
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: oD3F54zdayDPrrV32XGF6HBQGkjQL8cm+qMVe2t3q68=
Subject key identifier: 77:4A:9D:67:C5:34:09:B6:6A:D3:3E:6B:C5:AF:43:11:3F:A5:94:30
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 019873E36CD343BF4E7D1A476A8F0BCF0748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 14F6
Signing time: Mon 04 Aug 2025 07:02:20 +0000
Manifest this update: Mon 04 Aug 2025 07:02:20 +0000
Manifest next update: Tue 05 Aug 2025 07:02:20 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: bjqKhhESrArVH21gyzeIXYcMsJ//1Tc+iHMTj+Mm0bQ=)
2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:6c:d3:43:bf:4e:7d:1a:47:6a:8f:0b:cf:07:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Aug 4 07:02:20 2025 GMT
Not After : Aug 5 07:02:20 2025 GMT
Subject: CN=774a9d67c53409b66ad33e6bc5af43113fa59430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:6c:c7:17:54:d1:d5:10:90:c2:e6:33:24:
b7:09:fb:14:69:7f:03:66:38:46:cb:57:ea:a7:c8:
f7:ea:33:6d:be:89:a0:5d:f4:c5:c2:40:b5:3f:bf:
8d:b1:7f:d6:95:a6:f0:3c:b2:2d:da:c5:d7:56:c6:
9a:40:55:1f:58:bc:1b:4c:fd:3d:fa:79:c5:b6:ad:
c0:56:3d:bf:be:36:e4:9c:27:04:a4:44:e5:f0:b3:
8b:b5:40:0d:e3:a4:d8:33:45:f8:34:c3:3a:ec:37:
76:e3:5c:21:ad:2e:5a:e5:ed:8d:ef:c4:5b:13:d5:
96:45:67:09:7c:59:3e:59:0d:05:3c:ed:1f:73:da:
71:43:1f:07:72:fa:f0:03:33:30:3d:17:a0:c3:ef:
cb:fc:a4:4c:a4:cf:23:04:05:54:6b:00:3e:ca:9d:
fb:b3:58:85:9d:65:8d:02:c3:6a:9e:d7:9f:b0:04:
6f:95:30:9b:6b:40:38:48:6c:dd:7f:d5:02:a8:ed:
ab:9d:bf:93:01:2a:ce:52:bf:3a:a6:1f:c7:35:0b:
77:27:b8:01:45:88:bf:96:ef:2f:11:42:60:26:50:
ab:73:cd:a1:53:05:49:d8:ff:75:3a:75:40:d1:c0:
04:4e:88:7b:47:9a:1d:0f:12:60:4b:32:98:a4:18:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4A:9D:67:C5:34:09:B6:6A:D3:3E:6B:C5:AF:43:11:3F:A5:94:30
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b6:5d:06:84:14:8d:a0:13:d2:a0:00:64:b3:07:6b:fc:f0:
ac:77:4c:01:fc:62:b2:5f:30:a9:c3:68:fd:3b:9c:f4:2c:b0:
65:47:73:10:0d:7a:27:32:f8:af:22:df:4c:ba:b7:35:f8:7d:
77:7a:a4:b6:0c:15:27:7a:15:14:12:78:48:1b:3b:49:16:f4:
47:02:19:b9:68:b7:64:d5:61:be:68:a7:d5:3d:17:ef:f7:d5:
29:3c:d9:cd:82:41:59:af:95:06:82:91:52:7c:81:46:e5:23:
3e:bf:63:50:48:df:c4:1e:86:48:2f:8f:c4:81:f5:01:4a:2a:
ef:ed:cc:39:33:9d:8b:b4:ab:06:e6:fd:00:13:91:27:c1:ea:
4d:76:5f:d3:5e:17:7a:36:73:4c:76:39:70:47:9d:68:ff:83:
3e:39:05:66:1e:6a:5e:37:1e:ad:08:89:53:2f:0c:69:05:3d:
5e:84:54:f5:66:3a:d8:68:02:34:2b:cf:1d:d5:fb:54:70:d9:
88:96:aa:ce:da:b6:94:9c:de:3d:2e:d3:f6:18:fb:a2:2d:c3:
86:8d:7c:55:f2:18:cb:1a:d2:fc:d3:4d:6c:a7:00:b7:88:26:
8a:21:b3:af:56:a6:e7:54:35:69:ce:07:ca:06:22:65:66:29:
96:3c:a8:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz42zTQ79OfRpHao8LzwdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxM2Q1ZTEzNzlmZWE5ZDFkMGY3MjU2ZWQwZmM5MTgzYmU3
NGZlZmIwHhcNMjUwODA0MDcwMjIwWhcNMjUwODA1MDcwMjIwWjAzMTEwLwYDVQQD
Eyg3NzRhOWQ2N2M1MzQwOWI2NmFkMzNlNmJjNWFmNDMxMTNmYTU5NDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dhsxxdU0dUQkMLmMyS3CfsUaX8D
ZjhGy1fqp8j36jNtvomgXfTFwkC1P7+NsX/WlabwPLIt2sXXVsaaQFUfWLwbTP09
+nnFtq3AVj2/vjbknCcEpETl8LOLtUAN46TYM0X4NMM67Dd241whrS5a5e2N78Rb
E9WWRWcJfFk+WQ0FPO0fc9pxQx8HcvrwAzMwPRegw+/L/KRMpM8jBAVUawA+yp37
s1iFnWWNAsNqntefsARvlTCba0A4SGzdf9UCqO2rnb+TASrOUr86ph/HNQt3J7gB
RYi/lu8vEUJgJlCrc82hUwVJ2P91OnVA0cAEToh7R5odDxJgSzKYpBh++QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdKnWfFNAm2atM+a8WvQxE/pZQwMB8GA1UdIwQY
MBaAFGE9XhN5/qnR0PclbtD8kYO+dP77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mZDYwNzAtOWUwYi00MzNhLThhNzUt
N2Y3M2E0NjcxYTFlLzEvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mZDYwNzAtOWUwYi00MzNhLThhNzUtN2Y3M2E0NjcxYTFl
LzEvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLZdBoQU
jaAT0qAAZLMHa/zwrHdMAfxisl8wqcNo/Tuc9CywZUdzEA16JzL4ryLfTLq3Nfh9
d3qktgwVJ3oVFBJ4SBs7SRb0RwIZuWi3ZNVhvmin1T0X7/fVKTzZzYJBWa+VBoKR
UnyBRuUjPr9jUEjfxB6GSC+PxIH1AUoq7+3MOTOdi7SrBub9ABORJ8HqTXZf014X
ejZzTHY5cEedaP+DPjkFZh5qXjcerQiJUy8MaQU9XoRU9WY62GgCNCvPHdX7VHDZ
iJaqztq2lJzePS7T9hj7oi3Dho18VfIYyxrS/NNNbKcAt4gmiiGzr1am51Q1ac4H
ygYiZWYpljyomw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:53 2025 by rpki-client