Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: zGfag0UsnI5zN4UMJV0gaspFjyRb4J30Hsf+FEuphWs=
Subject key identifier: 76:BB:4E:E0:04:F3:99:83:5B:85:FB:84:8E:70:95:9B:72:97:BB:E8
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 01987D8BE46586CEF66A398D232849DD2100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0ECA
Signing time: Wed 06 Aug 2025 04:02:56 +0000
Manifest this update: Wed 06 Aug 2025 04:02:56 +0000
Manifest next update: Thu 07 Aug 2025 04:02:56 +0000
Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: 9/FxFZFhda5P+6+ChNZ3HIVtKt9KFUMUV4Z5RSmow4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:e4:65:86:ce:f6:6a:39:8d:23:28:49:dd:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Aug 6 04:02:56 2025 GMT
Not After : Aug 7 04:02:56 2025 GMT
Subject: CN=76bb4ee004f399835b85fb848e70959b7297bbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:d8:4b:b3:27:ac:e0:69:16:e6:a4:50:c5:
67:cf:3a:90:7f:bd:1d:bf:bc:4f:d1:01:ec:e4:5e:
bb:86:d2:1c:62:f6:97:3a:31:35:11:48:a8:a7:90:
c9:80:93:8a:02:b1:7c:c2:c0:ad:b8:18:bf:1e:02:
fd:c8:da:b4:b1:99:3a:da:c9:00:c6:db:2a:8f:c4:
1b:10:21:53:8d:b2:c7:91:ba:7a:ce:a1:cd:a6:5c:
3a:37:c4:8f:16:1f:23:0f:fc:81:87:2d:0d:52:0e:
31:a6:88:8d:a4:96:78:72:fc:10:71:7e:d3:c2:f4:
db:5a:ba:3e:e0:cc:93:cf:92:6a:28:84:09:91:59:
0e:eb:9e:92:0e:08:eb:4f:ae:1e:9a:2e:a4:1a:32:
31:a0:39:cb:cb:48:75:1e:ad:76:99:13:4c:2c:59:
4c:a3:2d:90:a3:b4:59:9e:70:a0:8b:bc:0f:6b:79:
f4:7e:bf:69:4a:a2:7d:df:ae:73:65:a3:8d:02:5c:
be:01:70:57:b1:ee:97:b7:77:a0:88:d3:d7:c6:28:
32:92:4e:94:08:10:bc:dd:61:35:49:94:a3:17:29:
ab:18:aa:98:97:0a:26:96:a1:57:50:a6:8e:41:dc:
78:87:99:91:9b:a9:7e:d5:e8:0c:49:16:57:27:2a:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BB:4E:E0:04:F3:99:83:5B:85:FB:84:8E:70:95:9B:72:97:BB:E8
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:73:15:10:75:3d:48:52:9b:9c:83:68:1d:f2:37:ec:ee:00:
b0:20:b6:86:7d:89:a0:ef:8c:3a:22:5d:90:5d:a2:c6:f8:bc:
e6:d4:07:d5:62:30:3e:ca:d8:70:d2:e0:ab:21:d7:4b:8a:6d:
80:6c:f4:ef:05:89:99:4b:93:2e:02:e9:44:2b:c0:32:ac:77:
c2:11:27:e8:0b:2c:01:75:1a:ab:18:0e:86:e4:72:94:12:f1:
ce:8e:69:33:88:f9:09:56:3e:8f:a9:6b:0d:5e:97:3c:df:ab:
3d:5b:d8:75:fa:bf:b3:17:f4:ea:ea:25:d6:93:9c:81:f1:38:
58:07:b1:b1:70:ab:5f:e7:dc:c0:1e:11:96:c4:a0:e2:e9:30:
b5:14:9a:07:d5:ec:a5:a3:91:81:dd:67:d0:40:aa:f9:65:ed:
c9:7a:14:aa:1f:60:a3:2a:ef:d8:62:35:8d:e6:86:20:82:b8:
15:5d:fa:90:c2:dc:5f:5e:16:81:a3:68:03:8e:b0:9c:b4:a8:
a2:f4:df:c7:14:21:e2:db:2e:bd:e7:6a:be:1f:e6:50:dc:a5:
43:d8:f5:e4:4f:b3:67:fb:2b:ba:9b:5f:91:e1:9e:57:a3:47:
27:ad:76:12:7d:20:1f:62:9b:50:7f:23:2d:7d:3a:03:27:80:
17:72:53:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i+Rlhs72ajmNIyhJ3SEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZTBlNGM5YWNiZjcwMWY5MzAxNDliMzI1Y2UwNDJjZjlm
OTJhNTkwHhcNMjUwODA2MDQwMjU2WhcNMjUwODA3MDQwMjU2WjAzMTEwLwYDVQQD
Eyg3NmJiNGVlMDA0ZjM5OTgzNWI4NWZiODQ4ZTcwOTU5YjcyOTdiYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV/YS7MnrOBpFuakUMVnzzqQf70d
v7xP0QHs5F67htIcYvaXOjE1EUiop5DJgJOKArF8wsCtuBi/HgL9yNq0sZk62skA
xtsqj8QbECFTjbLHkbp6zqHNplw6N8SPFh8jD/yBhy0NUg4xpoiNpJZ4cvwQcX7T
wvTbWro+4MyTz5JqKIQJkVkO656SDgjrT64emi6kGjIxoDnLy0h1Hq12mRNMLFlM
oy2Qo7RZnnCgi7wPa3n0fr9pSqJ9365zZaONAly+AXBXse6Xt3egiNPXxigykk6U
CBC83WE1SZSjFymrGKqYlwomlqFXUKaOQdx4h5mRm6l+1egMSRZXJyrdkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHa7TuAE85mDW4X7hI5wlZtyl7voMB8GA1UdIwQY
MBaAFMng5Mmsv3AfkwFJsyXOBCz5+SpZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEt
YmU3YzgyOGMzNjkzLzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEtYmU3YzgyOGMzNjkz
LzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHMVEHU9
SFKbnINoHfI37O4AsCC2hn2JoO+MOiJdkF2ixvi85tQH1WIwPsrYcNLgqyHXS4pt
gGz07wWJmUuTLgLpRCvAMqx3whEn6AssAXUaqxgOhuRylBLxzo5pM4j5CVY+j6lr
DV6XPN+rPVvYdfq/sxf06uol1pOcgfE4WAexsXCrX+fcwB4RlsSg4ukwtRSaB9Xs
paORgd1n0ECq+WXtyXoUqh9goyrv2GI1jeaGIIK4FV36kMLcX14WgaNoA46wnLSo
ovTfxxQh4tsuvedqvh/mUNylQ9j15E+zZ/sruptfkeGeV6NHJ612En0gH2KbUH8j
LX06AyeAF3JTNQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:25:25 2025 by rpki-client