Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: d3/Rv/+c3N00w6s1NWczuOeLZ9ZjO/Kq/DYVqOfSSSE=
Subject key identifier: 7A:0F:A1:DD:78:5D:62:4B:96:22:45:7B:C4:B9:D0:50:E5:3C:AC:FE
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 019875D083F4A6EEB8B78AA3C10829A46D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 16:00:56 +0000
Manifest this update: Mon 04 Aug 2025 16:00:56 +0000
Manifest next update: Tue 05 Aug 2025 16:00:56 +0000
Files and hashes: 1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: KMxRxHgvzW/3otPWICxZ0agr/+ih651daTHktKG9BbY=)
2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:83:f4:a6:ee:b8:b7:8a:a3:c1:08:29:a4:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Aug 4 16:00:56 2025 GMT
Not After : Aug 5 16:00:56 2025 GMT
Subject: CN=7a0fa1dd785d624b9622457bc4b9d050e53cacfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:59:ba:b7:63:03:f9:a9:a3:8b:b2:f8:1c:
33:c7:65:1f:26:49:47:cf:6b:28:d5:f6:58:93:4b:
97:b6:0d:d2:c8:76:2a:ea:f1:2e:85:71:59:11:c2:
a2:31:b7:99:04:e0:d2:0b:a5:30:79:10:8b:db:56:
39:20:3e:24:dc:0c:3b:c7:ae:7b:8b:11:7a:dc:9b:
49:8d:46:67:33:68:a8:5c:b1:2b:9a:e0:a8:46:c4:
e7:51:7a:69:48:64:6b:21:3f:7b:bb:96:db:d7:4f:
30:87:28:59:d5:2a:d6:91:47:ac:f0:19:13:10:ee:
2d:5d:52:57:22:32:70:69:a9:b7:54:9f:35:d8:40:
73:dc:bf:91:12:b2:ca:06:e6:c2:bb:73:60:b0:82:
fd:75:7a:19:5f:71:11:b9:aa:f0:31:e5:24:79:e0:
44:6c:b5:ec:a3:9f:78:da:ed:db:45:a3:40:95:dc:
43:85:a7:68:0a:44:f7:cc:bb:f5:bf:35:ab:2a:a3:
c3:d6:4a:3e:3d:d8:7d:93:11:c2:b4:af:4d:9f:3f:
70:b3:1c:fd:90:db:81:54:04:69:d2:8d:7b:8b:ac:
9f:8d:c4:81:bf:a1:2e:79:b5:14:9e:44:5e:09:35:
75:97:94:17:ea:85:ce:91:23:7c:da:dc:ad:35:8f:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:A1:DD:78:5D:62:4B:96:22:45:7B:C4:B9:D0:50:E5:3C:AC:FE
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8e:09:5e:a0:d1:e4:c3:8b:1d:2f:3b:72:91:18:f9:a5:5e:
33:65:ee:48:ca:43:ab:c8:8a:2e:cf:fd:e8:51:2f:33:0c:3c:
21:a7:a2:b0:32:07:e1:20:1c:90:07:4c:72:e4:04:c7:46:00:
4d:20:c9:db:73:36:d4:6a:6b:da:5d:5a:48:0e:08:bd:d6:99:
63:1b:43:0f:8f:cd:ad:97:28:92:e6:b7:41:3d:81:72:e1:23:
b7:1c:f3:ae:d4:5e:2e:4e:a0:e4:a6:29:f9:3e:8c:cd:74:f9:
8f:81:f8:81:a4:3a:57:d3:0b:8e:a1:3c:23:b0:73:86:05:41:
a3:2b:eb:a0:c3:1c:82:6e:43:25:3b:b0:d4:09:6d:59:70:5d:
00:7c:2a:76:67:e8:de:c1:6b:da:7f:79:5e:ba:cd:e3:0a:2d:
9a:08:48:fd:bf:d1:eb:7f:93:d8:4b:1b:4e:a1:37:ae:4d:21:
9c:e4:f1:99:98:f9:ed:2f:b1:4a:0a:48:a1:16:92:d2:3c:89:
b4:19:8b:57:cd:8b:46:e2:f0:64:90:4d:f2:b0:3d:4e:d9:2d:
c4:4b:fa:e7:3c:be:6f:6a:96:b8:8b:3a:0d:8f:9a:24:7b:12:
03:8d:01:db:fa:db:9f:2c:99:24:2a:b1:10:76:01:70:65:6c:
14:74:ce:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10IP0pu64t4qjwQgppG1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWNjNWM3YjEyMTdjY2JiMTU1ZGRkYWU4MjZjZTZmOWZk
YmFjYmEwHhcNMjUwODA0MTYwMDU2WhcNMjUwODA1MTYwMDU2WjAzMTEwLwYDVQQD
Eyg3YTBmYTFkZDc4NWQ2MjRiOTYyMjQ1N2JjNGI5ZDA1MGU1M2NhY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY1ZurdjA/mpo4uy+Bwzx2UfJklH
z2so1fZYk0uXtg3SyHYq6vEuhXFZEcKiMbeZBODSC6UweRCL21Y5ID4k3Aw7x657
ixF63JtJjUZnM2ioXLErmuCoRsTnUXppSGRrIT97u5bb108whyhZ1SrWkUes8BkT
EO4tXVJXIjJwaam3VJ812EBz3L+RErLKBubCu3NgsIL9dXoZX3ERuarwMeUkeeBE
bLXso5942u3bRaNAldxDhadoCkT3zLv1vzWrKqPD1ko+Pdh9kxHCtK9Nnz9wsxz9
kNuBVARp0o17i6yfjcSBv6EuebUUnkReCTV1l5QX6oXOkSN82tytNY/uQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoPod14XWJLliJFe8S50FDlPKz+MB8GA1UdIwQY
MBaAFMocxcexIXzLsVXd2ugmzm+f26y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTct
MmI2MjMyMzJmZjIyLzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTctMmI2MjMyMzJmZjIy
LzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXY4JXqDR
5MOLHS87cpEY+aVeM2XuSMpDq8iKLs/96FEvMww8IaeisDIH4SAckAdMcuQEx0YA
TSDJ23M21Gpr2l1aSA4IvdaZYxtDD4/NrZcokua3QT2BcuEjtxzzrtReLk6g5KYp
+T6MzXT5j4H4gaQ6V9MLjqE8I7BzhgVBoyvroMMcgm5DJTuw1AltWXBdAHwqdmfo
3sFr2n95XrrN4wotmghI/b/R63+T2EsbTqE3rk0hnOTxmZj57S+xSgpIoRaS0jyJ
tBmLV82LRuLwZJBN8rA9TtktxEv65zy+b2qWuIs6DY+aJHsSA40B2/rbnyyZJCqx
EHYBcGVsFHTO0w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:51 2025 by rpki-client