Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier: fhMqjmBuZrjkopsPZWFt8PsZhAB/PPRp/sT4mPqIdc0=
Subject key identifier: D6:BC:45:E4:8A:41:EC:D6:DB:EF:57:F5:80:41:42:E0:8E:07:B6:EA
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 019874F4BA9B0C82132EE93546073CC5B4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number: 0515
Signing time: Mon 04 Aug 2025 12:00:52 +0000
Manifest this update: Mon 04 Aug 2025 12:00:52 +0000
Manifest next update: Tue 05 Aug 2025 12:00:52 +0000
Files and hashes: 1: D5G6PMvb3J_sD5DCK4P6pKbgGp0.roa (hash: G9aLrjJnG75rn4IsfgxzCqkd3zCbfg0pV6hyiy9q9jI=)
2: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: E0g66DlLAtf90yZfUpjRmcBs3QBnJOanvvuxIAcnb6c=)
3: lvN2WOPvV5KHC8ZyAeDe5V2H9oc.roa (hash: Nh7UeQS8f90rjPYbwZZwjcnHax4rlbcgMRh3GqnO0aQ=)
4: vbSkw4Arzq8j_A_7_eTb9Uhr9yk.roa (hash: xhwOdLfAiXhH5IfFXepqmzE3AX5XcEJOZ9p2seaEDJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:ba:9b:0c:82:13:2e:e9:35:46:07:3c:c5:b4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Aug 4 12:00:52 2025 GMT
Not After : Aug 5 12:00:52 2025 GMT
Subject: CN=d6bc45e48a41ecd6dbef57f5804142e08e07b6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:6e:6d:e6:17:a5:fd:4f:e2:d2:f5:90:9d:
20:e2:83:9c:76:36:0a:e8:06:af:1d:18:01:46:34:
f0:c1:8d:dd:f1:61:94:19:ab:6d:0f:42:db:26:28:
49:5c:84:77:8e:00:93:50:da:e2:f4:a2:06:32:45:
4c:cc:c9:49:58:6f:52:b0:ea:c3:3b:2a:aa:47:c2:
d3:17:cf:de:11:96:12:53:36:e1:0e:2f:d1:64:05:
75:d3:04:05:89:d6:48:82:98:e4:18:87:ba:3f:01:
c7:da:ac:3f:52:a1:c7:96:59:91:0f:51:28:05:a7:
5f:bd:ba:00:62:db:7d:2b:75:d2:b2:de:e7:08:d6:
2b:40:af:d4:40:b2:d5:97:89:19:f5:9b:de:16:8f:
25:27:eb:44:4e:49:9c:76:37:ec:1e:c9:a5:8c:ac:
d8:8c:87:b4:31:27:cb:17:14:f9:a7:f6:3a:d2:d1:
13:06:17:04:a4:ad:bc:5d:f9:8e:47:59:bf:44:45:
b5:4a:7c:e0:11:f3:61:8c:ac:02:03:a8:76:f8:59:
c9:ee:ff:f8:ce:ff:d4:cd:ff:26:27:d0:69:50:32:
eb:82:87:22:12:c9:61:89:f6:93:5b:f8:8f:fb:b3:
1c:c2:52:ca:3e:8a:4b:5c:f5:9b:9a:87:16:34:fd:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:45:E4:8A:41:EC:D6:DB:EF:57:F5:80:41:42:E0:8E:07:B6:EA
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d5:82:93:0d:dc:7b:58:88:98:a3:cf:6c:d0:b4:09:89:3f:
47:5c:fd:dd:44:fc:6b:a4:c2:67:5d:af:ec:ec:eb:04:06:dc:
2d:4d:f3:40:f2:3d:51:1e:a8:1e:d4:7e:80:7f:41:19:c3:81:
34:27:97:b9:c5:4c:e0:f6:bb:db:1a:c8:5a:cf:15:da:11:be:
51:72:16:22:8d:e2:50:c0:18:e2:25:4b:3e:cf:cc:0f:4e:4e:
40:33:73:c3:70:a6:8e:5f:2a:cf:c5:b0:6c:03:e7:d5:1c:a9:
b1:0e:82:f9:aa:a9:5c:4b:45:3c:4d:78:50:95:41:ba:de:bb:
b8:fd:30:1e:36:62:92:e0:dc:7a:98:5a:cf:ce:f8:27:2d:61:
3e:79:26:62:ce:7b:57:5d:b3:54:d4:64:e8:39:2a:17:b0:22:
37:46:a1:5c:b1:c4:78:51:9f:cd:e7:58:e1:81:38:75:28:ef:
14:f2:da:55:56:38:cf:fb:13:8e:b4:10:8e:54:1b:bd:3c:1b:
e0:0e:d6:76:ab:7c:45:53:73:06:9c:54:b8:7c:a7:45:be:24:
f8:08:49:d6:c8:be:e7:32:b7:4b:31:56:19:6d:71:21:55:5d:
43:26:1f:bc:2d:48:c6:9c:8a:c1:17:2b:32:68:22:03:e3:a0:
03:a3:87:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09LqbDIITLuk1Rgc8xbTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOGNjNDZkNzFlNzg0ODk3ODQ4ODk2MWQ3YjUxYWJhMTU0
MWYzYzQwHhcNMjUwODA0MTIwMDUyWhcNMjUwODA1MTIwMDUyWjAzMTEwLwYDVQQD
EyhkNmJjNDVlNDhhNDFlY2Q2ZGJlZjU3ZjU4MDQxNDJlMDhlMDdiNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeVubeYXpf1P4tL1kJ0g4oOcdjYK
6AavHRgBRjTwwY3d8WGUGattD0LbJihJXIR3jgCTUNri9KIGMkVMzMlJWG9SsOrD
OyqqR8LTF8/eEZYSUzbhDi/RZAV10wQFidZIgpjkGIe6PwHH2qw/UqHHllmRD1Eo
BadfvboAYtt9K3XSst7nCNYrQK/UQLLVl4kZ9ZveFo8lJ+tETkmcdjfsHsmljKzY
jIe0MSfLFxT5p/Y60tETBhcEpK28XfmOR1m/REW1SnzgEfNhjKwCA6h2+FnJ7v/4
zv/Uzf8mJ9BpUDLrgociEslhifaTW/iP+7McwlLKPopLXPWbmocWNP2rfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa8ReSKQezW2+9X9YBBQuCOB7bqMB8GA1UdIwQY
MBaAFGGMxG1x54SJeEiJYde1GroVQfPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTIt
NGVmMTljY2M1N2QwLzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTItNGVmMTljY2M1N2Qw
LzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdWCkw3c
e1iImKPPbNC0CYk/R1z93UT8a6TCZ12v7OzrBAbcLU3zQPI9UR6oHtR+gH9BGcOB
NCeXucVM4Pa72xrIWs8V2hG+UXIWIo3iUMAY4iVLPs/MD05OQDNzw3Cmjl8qz8Ww
bAPn1RypsQ6C+aqpXEtFPE14UJVBut67uP0wHjZikuDcephaz874Jy1hPnkmYs57
V12zVNRk6DkqF7AiN0ahXLHEeFGfzedY4YE4dSjvFPLaVVY4z/sTjrQQjlQbvTwb
4A7Wdqt8RVNzBpxUuHynRb4k+AhJ1si+5zK3SzFWGW1xIVVdQyYfvC1IxpyKwRcr
MmgiA+OgA6OH0Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:44 2025 by rpki-client