Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: lqZLvRSlwIIvXmPHmzv7IjyeRyzAkp81GSl6sxtQ6gs=
Subject key identifier: 9B:4F:C9:98:1C:D7:D1:4C:49:40:CB:D7:EE:F6:45:85:69:57:03:0E
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 0198469B37DC19D92A1C85B6BD4CA839D642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0737
Signing time: Sat 26 Jul 2025 12:00:34 +0000
Manifest this update: Sat 26 Jul 2025 12:00:34 +0000
Manifest next update: Sun 27 Jul 2025 12:00:34 +0000
Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: FRbuOob/3F3U0/hvh/g8RPmyrAd6fXGwgl0WunxWhOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:37:dc:19:d9:2a:1c:85:b6:bd:4c:a8:39:d6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Jul 26 12:00:34 2025 GMT
Not After : Jul 27 12:00:34 2025 GMT
Subject: CN=9b4fc9981cd7d14c4940cbd7eef645856957030e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:11:13:85:0a:e6:2d:d3:d2:86:c4:b2:bc:
23:c8:85:14:4a:01:9e:bb:3c:fe:75:ab:03:db:90:
cc:c9:b8:45:aa:fc:45:1f:44:df:0c:59:3d:a3:25:
31:c3:0a:a2:6f:e5:32:59:d5:52:55:3c:c0:a4:c3:
43:06:65:67:b3:7e:55:26:a7:5e:69:ef:b9:63:e1:
53:97:92:67:7f:7f:d8:24:64:ff:f2:6e:e1:6b:3b:
ca:54:fa:73:4a:5e:0f:81:66:45:38:17:06:c2:62:
31:85:47:2e:f3:bc:71:89:83:9b:ad:63:34:a9:54:
b3:12:86:90:c3:bc:61:2c:3c:3c:c1:3e:b2:69:e6:
61:46:3c:2d:90:11:c0:9f:74:cc:43:00:f1:ac:d5:
24:ed:08:52:1f:43:c8:54:c1:c2:77:d7:bb:fc:35:
fd:e0:36:75:b2:f2:2f:86:c0:3a:2c:d0:a8:4c:86:
06:5f:4a:d3:a6:ab:b8:36:5e:ef:20:b3:f0:83:4f:
3a:24:26:28:15:0a:9a:99:ff:1a:49:74:13:67:1f:
ae:69:49:1a:b8:56:08:f0:eb:7f:35:7e:c8:ee:ed:
79:7a:27:d7:06:3b:d4:af:63:85:6a:86:7a:91:0b:
f4:f3:6c:6a:5c:b5:d8:ba:bc:c1:fd:87:c0:e3:0f:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:C9:98:1C:D7:D1:4C:49:40:CB:D7:EE:F6:45:85:69:57:03:0E
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:88:fa:39:7b:45:36:6b:c5:21:35:eb:5b:1b:82:90:cd:c2:
df:0a:d3:5a:0d:df:b1:e5:2d:8d:d2:5e:68:52:4e:d9:74:d4:
8a:56:8f:d7:af:c9:c0:0e:21:0d:d6:1a:14:1a:eb:6f:e9:50:
90:c8:e3:af:35:bf:b9:a3:85:9e:84:cf:77:0f:05:89:9e:bc:
64:9a:a1:63:1e:a1:5b:49:18:d4:fd:7f:bf:92:df:a6:d6:3d:
c9:30:0d:0d:e8:ad:2e:4f:7a:d3:9f:b3:c7:1b:ba:b5:dd:51:
b5:83:8a:4a:2e:22:4e:ab:a3:75:43:db:95:ba:56:f4:7d:cd:
f4:eb:98:0d:34:d6:c7:0b:d4:8d:03:fb:1d:2f:49:c9:c3:b6:
a0:95:e0:6d:30:f2:bb:c1:3f:b4:82:5f:6b:3b:20:83:0d:04:
5a:02:74:f1:ce:32:05:e0:1b:49:39:0c:f3:9b:3a:57:8d:26:
48:bd:fe:ff:09:fb:38:a7:e3:4a:d8:6a:39:7a:51:a7:a3:c5:
e0:1f:f5:e5:ba:39:ac:0e:36:88:04:2c:b4:f7:ec:c6:eb:59:
27:a7:90:67:ea:ef:a8:0c:b6:f4:98:e3:58:0a:4a:1d:6c:bc:
e2:b6:44:85:9f:1b:d1:74:61:06:da:d7:6a:cf:ab:93:ab:b4:
31:f3:8a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmzfcGdkqHIW2vUyoOdZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI0YjQwYzFmODQwODRmOGQ0MGYyYjlkY2JlMWUxZjkx
NmFmM2UwHhcNMjUwNzI2MTIwMDM0WhcNMjUwNzI3MTIwMDM0WjAzMTEwLwYDVQQD
Eyg5YjRmYzk5ODFjZDdkMTRjNDk0MGNiZDdlZWY2NDU4NTY5NTcwMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJcRE4UK5i3T0obEsrwjyIUUSgGe
uzz+dasD25DMybhFqvxFH0TfDFk9oyUxwwqib+UyWdVSVTzApMNDBmVns35VJqde
ae+5Y+FTl5Jnf3/YJGT/8m7hazvKVPpzSl4PgWZFOBcGwmIxhUcu87xxiYObrWM0
qVSzEoaQw7xhLDw8wT6yaeZhRjwtkBHAn3TMQwDxrNUk7QhSH0PIVMHCd9e7/DX9
4DZ1svIvhsA6LNCoTIYGX0rTpqu4Nl7vILPwg086JCYoFQqamf8aSXQTZx+uaUka
uFYI8Ot/NX7I7u15eifXBjvUr2OFaoZ6kQv082xqXLXYurzB/YfA4w8pTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtPyZgc19FMSUDL1+72RYVpVwMOMB8GA1UdIwQY
MBaAFMtCS0DB+ECE+NQPK53L4eH5Fq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUt
M2E1ZmVjYWNkNDlhLzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUtM2E1ZmVjYWNkNDlh
LzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIj6OXtF
NmvFITXrWxuCkM3C3wrTWg3fseUtjdJeaFJO2XTUilaP16/JwA4hDdYaFBrrb+lQ
kMjjrzW/uaOFnoTPdw8FiZ68ZJqhYx6hW0kY1P1/v5LfptY9yTANDeitLk9605+z
xxu6td1RtYOKSi4iTqujdUPblbpW9H3N9OuYDTTWxwvUjQP7HS9JycO2oJXgbTDy
u8E/tIJfazsggw0EWgJ08c4yBeAbSTkM85s6V40mSL3+/wn7OKfjSthqOXpRp6PF
4B/15bo5rA42iAQstPfsxutZJ6eQZ+rvqAy29JjjWApKHWy84rZEhZ8b0XRhBtrX
as+rk6u0MfOKbA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:50:04 2025 by rpki-client