Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
File: yAH8mVpSGvH1Atnq8S1mIaZMr00.mft (raw, json)
Hash identifier: +/ktKfNDGiodhzZEgGLxNI6M2/eoI2wWIwK/woMmPi0=
Subject key identifier: 95:95:4D:6B:3D:5B:9B:FC:71:70:F8:EF:35:D9:FE:3F:AC:D1:05:07
Authority key identifier: C8:01:FC:99:5A:52:1A:F1:F5:02:D9:EA:F1:2D:66:21:A6:4C:AF:4D
Certificate issuer: /CN=c801fc995a521af1f502d9eaf12d6621a64caf4d
Certificate serial: 01984B55309ED9D2A4DCEE3D886B43A5D77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAH8mVpSGvH1Atnq8S1mIaZMr00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 10:02:10 +0000
Manifest this update: Sun 27 Jul 2025 10:02:10 +0000
Manifest next update: Mon 28 Jul 2025 10:02:10 +0000
Files and hashes: 1: yAH8mVpSGvH1Atnq8S1mIaZMr00.crl (hash: qHq7RxMOG9aKVfoPV3qgHSQt24MXycNomA3MVqghdRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAH8mVpSGvH1Atnq8S1mIaZMr00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:30:9e:d9:d2:a4:dc:ee:3d:88:6b:43:a5:d7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c801fc995a521af1f502d9eaf12d6621a64caf4d
Validity
Not Before: Jul 27 10:02:10 2025 GMT
Not After : Jul 28 10:02:10 2025 GMT
Subject: CN=95954d6b3d5b9bfc7170f8ef35d9fe3facd10507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:e9:d4:1e:64:0d:3c:e1:46:21:3b:6f:9a:
f4:cf:a0:ec:5f:54:90:e3:15:d1:f0:5d:6d:58:94:
3a:d6:0a:67:ca:62:d8:3b:e9:4e:db:f2:e2:06:37:
df:06:bd:f0:fe:f6:00:de:40:96:d8:7d:e1:9a:18:
96:eb:eb:92:9f:5a:1a:4c:76:8c:e5:b7:71:0c:d8:
91:5b:0d:83:4e:d3:53:d2:28:87:b6:63:e0:f6:7f:
b6:98:42:9d:b7:30:bc:35:71:4f:f2:7c:4e:92:ea:
85:54:9e:81:b3:5f:d0:ea:53:fa:cb:eb:f7:63:0f:
35:9d:94:81:aa:1d:ba:b8:fe:dc:c5:56:cd:42:cd:
eb:67:29:fd:cb:3c:59:0e:ae:ba:9b:d6:ab:7f:a9:
a4:9e:b9:8b:75:76:8e:af:56:6d:a9:1d:cb:81:ee:
0c:54:03:a7:e4:1f:87:4a:b2:bb:c0:e0:6a:b3:8d:
2f:77:27:d2:50:6f:87:20:f7:98:e2:76:17:e9:57:
1d:61:67:0a:bc:9a:bd:b8:4f:9d:94:8d:0d:cd:52:
39:e6:ea:07:ed:bf:b0:15:ca:8a:eb:ff:90:61:02:
e7:82:2d:7d:fd:5c:14:ec:82:ab:e4:b2:cd:34:6d:
70:53:38:cb:17:11:af:4d:c4:f0:a4:3c:ed:73:d6:
2d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:4D:6B:3D:5B:9B:FC:71:70:F8:EF:35:D9:FE:3F:AC:D1:05:07
X509v3 Authority Key Identifier:
keyid:C8:01:FC:99:5A:52:1A:F1:F5:02:D9:EA:F1:2D:66:21:A6:4C:AF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAH8mVpSGvH1Atnq8S1mIaZMr00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c2:72:e9:75:4c:1f:08:c4:77:cf:b5:82:02:4f:31:fc:a1:
40:5f:cc:ae:03:77:21:8c:f8:bd:ab:d8:d1:e2:6e:65:68:32:
0a:1e:34:c3:3e:79:05:b4:7d:d8:b4:11:61:80:30:91:11:6d:
25:6b:fd:5e:44:a9:2b:4c:66:ce:96:02:96:8e:96:b4:27:d0:
a8:0e:9d:6d:ab:40:6f:9f:a3:dc:47:04:8a:9e:74:0a:07:f7:
f1:39:43:69:fe:96:27:47:d6:14:2f:82:fb:7e:8c:bb:ef:d3:
ae:37:b7:e1:a5:be:ed:cd:ac:b1:08:fe:4b:8e:f4:16:c6:a3:
79:d9:07:f9:d8:5c:5e:f3:36:ad:98:16:c8:6b:ae:38:0d:3c:
c5:81:52:9c:38:29:46:22:b4:f7:60:9e:fc:37:30:d3:ab:c4:
d0:1f:4f:a0:5b:bc:b4:ee:1a:30:a7:80:40:a5:fd:63:11:57:
c8:06:b3:0b:f9:c0:a7:86:6c:4a:b5:a9:2c:ed:19:8f:19:41:
cb:ca:01:f8:16:84:0b:d0:61:a0:91:ad:dd:b9:b9:0c:ef:dd:
99:15:86:ee:98:5f:95:6b:1f:f1:be:52:c4:0b:86:9d:76:63:
05:84:d0:6c:83:ac:51:54:1b:72:b7:25:b1:ac:d2:67:4d:12:
e8:52:2e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVTCe2dKk3O49iGtDpdd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MDFmYzk5NWE1MjFhZjFmNTAyZDllYWYxMmQ2NjIxYTY0
Y2FmNGQwHhcNMjUwNzI3MTAwMjEwWhcNMjUwNzI4MTAwMjEwWjAzMTEwLwYDVQQD
Eyg5NTk1NGQ2YjNkNWI5YmZjNzE3MGY4ZWYzNWQ5ZmUzZmFjZDEwNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVnp1B5kDTzhRiE7b5r0z6DsX1SQ
4xXR8F1tWJQ61gpnymLYO+lO2/LiBjffBr3w/vYA3kCW2H3hmhiW6+uSn1oaTHaM
5bdxDNiRWw2DTtNT0iiHtmPg9n+2mEKdtzC8NXFP8nxOkuqFVJ6Bs1/Q6lP6y+v3
Yw81nZSBqh26uP7cxVbNQs3rZyn9yzxZDq66m9arf6mknrmLdXaOr1ZtqR3Lge4M
VAOn5B+HSrK7wOBqs40vdyfSUG+HIPeY4nYX6VcdYWcKvJq9uE+dlI0NzVI55uoH
7b+wFcqK6/+QYQLngi19/VwU7IKr5LLNNG1wUzjLFxGvTcTwpDztc9YtowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWVTWs9W5v8cXD47zXZ/j+s0QUHMB8GA1UdIwQY
MBaAFMgB/JlaUhrx9QLZ6vEtZiGmTK9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFIOG1WcFNHdkgxQXRucThTMW1JYVpNcjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iMDQxYjgtNmIyNC00NGYzLWE3NDgt
NzJjMGQ1MDkzMzRkLzEveUFIOG1WcFNHdkgxQXRucThTMW1JYVpNcjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9iMDQxYjgtNmIyNC00NGYzLWE3NDgtNzJjMGQ1MDkzMzRk
LzEveUFIOG1WcFNHdkgxQXRucThTMW1JYVpNcjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcJy6XVM
HwjEd8+1ggJPMfyhQF/MrgN3IYz4vavY0eJuZWgyCh40wz55BbR92LQRYYAwkRFt
JWv9XkSpK0xmzpYClo6WtCfQqA6dbatAb5+j3EcEip50Cgf38TlDaf6WJ0fWFC+C
+36Mu+/Trje34aW+7c2ssQj+S470FsajedkH+dhcXvM2rZgWyGuuOA08xYFSnDgp
RiK092Ce/Dcw06vE0B9PoFu8tO4aMKeAQKX9YxFXyAazC/nAp4ZsSrWpLO0ZjxlB
y8oB+BaEC9BhoJGt3bm5DO/dmRWG7phflWsf8b5SxAuGnXZjBYTQbIOsUVQbcrcl
sazSZ00S6FIuHQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:45:11 2025 by rpki-client