Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: Ql2NvT8k+tR2bmXLfiOAmbjZsKDXEli1MMxCOyBBrW8=
Subject key identifier: 74:D3:8B:1D:AC:C2:8C:CC:FC:3F:3D:D3:D9:5D:DB:74:AD:A1:11:1D
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019853447EA20D9D87D1AC6E234FE994D9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 1598
Signing time: Mon 28 Jul 2025 23:00:54 +0000
Manifest this update: Mon 28 Jul 2025 23:00:54 +0000
Manifest next update: Tue 29 Jul 2025 23:00:54 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: pUqI6+NUH6aOaSKAB3ZmxEaWHyriM6vm6C3xzvIXzwA=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:7e:a2:0d:9d:87:d1:ac:6e:23:4f:e9:94:d9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Jul 28 23:00:54 2025 GMT
Not After : Jul 29 23:00:54 2025 GMT
Subject: CN=74d38b1dacc28cccfc3f3dd3d95ddb74ada1111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:a5:25:24:58:80:39:bf:4f:2b:77:34:6f:
42:f0:ee:26:ce:18:cc:b8:01:ac:54:b7:1e:55:b1:
ba:67:a8:a5:69:98:b9:d6:74:25:6f:90:37:81:15:
49:73:db:fd:c4:67:a9:ae:76:9c:d9:48:11:1c:37:
59:09:cd:f7:4c:74:e1:52:09:71:ec:1e:ea:44:31:
ef:49:38:44:6d:88:42:dc:ec:de:22:83:3b:45:0f:
5b:4e:c4:62:bf:61:d6:ed:6c:9c:de:1e:a3:07:3d:
d0:df:f1:ff:b5:6b:2e:ec:15:4f:25:b2:82:76:06:
00:10:60:30:a3:70:c6:c5:05:2f:41:0d:d5:98:bf:
d0:06:b3:05:6b:8f:70:25:23:8c:d5:22:e9:a7:a1:
3e:06:cd:bb:ef:2d:e6:47:58:c2:b1:dc:2a:5f:11:
38:ef:07:e2:fa:1b:e4:79:c1:ab:26:42:b7:26:b9:
08:01:98:11:33:91:6a:71:c9:a3:55:73:f3:65:3c:
7a:d9:7d:1b:78:c7:2e:1a:64:35:78:1a:1b:89:a5:
6a:0f:9e:77:0c:85:18:af:43:fc:5d:56:d4:d1:32:
c1:89:69:5c:e1:04:9b:49:c3:99:49:92:2c:ac:fa:
f9:9d:06:20:42:5f:80:5c:33:bb:11:88:21:76:69:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:8B:1D:AC:C2:8C:CC:FC:3F:3D:D3:D9:5D:DB:74:AD:A1:11:1D
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:54:66:77:2a:ef:26:5c:22:92:e8:c5:30:a9:a5:e1:c9:fe:
31:8b:fc:f7:9b:7d:e5:13:4e:f9:12:1f:01:a1:58:cf:b8:c1:
97:a5:96:05:39:f0:b2:8d:15:19:17:91:c9:77:38:71:a1:4c:
bb:f2:c1:c7:bd:fb:f3:cf:10:03:ca:50:19:70:2c:c5:d1:ca:
9e:43:18:09:06:aa:e5:6e:95:e0:cb:d9:60:1a:fd:61:bd:c9:
1e:53:12:44:45:da:5f:76:1b:52:82:16:72:a2:3e:e6:0c:50:
d4:13:94:10:f6:9b:25:da:38:cd:fc:84:36:2f:74:46:30:72:
17:84:64:3e:91:87:1e:88:f8:31:be:2d:80:3b:a0:e6:ce:02:
a8:f4:e0:60:f3:ef:4f:80:dc:64:10:92:a9:d4:0e:7c:a8:4a:
ad:bc:35:58:22:aa:5e:a1:2f:f0:e9:cf:42:b5:95:0d:ce:d6:
58:7a:2c:8e:06:0d:07:ca:05:b0:dc:00:20:23:26:3d:dc:64:
1e:8d:95:e1:ac:78:21:18:a8:cd:ca:9b:95:55:4e:13:2d:63:
a0:ae:69:63:ff:6a:31:87:9d:86:b2:77:b5:c9:72:a3:b5:98:
62:38:2e:ca:24:83:76:d1:b9:5c:6f:2d:6b:cf:2e:c7:64:73:
6c:1c:aa:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRH6iDZ2H0axuI0/plNnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MTc3MDBkZGMwZTcyOGIwNzJhZDQxYTNkMWU4YjZhODBh
YTc1MTAwHhcNMjUwNzI4MjMwMDU0WhcNMjUwNzI5MjMwMDU0WjAzMTEwLwYDVQQD
Eyg3NGQzOGIxZGFjYzI4Y2NjZmMzZjNkZDNkOTVkZGI3NGFkYTExMTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQqlJSRYgDm/Tyt3NG9C8O4mzhjM
uAGsVLceVbG6Z6ilaZi51nQlb5A3gRVJc9v9xGeprnac2UgRHDdZCc33THThUglx
7B7qRDHvSThEbYhC3OzeIoM7RQ9bTsRiv2HW7Wyc3h6jBz3Q3/H/tWsu7BVPJbKC
dgYAEGAwo3DGxQUvQQ3VmL/QBrMFa49wJSOM1SLpp6E+Bs277y3mR1jCsdwqXxE4
7wfi+hvkecGrJkK3JrkIAZgRM5FqccmjVXPzZTx62X0beMcuGmQ1eBobiaVqD553
DIUYr0P8XVbU0TLBiWlc4QSbScOZSZIsrPr5nQYgQl+AXDO7EYghdmnn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTTix2swozM/D8909ld23StoREdMB8GA1UdIwQY
MBaAFMkXcA3cDnKLByrUGj0ei2qAqnUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWIt
N2ViZWMwZTI3YjI4LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWItN2ViZWMwZTI3YjI4
LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFRmdyrv
JlwikujFMKml4cn+MYv895t95RNO+RIfAaFYz7jBl6WWBTnwso0VGReRyXc4caFM
u/LBx737888QA8pQGXAsxdHKnkMYCQaq5W6V4MvZYBr9Yb3JHlMSREXaX3YbUoIW
cqI+5gxQ1BOUEPabJdo4zfyENi90RjByF4RkPpGHHoj4Mb4tgDug5s4CqPTgYPPv
T4DcZBCSqdQOfKhKrbw1WCKqXqEv8OnPQrWVDc7WWHosjgYNB8oFsNwAICMmPdxk
Ho2V4ax4IRiozcqblVVOEy1joK5pY/9qMYedhrJ3tclyo7WYYjguyiSDdtG5XG8t
a88ux2RzbByqfA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:55:57 2025 by rpki-client