Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: rIW12qcCsmHJR6PtKr6G7IkAdQbSv7Aku4KQWaXTBYY=
Subject key identifier: F1:2B:30:C6:F7:DC:CD:DE:64:DD:71:CE:BF:91:F6:A3:03:F1:52:DC
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 019857589371B8F676B895890599DACCB86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 18:01:19 +0000
Manifest this update: Tue 29 Jul 2025 18:01:19 +0000
Manifest next update: Wed 30 Jul 2025 18:01:19 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: K7sS6Fl34to7HchWzoC3f5gV1Iinr85KwLhlFzELsLg=)
2: GriK4KCJf_pD-27uHbjP7oEGNcE.roa (hash: ZFT+MzdQyFzyxpSKYu1uYqlJsuD4hjBAizP1SCZZEkg=)
3: e59o4nflKfkRbUwhU4WwMTxJI_Y.roa (hash: qghzj0Mw1zkJvf6+G2QT/sr1eaEcjZizZylknw1LbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:58:93:71:b8:f6:76:b8:95:89:05:99:da:cc:b8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Jul 29 18:01:19 2025 GMT
Not After : Jul 30 18:01:19 2025 GMT
Subject: CN=f12b30c6f7dccdde64dd71cebf91f6a303f152dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:e7:a6:b0:7d:b9:0d:88:90:69:2d:12:d3:
f8:51:f8:0b:27:6f:bd:c6:c0:17:d8:8e:f4:6d:2e:
b3:71:67:16:59:3a:d6:b6:c1:b6:55:ed:5c:7d:27:
e2:4d:53:62:c3:35:38:2d:b1:b9:f8:96:b6:e1:29:
aa:bf:43:17:41:15:1a:e6:2b:c2:9e:40:8c:16:b6:
5e:05:f1:8c:79:fc:54:6a:c6:51:b6:7a:27:b7:bb:
68:3d:82:d3:e5:1f:c8:b5:e1:09:15:8e:0f:26:be:
11:fb:8b:0f:17:81:71:4c:9a:a4:52:5c:2e:8c:21:
fa:5a:ce:31:22:04:be:5f:0a:f9:f7:e0:c3:bd:e4:
71:55:68:a8:50:8d:ae:00:23:41:31:86:1a:d8:32:
40:f3:b8:78:5b:01:b4:e0:ac:b8:92:84:3c:df:30:
6e:c7:ed:5c:9f:a8:dd:54:31:da:f4:1d:41:24:ca:
39:dc:b0:1b:9c:68:4e:0a:ad:e5:d3:91:bd:28:53:
00:8e:49:6c:38:50:6a:0f:af:2a:6e:68:34:b2:bd:
ee:5b:9f:0b:a5:06:ee:21:4a:8f:28:97:a0:9c:71:
ea:cb:ca:f6:59:ea:ef:82:21:72:64:e0:3f:8a:ea:
f2:b9:10:f1:d3:06:31:f8:67:15:03:01:af:98:b1:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2B:30:C6:F7:DC:CD:DE:64:DD:71:CE:BF:91:F6:A3:03:F1:52:DC
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:2e:84:5f:e2:42:94:f3:02:2e:84:df:61:71:92:76:b1:
c7:31:0e:e9:ad:d3:46:63:00:7e:2f:49:e1:45:5e:fa:bf:67:
6c:e4:7b:6d:d8:13:12:50:04:4e:7c:1b:fc:4c:35:4c:57:3a:
9e:88:66:92:36:4f:65:f6:7a:f3:8a:5f:94:99:6f:6d:65:be:
d2:be:74:13:d8:fd:1a:77:a1:c0:f9:75:c3:58:8e:24:dd:0e:
2d:06:f3:70:b2:24:84:64:f6:a1:14:44:78:7a:18:d3:43:c2:
e9:24:7e:81:0f:e9:9b:a1:5b:d8:1a:46:6b:de:49:84:3a:e0:
63:ca:d6:61:fd:97:aa:53:72:56:fd:cd:4c:af:5b:bb:07:9d:
8e:02:31:7e:89:84:00:da:b0:bc:28:e0:52:e1:df:06:57:8e:
e5:02:3d:72:c7:6f:94:6c:35:4e:d3:55:bc:1d:2c:15:82:dd:
fe:98:3e:9e:e4:b4:9e:21:7d:29:66:79:5a:1e:e9:8e:cf:ee:
fb:5d:52:3a:30:45:75:19:25:84:6a:5b:fd:be:b5:e6:0c:1a:
fd:27:99:77:eb:52:43:1d:e2:9b:3e:49:ba:f7:60:7c:3f:d4:
07:17:b8:d6:8a:1a:58:c9:3f:ee:cf:5c:50:9f:77:ae:a7:74:
b9:bd:88:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXWJNxuPZ2uJWJBZnazLhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODdkNGM5OGIzZWQ4YTcxN2M3ZDZlNDU1NTRkMzUzZWEz
ZTA1Y2EwHhcNMjUwNzI5MTgwMTE5WhcNMjUwNzMwMTgwMTE5WjAzMTEwLwYDVQQD
EyhmMTJiMzBjNmY3ZGNjZGRlNjRkZDcxY2ViZjkxZjZhMzAzZjE1MmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseznprB9uQ2IkGktEtP4UfgLJ2+9
xsAX2I70bS6zcWcWWTrWtsG2Ve1cfSfiTVNiwzU4LbG5+Ja24Smqv0MXQRUa5ivC
nkCMFrZeBfGMefxUasZRtnont7toPYLT5R/IteEJFY4PJr4R+4sPF4FxTJqkUlwu
jCH6Ws4xIgS+Xwr59+DDveRxVWioUI2uACNBMYYa2DJA87h4WwG04Ky4koQ83zBu
x+1cn6jdVDHa9B1BJMo53LAbnGhOCq3l05G9KFMAjklsOFBqD68qbmg0sr3uW58L
pQbuIUqPKJegnHHqy8r2WervgiFyZOA/iuryuRDx0wYx+GcVAwGvmLGmtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPErMMb33M3eZN1xzr+R9qMD8VLcMB8GA1UdIwQY
MBaAFNGH1MmLPtinF8fW5FVU01PqPgXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMt
NTAyOTY3ZGZjYzQ4LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMtNTAyOTY3ZGZjYzQ4
LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEsuhF/i
QpTzAi6E32FxknaxxzEO6a3TRmMAfi9J4UVe+r9nbOR7bdgTElAETnwb/Ew1TFc6
nohmkjZPZfZ684pflJlvbWW+0r50E9j9GnehwPl1w1iOJN0OLQbzcLIkhGT2oRRE
eHoY00PC6SR+gQ/pm6Fb2BpGa95JhDrgY8rWYf2XqlNyVv3NTK9buwedjgIxfomE
ANqwvCjgUuHfBleO5QI9csdvlGw1TtNVvB0sFYLd/pg+nuS0niF9KWZ5Wh7pjs/u
+11SOjBFdRklhGpb/b615gwa/SeZd+tSQx3imz5JuvdgfD/UBxe41ooaWMk/7s9c
UJ93rqd0ub2IIg==
-----END CERTIFICATE-----
Generated at Wed Jul 30 02:41:59 2025 by rpki-client