Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
File: ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft (raw, json)
Hash identifier: srEyY2ANYHOgZHdOvBtqOT7jjlOr4WGbooG7YVewMyw=
Subject key identifier: 70:28:F8:10:D4:01:05:DF:9C:4E:9F:C8:D6:AA:5F:A8:64:FC:D0:2B
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Certificate issuer: /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial: 01989F71825DBE373AE5119C1AE59AD851D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
Manifest number: 0484
Signing time: Tue 12 Aug 2025 18:01:12 +0000
Manifest this update: Tue 12 Aug 2025 18:01:12 +0000
Manifest next update: Wed 13 Aug 2025 18:01:12 +0000
Files and hashes: 1: AVYBUHDR8cllHf1Clp-tHJ3mnJM.roa (hash: AnG8BWUfPxV5o1EC1SevW/uoDYd+aQAPwe1f/26+nZM=)
2: ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl (hash: 4WRB+YHPN4L+Hi61IwTWfogLR+NutDZLcyaAGtcm+7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:82:5d:be:37:3a:e5:11:9c:1a:e5:9a:d8:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
Validity
Not Before: Aug 12 18:01:12 2025 GMT
Not After : Aug 13 18:01:12 2025 GMT
Subject: CN=7028f810d40105df9c4e9fc8d6aa5fa864fcd02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:d0:bf:40:71:4a:55:81:d9:65:30:99:d2:
bb:ee:2a:1a:4e:56:4a:0a:ad:27:e0:03:48:0f:2f:
9f:cc:a1:67:ff:88:3e:34:5e:00:4d:17:23:13:b6:
12:f1:58:8d:86:56:37:4c:37:bf:cf:83:20:93:d2:
bb:bc:0a:4b:28:20:3e:08:68:48:89:36:28:76:b4:
85:50:07:e4:e3:19:24:5e:cd:43:96:2f:7d:c2:93:
01:84:9b:3e:1a:ff:10:49:87:5a:8a:7e:01:45:53:
e5:30:56:83:f8:6b:19:55:83:7a:58:e6:8b:b4:8a:
5b:93:76:e3:42:61:e1:b6:f4:73:2b:1c:3e:ec:68:
92:3b:44:ba:92:98:5d:77:5f:26:50:c0:38:49:9b:
ad:31:4c:9b:6e:82:af:6d:66:02:29:d9:ea:32:7b:
d4:52:a7:9c:3d:86:b2:28:c8:f6:02:d0:38:0a:4e:
d1:35:4e:d8:a4:82:83:56:18:3a:64:f8:c3:df:49:
bd:90:b2:4a:65:7a:8b:0f:84:b3:17:2f:cd:ee:fb:
2a:cb:0d:77:51:6b:c3:dd:41:1c:e0:95:df:06:f5:
fc:7b:19:0a:b2:6d:f4:b3:49:3a:9f:05:e6:fd:4b:
52:39:a5:af:14:58:be:41:67:21:c5:c7:f3:0b:ee:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:F8:10:D4:01:05:DF:9C:4E:9F:C8:D6:AA:5F:A8:64:FC:D0:2B
X509v3 Authority Key Identifier:
keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2b:fe:31:b7:34:e1:80:06:5e:9d:27:bd:2a:91:f9:a8:23:
40:da:98:2a:30:6a:7a:3d:c1:9e:24:1c:bc:af:53:8e:1e:83:
01:19:5e:bb:1d:76:58:62:92:9b:da:51:f1:c1:22:e1:91:0a:
b3:a3:97:6d:4f:bb:c7:4c:44:26:cc:0f:80:d3:81:cc:f9:14:
9a:b2:88:6e:6f:64:da:67:29:bc:cb:05:ca:94:bf:6a:03:11:
ca:d8:fa:15:63:0c:1d:c8:35:01:07:76:0e:ff:2e:51:07:8a:
d6:8c:83:2b:9c:b3:2d:11:44:93:82:4f:28:aa:9a:81:fc:65:
d1:94:64:d2:52:14:c6:2c:6f:5f:e7:f0:14:2b:c6:a6:bd:a3:
d7:ca:46:6f:97:8e:4d:b5:fa:c1:82:a7:03:22:04:25:ef:2a:
f0:19:43:13:34:da:88:68:d5:86:4b:51:1a:72:70:08:ee:e9:
8e:5b:11:e9:da:a8:dd:99:85:b1:24:82:0b:88:3e:28:5e:8d:
a4:53:d1:59:4e:17:2a:37:91:92:2a:8b:41:ba:9b:51:ad:dd:
90:be:b7:39:60:9f:a2:d2:9a:c1:0c:cb:d5:32:60:bc:4e:e9:
da:56:01:d7:f0:e6:44:02:ae:a3:29:ae:3a:99:81:b3:ee:01:
55:a6:bc:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifcYJdvjc65RGcGuWa2FHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTE1NDE1ODkwNWQxZDQ0YzQ1ODhkZmQyNTgwMmYzMjRh
OTNkNjEwHhcNMjUwODEyMTgwMTEyWhcNMjUwODEzMTgwMTEyWjAzMTEwLwYDVQQD
Eyg3MDI4ZjgxMGQ0MDEwNWRmOWM0ZTlmYzhkNmFhNWZhODY0ZmNkMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25LQv0BxSlWB2WUwmdK77ioaTlZK
Cq0n4ANIDy+fzKFn/4g+NF4ATRcjE7YS8ViNhlY3TDe/z4Mgk9K7vApLKCA+CGhI
iTYodrSFUAfk4xkkXs1Dli99wpMBhJs+Gv8QSYdain4BRVPlMFaD+GsZVYN6WOaL
tIpbk3bjQmHhtvRzKxw+7GiSO0S6kphdd18mUMA4SZutMUybboKvbWYCKdnqMnvU
UqecPYayKMj2AtA4Ck7RNU7YpIKDVhg6ZPjD30m9kLJKZXqLD4SzFy/N7vsqyw13
UWvD3UEc4JXfBvX8exkKsm30s0k6nwXm/UtSOaWvFFi+QWchxcfzC+5D0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAo+BDUAQXfnE6fyNaqX6hk/NArMB8GA1UdIwQY
MBaAFMpRVBWJBdHUTEWI39JYAvMkqT1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mNTU4YWEtNTVlZi00NTBmLThiOTct
MTAwOTBkMWU3ZDk0LzEveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mNTU4YWEtNTVlZi00NTBmLThiOTctMTAwOTBkMWU3ZDk0
LzEveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCv+Mbc0
4YAGXp0nvSqR+agjQNqYKjBqej3BniQcvK9Tjh6DARleux12WGKSm9pR8cEi4ZEK
s6OXbU+7x0xEJswPgNOBzPkUmrKIbm9k2mcpvMsFypS/agMRytj6FWMMHcg1AQd2
Dv8uUQeK1oyDK5yzLRFEk4JPKKqagfxl0ZRk0lIUxixvX+fwFCvGpr2j18pGb5eO
TbX6wYKnAyIEJe8q8BlDEzTaiGjVhktRGnJwCO7pjlsR6dqo3ZmFsSSCC4g+KF6N
pFPRWU4XKjeRkiqLQbqbUa3dkL63OWCfotKawQzL1TJgvE7p2lYB1/DmRAKuoymu
OpmBs+4BVaa80Q==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:43 2025 by rpki-client