Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: fq85xCdhU5fGRw4yQtMT4hPZTyRnVRTyR1YomO4852E=
Subject key identifier: C6:48:FE:E4:25:0C:25:22:FD:76:87:08:19:6D:5B:9F:E9:C0:42:67
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 019853B21B7BC6D7ACF954BEBB16FDC836E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 073A
Signing time: Tue 29 Jul 2025 01:00:37 +0000
Manifest this update: Tue 29 Jul 2025 01:00:37 +0000
Manifest next update: Wed 30 Jul 2025 01:00:37 +0000
Files and hashes: 1: YSlfWP3DY80Smx0TIqkuPzTOoec.roa (hash: zxri6NDPBUgI6E9l7vT1svBXNo7QAt30+iiVihETiFE=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: pL4D/GkYw+HsGMRPBOTYFyPvtEoEvKFAiMinNo2m3nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:1b:7b:c6:d7:ac:f9:54:be:bb:16:fd:c8:36:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Jul 29 01:00:37 2025 GMT
Not After : Jul 30 01:00:37 2025 GMT
Subject: CN=c648fee4250c2522fd768708196d5b9fe9c04267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:ab:cb:7c:41:96:4b:86:b9:fd:97:3b:82:
8e:5f:82:d4:80:82:f3:7c:bf:f8:a4:c7:6b:7e:bf:
2f:0c:8d:1f:ce:92:99:0d:e9:79:30:a5:d8:25:d1:
37:65:55:44:c1:32:4d:d1:a4:49:1e:22:fd:ac:48:
28:7f:c7:ea:c3:f0:4b:7c:31:55:ad:5e:8f:df:2d:
de:d0:f5:15:6b:43:47:01:cb:ee:bc:dc:d1:4d:f6:
bf:e9:b4:47:ce:17:d1:7d:9e:5d:ea:cf:dc:79:3a:
e3:3d:91:65:d8:db:9b:6c:0b:ed:30:2f:de:10:03:
06:c2:74:6b:67:f7:79:0e:ad:1e:1b:1a:d8:26:a9:
8e:ae:bc:3b:2b:4d:a6:02:66:ab:4c:30:a7:52:15:
0a:f2:85:75:a3:07:9b:70:ea:38:b0:ac:36:ae:77:
20:48:c1:ab:7f:7b:56:7d:79:23:70:48:2a:f4:a5:
be:70:d5:ec:df:68:29:2e:03:a0:e6:86:a1:04:a0:
b2:43:54:2b:84:05:52:6b:18:37:9c:35:3c:c3:b2:
17:82:be:e7:e8:d2:57:3a:ac:4f:ad:90:5b:15:e6:
2e:28:d2:3d:b5:89:7c:66:bb:2e:e1:e2:ec:41:a5:
3e:90:57:ad:dd:da:e0:1a:4b:47:33:f9:1a:1d:0d:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:FE:E4:25:0C:25:22:FD:76:87:08:19:6D:5B:9F:E9:C0:42:67
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:47:a8:20:c8:e2:f0:57:7b:0a:35:4f:ba:b7:21:f5:c0:6b:
84:5e:f0:80:4b:f5:44:8f:c4:aa:f1:3c:97:7f:26:5b:e9:c6:
67:25:cb:e8:4a:42:85:29:19:23:f6:65:0e:53:dd:59:ab:de:
01:07:6a:ef:30:54:2c:c3:1c:f3:1d:1c:4d:47:44:df:0b:be:
d9:de:6a:67:12:a4:84:44:4d:69:15:48:7a:2f:3f:2b:23:3f:
78:7f:0b:8e:b8:ab:ef:9e:15:b9:e2:70:bc:87:51:2a:99:3a:
17:e9:ca:6a:55:b5:11:4c:08:35:1a:54:26:77:22:f8:1c:3d:
79:48:f9:ec:1a:b8:38:ff:63:56:a7:c2:26:40:3c:4d:9a:eb:
3c:0b:37:64:1b:52:d4:9a:d7:35:d0:a7:31:d8:87:ba:da:b9:
ae:9f:32:7c:52:49:ee:06:ee:04:34:95:1d:0b:82:d1:79:11:
7b:ce:f4:d5:21:80:a3:20:ae:af:95:d9:77:ef:07:8c:fb:cb:
dc:26:66:39:e5:33:75:e9:97:35:eb:60:7a:89:ec:9d:6a:b1:
7f:0c:ad:c2:a4:7f:2e:99:7a:35:52:95:ed:83:2d:94:82:7e:
18:35:9e:e3:3c:ce:ed:c1:eb:1c:f1:df:aa:58:10:07:5f:d9:
29:81:26:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTsht7xtes+VS+uxb9yDbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGZlYWVjYTIyZDJkMjYxOGI0MzNjZjAwYWIxNDRiZDhi
ODBkYmQwHhcNMjUwNzI5MDEwMDM3WhcNMjUwNzMwMDEwMDM3WjAzMTEwLwYDVQQD
EyhjNjQ4ZmVlNDI1MGMyNTIyZmQ3Njg3MDgxOTZkNWI5ZmU5YzA0MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Cry3xBlkuGuf2XO4KOX4LUgILz
fL/4pMdrfr8vDI0fzpKZDel5MKXYJdE3ZVVEwTJN0aRJHiL9rEgof8fqw/BLfDFV
rV6P3y3e0PUVa0NHAcvuvNzRTfa/6bRHzhfRfZ5d6s/ceTrjPZFl2NubbAvtMC/e
EAMGwnRrZ/d5Dq0eGxrYJqmOrrw7K02mAmarTDCnUhUK8oV1owebcOo4sKw2rncg
SMGrf3tWfXkjcEgq9KW+cNXs32gpLgOg5oahBKCyQ1QrhAVSaxg3nDU8w7IXgr7n
6NJXOqxPrZBbFeYuKNI9tYl8Zrsu4eLsQaU+kFet3drgGktHM/kaHQ0QCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZI/uQlDCUi/XaHCBltW5/pwEJnMB8GA1UdIwQY
MBaAFMnf6uyiLS0mGLQzzwCrFEvYuA29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMt
YmMzNjJkMzc2OGJkLzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMtYmMzNjJkMzc2OGJk
LzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEeoIMji
8Fd7CjVPurch9cBrhF7wgEv1RI/EqvE8l38mW+nGZyXL6EpChSkZI/ZlDlPdWave
AQdq7zBULMMc8x0cTUdE3wu+2d5qZxKkhERNaRVIei8/KyM/eH8Ljrir754VueJw
vIdRKpk6F+nKalW1EUwINRpUJnci+Bw9eUj57Bq4OP9jVqfCJkA8TZrrPAs3ZBtS
1JrXNdCnMdiHutq5rp8yfFJJ7gbuBDSVHQuC0XkRe8701SGAoyCur5XZd+8HjPvL
3CZmOeUzdemXNetgeonsnWqxfwytwqR/Lpl6NVKV7YMtlIJ+GDWe4zzO7cHrHPHf
qlgQB1/ZKYEmVQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:39:11 2025 by rpki-client