Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: yFsQQ5bHJiT0FIOSVEHJ3JlskjIwBh+2mT/6YsLFbeg=
Subject key identifier: 90:40:E0:DA:7A:DD:06:4A:88:43:35:0D:26:FC:E4:3F:83:CA:5D:87
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 01984965B8E342FC83E1534EF3689B711E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 1213
Signing time: Sun 27 Jul 2025 01:00:59 +0000
Manifest this update: Sun 27 Jul 2025 01:00:59 +0000
Manifest next update: Mon 28 Jul 2025 01:00:59 +0000
Files and hashes: 1: hBtuYA8NQ04R8tq6jZPsM1-BvhU.roa (hash: K70nTdo1e1FCrO48Dr3FeEO2IPCXhYeBeZlKIyFXxPc=)
2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: Oj3whWliwIslTeMmqB+hAHDKmy2R43tQ1BJQtrM0PpM=)
3: yYfUODDume9xFNHrgw8kXHPMP18.roa (hash: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b8:e3:42:fc:83:e1:53:4e:f3:68:9b:71:1e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Jul 27 01:00:59 2025 GMT
Not After : Jul 28 01:00:59 2025 GMT
Subject: CN=9040e0da7add064a8843350d26fce43f83ca5d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:66:8f:74:78:e7:75:39:b3:86:85:fc:ab:
8b:8b:aa:20:e1:a0:a8:c7:c1:67:a9:41:74:58:b4:
1c:30:31:96:36:77:d7:9e:58:a1:13:20:f7:63:27:
d0:98:64:93:20:34:a3:47:21:cb:ac:2e:9e:4a:47:
ba:3d:e3:4d:71:f2:36:5a:cc:ed:ef:15:e1:1b:20:
5a:ec:40:40:b3:57:16:f1:12:48:8d:a6:ee:3f:67:
ec:9f:a4:4d:b2:7a:80:30:35:44:d3:f0:2f:dc:f4:
27:b1:2e:09:83:cc:0c:e5:1d:67:bc:e3:6b:b9:d7:
ea:ca:e1:b5:d8:f6:04:c1:5d:0e:f8:df:a0:22:93:
67:0a:86:2d:62:97:12:d3:b0:1c:c4:31:67:4f:6e:
b4:3d:c6:a0:90:e2:40:5f:5e:64:10:35:7f:b3:de:
51:12:24:b5:62:f3:94:82:49:8c:d7:8c:85:07:f7:
c5:2a:7c:a6:86:4a:24:d1:fb:d2:24:61:78:db:39:
0e:20:63:59:45:b5:a8:c8:c4:2c:95:ce:fd:39:b8:
c2:16:4c:1b:a9:64:c3:fa:f1:16:9d:77:6f:c3:67:
d1:1c:2f:37:57:22:a4:f3:95:ec:0d:43:4c:c5:21:
07:70:b8:bc:1a:ed:19:3f:0a:1a:d7:d0:73:04:58:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:40:E0:DA:7A:DD:06:4A:88:43:35:0D:26:FC:E4:3F:83:CA:5D:87
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b9:a5:3f:84:bd:d6:29:80:56:6f:1e:5b:69:7b:d7:c1:84:
74:61:a6:72:65:fa:e3:c2:d1:1c:50:08:fc:bd:78:c1:9e:d7:
35:f4:cb:04:23:2d:16:bd:13:1f:b7:d0:43:97:df:df:dc:01:
77:0d:9e:38:8c:ab:b8:09:cc:79:44:df:a7:ad:66:aa:c2:42:
de:8a:d1:41:48:64:cf:64:f9:ce:b9:34:5c:fa:9a:46:ff:9e:
7c:00:bb:70:09:94:a5:97:aa:e3:40:e5:82:d0:64:d1:81:fd:
8f:18:dc:50:ec:08:86:bf:c0:59:d5:60:0a:d8:34:5d:1c:37:
4d:f7:8b:a0:71:84:d1:ed:8b:2e:2a:b4:24:6d:c5:0b:df:21:
cc:25:c5:7b:84:ae:a2:d3:f2:2c:6b:67:7e:4d:d4:dc:5a:2a:
c1:b0:79:d6:b7:17:41:13:a3:8a:ac:6f:2f:b0:40:bf:f0:c2:
15:2b:de:87:b3:5d:2d:4a:f1:1d:19:dd:35:0f:11:87:e2:c2:
5a:c6:36:39:de:e7:8a:ab:6f:72:24:0f:f2:20:e8:79:64:02:
bc:f6:d5:18:88:f7:24:36:60:6f:89:cf:43:70:11:dd:fd:ad:
d8:45:91:82:ce:9f:fd:b4:10:eb:5f:3d:b8:10:81:60:64:3c:
d7:20:57:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZbjjQvyD4VNO82ibcR5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ODZlMjU2ODMzMDJjMzgyNzBkMGY5MGM0YWFkMTUxOTM5
M2Q1NDUwHhcNMjUwNzI3MDEwMDU5WhcNMjUwNzI4MDEwMDU5WjAzMTEwLwYDVQQD
Eyg5MDQwZTBkYTdhZGQwNjRhODg0MzM1MGQyNmZjZTQzZjgzY2E1ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreBmj3R453U5s4aF/KuLi6og4aCo
x8FnqUF0WLQcMDGWNnfXnlihEyD3YyfQmGSTIDSjRyHLrC6eSke6PeNNcfI2Wszt
7xXhGyBa7EBAs1cW8RJIjabuP2fsn6RNsnqAMDVE0/Av3PQnsS4Jg8wM5R1nvONr
udfqyuG12PYEwV0O+N+gIpNnCoYtYpcS07AcxDFnT260PcagkOJAX15kEDV/s95R
EiS1YvOUgkmM14yFB/fFKnymhkok0fvSJGF42zkOIGNZRbWoyMQslc79ObjCFkwb
qWTD+vEWnXdvw2fRHC83VyKk85XsDUNMxSEHcLi8Gu0ZPwoa19BzBFgTnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBA4Np63QZKiEM1DSb85D+Dyl2HMB8GA1UdIwQY
MBaAFImG4laDMCw4Jw0PkMSq0VGTk9VFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt
OTM3ZGNmZjUxZTJkLzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk
LzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbmlP4S9
1imAVm8eW2l718GEdGGmcmX648LRHFAI/L14wZ7XNfTLBCMtFr0TH7fQQ5ff39wB
dw2eOIyruAnMeUTfp61mqsJC3orRQUhkz2T5zrk0XPqaRv+efAC7cAmUpZeq40Dl
gtBk0YH9jxjcUOwIhr/AWdVgCtg0XRw3TfeLoHGE0e2LLiq0JG3FC98hzCXFe4Su
otPyLGtnfk3U3FoqwbB51rcXQROjiqxvL7BAv/DCFSveh7NdLUrxHRndNQ8Rh+LC
WsY2Od7niqtvciQP8iDoeWQCvPbVGIj3JDZgb4nPQ3AR3f2t2EWRgs6f/bQQ6189
uBCBYGQ81yBXmg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:29:51 2025 by rpki-client