Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File: _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier: SJi4u+yoYZgWBrI4/wv4M4CwkI9UU0A7cmuQY9QxXao=
Subject key identifier: 4E:ED:82:0A:50:F2:D5:30:6C:0E:DA:E3:70:CA:26:E6:97:7C:3B:8E
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial: 0198537B04BAEBC7DB1A1F832BED2FC92F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number: 04C1
Signing time: Tue 29 Jul 2025 00:00:27 +0000
Manifest this update: Tue 29 Jul 2025 00:00:27 +0000
Manifest next update: Wed 30 Jul 2025 00:00:27 +0000
Files and hashes: 1: LatVmLe7_3HhJVu7rsLTHeovBKs.roa (hash: IGGEFB71BgJP92qEL3zGMAOiHYa+Of8dpxdn55D3Bac=)
2: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: PXftpKbiMDhCEwsf8s+woYpAASjR0IYyBVB0b21EyLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:04:ba:eb:c7:db:1a:1f:83:2b:ed:2f:c9:2f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Validity
Not Before: Jul 29 00:00:27 2025 GMT
Not After : Jul 30 00:00:27 2025 GMT
Subject: CN=4eed820a50f2d5306c0edae370ca26e6977c3b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:e6:43:c0:c4:ff:d5:1a:03:c5:09:52:18:
10:38:1f:d8:1c:8f:95:de:00:8f:a2:d7:25:07:f4:
e1:89:cc:a7:fa:65:c1:e9:92:ab:18:09:cd:39:4d:
41:77:bd:d0:27:1a:83:00:4d:cc:40:79:e8:e7:2a:
18:94:19:cc:7c:a1:a0:a0:81:c0:46:a0:87:aa:3e:
1c:9a:06:99:90:c7:ff:25:6a:0d:92:13:20:97:a7:
f3:40:16:43:62:9c:c6:a3:a7:fe:db:e3:af:bf:e7:
b2:11:b1:77:75:a1:de:a3:02:38:1e:c2:36:ec:38:
85:11:b7:89:65:20:ac:cb:25:4f:72:8f:1d:5f:08:
9a:68:79:63:ca:df:b3:b3:9c:f4:33:bf:2d:d2:c9:
7c:de:cd:93:bf:e3:04:b2:e0:a9:25:03:01:d5:15:
0b:e1:fa:db:42:95:ad:77:13:fc:48:87:f5:33:d7:
6c:30:29:ce:e1:7d:ed:39:f0:cb:cb:1f:34:69:51:
bc:14:ec:20:26:4e:f1:7d:f4:fe:7e:bb:e6:4d:bb:
04:c5:ed:c5:3d:8e:43:6d:a6:75:b0:02:c5:75:c5:
d5:b5:76:4f:63:1a:29:b8:57:f6:d5:06:5d:e0:1b:
b6:8b:46:41:20:1e:d8:8d:1d:d7:03:e2:c6:14:40:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:ED:82:0A:50:F2:D5:30:6C:0E:DA:E3:70:CA:26:E6:97:7C:3B:8E
X509v3 Authority Key Identifier:
keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ed:bc:51:3f:73:c9:c4:1f:5b:49:a1:b0:bb:21:e5:71:08:
5d:4f:27:43:81:17:78:fe:ab:db:24:1e:56:19:26:6b:6f:f5:
04:fa:5d:12:d4:d5:40:d9:32:0c:5a:4b:15:8b:32:39:34:b5:
42:50:22:2f:e9:54:dc:7e:23:27:dc:0c:f0:96:16:4f:e8:a8:
ba:2a:40:bb:86:c0:aa:39:5b:77:8d:3d:f3:34:8c:1b:77:f4:
f8:4f:12:01:46:76:34:75:fd:0c:15:88:5f:65:0e:3e:54:dd:
fa:e0:76:d1:c4:e1:66:20:17:12:43:01:dd:2a:8f:3c:4e:21:
26:0b:97:30:d8:54:7b:b0:2a:8b:23:e4:d9:fc:a8:ee:fe:c5:
50:63:95:ff:f5:3d:af:50:4d:5c:0d:1c:54:b8:62:29:ef:0c:
1c:04:ec:22:b0:b7:eb:d0:e7:05:4c:f5:b8:a9:56:ed:e2:74:
e0:c8:08:6e:95:01:62:4c:67:cb:ae:b1:a9:39:91:f4:23:e4:
8c:3c:5b:7e:82:de:f2:36:0c:90:bc:8b:21:31:14:6f:96:b7:
53:30:b9:48:bb:8f:04:1a:de:fc:62:40:88:9e:5e:33:12:c7:
1c:52:e8:eb:67:64:0a:7f:d4:61:9d:62:cd:72:a2:28:b5:80:
1f:5f:78:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTewS668fbGh+DK+0vyS+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMmRmMjk3ZGIxYWYwMzc2YTVhMmE3MmU2OThhN2ViMjg3
YWYzYWYwHhcNMjUwNzI5MDAwMDI3WhcNMjUwNzMwMDAwMDI3WjAzMTEwLwYDVQQD
Eyg0ZWVkODIwYTUwZjJkNTMwNmMwZWRhZTM3MGNhMjZlNjk3N2MzYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMXmQ8DE/9UaA8UJUhgQOB/YHI+V
3gCPotclB/Thicyn+mXB6ZKrGAnNOU1Bd73QJxqDAE3MQHno5yoYlBnMfKGgoIHA
RqCHqj4cmgaZkMf/JWoNkhMgl6fzQBZDYpzGo6f+2+Ovv+eyEbF3daHeowI4HsI2
7DiFEbeJZSCsyyVPco8dXwiaaHljyt+zs5z0M78t0sl83s2Tv+MEsuCpJQMB1RUL
4frbQpWtdxP8SIf1M9dsMCnO4X3tOfDLyx80aVG8FOwgJk7xffT+frvmTbsExe3F
PY5DbaZ1sALFdcXVtXZPYxopuFf21QZd4Bu2i0ZBIB7YjR3XA+LGFEAyEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7tggpQ8tUwbA7a43DKJuaXfDuOMB8GA1UdIwQY
MBaAFP8t8pfbGvA3aloqcuaYp+soevOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jZDUxZTgtNjU5NC00YTU4LWJkNTct
MDFmMjhmNGQ0OWY2LzEvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jZDUxZTgtNjU5NC00YTU4LWJkNTctMDFmMjhmNGQ0OWY2
LzEvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuO28UT9z
ycQfW0mhsLsh5XEIXU8nQ4EXeP6r2yQeVhkma2/1BPpdEtTVQNkyDFpLFYsyOTS1
QlAiL+lU3H4jJ9wM8JYWT+iouipAu4bAqjlbd4098zSMG3f0+E8SAUZ2NHX9DBWI
X2UOPlTd+uB20cThZiAXEkMB3SqPPE4hJguXMNhUe7AqiyPk2fyo7v7FUGOV//U9
r1BNXA0cVLhiKe8MHATsIrC369DnBUz1uKlW7eJ04MgIbpUBYkxny66xqTmR9CPk
jDxbfoLe8jYMkLyLITEUb5a3UzC5SLuPBBre/GJAiJ5eMxLHHFLo62dkCn/UYZ1i
zXKiKLWAH194Rw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:03:04 2025 by rpki-client