:A6:2B:5A:37:86:DA:F0:CB:F5:FA:A3:4D:3C
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:76:98:95:79:70:8a:0c:59:07:81:af:d9:45:8b:72:c2:97:
35:2d:6b:77:39:ef:ff:83:08:49:e4:75:ba:b6:2c:96:39:b3:
31:d4:fb:7a:a4:4b:d7:74:dc:9f:0f:57:7e:5f:b0:ca:c1:9a:
51:d2:d7:82:f3:70:8a:60:39:d0:2b:e2:8d:bb:e7:5b:80:f8:
57:59:dd:9c:3a:fb:fe:70:c6:2d:9b:6e:d3:64:a4:d3:8d:b9:
43:f4:27:d8:12:09:63:b5:d9:73:4d:de:7b:9f:45:b2:01:c8:
94:6c:57:63:8c:4b:a8:3b:64:99:e2:4c:e6:4f:3a:5b:57:22:
8b:22:b5:62:58:b7:39:9b:c4:71:d2:9a:9b:30:a5:0e:37:25:
49:10:97:94:cf:2e:a2:ec:74:b2:bf:25:16:c1:06:a6:29:10:
6c:ba:c3:9b:cb:42:c6:d0:7b:b4:22:c5:d1:1a:bf:33:19:69:
bc:bb:41:0d:1c:53:fa:1d:ab:62:2a:3d:f8:80:44:72:4c:6c:
53:26:48:7d:e4:6d:93:48:14:ba:fb:b0:cc:3a:24:9a:24:ec:
c4:fe:c4:16:a9:33:d2:89:fe:23:b1:76:2e:f6:fe:70:e9:0a:
01:00:07:69:b8:c2:ce:53:24:4b:12:f4:78:93:29:29:39:ac:
ed:dd:38:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10L1D/GrMF/8c2y+k+/QOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjYxMzMxMWE3ODY5YzMzNWNhNjZjYjQyM2NjNmU4YjJm
YTkwMmMwHhcNMjUwODA0MTYwMTEwWhcNMjUwODA1MTYwMTEwWjAzMTEwLwYDVQQD
EyhlZDk0NjQ4YWJjMmYyMWE2MmI1YTM3ODZkYWYwY2JmNWZhYTM0ZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsCAbeWIyZwRVG1FPzv1Vw1StNq9
mg+4zRQ0Vac3nHeG6OWsDp4fBpPNSV6skOr3RVuSWIi3MuQebEEaZCf7l0T7SNCR
9ezqt0Kin/9xj7TwlrScAnP2dqWwx2bTCWnPX572KlT0yb86kFT0p6mKARqYulu6
oTpz7/1XoQWW3K1MCQvGZR6xuIhq+8TuVeUor/gwgJC5b9R4u3IzDHkNugZH7fn/
GXhUvjd5ReDELQxQ/I1QiAcVUcGQCHWqTgDm7H7lF9Tzd17BCmr+5IxVUD6oa1OP
ze3D07T/18p4ICtrg+U5tgAyogP/lT+f2P1OdczkDGySd83VTgoBAOD9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2UZIq8LyGmK1o3htrwy/X6o008MB8GA1UdIwQY
MBaAFMr2EzEaeGnDNcpmy0I8xuiy+pAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMt
YzMxMGVjYTNjMDdiLzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMtYzMxMGVjYTNjMDdi
LzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXaYlXlw
igxZB4Gv2UWLcsKXNS1rdznv/4MISeR1urYsljmzMdT7eqRL13Tcnw9Xfl+wysGa
UdLXgvNwimA50CvijbvnW4D4V1ndnDr7/nDGLZtu02Sk0425Q/Qn2BIJY7XZc03e
e59FsgHIlGxXY4xLqDtkmeJM5k86W1ciiyK1Yli3OZvEcdKamzClDjclSRCXlM8u
oux0sr8lFsEGpikQbLrDm8tCxtB7tCLF0Rq/MxlpvLtBDRxT+h2rYio9+IBEckxs
UyZIfeRtk0gUuvuwzDokmiTsxP7EFqkz0on+I7F2Lvb+cOkKAQAHabjCzlMkSxL0
eJMpKTms7d04dw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:12 2025 by rpki-client