Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
File: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft (raw, json)
Hash identifier: YcLbdMZqXkxkK++BSgTkC2e4Q9eEHHQSuU6ZTLfDMr0=
Subject key identifier: 70:70:22:FC:B1:6B:DC:B3:88:27:8E:DD:85:E9:E1:E1:DD:A3:EE:9F
Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
Certificate issuer: /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Certificate serial: 01984A415087EF940AABBE2399F8D1D4F9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
Manifest number: 01EF
Signing time: Sun 27 Jul 2025 05:00:51 +0000
Manifest this update: Sun 27 Jul 2025 05:00:51 +0000
Manifest next update: Mon 28 Jul 2025 05:00:51 +0000
Files and hashes: 1: FRrrM4yAfnu6pnFh5wowlvqVDWA.roa (hash: Hv8/4ynB8VDf7OX62BWXwwqyCndg3mMaA+WdwhpJSlw=)
2: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl (hash: rLxfUAKMXLcpFGpi8YlWsu0W4d0Umg+AJxZyYBX1dpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:50:87:ef:94:0a:ab:be:23:99:f8:d1:d4:f9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Validity
Not Before: Jul 27 05:00:51 2025 GMT
Not After : Jul 28 05:00:51 2025 GMT
Subject: CN=707022fcb16bdcb388278edd85e9e1e1dda3ee9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:47:5f:4a:66:ec:75:08:2e:5f:8c:be:14:
fe:e3:f9:d4:6d:2c:bb:51:fc:8c:83:19:60:e2:a8:
48:30:41:6a:6e:f8:a2:04:e4:4c:27:74:e0:bc:7e:
60:35:35:e3:10:d9:fc:db:1a:5b:82:9f:bb:91:59:
23:b5:c8:28:79:3e:d2:8c:a6:23:88:88:59:9c:51:
1d:6f:cf:62:d5:db:31:e0:33:f6:3f:5c:1e:82:4e:
27:6b:1c:a4:19:01:86:ba:89:6b:6f:41:6b:ee:c8:
c0:41:04:64:d7:d1:c9:b6:d3:22:a4:e0:1d:c5:95:
ca:4d:c7:c7:71:ff:ec:15:66:b2:d5:ea:c0:c0:f2:
0b:a0:bd:0f:09:ea:24:4e:cd:1f:f7:16:01:56:7d:
d0:2d:a6:ab:d7:28:e4:08:48:02:39:66:b2:9e:80:
87:3b:aa:dc:f2:fe:bb:1e:45:bb:0b:1c:06:7b:07:
be:f1:54:68:52:1b:2d:6e:8a:ad:37:bd:cf:d8:4f:
1e:fb:80:59:dc:8c:ee:83:fa:6f:dc:e2:0b:d8:4b:
1c:5c:4a:2e:f9:84:83:4d:d6:e5:13:e3:ef:a1:de:
a3:0f:b1:f4:02:38:5a:5f:7c:ad:c7:c2:2a:0a:61:
50:52:e0:55:84:06:90:26:24:45:5c:7a:73:3c:98:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:70:22:FC:B1:6B:DC:B3:88:27:8E:DD:85:E9:E1:E1:DD:A3:EE:9F
X509v3 Authority Key Identifier:
keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:12:3e:d3:a0:d1:95:0a:52:8f:b3:ae:7b:92:ec:78:c8:f1:
cd:ec:dc:90:49:78:9d:b2:f7:a4:70:2c:58:f1:ea:1c:5c:a8:
0d:3e:48:73:85:3d:d9:86:7d:33:1b:17:79:dd:23:74:54:fc:
ee:d2:d0:1a:89:d7:29:57:05:9c:82:c2:ff:30:3e:31:a7:e7:
38:36:20:e5:12:20:5d:00:c3:dd:8e:50:e9:57:5f:00:f8:ed:
70:e8:9e:46:0b:21:dd:ed:ea:5a:c9:68:60:e3:f2:8c:a1:49:
33:45:90:34:2c:5a:77:b6:1b:97:7a:77:62:b9:7a:f4:b0:a4:
a8:da:f1:ce:7c:94:ef:18:8e:45:dc:7d:56:57:79:32:74:c8:
c8:b5:6f:97:fd:4e:ea:db:29:7a:9b:4c:60:63:45:9c:21:93:
00:79:1c:75:1a:98:47:97:3a:9c:e2:af:36:58:6f:9e:02:fe:
50:b7:ae:a2:9b:9b:a2:90:63:5b:44:3d:04:1a:be:09:2c:97:
0d:87:aa:17:ac:ad:1b:9a:9b:65:b5:5a:5e:9f:f5:25:9e:55:
ea:8e:87:01:ee:b6:5c:39:b9:f7:62:19:33:ed:a0:9d:d7:eb:
af:22:82:75:c5:26:af:39:37:22:f7:ca:94:80:49:4b:fb:b2:
eb:86:0e:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQVCH75QKq74jmfjR1Pm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyN2E5OTUwOWVkNTFkZjkzYTMzZjJhNGUyZmQ2NjJkMWM4
ZDY2MGIwHhcNMjUwNzI3MDUwMDUxWhcNMjUwNzI4MDUwMDUxWjAzMTEwLwYDVQQD
Eyg3MDcwMjJmY2IxNmJkY2IzODgyNzhlZGQ4NWU5ZTFlMWRkYTNlZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfNHX0pm7HUILl+MvhT+4/nUbSy7
UfyMgxlg4qhIMEFqbviiBORMJ3TgvH5gNTXjENn82xpbgp+7kVkjtcgoeT7SjKYj
iIhZnFEdb89i1dsx4DP2P1wegk4naxykGQGGuolrb0Fr7sjAQQRk19HJttMipOAd
xZXKTcfHcf/sFWay1erAwPILoL0PCeokTs0f9xYBVn3QLaar1yjkCEgCOWaynoCH
O6rc8v67HkW7CxwGewe+8VRoUhstboqtN73P2E8e+4BZ3Izug/pv3OIL2EscXEou
+YSDTdblE+Pvod6jD7H0AjhaX3ytx8IqCmFQUuBVhAaQJiRFXHpzPJivPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBwIvyxa9yziCeO3YXp4eHdo+6fMB8GA1UdIwQY
MBaAFGJ6mVCe1R35OjPypOL9Zi0cjWYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMt
MDEyOGQ5NzE3OWU4LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMtMDEyOGQ5NzE3OWU4
LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRI+06DR
lQpSj7Oue5LseMjxzezckEl4nbL3pHAsWPHqHFyoDT5Ic4U92YZ9MxsXed0jdFT8
7tLQGonXKVcFnILC/zA+MafnODYg5RIgXQDD3Y5Q6VdfAPjtcOieRgsh3e3qWslo
YOPyjKFJM0WQNCxad7Ybl3p3Yrl69LCkqNrxznyU7xiORdx9Vld5MnTIyLVvl/1O
6tspeptMYGNFnCGTAHkcdRqYR5c6nOKvNlhvngL+ULeuopubopBjW0Q9BBq+CSyX
DYeqF6ytG5qbZbVaXp/1JZ5V6o6HAe62XDm592IZM+2gndfrryKCdcUmrzk3IvfK
lIBJS/uy64YOiA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:09 2025 by rpki-client