Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: teuL5ziEHp58i1kflBAYPxmZMcTYy4MnAxb6BcSSx3Y=
Subject key identifier: 0A:82:87:35:30:31:15:D1:C2:D3:3C:EC:0D:8D:87:F6:1A:36:B7:EB
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 01984A4152573CCA429758049716ED531B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 065D
Signing time: Sun 27 Jul 2025 05:00:51 +0000
Manifest this update: Sun 27 Jul 2025 05:00:51 +0000
Manifest next update: Mon 28 Jul 2025 05:00:51 +0000
Files and hashes: 1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=)
2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: CdeS9icZ+WfirDSsKVTyBdFhsYEE37Y4fm9uEdtpU4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:52:57:3c:ca:42:97:58:04:97:16:ed:53:1b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Jul 27 05:00:51 2025 GMT
Not After : Jul 28 05:00:51 2025 GMT
Subject: CN=0a828735303115d1c2d33cec0d8d87f61a36b7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:8c:1e:a0:a2:3e:83:ea:ee:ee:3f:0b:73:
96:44:b9:55:6c:1d:d6:eb:a5:04:7a:43:50:2d:41:
30:33:55:3f:08:09:94:73:0a:3c:a3:fe:3f:f1:43:
53:07:5f:cb:b5:8f:8b:9f:41:bc:71:bf:0c:94:ea:
8e:1b:b9:38:cd:ec:73:69:39:58:47:53:85:58:bb:
7c:42:89:16:9f:09:e3:02:8f:30:08:36:d2:b0:3d:
cc:51:2b:4d:b9:c5:c5:db:f7:29:07:72:9f:c0:5e:
b9:25:4f:66:6a:03:25:13:81:93:b4:43:b2:48:b0:
8f:6a:69:cc:df:ba:6c:66:b5:f1:f6:92:cd:cf:ba:
dc:3c:3e:2e:be:ab:6b:68:f8:ff:86:1e:19:f8:63:
ad:3a:64:1c:83:08:6c:8a:74:5e:38:46:bb:0e:fb:
17:ee:b4:40:cf:32:a2:aa:84:99:93:0c:c7:ff:db:
d3:88:dd:f9:db:55:79:7d:1e:27:47:82:ac:50:98:
b0:d5:38:39:9e:f1:0a:fa:16:e0:6d:72:00:4a:59:
d6:45:b2:72:c7:fa:9d:8f:40:ac:75:5b:ba:6a:e1:
7a:0e:06:87:0a:13:9b:e4:38:75:c5:e8:c2:8f:4c:
12:b2:96:89:36:8b:3a:0a:11:5a:40:f4:db:dd:9d:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:82:87:35:30:31:15:D1:C2:D3:3C:EC:0D:8D:87:F6:1A:36:B7:EB
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:13:9f:26:4c:af:74:06:14:ec:81:7f:94:87:f0:84:3c:e9:
32:d4:2f:cd:bc:06:83:bc:98:4e:1e:a9:52:1b:5d:4c:b9:bf:
2e:22:c4:4f:90:11:1c:a6:57:a2:e3:f8:82:59:87:5f:ec:7d:
57:09:56:b7:5a:8f:0a:ef:58:4e:c5:e0:23:d6:57:4d:8f:21:
e1:80:57:f8:73:50:cb:be:52:6d:92:6c:6c:b0:d5:c5:3e:c0:
94:98:dd:22:ba:7d:6f:07:28:59:33:01:12:1a:e8:b8:ae:f4:
9d:fe:ff:18:a0:12:b7:c6:41:da:67:b1:f8:96:88:37:d6:7d:
81:b0:6c:59:72:5e:59:54:2e:a9:a0:0d:c4:95:3a:af:85:1f:
e2:bf:4e:10:f1:07:87:fb:6c:d3:59:19:77:a2:14:74:bc:5f:
ac:66:6f:bd:e2:a0:84:8e:7e:f9:96:5c:1e:45:9c:78:ad:3f:
94:04:c4:ba:7f:2b:52:65:bd:39:cd:6f:a8:b6:cc:2c:4a:9e:
5d:f3:10:80:a7:2e:19:f1:9c:46:0c:65:b2:c2:cd:ce:a0:bf:
84:5d:77:14:b2:d8:6d:dc:8b:15:b4:bf:fe:ef:c7:c7:16:cc:
76:77:b4:d1:98:78:8d:b9:ce:83:f3:c9:62:8e:ce:5b:9d:ab:
05:e3:93:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQVJXPMpCl1gElxbtUxtFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmQ1NzBiNTQyZTczMDI4ODVkMzY3NDE4ZGY4MDJmOTk0
OTRmMjYwHhcNMjUwNzI3MDUwMDUxWhcNMjUwNzI4MDUwMDUxWjAzMTEwLwYDVQQD
EygwYTgyODczNTMwMzExNWQxYzJkMzNjZWMwZDhkODdmNjFhMzZiN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dCMHqCiPoPq7u4/C3OWRLlVbB3W
66UEekNQLUEwM1U/CAmUcwo8o/4/8UNTB1/LtY+Ln0G8cb8MlOqOG7k4zexzaTlY
R1OFWLt8QokWnwnjAo8wCDbSsD3MUStNucXF2/cpB3KfwF65JU9magMlE4GTtEOy
SLCPamnM37psZrXx9pLNz7rcPD4uvqtraPj/hh4Z+GOtOmQcgwhsinReOEa7DvsX
7rRAzzKiqoSZkwzH/9vTiN3521V5fR4nR4KsUJiw1Tg5nvEK+hbgbXIASlnWRbJy
x/qdj0CsdVu6auF6DgaHChOb5Dh1xejCj0wSspaJNos6ChFaQPTb3Z1N0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqChzUwMRXRwtM87A2Nh/YaNrfrMB8GA1UdIwQY
MBaAFGAtVwtULnMCiF02dBjfgC+ZSU8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zN2EwYWYtYzNmNi00NWQ2LWExNDQt
YTNkM2RlZGIyNjA4LzEvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zN2EwYWYtYzNmNi00NWQ2LWExNDQtYTNkM2RlZGIyNjA4
LzEvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhOfJkyv
dAYU7IF/lIfwhDzpMtQvzbwGg7yYTh6pUhtdTLm/LiLET5ARHKZXouP4glmHX+x9
VwlWt1qPCu9YTsXgI9ZXTY8h4YBX+HNQy75SbZJsbLDVxT7AlJjdIrp9bwcoWTMB
EhrouK70nf7/GKASt8ZB2mex+JaIN9Z9gbBsWXJeWVQuqaANxJU6r4Uf4r9OEPEH
h/ts01kZd6IUdLxfrGZvveKghI5++ZZcHkWceK0/lATEun8rUmW9Oc1vqLbMLEqe
XfMQgKcuGfGcRgxlssLNzqC/hF13FLLYbdyLFbS//u/HxxbMdne00Zh4jbnOg/PJ
Yo7OW52rBeOTOw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:39:47 2025 by rpki-client