Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: CwNYwNKGJpauCxl/7PZ0y4lupWdNE+pKRYekZdvkbE8=
Subject key identifier: ED:61:51:E9:D8:F4:4E:83:B9:57:12:EC:7F:18:EF:01:A7:43:64:C7
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 0198492E1FE2162D1D318A84E3C7DFBC7E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 00:00:16 +0000
Manifest this update: Sun 27 Jul 2025 00:00:16 +0000
Manifest next update: Mon 28 Jul 2025 00:00:16 +0000
Files and hashes: 1: XCar8SNrGHj7mUVHaBXEnUvq1KY.roa (hash: p4pcecBBeg+02FW19VP+ZJ5O31/pLj9QyP3szv9c6Sg=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: zbekKNY56U8WBo4l8VIjtB3FcQ/r6XdWlFNQJ9Vsmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:2e:1f:e2:16:2d:1d:31:8a:84:e3:c7:df:bc:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Jul 27 00:00:16 2025 GMT
Not After : Jul 28 00:00:16 2025 GMT
Subject: CN=ed6151e9d8f44e83b95712ec7f18ef01a74364c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:d4:4a:66:8a:ac:1f:a5:71:5a:47:aa:8b:
6f:ec:5a:cd:5c:4f:27:4a:2f:a8:75:3c:10:b4:da:
20:d8:8e:b8:8f:75:66:52:ac:f4:34:35:d6:57:eb:
ce:22:42:d3:7a:96:4d:d1:cf:c9:cc:09:cd:95:d5:
59:fb:15:4a:ab:4e:20:36:79:1b:b7:07:a9:df:0c:
b6:f3:24:2e:07:6c:43:95:ca:5c:13:7f:2b:91:0d:
06:11:9e:2b:33:73:5d:46:48:38:a4:46:58:3e:31:
e0:9d:1c:22:fe:5f:9d:6b:d7:a3:57:07:67:c0:91:
7e:d4:58:e6:40:7d:a0:3e:71:1b:66:28:b9:b9:42:
96:ac:15:9a:12:7a:09:df:9a:37:87:9c:ec:48:dc:
96:22:98:2f:db:98:67:e6:bd:55:38:95:0d:06:8d:
16:74:a7:60:1e:9a:fc:bb:18:a1:15:2c:c2:74:bf:
0b:8e:9b:c7:7d:bb:fe:f9:cf:b8:a5:3b:84:23:01:
e7:7b:82:d6:b0:90:3a:20:30:58:1e:c6:36:e3:2c:
d3:8e:d1:ee:45:d5:7b:ca:3a:6d:6b:bc:aa:fd:e1:
aa:93:df:97:43:34:a4:c2:fb:ae:a5:2e:22:66:df:
0e:57:1c:fc:5b:8b:3c:73:57:ec:5b:61:a4:80:15:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:61:51:E9:D8:F4:4E:83:B9:57:12:EC:7F:18:EF:01:A7:43:64:C7
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:09:cf:4e:84:63:8a:c1:87:ea:9d:2d:fc:fc:16:13:57:fb:
62:54:ae:10:24:25:67:9f:22:f1:12:05:55:5c:84:29:db:03:
d7:d9:ba:51:05:8b:85:23:50:2b:69:9b:e2:d1:e4:a9:79:78:
ac:57:95:df:1a:69:8b:67:84:bf:ad:86:62:28:cd:df:1c:07:
51:1a:31:60:0d:95:a6:c9:11:c6:f4:e1:06:15:8f:8c:e2:0f:
b4:06:48:b4:be:f7:2e:1d:85:b1:9b:8e:c5:95:f4:dd:62:4a:
ea:36:08:26:42:4e:27:41:42:1a:02:5a:b3:43:8e:09:f9:a0:
43:99:62:8d:67:c7:26:dd:2c:be:29:30:d8:a5:af:5d:dc:2f:
89:d8:1a:24:bf:37:2e:dd:e0:53:c0:c8:1b:28:ee:7d:37:6b:
12:64:a6:70:4b:82:83:f2:f6:a2:a6:4d:b5:33:2c:60:cc:7d:
10:77:cf:e7:75:7b:ce:02:e3:05:be:f7:18:21:6e:9a:48:3c:
ee:fd:f5:9a:57:7a:d1:79:57:af:a7:9f:f8:1a:57:be:7f:57:
bb:f3:eb:77:d2:8a:85:d2:bb:b0:ea:38:79:32:af:19:2a:3f:
ea:58:fc:83:77:68:a5:33:bd:5e:9d:d1:96:b3:28:04:45:58:
13:72:de:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJLh/iFi0dMYqE48ffvH6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjI3NmRiOWQ5YjM0Y2RlYzI2MjBjNzI1N2RjNWFkNGFl
YjgzMmQwHhcNMjUwNzI3MDAwMDE2WhcNMjUwNzI4MDAwMDE2WjAzMTEwLwYDVQQD
EyhlZDYxNTFlOWQ4ZjQ0ZTgzYjk1NzEyZWM3ZjE4ZWYwMWE3NDM2NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza3USmaKrB+lcVpHqotv7FrNXE8n
Si+odTwQtNog2I64j3VmUqz0NDXWV+vOIkLTepZN0c/JzAnNldVZ+xVKq04gNnkb
twep3wy28yQuB2xDlcpcE38rkQ0GEZ4rM3NdRkg4pEZYPjHgnRwi/l+da9ejVwdn
wJF+1FjmQH2gPnEbZii5uUKWrBWaEnoJ35o3h5zsSNyWIpgv25hn5r1VOJUNBo0W
dKdgHpr8uxihFSzCdL8LjpvHfbv++c+4pTuEIwHne4LWsJA6IDBYHsY24yzTjtHu
RdV7yjpta7yq/eGqk9+XQzSkwvuupS4iZt8OVxz8W4s8c1fsW2GkgBURTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1hUenY9E6DuVcS7H8Y7wGnQ2THMB8GA1UdIwQY
MBaAFGIidtudmzTN7CYgxyV9xa1K64MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUt
ZTZlZTU4MzRjOTk1LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUtZTZlZTU4MzRjOTk1
LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAnPToRj
isGH6p0t/PwWE1f7YlSuECQlZ58i8RIFVVyEKdsD19m6UQWLhSNQK2mb4tHkqXl4
rFeV3xppi2eEv62GYijN3xwHURoxYA2VpskRxvThBhWPjOIPtAZItL73Lh2FsZuO
xZX03WJK6jYIJkJOJ0FCGgJas0OOCfmgQ5lijWfHJt0svikw2KWvXdwvidgaJL83
Lt3gU8DIGyjufTdrEmSmcEuCg/L2oqZNtTMsYMx9EHfP53V7zgLjBb73GCFumkg8
7v31mld60XlXr6ef+BpXvn9Xu/Prd9KKhdK7sOo4eTKvGSo/6lj8g3dopTO9Xp3R
lrMoBEVYE3Lemg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:41 2025 by rpki-client