Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: jql0D99WU6MBhZ1aO/g5uLtNNpNHbwVNDoqYUPYh0bw=
Subject key identifier: 4F:D2:A3:8F:BE:52:29:82:64:EA:C5:34:20:0B:9B:D2:0D:56:67:F0
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 019849661640FA6CBD43006401E2C8F38CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:01:23 +0000
Manifest this update: Sun 27 Jul 2025 01:01:23 +0000
Manifest next update: Mon 28 Jul 2025 01:01:23 +0000
Files and hashes: 1: UGjGolH12_x3cCDDDs-wfhhaN4U.roa (hash: FV6D5mk0nwiH6BRySmQ169aN1Z1SEVl4Kc/yfJEULos=)
2: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: kM7Sgrs2DufhMRZO4J50cOHCtJ1LFd7P8TU5lHBdAIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:16:40:fa:6c:bd:43:00:64:01:e2:c8:f3:8c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: Jul 27 01:01:23 2025 GMT
Not After : Jul 28 01:01:23 2025 GMT
Subject: CN=4fd2a38fbe52298264eac534200b9bd20d5667f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:fe:59:86:2d:7f:84:f0:9d:f4:9c:c0:82:
de:08:ad:66:c2:a3:44:c9:79:83:d3:23:bd:f4:2a:
c1:48:4e:ed:4d:00:57:3f:5f:99:d6:71:3d:54:51:
6b:d9:99:de:04:46:a1:b4:c0:61:5c:fb:d7:85:fd:
37:12:ff:d8:f9:76:d4:eb:66:b0:a4:88:df:20:64:
4e:03:c7:6c:2b:08:7c:da:6f:ab:ab:db:2c:36:b1:
7e:e3:86:03:9f:eb:08:ef:ff:f5:46:20:7c:b4:d8:
cf:74:36:06:a5:07:3f:cb:5d:ac:62:92:f4:d2:17:
ad:3c:37:a6:43:08:23:82:4f:23:d9:2a:c1:8b:e4:
42:53:11:df:1f:4f:0e:95:a7:74:0b:6b:1b:46:42:
5e:29:84:67:a4:c7:a0:d5:b0:14:8c:11:f4:b0:e0:
56:6e:1a:e5:99:aa:6d:41:cb:2c:0e:b5:66:3e:fa:
72:5a:78:ff:be:13:db:54:ba:23:a8:d3:25:f3:d5:
cd:a5:79:12:ce:fc:82:a0:2b:bd:43:ae:95:98:cf:
1b:12:92:a7:94:15:4b:16:09:84:71:e9:31:ae:5c:
09:21:a1:0d:34:a6:ef:7e:01:d8:d1:1e:72:53:2a:
fb:66:05:8a:ea:f4:dc:49:60:5b:aa:d2:7d:b4:10:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D2:A3:8F:BE:52:29:82:64:EA:C5:34:20:0B:9B:D2:0D:56:67:F0
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a5:15:f3:7c:d6:21:92:72:ad:cd:d1:c5:91:90:b6:74:fc:
03:9a:9d:4a:30:69:c2:81:15:d1:cd:90:ba:66:36:41:35:91:
e0:22:19:61:03:db:dc:c4:a5:37:2b:df:cb:f2:3c:fc:ad:14:
6a:fd:f3:ff:57:2c:36:60:ee:c0:b2:f3:c8:07:48:f7:d9:4f:
ed:11:f5:f9:9f:84:4a:35:98:fe:19:8c:67:d6:cd:c2:60:5a:
8a:f5:53:cd:ca:63:02:3f:16:54:3d:f8:3c:e9:f7:a1:eb:26:
bb:a0:e1:bd:26:3d:1c:6b:47:99:92:31:aa:96:ec:f3:07:25:
f2:2c:4b:8b:e5:e1:a3:8c:1e:d7:35:44:95:f0:c8:a9:e8:b0:
25:e0:31:90:27:e2:9f:e5:92:63:22:bf:85:77:ce:bd:2c:7e:
d7:c1:e5:5f:2d:4d:f3:0b:ff:ee:48:6e:c1:81:8c:92:fe:75:
42:ba:1e:b0:de:83:cf:92:7f:fc:24:a6:c6:72:36:47:2b:e6:
9f:69:cb:68:9d:f2:90:37:34:9d:d4:85:ef:31:f3:20:51:98:
e0:e0:a6:8b:ed:5b:df:ea:3d:3e:f3:3b:3c:e2:80:a4:d9:1a:
11:68:46:84:1b:4c:15:0d:cf:2e:91:98:5b:f0:55:8d:a2:74:
9f:8a:70:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZhZA+my9QwBkAeLI84ysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTEwYTFjNjZhMGU2MDAyNGFiYWI2MmQzMzI2ODJjNzEz
YWEzNDcwHhcNMjUwNzI3MDEwMTIzWhcNMjUwNzI4MDEwMTIzWjAzMTEwLwYDVQQD
Eyg0ZmQyYTM4ZmJlNTIyOTgyNjRlYWM1MzQyMDBiOWJkMjBkNTY2N2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuf+WYYtf4TwnfScwILeCK1mwqNE
yXmD0yO99CrBSE7tTQBXP1+Z1nE9VFFr2ZneBEahtMBhXPvXhf03Ev/Y+XbU62aw
pIjfIGROA8dsKwh82m+rq9ssNrF+44YDn+sI7//1RiB8tNjPdDYGpQc/y12sYpL0
0hetPDemQwgjgk8j2SrBi+RCUxHfH08Olad0C2sbRkJeKYRnpMeg1bAUjBH0sOBW
bhrlmaptQcssDrVmPvpyWnj/vhPbVLojqNMl89XNpXkSzvyCoCu9Q66VmM8bEpKn
lBVLFgmEcekxrlwJIaENNKbvfgHY0R5yUyr7ZgWK6vTcSWBbqtJ9tBADQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/So4++UimCZOrFNCALm9INVmfwMB8GA1UdIwQY
MBaAFGDhChxmoOYAJKurYtMyaCxxOqNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2Mt
NjQxNzcwNzUxN2Q2LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2MtNjQxNzcwNzUxN2Q2
LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6UV83zW
IZJyrc3RxZGQtnT8A5qdSjBpwoEV0c2QumY2QTWR4CIZYQPb3MSlNyvfy/I8/K0U
av3z/1csNmDuwLLzyAdI99lP7RH1+Z+ESjWY/hmMZ9bNwmBaivVTzcpjAj8WVD34
POn3oesmu6DhvSY9HGtHmZIxqpbs8wcl8ixLi+Xho4we1zVElfDIqeiwJeAxkCfi
n+WSYyK/hXfOvSx+18HlXy1N8wv/7khuwYGMkv51QroesN6Dz5J//CSmxnI2Ryvm
n2nLaJ3ykDc0ndSF7zHzIFGY4OCmi+1b3+o9PvM7POKApNkaEWhGhBtMFQ3PLpGY
W/BVjaJ0n4pwXA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:04:01 2025 by rpki-client