Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: YKFoG8jD4Z2q9q3Su11UjI3Ce5nFRl9TEp0QRz2wHf8=
Subject key identifier: A6:E6:52:D6:29:D4:30:30:CC:D6:5A:86:28:E4:6E:02:24:EF:AA:35
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 019833B9A4B4EF27A7476CBE058F219E036F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 128A
Signing time: Tue 22 Jul 2025 20:01:00 +0000
Manifest this update: Tue 22 Jul 2025 20:01:00 +0000
Manifest next update: Wed 23 Jul 2025 20:01:00 +0000
Files and hashes: 1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: ryie8efxhBmjT6pGztVcvn7Cc2cg8jhcQuYwKX6ikJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:b9:a4:b4:ef:27:a7:47:6c:be:05:8f:21:9e:03:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Jul 22 20:01:00 2025 GMT
Not After : Jul 23 20:01:00 2025 GMT
Subject: CN=a6e652d629d43030ccd65a8628e46e0224efaa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:4f:ab:09:67:1a:c0:43:6f:47:e7:51:e0:
47:a4:de:01:c8:f3:70:2a:a5:a6:ce:74:4c:7e:1f:
9f:f0:b8:89:08:4c:ce:d5:cf:0d:bf:03:70:8c:91:
71:93:9d:b3:df:80:22:ab:09:d1:2c:50:b4:55:52:
3f:c3:25:49:92:f7:26:88:ff:0d:cd:29:8d:98:77:
25:aa:be:52:29:e5:8a:1c:19:9f:06:34:bd:52:a7:
67:93:86:97:cf:dc:30:ed:2e:ae:c4:f9:61:02:d8:
a4:34:73:d4:55:73:2d:54:62:6e:2c:0b:8c:26:85:
3c:93:81:0e:fb:1d:e1:71:05:50:ff:17:e2:fb:ed:
f5:7b:14:c6:1e:27:b3:c1:bd:28:56:88:22:27:98:
2e:00:8f:65:29:ad:81:62:40:cf:1e:67:72:58:e9:
0e:bc:f8:44:df:24:67:86:f5:a3:2a:44:fc:91:89:
a5:f1:1b:69:e3:53:41:a1:b7:81:63:68:9b:7a:36:
2e:63:83:66:fc:5f:29:fb:c6:e0:a6:d8:f1:f6:79:
96:bd:a7:d6:fb:bd:83:57:69:2e:99:1d:29:d4:4c:
a6:20:80:37:ec:d2:74:59:09:0a:f9:92:bb:cd:91:
11:7d:02:9b:29:80:54:ba:2a:3a:3b:73:57:fb:ab:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E6:52:D6:29:D4:30:30:CC:D6:5A:86:28:E4:6E:02:24:EF:AA:35
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cf:22:e9:39:e7:86:42:62:36:28:af:23:30:76:3e:d3:f4:
89:37:49:1f:2f:16:e8:cd:2e:3e:8b:de:e7:89:72:b0:a6:da:
5e:b8:c6:ca:85:c1:31:52:a3:04:f8:70:4c:c3:ea:e3:39:57:
89:2f:d5:6c:29:36:7b:76:b0:29:bc:95:18:8d:a8:87:cc:b9:
71:87:f3:d7:25:0c:6d:a3:57:97:82:f2:bc:59:be:94:16:15:
28:aa:37:ca:88:01:25:14:2a:06:4f:93:ba:ed:41:12:9e:88:
b0:e0:c1:3d:ca:04:24:a0:e8:4a:6e:b7:ee:15:8d:5e:ec:8c:
a1:55:76:30:0d:80:3e:8b:6c:bf:ab:f5:99:2f:75:e6:91:f0:
f3:ad:e4:7e:83:47:a2:7f:66:87:e0:c3:c3:50:39:c0:14:09:
1a:6f:ac:9c:d8:e9:28:85:b8:ab:ee:ed:cf:b6:b9:8f:5a:be:
33:d5:e4:b9:e3:7c:f4:b3:61:5e:a8:81:69:6e:2c:9b:66:45:
3f:00:71:bb:3f:9d:9a:79:61:d9:db:f9:66:0f:24:96:08:65:
99:46:78:0e:a7:94:e7:7d:c2:15:aa:1a:3b:83:b0:4e:90:13:
44:06:90:58:58:cc:10:4d:ec:0d:88:cc:56:5a:0b:13:17:6a:
84:30:7a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgzuaS07yenR2y+BY8hngNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4
NTBhYmUwHhcNMjUwNzIyMjAwMTAwWhcNMjUwNzIzMjAwMTAwWjAzMTEwLwYDVQQD
EyhhNmU2NTJkNjI5ZDQzMDMwY2NkNjVhODYyOGU0NmUwMjI0ZWZhYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cFPqwlnGsBDb0fnUeBHpN4ByPNw
KqWmznRMfh+f8LiJCEzO1c8NvwNwjJFxk52z34AiqwnRLFC0VVI/wyVJkvcmiP8N
zSmNmHclqr5SKeWKHBmfBjS9Uqdnk4aXz9ww7S6uxPlhAtikNHPUVXMtVGJuLAuM
JoU8k4EO+x3hcQVQ/xfi++31exTGHiezwb0oVogiJ5guAI9lKa2BYkDPHmdyWOkO
vPhE3yRnhvWjKkT8kYml8Rtp41NBobeBY2ibejYuY4Nm/F8p+8bgptjx9nmWvafW
+72DV2kumR0p1EymIIA37NJ0WQkK+ZK7zZERfQKbKYBUuio6O3NX+6uTswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbmUtYp1DAwzNZahijkbgIk76o1MB8GA1UdIwQY
MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt
YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0
LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHs8i6Tnn
hkJiNiivIzB2PtP0iTdJHy8W6M0uPove54lysKbaXrjGyoXBMVKjBPhwTMPq4zlX
iS/VbCk2e3awKbyVGI2oh8y5cYfz1yUMbaNXl4LyvFm+lBYVKKo3yogBJRQqBk+T
uu1BEp6IsODBPcoEJKDoSm637hWNXuyMoVV2MA2APotsv6v1mS915pHw863kfoNH
on9mh+DDw1A5wBQJGm+snNjpKIW4q+7tz7a5j1q+M9XkueN89LNhXqiBaW4sm2ZF
PwBxuz+dmnlh2dv5Zg8klghlmUZ4DqeU533CFaoaO4OwTpATRAaQWFjMEE3sDYjM
VloLExdqhDB6sQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:00 2025 by rpki-client