Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: y/TylIiuE+10zk8/SIRcbCUwkKQkNYQL6US+HKf5JQw=
Subject key identifier: 69:50:61:DD:35:2A:6A:85:19:53:B9:DD:72:A3:BD:BE:77:C6:A5:C7
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019874F518060A973F3877B0B8A28D0B7513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 0539
Signing time: Mon 04 Aug 2025 12:01:16 +0000
Manifest this update: Mon 04 Aug 2025 12:01:16 +0000
Manifest next update: Tue 05 Aug 2025 12:01:16 +0000
Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=)
2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: 9ZO5fxTbw8VzbpeJvgBhhh9Hp2hI1T5SYe39Ku7+JPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:18:06:0a:97:3f:38:77:b0:b8:a2:8d:0b:75:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Aug 4 12:01:16 2025 GMT
Not After : Aug 5 12:01:16 2025 GMT
Subject: CN=695061dd352a6a851953b9dd72a3bdbe77c6a5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:34:a5:56:39:a7:ce:cb:ec:23:56:08:2f:
ee:8f:3b:f4:c5:6a:2a:4d:23:2c:4c:8f:be:f8:7c:
3c:c7:f6:91:34:0c:81:42:b2:20:43:bc:40:d7:ec:
13:26:57:25:70:56:4b:ae:14:fd:11:fd:4a:d1:d7:
58:91:3e:42:28:1a:38:d5:d4:7f:4d:67:ea:a5:a8:
6a:21:9f:b7:4d:6e:c6:62:3c:a3:e1:77:09:6d:e5:
98:37:dc:1c:97:34:d1:26:87:88:79:9d:17:01:4f:
d5:0a:5d:53:aa:91:25:a3:cf:6c:65:de:d0:8f:96:
6e:f2:27:90:cf:3c:56:ab:d5:4e:a4:b8:f6:56:ca:
99:09:36:dc:c5:5f:a8:17:d9:96:62:de:46:b4:61:
0b:58:08:99:0a:53:1b:f4:b9:a1:0d:d4:b7:70:8d:
a3:40:ef:13:f4:b7:d7:79:43:b4:60:28:af:a3:5c:
c5:5f:d4:9c:24:54:ba:5b:0a:4d:4a:e4:f9:ef:cf:
82:6c:98:1b:aa:90:bb:4f:ec:b1:ee:de:6b:e4:b0:
56:69:1d:63:ab:e4:d5:aa:0f:34:c7:9f:5b:99:1c:
0e:92:e1:f2:a5:6f:61:71:cd:26:d0:94:7a:1d:5f:
8f:ce:12:12:c5:0d:82:dc:b3:9c:7f:bd:c0:96:04:
8e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:50:61:DD:35:2A:6A:85:19:53:B9:DD:72:A3:BD:BE:77:C6:A5:C7
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:79:d2:c4:b8:97:b3:c3:4e:9b:8e:54:f8:4c:67:34:17:59:
2a:5d:b3:4f:5c:92:b3:ee:9a:6e:8c:60:30:32:1b:79:9f:34:
a9:9f:2c:28:26:98:8f:d3:88:76:7b:93:a3:6c:63:ed:1d:16:
45:9a:56:f4:f1:2b:d3:ce:17:38:90:c7:ba:f0:4f:aa:63:60:
ea:ec:1a:a8:b7:76:6b:f1:a9:0b:9e:ca:97:d3:12:cc:2a:54:
ef:be:aa:75:ea:45:c1:c1:a6:60:db:ca:0b:e8:60:c3:86:34:
92:cd:ee:1e:33:45:20:3e:99:5f:f6:f4:4e:33:04:6b:7e:08:
b3:db:21:e0:d1:96:29:8d:29:ff:23:0b:48:d0:1b:0b:cb:d3:
a1:83:4e:74:77:6e:44:0e:62:ae:9e:8c:b6:1e:3a:f5:e3:1e:
66:3b:01:49:2a:ae:17:85:0e:18:9a:3b:8d:9d:c8:8c:51:b8:
c2:4e:50:87:5a:a4:2c:5f:2a:8f:54:66:43:62:e6:21:ea:c6:
68:73:48:fb:56:5b:a6:b1:00:5a:c5:30:50:00:94:dc:54:bd:
c4:56:f6:00:c4:cc:ba:32:75:f7:05:67:4c:04:ee:36:43:e3:
01:4d:c9:33:4c:63:2b:72:8d:b6:ee:56:b7:b6:69:37:c0:ce:
a0:7a:ec:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09RgGCpc/OHewuKKNC3UTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDQ5ZmVmNmRhZDI2NjE5ZWJlZTA2NWQxZjIzMWMxYTI3
NmQ3ZGYwHhcNMjUwODA0MTIwMTE2WhcNMjUwODA1MTIwMTE2WjAzMTEwLwYDVQQD
Eyg2OTUwNjFkZDM1MmE2YTg1MTk1M2I5ZGQ3MmEzYmRiZTc3YzZhNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1U0pVY5p87L7CNWCC/ujzv0xWoq
TSMsTI+++Hw8x/aRNAyBQrIgQ7xA1+wTJlclcFZLrhT9Ef1K0ddYkT5CKBo41dR/
TWfqpahqIZ+3TW7GYjyj4XcJbeWYN9wclzTRJoeIeZ0XAU/VCl1TqpElo89sZd7Q
j5Zu8ieQzzxWq9VOpLj2VsqZCTbcxV+oF9mWYt5GtGELWAiZClMb9LmhDdS3cI2j
QO8T9LfXeUO0YCivo1zFX9ScJFS6WwpNSuT578+CbJgbqpC7T+yx7t5r5LBWaR1j
q+TVqg80x59bmRwOkuHypW9hcc0m0JR6HV+PzhISxQ2C3LOcf73AlgSODwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlQYd01KmqFGVO53XKjvb53xqXHMB8GA1UdIwQY
MBaAFMnUn+9trSZhnr7gZdHyMcGidtffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAt
MGQ0ZjQwYmMzZmFhLzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAtMGQ0ZjQwYmMzZmFh
LzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHnSxLiX
s8NOm45U+ExnNBdZKl2zT1ySs+6aboxgMDIbeZ80qZ8sKCaYj9OIdnuTo2xj7R0W
RZpW9PEr084XOJDHuvBPqmNg6uwaqLd2a/GpC57Kl9MSzCpU776qdepFwcGmYNvK
C+hgw4Y0ks3uHjNFID6ZX/b0TjMEa34Is9sh4NGWKY0p/yMLSNAbC8vToYNOdHdu
RA5irp6Mth469eMeZjsBSSquF4UOGJo7jZ3IjFG4wk5Qh1qkLF8qj1RmQ2LmIerG
aHNI+1ZbprEAWsUwUACU3FS9xFb2AMTMujJ19wVnTATuNkPjAU3JM0xjK3KNtu5W
t7ZpN8DOoHrsYQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:59 2025 by rpki-client