Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: a/mj06sAsm8NncKGVGLLaOJkfHBq5qPxAqTzrnorX1Y=
Subject key identifier: C7:A0:AA:EE:C5:C5:70:0B:57:A3:62:11:8C:8C:B2:BA:72:DF:B3:71
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019826D9A581EAC71FFDCB4E38A0FAA017EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 15EF
Signing time: Sun 20 Jul 2025 08:00:54 +0000
Manifest this update: Sun 20 Jul 2025 08:00:54 +0000
Manifest next update: Mon 21 Jul 2025 08:00:54 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: AKpiZKYJ4yjmPzBHBKGcOzNLov1Po+NeQbGSXxN35u4=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:a5:81:ea:c7:1f:fd:cb:4e:38:a0:fa:a0:17:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Jul 20 08:00:54 2025 GMT
Not After : Jul 21 08:00:54 2025 GMT
Subject: CN=c7a0aaeec5c5700b57a362118c8cb2ba72dfb371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:e9:5c:b4:e7:bd:c0:69:79:70:28:ec:10:
d5:95:2d:e1:20:70:ba:71:2a:a9:51:7b:3f:bc:6b:
dc:f1:9c:52:c5:f2:04:0c:33:90:3a:da:b5:4f:42:
25:d3:da:8d:c5:4c:03:80:0a:c1:f2:c8:2b:4a:51:
76:c1:b3:13:c4:fc:ca:8d:df:f2:e9:f0:ff:26:7e:
5f:34:64:50:f5:51:4c:cf:2c:22:5e:b9:a6:da:50:
bd:9c:f7:8a:05:cb:9c:c1:17:6d:8c:d8:e8:5c:ca:
e4:bd:ff:51:6f:ac:ef:69:3b:69:3a:8d:c1:2c:22:
e6:4a:0c:81:db:ce:77:bc:9e:51:bd:e7:34:73:8b:
85:af:7d:9d:37:e3:13:d6:d1:05:57:4b:c9:30:4e:
dd:8e:c3:ff:61:c5:69:64:4e:51:e3:a8:ce:b4:5e:
da:a7:ae:33:1d:07:fc:ce:18:aa:36:46:f9:dd:d9:
47:55:fd:cd:05:6f:0c:1d:b0:78:ca:c8:3e:03:5d:
6f:01:8e:51:af:8e:b6:f2:84:3d:1b:73:80:37:f2:
66:a5:12:62:7b:d3:38:d5:79:2d:e0:93:05:93:c6:
eb:f6:7f:e6:f2:08:bf:53:59:d7:be:8d:86:ab:a1:
92:2e:62:08:95:73:67:13:80:93:40:a7:41:1c:64:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:AA:EE:C5:C5:70:0B:57:A3:62:11:8C:8C:B2:BA:72:DF:B3:71
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:06:f3:bc:14:c8:bd:f2:63:ee:3b:2d:ac:2f:0c:bc:a3:a4:
1c:34:c8:2b:b0:b6:93:6c:0e:72:5b:f1:f7:a8:5b:e2:ec:48:
ec:a2:b5:4c:71:73:fa:7a:af:ac:f3:82:d5:f8:04:b0:49:91:
ae:cd:06:ec:a4:d5:0b:6e:1d:33:c2:9d:bd:0f:33:71:fd:2f:
65:32:f1:9c:b9:58:af:cd:0e:61:60:0c:77:f6:27:06:3c:3c:
fc:ad:bb:1b:d6:39:48:55:e5:34:bd:0f:fa:3c:2f:bc:7a:23:
d1:26:9b:ee:24:d6:16:bf:ce:ff:3f:e8:31:00:df:95:75:62:
6a:21:57:44:44:f9:f2:2f:91:31:6c:aa:07:aa:cc:65:8b:07:
59:5a:df:63:3a:11:dd:a3:17:e5:82:11:b3:b5:25:c2:d7:b7:
d5:aa:e2:d4:9d:54:f7:6d:91:17:90:a9:02:1b:7a:0f:1a:44:
6c:ae:f7:21:0a:5f:68:be:25:c7:b7:dd:a8:59:cc:74:28:37:
91:ea:06:43:21:32:5e:0e:42:ea:df:ff:75:73:44:da:6f:7a:
54:7f:a2:3f:28:f2:f1:70:e3:f2:b0:98:85:94:7c:4d:53:60:
c4:37:b5:a3:cf:56:7d:8e:42:f3:76:f2:c1:64:54:55:30:b6:
88:76:6e:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgm2aWB6scf/ctOOKD6oBfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODgzYTc5Nzg5ZDlmNjU4MTUyOTJmMThkNDk4MGJhOWM1
ZWQyMjEwHhcNMjUwNzIwMDgwMDU0WhcNMjUwNzIxMDgwMDU0WjAzMTEwLwYDVQQD
EyhjN2EwYWFlZWM1YzU3MDBiNTdhMzYyMTE4YzhjYjJiYTcyZGZiMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFrpXLTnvcBpeXAo7BDVlS3hIHC6
cSqpUXs/vGvc8ZxSxfIEDDOQOtq1T0Il09qNxUwDgArB8sgrSlF2wbMTxPzKjd/y
6fD/Jn5fNGRQ9VFMzywiXrmm2lC9nPeKBcucwRdtjNjoXMrkvf9Rb6zvaTtpOo3B
LCLmSgyB2853vJ5Rvec0c4uFr32dN+MT1tEFV0vJME7djsP/YcVpZE5R46jOtF7a
p64zHQf8zhiqNkb53dlHVf3NBW8MHbB4ysg+A11vAY5Rr4628oQ9G3OAN/JmpRJi
e9M41Xkt4JMFk8br9n/m8gi/U1nXvo2Gq6GSLmIIlXNnE4CTQKdBHGQKpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMegqu7FxXALV6NiEYyMsrpy37NxMB8GA1UdIwQY
MBaAFGOIOnl4nZ9lgVKS8Y1JgLqcXtIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYt
MzVkMDU5NWUxMmYwLzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYtMzVkMDU5NWUxMmYw
LzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwbzvBTI
vfJj7jstrC8MvKOkHDTIK7C2k2wOclvx96hb4uxI7KK1THFz+nqvrPOC1fgEsEmR
rs0G7KTVC24dM8KdvQ8zcf0vZTLxnLlYr80OYWAMd/YnBjw8/K27G9Y5SFXlNL0P
+jwvvHoj0Sab7iTWFr/O/z/oMQDflXViaiFXRET58i+RMWyqB6rMZYsHWVrfYzoR
3aMX5YIRs7Ulwte31ari1J1U922RF5CpAht6DxpEbK73IQpfaL4lx7fdqFnMdCg3
keoGQyEyXg5C6t//dXNE2m96VH+iPyjy8XDj8rCYhZR8TVNgxDe1o89WfY5C83by
wWRUVTC2iHZuMA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:28:20 2025 by rpki-client