Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: FVXlou+qhwsLlIU4jNbHkJh+LtT49++ktzCpEH/k6kU=
Subject key identifier: BC:59:F4:31:EF:B1:3E:4F:8C:B0:98:88:51:5B:BD:40:03:AE:E5:2A
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 01983FBD0C8BFFE8A924AD26798D38D309EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0DC1
Signing time: Fri 25 Jul 2025 04:00:10 +0000
Manifest this update: Fri 25 Jul 2025 04:00:10 +0000
Manifest next update: Sat 26 Jul 2025 04:00:10 +0000
Files and hashes: 1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: uwK5PlEyW7zuND8iox2SQi9mYoNzIvu1jWIdHFfW4nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:0c:8b:ff:e8:a9:24:ad:26:79:8d:38:d3:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Jul 25 04:00:10 2025 GMT
Not After : Jul 26 04:00:10 2025 GMT
Subject: CN=bc59f431efb13e4f8cb09888515bbd4003aee52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:af:80:0e:03:17:00:97:ab:84:be:25:91:
56:cf:4f:1c:84:ce:f7:a3:c3:21:b2:1b:63:26:e3:
eb:3a:89:fc:17:72:a2:8a:a7:8b:49:32:3e:6e:7f:
78:0f:c4:6f:c1:a5:69:2b:17:75:d2:c4:7a:47:7f:
9d:15:65:cf:5d:53:e4:82:63:84:8c:07:e9:11:cf:
8a:35:79:36:8b:0d:eb:06:e5:37:17:ed:ce:3e:ff:
5d:48:6e:8a:b0:ef:53:c9:ea:f0:87:68:04:f6:64:
8f:22:f2:f0:5c:3e:f4:3b:a9:bf:1a:c1:af:76:89:
80:a3:8d:ee:21:d0:61:47:87:a4:78:c6:10:c7:16:
31:e2:38:4f:80:a6:d4:47:79:9a:7e:89:0e:5f:ab:
ad:64:b5:9c:df:ae:4b:62:a7:9e:e3:51:22:09:27:
78:52:b8:eb:88:00:a4:6d:27:6a:5d:5f:02:26:cc:
4e:e1:b6:ef:a0:7f:51:ad:af:65:ce:a6:06:15:51:
35:17:88:4d:2b:db:75:85:45:34:ac:91:53:57:a8:
d2:74:e6:1e:a0:b0:bf:36:3e:0e:d4:9b:2f:7c:38:
90:cd:45:9c:da:75:f8:d3:31:34:3b:89:5b:97:64:
37:32:d8:e8:8f:3b:7d:c0:23:8f:52:39:45:7e:14:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:F4:31:EF:B1:3E:4F:8C:B0:98:88:51:5B:BD:40:03:AE:E5:2A
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ef:5b:49:88:c0:c1:ab:56:d0:7a:d8:c8:ef:e8:50:7a:b3:
36:a5:e7:59:3b:43:79:2a:ea:02:01:69:e0:9e:01:44:f4:67:
bd:c9:20:d0:61:1f:79:e9:b7:f3:8e:e0:08:43:e1:c9:7c:76:
21:8b:c0:12:f3:de:04:eb:65:a5:2c:e6:2a:a6:db:86:6e:83:
c7:fa:26:5a:4e:50:0d:69:2b:18:2c:c3:56:57:5c:cc:24:db:
f3:cf:a0:02:12:95:5c:6c:6e:e0:80:11:1f:14:c3:bc:b0:44:
0b:46:63:16:f8:b1:1f:15:5f:9c:ec:6e:2b:5a:07:a2:07:7b:
ce:18:3e:ba:bc:34:83:ac:b7:96:8a:5f:a1:fa:0d:ad:be:f3:
49:a5:b5:5a:e5:fb:01:8d:d4:de:4e:6c:ff:17:b2:33:38:76:
36:15:5b:bd:69:f6:82:eb:77:43:0a:1a:c3:3a:ea:15:75:72:
36:b9:68:7f:1c:ab:fe:b7:e1:a5:a5:db:9a:d2:61:de:f2:fc:
53:b5:d2:53:79:2c:0b:15:07:9a:a5:c2:bf:c3:45:71:a4:bb:
b6:59:32:cf:7a:a5:9a:4b:0e:7e:08:4e:c4:eb:9f:a4:bf:29:
24:d5:04:89:5d:b6:23:2a:5c:df:95:44:f2:07:11:27:41:45:
09:aa:c2:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg/vQyL/+ipJK0meY040wnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl
ZTRjZTEwHhcNMjUwNzI1MDQwMDEwWhcNMjUwNzI2MDQwMDEwWjAzMTEwLwYDVQQD
EyhiYzU5ZjQzMWVmYjEzZTRmOGNiMDk4ODg1MTViYmQ0MDAzYWVlNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLSvgA4DFwCXq4S+JZFWz08chM73
o8MhshtjJuPrOon8F3KiiqeLSTI+bn94D8RvwaVpKxd10sR6R3+dFWXPXVPkgmOE
jAfpEc+KNXk2iw3rBuU3F+3OPv9dSG6KsO9Tyerwh2gE9mSPIvLwXD70O6m/GsGv
domAo43uIdBhR4ekeMYQxxYx4jhPgKbUR3mafokOX6utZLWc365LYqee41EiCSd4
UrjriACkbSdqXV8CJsxO4bbvoH9Rra9lzqYGFVE1F4hNK9t1hUU0rJFTV6jSdOYe
oLC/Nj4O1JsvfDiQzUWc2nX40zE0O4lbl2Q3Mtjojzt9wCOPUjlFfhRhzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxZ9DHvsT5PjLCYiFFbvUADruUqMB8GA1UdIwQY
MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt
MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz
LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMO9bSYjA
watW0HrYyO/oUHqzNqXnWTtDeSrqAgFp4J4BRPRnvckg0GEfeem3847gCEPhyXx2
IYvAEvPeBOtlpSzmKqbbhm6Dx/omWk5QDWkrGCzDVldczCTb88+gAhKVXGxu4IAR
HxTDvLBEC0ZjFvixHxVfnOxuK1oHogd7zhg+urw0g6y3lopfofoNrb7zSaW1WuX7
AY3U3k5s/xeyMzh2NhVbvWn2gut3QwoawzrqFXVyNrlofxyr/rfhpaXbmtJh3vL8
U7XSU3ksCxUHmqXCv8NFcaS7tlkyz3qlmksOfghOxOufpL8pJNUEiV22Iypc35VE
8gcRJ0FFCarCCw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:58:28 2025 by rpki-client