Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: BsNcKR3XwNAiwjOSF5y6XIPmdA/El1QnDBZkEXn7TiM=
Subject key identifier: BC:22:55:75:D2:74:7B:A1:4F:84:BA:D0:66:6E:8D:EB:42:88:08:D3
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019873069AC1C6BEDD525EB3325EBABA2299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0AFE
Signing time: Mon 04 Aug 2025 03:01:09 +0000
Manifest this update: Mon 04 Aug 2025 03:01:09 +0000
Manifest next update: Tue 05 Aug 2025 03:01:09 +0000
Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: 0WjcEdeafblNzImDy4F/YLqWRIb7HO05HtQPmePwjjE=)
3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:9a:c1:c6:be:dd:52:5e:b3:32:5e:ba:ba:22:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Aug 4 03:01:09 2025 GMT
Not After : Aug 5 03:01:09 2025 GMT
Subject: CN=bc225575d2747ba14f84bad0666e8deb428808d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:3f:61:83:ca:06:14:2d:b8:f5:c9:aa:62:
8a:0c:6b:32:c7:16:99:ec:ed:97:20:9e:bd:68:28:
d8:e0:e2:63:6b:88:e0:09:00:58:8d:aa:64:6a:d1:
20:54:97:a3:88:4a:90:9e:2a:70:3b:de:45:48:73:
52:5d:b0:d3:e7:92:3d:1b:a8:e4:03:a6:a5:e3:4c:
79:81:7a:a2:25:db:3d:d3:91:a0:7f:ed:0b:b3:f8:
0d:78:7c:17:fa:3f:a8:ee:fe:2a:44:42:03:87:15:
2f:c6:c1:96:ee:49:f0:ad:af:57:22:84:29:af:ca:
f7:b4:87:b7:2e:f9:38:47:50:75:9c:32:d3:27:7d:
6d:54:59:8e:8c:d8:34:09:6e:8a:42:73:f1:cc:af:
8a:be:89:2a:90:52:00:77:89:9e:6e:9b:ed:ec:76:
91:a8:45:f2:76:5a:32:f3:21:b1:29:2e:7e:22:9d:
ca:5b:3b:c6:72:f2:ae:3a:b4:0a:49:fc:5b:ff:a3:
33:f2:38:64:dd:0c:50:78:a0:fd:2e:d3:f7:a2:8b:
e6:93:19:e9:62:9f:b2:98:63:26:ef:e4:cc:a0:31:
d5:ec:5f:87:db:76:50:8c:fc:f8:21:17:56:3d:95:
41:e4:3a:de:a0:af:de:02:2b:db:23:a6:11:17:2e:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:22:55:75:D2:74:7B:A1:4F:84:BA:D0:66:6E:8D:EB:42:88:08:D3
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:89:6f:b3:48:c8:f6:42:a4:49:cb:d7:d4:5b:df:7e:3a:57:
de:e5:e0:d4:e7:6b:97:93:65:1e:02:3b:be:37:ef:de:7b:d6:
26:2c:0d:49:54:46:96:93:21:f3:60:a0:c2:61:b4:59:40:63:
4b:34:2a:1f:cd:1a:c7:b4:2b:d7:3c:98:07:17:4e:b4:c7:45:
2c:4c:06:7a:9b:71:18:9c:57:0c:b5:d7:b5:52:6a:8f:68:32:
f0:27:92:ef:ff:40:62:77:66:e1:fb:80:d1:ad:11:6f:67:df:
25:b6:88:3f:05:94:d2:a7:9c:f6:68:5b:a3:ab:d1:0e:61:f2:
62:ca:62:56:15:97:62:52:99:a8:13:0a:95:27:1f:42:5c:82:
16:d5:10:20:03:6a:e2:df:c0:56:2b:92:ca:ab:7f:5b:ef:5d:
65:9a:72:d1:23:c7:62:0a:d4:46:f9:2f:d9:c7:76:e4:1f:fd:
18:7c:18:e5:43:da:bc:1f:c3:dc:88:64:18:c7:e9:e5:a6:12:
8f:e3:1c:50:ca:c6:d6:7c:cf:e9:4a:05:42:30:a3:c8:e2:3d:
18:d3:43:37:14:66:69:aa:e4:cf:46:7f:db:f0:ac:72:88:39:
2e:e3:92:1d:7e:88:83:01:c5:b4:d4:bd:ad:cc:63:7c:ac:fc:
f1:66:ad:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBprBxr7dUl6zMl66uiKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODc3ZjRjZTBkMzYxNjE3NzI0ZDRiMjg5YTg5MThjNWM2
ZDcyMmQwHhcNMjUwODA0MDMwMTA5WhcNMjUwODA1MDMwMTA5WjAzMTEwLwYDVQQD
EyhiYzIyNTU3NWQyNzQ3YmExNGY4NGJhZDA2NjZlOGRlYjQyODgwOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon8/YYPKBhQtuPXJqmKKDGsyxxaZ
7O2XIJ69aCjY4OJja4jgCQBYjapkatEgVJejiEqQnipwO95FSHNSXbDT55I9G6jk
A6al40x5gXqiJds905Ggf+0Ls/gNeHwX+j+o7v4qREIDhxUvxsGW7knwra9XIoQp
r8r3tIe3Lvk4R1B1nDLTJ31tVFmOjNg0CW6KQnPxzK+KvokqkFIAd4mebpvt7HaR
qEXydloy8yGxKS5+Ip3KWzvGcvKuOrQKSfxb/6Mz8jhk3QxQeKD9LtP3oovmkxnp
Yp+ymGMm7+TMoDHV7F+H23ZQjPz4IRdWPZVB5DreoK/eAivbI6YRFy5bRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwiVXXSdHuhT4S60GZujetCiAjTMB8GA1UdIwQY
MBaAFGGHf0zg02FhdyTUsomokYxcbXItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEt
YzcyMjIxN2U1M2I2LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEtYzcyMjIxN2U1M2I2
LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmolvs0jI
9kKkScvX1FvffjpX3uXg1Odrl5NlHgI7vjfv3nvWJiwNSVRGlpMh82CgwmG0WUBj
SzQqH80ax7Qr1zyYBxdOtMdFLEwGeptxGJxXDLXXtVJqj2gy8CeS7/9AYndm4fuA
0a0Rb2ffJbaIPwWU0qec9mhbo6vRDmHyYspiVhWXYlKZqBMKlScfQlyCFtUQIANq
4t/AViuSyqt/W+9dZZpy0SPHYgrURvkv2cd25B/9GHwY5UPavB/D3IhkGMfp5aYS
j+McUMrG1nzP6UoFQjCjyOI9GNNDNxRmaarkz0Z/2/Cscog5LuOSHX6IgwHFtNS9
rcxjfKz88Watrw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:43 2025 by rpki-client