Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier: gxgCTm8eUJMtkMLdI6BSDp8ZqdlmGjffAm/5d3yywkw=
Subject key identifier: EA:85:5D:7E:23:96:44:79:22:AE:DF:E0:6D:07:F0:8B:1A:4B:FB:DC
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 01985BA2CB04AAC02104841EC31D91C11DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number: 1609
Signing time: Wed 30 Jul 2025 14:00:52 +0000
Manifest this update: Wed 30 Jul 2025 14:00:52 +0000
Manifest next update: Thu 31 Jul 2025 14:00:52 +0000
Files and hashes: 1: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: slR7Jvf+7e9EWD6Jeb3XQeu3ZI3DTJcJvlCuJATbt6M=)
2: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (hash: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:a2:cb:04:aa:c0:21:04:84:1e:c3:1d:91:c1:1d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: Jul 30 14:00:52 2025 GMT
Not After : Jul 31 14:00:52 2025 GMT
Subject: CN=ea855d7e2396447922aedfe06d07f08b1a4bfbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:25:70:f0:0a:9c:b9:eb:93:b3:c1:7b:a8:
f4:03:3d:e3:71:44:b9:dc:d6:f1:42:9a:a1:09:23:
ec:fd:79:36:71:49:43:39:5e:e8:8f:2b:72:e2:c2:
61:cf:9c:02:e2:4f:0d:b0:61:af:4a:bd:0f:d4:b3:
22:c0:2e:59:2b:d1:c8:59:0d:98:2e:15:99:7f:43:
a1:42:b7:f6:aa:fd:60:8d:ef:76:b1:8a:e7:12:9b:
62:d1:74:c8:8c:75:02:f5:2c:50:21:7e:96:24:d8:
61:3d:93:07:1f:4f:85:c8:f0:69:6f:dd:a4:00:12:
be:5c:49:a3:d8:0a:4e:25:a0:70:fb:b7:be:f7:b4:
50:77:d5:3e:fd:5c:6d:61:25:54:bd:75:2f:1d:22:
8a:93:93:ea:08:ed:7b:44:b0:5d:c0:5a:42:7a:37:
b3:b5:0d:4e:2a:13:7f:96:95:ea:57:59:b9:74:de:
cb:38:85:0d:1d:20:63:b8:73:a1:e4:55:8d:24:04:
f1:c6:d4:38:97:0b:7d:2a:1e:c3:49:f7:9b:75:15:
99:91:a2:cd:5c:eb:c0:9b:58:95:7a:0d:3d:bd:f8:
e7:f2:26:c8:2e:5c:af:c0:4c:c0:a9:4d:3b:46:d9:
a8:f3:15:f8:db:68:8a:e1:a5:75:14:87:a5:22:5d:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:5D:7E:23:96:44:79:22:AE:DF:E0:6D:07:F0:8B:1A:4B:FB:DC
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:55:cc:48:23:2f:1c:53:46:43:58:f6:7f:84:17:f7:62:29:
13:c4:d6:ae:2f:bb:c8:47:49:1b:96:b5:18:40:5d:0b:78:e4:
54:1b:18:63:91:21:49:e2:d4:af:d2:06:8e:4c:bd:fe:b1:16:
7a:5f:47:87:72:14:e6:a1:19:84:2d:3d:f3:2a:f7:42:34:40:
15:de:6c:d2:48:f8:22:29:ea:0d:f0:49:a1:ca:c6:46:b6:99:
17:28:08:ab:68:dc:fa:e9:b2:87:e3:bd:74:c8:a1:f9:2a:b7:
46:9f:96:82:d1:4c:9c:7a:29:f1:4c:9a:7a:38:95:52:6f:26:
33:6d:d7:9a:00:80:0c:75:5a:78:1f:bc:7b:9f:80:76:44:4d:
cd:86:c2:7a:be:86:0d:24:92:a8:4a:cb:d6:85:95:2f:2d:40:
9c:75:d3:55:99:ee:ad:97:55:d7:03:d4:cf:af:65:fa:43:12:
c1:56:ec:b4:7c:63:c6:ac:1b:20:1d:de:f7:43:42:25:cf:6f:
fb:2a:7a:57:30:ec:1b:6e:70:89:e9:64:2e:45:ca:4f:e7:38:
08:1a:84:10:39:81:3f:aa:fa:e7:40:c8:b9:2b:cc:97:b5:fa:
a8:29:b7:86:dc:84:5a:98:cc:ed:ed:0e:a7:57:1d:e6:9c:f5:
86:c7:96:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhbossEqsAhBIQewx2RwR3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjQ5OGI3N2FkOTljZDM2ZTg3NmYwZTJmZWQ2OTk4MTky
YmM2MTIwHhcNMjUwNzMwMTQwMDUyWhcNMjUwNzMxMTQwMDUyWjAzMTEwLwYDVQQD
EyhlYTg1NWQ3ZTIzOTY0NDc5MjJhZWRmZTA2ZDA3ZjA4YjFhNGJmYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQElcPAKnLnrk7PBe6j0Az3jcUS5
3NbxQpqhCSPs/Xk2cUlDOV7ojyty4sJhz5wC4k8NsGGvSr0P1LMiwC5ZK9HIWQ2Y
LhWZf0OhQrf2qv1gje92sYrnEpti0XTIjHUC9SxQIX6WJNhhPZMHH0+FyPBpb92k
ABK+XEmj2ApOJaBw+7e+97RQd9U+/VxtYSVUvXUvHSKKk5PqCO17RLBdwFpCejez
tQ1OKhN/lpXqV1m5dN7LOIUNHSBjuHOh5FWNJATxxtQ4lwt9Kh7DSfebdRWZkaLN
XOvAm1iVeg09vfjn8ibILlyvwEzAqU07Rtmo8xX422iK4aV1FIelIl0KjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqFXX4jlkR5Iq7f4G0H8IsaS/vcMB8GA1UdIwQY
MBaAFGO0mLd62ZzTbodvDi/taZgZK8YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2It
OTdkY2RhM2EzY2E1LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2ItOTdkY2RhM2EzY2E1
LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFXMSCMv
HFNGQ1j2f4QX92IpE8TWri+7yEdJG5a1GEBdC3jkVBsYY5EhSeLUr9IGjky9/rEW
el9Hh3IU5qEZhC098yr3QjRAFd5s0kj4IinqDfBJocrGRraZFygIq2jc+umyh+O9
dMih+Sq3Rp+WgtFMnHop8UyaejiVUm8mM23XmgCADHVaeB+8e5+AdkRNzYbCer6G
DSSSqErL1oWVLy1AnHXTVZnurZdV1wPUz69l+kMSwVbstHxjxqwbIB3e90NCJc9v
+yp6VzDsG25wielkLkXKT+c4CBqEEDmBP6r650DIuSvMl7X6qCm3htyEWpjM7e0O
p1cd5pz1hseWzQ==
-----END CERTIFICATE-----
Generated at Wed Jul 30 18:08:05 2025 by rpki-client