Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: LXm3VcjsPx1GUw8K5EZie8t/o+qyeU4ioQlTvKgpjSI=
Subject key identifier: 8B:55:95:41:A9:78:4C:65:F5:6D:7B:42:76:C4:11:BC:4E:DA:B1:2F
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 0198451AB527CBF25DF83957E713942C386E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 11BB
Signing time: Sat 26 Jul 2025 05:00:34 +0000
Manifest this update: Sat 26 Jul 2025 05:00:34 +0000
Manifest next update: Sun 27 Jul 2025 05:00:34 +0000
Files and hashes: 1: 3ir5WkvJIRxtwZei2sctSN0sCz0.roa (hash: kbUd9aHqn6kQ8QUhYDDaCsn+6zI4AKFQfFGDo83vd6o=)
2: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: nEqwD++u6kfM/yMn9Nh3rBk8waRxxYgzd574Be9Vths=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:b5:27:cb:f2:5d:f8:39:57:e7:13:94:2c:38:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Jul 26 05:00:34 2025 GMT
Not After : Jul 27 05:00:34 2025 GMT
Subject: CN=8b559541a9784c65f56d7b4276c411bc4edab12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:2e:c1:00:a9:41:b5:e3:8c:9c:c1:60:1e:
59:da:02:3c:88:ff:63:df:89:99:cf:a1:e0:2a:25:
10:74:d2:fe:9c:03:62:4b:48:f9:63:17:36:bb:18:
67:55:2e:d3:19:89:66:6e:41:e5:34:50:de:22:58:
60:12:b8:7f:49:c3:ba:e2:89:3b:19:fe:73:36:03:
b0:b1:e1:28:97:87:4a:01:84:aa:03:a5:b0:ff:da:
2b:ef:e8:69:b5:dc:e0:50:f2:c1:52:7d:dc:32:77:
ed:84:bf:15:14:72:9e:b1:f9:b3:11:f0:e8:f2:34:
75:32:91:0c:f5:5e:fa:0e:95:17:5e:44:41:ca:b9:
2b:b6:95:b3:d1:e3:14:bf:37:fc:59:29:58:5c:3a:
56:0f:19:4a:22:37:9c:7b:ec:61:d2:e6:93:3b:e5:
db:93:7f:4a:53:b7:8b:6f:96:79:b5:80:62:d3:ae:
e2:33:a9:41:31:b8:d9:13:9f:aa:6f:4b:e1:a5:73:
21:1a:77:14:e9:4f:69:1a:a4:83:31:a7:9f:ac:e1:
d2:e3:e5:be:2d:bb:df:85:be:1b:4b:8a:d4:0c:f7:
63:a9:db:ee:13:89:c4:4f:9c:cd:9e:e9:b4:5f:06:
d4:11:6b:df:56:68:82:71:63:a8:58:af:b5:36:6a:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:55:95:41:A9:78:4C:65:F5:6D:7B:42:76:C4:11:BC:4E:DA:B1:2F
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ed:af:79:79:d5:39:1c:49:db:a5:d1:1d:7b:3a:59:a8:95:
61:bc:c0:59:5e:2b:09:7b:f3:19:58:de:5f:de:8f:91:11:b0:
21:36:bd:44:3c:e0:b6:ea:5f:3e:7a:8d:24:de:9c:10:ab:f3:
96:c8:06:c0:4d:fa:de:fe:ec:ea:32:3c:73:0d:7a:8a:10:ae:
5a:25:e9:03:7e:23:7f:9e:44:52:88:87:05:30:9c:bb:ee:5f:
63:83:5b:02:e3:c4:ed:3e:6e:56:b4:e7:fc:4a:33:27:e0:d7:
9f:bb:37:71:e3:44:12:55:eb:35:f4:b8:6b:ca:51:27:0a:bc:
7f:ab:8a:48:99:b6:f3:2b:f4:b0:9b:e5:d9:f0:db:64:a5:f5:
c9:e6:60:4a:73:50:58:f7:cf:6b:0f:c9:32:e8:f9:4b:50:2d:
7e:75:79:96:24:07:9d:91:d1:9e:13:e1:8d:33:be:6e:83:09:
22:e6:45:ac:56:bc:48:5d:44:a3:e4:4e:d6:dd:e8:8d:4e:26:
ac:b3:83:09:69:c5:61:e5:86:80:6f:00:68:d4:8d:20:7d:95:
d8:01:33:4d:9e:27:52:35:07:41:ee:c0:5e:48:3c:5f:77:0b:
e1:09:bb:fb:e1:cd:52:53:0d:1d:fc:23:01:cc:67:ee:c5:27:
ed:53:85:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGrUny/Jd+DlX5xOULDhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNWI1Y2Y5ZTI5OTEyNDQ4Y2JiYmM4NmQyMDU2MTg5OWNk
YjEwNGQwHhcNMjUwNzI2MDUwMDM0WhcNMjUwNzI3MDUwMDM0WjAzMTEwLwYDVQQD
Eyg4YjU1OTU0MWE5Nzg0YzY1ZjU2ZDdiNDI3NmM0MTFiYzRlZGFiMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzwuwQCpQbXjjJzBYB5Z2gI8iP9j
34mZz6HgKiUQdNL+nANiS0j5Yxc2uxhnVS7TGYlmbkHlNFDeIlhgErh/ScO64ok7
Gf5zNgOwseEol4dKAYSqA6Ww/9or7+hptdzgUPLBUn3cMnfthL8VFHKesfmzEfDo
8jR1MpEM9V76DpUXXkRByrkrtpWz0eMUvzf8WSlYXDpWDxlKIjece+xh0uaTO+Xb
k39KU7eLb5Z5tYBi067iM6lBMbjZE5+qb0vhpXMhGncU6U9pGqSDMaefrOHS4+W+
Lbvfhb4bS4rUDPdjqdvuE4nET5zNnum0XwbUEWvfVmiCcWOoWK+1NmribQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItVlUGpeExl9W17QnbEEbxO2rEvMB8GA1UdIwQY
MBaAFGJbXPnimRJEjLu8htIFYYmc2xBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUt
YTU4NmIwN2FkZDcyLzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUtYTU4NmIwN2FkZDcy
LzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe2veXnV
ORxJ26XRHXs6WaiVYbzAWV4rCXvzGVjeX96PkRGwITa9RDzgtupfPnqNJN6cEKvz
lsgGwE363v7s6jI8cw16ihCuWiXpA34jf55EUoiHBTCcu+5fY4NbAuPE7T5uVrTn
/EozJ+DXn7s3ceNEElXrNfS4a8pRJwq8f6uKSJm28yv0sJvl2fDbZKX1yeZgSnNQ
WPfPaw/JMuj5S1AtfnV5liQHnZHRnhPhjTO+boMJIuZFrFa8SF1Eo+RO1t3ojU4m
rLODCWnFYeWGgG8AaNSNIH2V2AEzTZ4nUjUHQe7AXkg8X3cL4Qm7++HNUlMNHfwj
Acxn7sUn7VOF5w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:10 2025 by rpki-client