Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: 2M8qlJqd81iuhi0pirHM3sWcZDXYwoioQlqpFI1Py3g=
Subject key identifier: 59:D4:72:5B:2A:74:4E:D1:65:AF:89:32:54:9A:2A:04:31:C1:39:EA
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 019848531846BCCCF5936A42FF4ECE05AB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 10E2
Signing time: Sat 26 Jul 2025 20:01:01 +0000
Manifest this update: Sat 26 Jul 2025 20:01:01 +0000
Manifest next update: Sun 27 Jul 2025 20:01:01 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: fb8HvchTQwoKKCYn+RtErA1eGtWjtTTuQ9rsQU6PPAM=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:18:46:bc:cc:f5:93:6a:42:ff:4e:ce:05:ab:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Jul 26 20:01:01 2025 GMT
Not After : Jul 27 20:01:01 2025 GMT
Subject: CN=59d4725b2a744ed165af8932549a2a0431c139ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:c1:5a:7d:5b:16:c3:9b:a3:5a:88:97:61:
61:3b:ad:6b:55:92:03:48:11:dc:36:82:4f:d2:29:
1d:44:be:e5:e5:0d:3c:a6:b4:1f:8f:da:c2:32:10:
e6:17:2d:6f:03:59:7a:14:b7:b3:85:39:4b:1c:74:
c2:82:24:5c:3b:cc:8f:d3:b8:e4:47:a6:9f:b8:39:
82:6c:f9:c1:4a:cd:bc:bc:62:51:80:8e:fb:6d:7a:
f6:59:7e:7b:df:12:98:18:96:04:e1:37:fe:aa:30:
64:e1:52:c8:62:c8:48:ad:20:af:84:70:aa:9b:90:
cc:1e:a2:e1:34:cf:3a:e2:4b:7c:02:9b:c6:53:34:
c6:59:8c:9a:48:3b:a1:0c:e0:1a:02:f5:5a:b0:b8:
58:2d:2f:bb:27:f2:10:b1:51:98:e3:ad:04:6c:71:
a0:7b:2e:f8:1d:64:cc:8b:af:49:83:47:67:80:5b:
5c:4d:29:da:11:bf:fe:37:b6:db:31:53:bd:8a:a8:
18:cd:41:05:08:50:9a:fd:a9:53:c1:de:4e:6f:3f:
8d:24:6e:a1:3e:d0:e8:3b:d4:b9:34:90:05:2d:ed:
bc:b3:7f:5c:eb:be:1b:03:67:9f:86:02:45:ec:c7:
89:5d:c5:c2:20:c0:60:58:b6:48:9c:83:e9:b9:10:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:72:5B:2A:74:4E:D1:65:AF:89:32:54:9A:2A:04:31:C1:39:EA
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:87:e5:93:f5:4e:1d:29:30:dd:4a:6a:d0:f4:16:5e:10:3c:
a3:77:25:14:03:1f:bf:44:8b:17:a1:41:ce:47:d3:3f:f4:3b:
0d:b7:af:ab:d1:d9:7c:a0:11:10:72:bd:ae:90:8a:99:64:82:
a3:4d:62:04:af:39:33:ca:13:3b:26:d0:3c:1b:43:72:1d:4d:
32:af:73:0f:65:ab:02:fb:07:d6:6d:6c:0d:4a:f8:54:eb:c9:
15:1b:ba:7e:09:4a:6f:ac:96:91:71:10:74:bd:aa:ed:3f:c0:
b9:3b:16:21:6a:74:e8:5c:e9:f9:90:10:66:71:db:c7:10:9b:
25:35:fa:89:b3:cc:2b:75:6a:0b:7a:ed:f7:3e:d3:64:05:40:
b2:ad:b3:c1:6c:bf:a3:26:28:bb:54:36:95:d3:d8:74:97:f4:
eb:36:bb:1d:7a:9e:86:fc:3a:29:52:52:7d:34:2b:cd:3e:1a:
83:7c:5c:9d:fe:ad:b2:42:86:19:1d:fb:d1:a9:6c:90:e4:7b:
e1:f1:de:1b:33:9b:09:68:9f:2b:ba:36:96:85:ff:b7:69:18:
25:77:87:7e:74:75:d2:fb:e8:38:88:b8:c2:8d:f2:4b:de:73:
92:6b:3a:96:4e:6e:f5:fa:e8:de:76:a4:fb:05:fd:6a:bd:85:
79:7e:e2:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUxhGvMz1k2pC/07OBauYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OGNjODUwNmZlZGJiNTA2MWRlOTkyNWIwN2Q2NDk5MThh
MTk5MjYwHhcNMjUwNzI2MjAwMTAxWhcNMjUwNzI3MjAwMTAxWjAzMTEwLwYDVQQD
Eyg1OWQ0NzI1YjJhNzQ0ZWQxNjVhZjg5MzI1NDlhMmEwNDMxYzEzOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMnBWn1bFsObo1qIl2FhO61rVZID
SBHcNoJP0ikdRL7l5Q08prQfj9rCMhDmFy1vA1l6FLezhTlLHHTCgiRcO8yP07jk
R6afuDmCbPnBSs28vGJRgI77bXr2WX573xKYGJYE4Tf+qjBk4VLIYshIrSCvhHCq
m5DMHqLhNM864kt8ApvGUzTGWYyaSDuhDOAaAvVasLhYLS+7J/IQsVGY460EbHGg
ey74HWTMi69Jg0dngFtcTSnaEb/+N7bbMVO9iqgYzUEFCFCa/alTwd5Obz+NJG6h
PtDoO9S5NJAFLe28s39c674bA2efhgJF7MeJXcXCIMBgWLZInIPpuRD2KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnUclsqdE7RZa+JMlSaKgQxwTnqMB8GA1UdIwQY
MBaAFNWMyFBv7btQYd6ZJbB9ZJkYoZkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEt
YmIzZTgxOWYzZGRjLzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEtYmIzZTgxOWYzZGRj
LzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIflk/VO
HSkw3Upq0PQWXhA8o3clFAMfv0SLF6FBzkfTP/Q7Dbevq9HZfKAREHK9rpCKmWSC
o01iBK85M8oTOybQPBtDch1NMq9zD2WrAvsH1m1sDUr4VOvJFRu6fglKb6yWkXEQ
dL2q7T/AuTsWIWp06Fzp+ZAQZnHbxxCbJTX6ibPMK3VqC3rt9z7TZAVAsq2zwWy/
oyYou1Q2ldPYdJf06za7HXqehvw6KVJSfTQrzT4ag3xcnf6tskKGGR370alskOR7
4fHeGzObCWifK7o2loX/t2kYJXeHfnR10vvoOIi4wo3yS95zkms6lk5u9fro3nak
+wX9ar2FeX7ilA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:41:40 2025 by rpki-client