Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: eUGIp3aHgCQ2fpYPXWek4UkzMQ4pFBcdSjZrFaG5fmA=
Subject key identifier: E1:3C:D7:85:C3:C1:2E:00:C9:9F:46:D4:D5:C0:46:DB:8D:8C:30:2F
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 019848F73FE14E2C9875080C68202D00119F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 0F12
Signing time: Sat 26 Jul 2025 23:00:19 +0000
Manifest this update: Sat 26 Jul 2025 23:00:19 +0000
Manifest next update: Sun 27 Jul 2025 23:00:19 +0000
Files and hashes: 1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: SjsVSmO+0TfJEhedXjPeb5+UCtYCP72mRyLIwPd27Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:3f:e1:4e:2c:98:75:08:0c:68:20:2d:00:11:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Jul 26 23:00:19 2025 GMT
Not After : Jul 27 23:00:19 2025 GMT
Subject: CN=e13cd785c3c12e00c99f46d4d5c046db8d8c302f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:fb:e2:a9:ba:a1:a8:11:2a:09:69:f3:06:
4e:c2:b6:42:f6:f9:3f:6e:76:e0:c5:b8:f3:60:82:
31:17:b9:43:2f:9b:91:46:ef:a5:d1:69:e4:3f:1a:
dd:36:b8:cd:4e:13:ac:7b:d8:fe:c3:3c:05:04:8f:
0e:53:7f:6e:36:c3:ff:0d:73:38:e8:f4:c1:e6:c8:
76:c7:83:f1:62:be:6b:95:2e:21:a8:c4:12:c8:11:
17:c0:29:0f:6c:04:35:0b:16:36:c4:be:67:2d:59:
3f:a3:73:6e:20:a5:61:ee:35:99:2a:7f:9d:76:3a:
ea:55:34:61:3f:d4:ad:ec:f3:0c:50:6e:cf:f3:6a:
4c:7f:ba:bd:29:88:54:03:75:82:f5:9a:88:35:b1:
76:21:d1:42:71:50:9c:a9:89:7c:d4:95:ca:56:99:
f1:0f:0f:c9:27:1a:57:01:ef:bc:15:66:c3:a8:01:
5c:a1:75:21:2b:49:81:6c:40:1a:5f:bb:b6:17:0a:
81:25:ec:18:5c:c8:d1:a9:70:93:95:54:ef:98:5c:
15:27:3e:9e:7b:a1:15:b0:22:2e:2f:6a:2a:4f:58:
94:0a:2c:a3:a9:62:cc:d3:d9:f0:23:8d:73:50:2f:
9e:96:9c:ce:95:f3:36:5f:80:16:27:ea:3f:cf:40:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3C:D7:85:C3:C1:2E:00:C9:9F:46:D4:D5:C0:46:DB:8D:8C:30:2F
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e3:2d:4a:b1:97:69:54:8f:89:54:b1:37:7a:b6:6a:3f:27:
66:b1:55:1c:6a:17:a5:a7:e1:e5:32:ec:de:2f:40:4f:e2:d3:
9d:71:fd:e9:f5:8d:b2:48:a2:8f:e1:d6:a7:d9:94:02:a8:8f:
23:f1:5f:fb:00:30:82:75:9d:52:db:12:13:b4:ff:ac:f0:e1:
28:38:4a:28:f0:1a:0f:de:9d:ab:2f:0c:5c:4e:1a:5c:60:b2:
f4:4c:11:4c:0a:65:32:03:70:ab:48:aa:6f:fc:39:3c:83:aa:
8e:fb:08:d1:92:62:40:f8:8b:fa:a8:c2:77:9a:84:d5:fa:7f:
c0:14:18:98:84:4d:fc:8a:ba:f4:c9:98:48:85:2e:e1:37:b4:
5b:9a:c6:6d:73:08:17:0e:8d:5b:e4:5b:83:df:09:21:1e:f9:
16:91:b0:3d:c6:a1:5f:1c:42:7d:a9:45:8a:9c:10:64:5b:f8:
fc:31:60:99:3f:aa:d9:ec:17:f3:ab:06:5c:f0:a8:4e:1d:70:
f7:db:7e:df:c4:82:cf:f9:9f:80:0e:86:53:79:fb:54:c4:8c:
cb:21:55:89:b8:d6:7d:6d:74:c7:30:02:34:f1:5b:db:5f:ee:
fc:c4:88:c9:ed:44:9f:12:09:68:00:67:64:97:f9:0d:44:d0:
cf:83:0b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI9z/hTiyYdQgMaCAtABGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTAyNDNmOTg2MzZmYWEwZmI2YzVhZTZiYWQ5YjBhYmFk
MjM0MzgwHhcNMjUwNzI2MjMwMDE5WhcNMjUwNzI3MjMwMDE5WjAzMTEwLwYDVQQD
EyhlMTNjZDc4NWMzYzEyZTAwYzk5ZjQ2ZDRkNWMwNDZkYjhkOGMzMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF774qm6oagRKglp8wZOwrZC9vk/
bnbgxbjzYIIxF7lDL5uRRu+l0WnkPxrdNrjNThOse9j+wzwFBI8OU39uNsP/DXM4
6PTB5sh2x4PxYr5rlS4hqMQSyBEXwCkPbAQ1CxY2xL5nLVk/o3NuIKVh7jWZKn+d
djrqVTRhP9St7PMMUG7P82pMf7q9KYhUA3WC9ZqINbF2IdFCcVCcqYl81JXKVpnx
Dw/JJxpXAe+8FWbDqAFcoXUhK0mBbEAaX7u2FwqBJewYXMjRqXCTlVTvmFwVJz6e
e6EVsCIuL2oqT1iUCiyjqWLM09nwI41zUC+elpzOlfM2X4AWJ+o/z0Ag/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOE814XDwS4AyZ9G1NXARtuNjDAvMB8GA1UdIwQY
MBaAFMsQJD+YY2+qD7bFrmutmwq60jQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mOGViOWMtNWI5OS00Y2VmLTkzZjAt
NDhmMTUxYjUyMzFmLzEveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9mOGViOWMtNWI5OS00Y2VmLTkzZjAtNDhmMTUxYjUyMzFm
LzEveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOMtSrGX
aVSPiVSxN3q2aj8nZrFVHGoXpafh5TLs3i9AT+LTnXH96fWNskiij+HWp9mUAqiP
I/Ff+wAwgnWdUtsSE7T/rPDhKDhKKPAaD96dqy8MXE4aXGCy9EwRTAplMgNwq0iq
b/w5PIOqjvsI0ZJiQPiL+qjCd5qE1fp/wBQYmIRN/Iq69MmYSIUu4Te0W5rGbXMI
Fw6NW+Rbg98JIR75FpGwPcahXxxCfalFipwQZFv4/DFgmT+q2ewX86sGXPCoTh1w
99t+38SCz/mfgA6GU3n7VMSMyyFVibjWfW10xzACNPFb21/u/MSIye1EnxIJaABn
ZJf5DUTQz4MLhA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:49 2025 by rpki-client