Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: n2vBLLqSYTAmpypw/CkvxG7QqPwDnNbzF1kizwoI23o=
Subject key identifier: 17:17:CF:49:D6:1B:CD:57:8A:DF:86:F4:16:60:C1:10:82:E2:D6:2B
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 01985120882C2CB99A8CDA16F19176F60A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0EB3
Signing time: Mon 28 Jul 2025 13:02:23 +0000
Manifest this update: Mon 28 Jul 2025 13:02:23 +0000
Manifest next update: Tue 29 Jul 2025 13:02:23 +0000
Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: ojQid6A/do7qx9WyXTajOUEuDaOeAxlgT4kXY0kBYhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:20:88:2c:2c:b9:9a:8c:da:16:f1:91:76:f6:0a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Jul 28 13:02:23 2025 GMT
Not After : Jul 29 13:02:23 2025 GMT
Subject: CN=1717cf49d61bcd578adf86f41660c11082e2d62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:7a:0c:e6:b8:81:5e:98:91:72:8d:e2:fe:
a2:ac:db:dc:e2:a2:c4:32:3d:c8:1a:6c:48:a1:20:
34:e1:39:3b:f1:84:b8:18:e3:a1:1c:ed:21:d9:68:
19:80:b3:02:c5:0c:99:01:e3:70:cd:21:ab:06:af:
1f:4c:de:df:5c:b6:ca:d1:4b:d4:51:97:58:c1:18:
9c:43:10:a9:45:62:d7:75:53:53:6e:db:2f:69:9a:
e9:4b:4b:7b:41:98:53:ff:9b:e8:33:2f:c7:77:2b:
d4:d1:2a:e9:a2:c3:07:fb:9b:32:7e:ec:34:77:8b:
4f:bf:12:5a:c2:80:75:d7:79:c3:62:01:5c:88:95:
b0:38:fc:7c:14:ab:19:31:18:20:3e:d9:ba:ea:6d:
77:dc:74:87:69:85:10:41:c0:8c:e4:f9:0f:e7:f5:
40:c1:25:1d:c8:18:bb:fa:5d:bf:3c:f5:8d:a0:80:
3d:fc:1b:6b:38:82:ae:d7:3b:ed:05:0a:dc:59:e6:
e1:6e:04:a4:8f:ee:dc:e7:dc:ae:bb:83:42:48:8c:
a4:13:57:89:db:0f:ad:45:21:38:41:68:aa:3e:6b:
18:c4:53:d8:93:7a:c0:74:e0:a2:f7:08:a0:13:17:
8d:ad:63:84:8b:ec:4c:8d:bb:09:0a:b2:cc:ed:87:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:17:CF:49:D6:1B:CD:57:8A:DF:86:F4:16:60:C1:10:82:E2:D6:2B
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:78:89:26:22:26:c7:97:34:71:83:e0:38:42:74:e1:38:92:
70:31:28:24:43:52:3f:18:0f:e3:80:a3:3b:2f:88:2e:53:1b:
e7:ff:42:93:bb:e0:90:a2:c0:c7:3d:00:9e:0b:cb:92:17:45:
c8:5e:c4:13:cd:ec:2a:0a:d6:87:02:6e:7a:76:ce:9f:71:2b:
a1:2e:91:30:e7:2e:8a:a3:94:6f:c9:14:af:3f:6f:ad:66:90:
6d:9c:69:6a:4d:86:74:c6:d1:18:7b:23:31:04:55:0e:3f:57:
d3:6c:24:0a:63:cd:4e:a2:7a:18:0f:88:5f:69:99:73:32:00:
86:e3:37:2d:cc:24:55:49:77:1e:b1:39:33:27:03:92:a6:e5:
db:e2:7e:e4:64:c2:ad:8c:ab:2f:54:db:68:ae:91:61:cd:d4:
8e:f6:ff:37:31:86:b0:56:ea:64:f3:b9:85:ca:76:0f:28:64:
89:3b:17:b5:bb:5a:59:84:8d:ba:35:e4:8b:53:f1:14:ac:f3:
99:a4:01:2d:22:95:79:cc:2e:f7:ef:75:67:fb:44:f1:ca:db:
ae:a2:2f:90:d7:55:92:47:fa:61:0e:3d:b6:86:3f:55:00:1d:
85:0e:36:22:89:f7:e4:14:3c:89:09:fc:08:5b:ff:8a:ac:f0:
fd:b6:71:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRIIgsLLmajNoW8ZF29gp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZTBlNGM5YWNiZjcwMWY5MzAxNDliMzI1Y2UwNDJjZjlm
OTJhNTkwHhcNMjUwNzI4MTMwMjIzWhcNMjUwNzI5MTMwMjIzWjAzMTEwLwYDVQQD
EygxNzE3Y2Y0OWQ2MWJjZDU3OGFkZjg2ZjQxNjYwYzExMDgyZTJkNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8t6DOa4gV6YkXKN4v6irNvc4qLE
Mj3IGmxIoSA04Tk78YS4GOOhHO0h2WgZgLMCxQyZAeNwzSGrBq8fTN7fXLbK0UvU
UZdYwRicQxCpRWLXdVNTbtsvaZrpS0t7QZhT/5voMy/HdyvU0SrposMH+5syfuw0
d4tPvxJawoB113nDYgFciJWwOPx8FKsZMRggPtm66m133HSHaYUQQcCM5PkP5/VA
wSUdyBi7+l2/PPWNoIA9/BtrOIKu1zvtBQrcWebhbgSkj+7c59yuu4NCSIykE1eJ
2w+tRSE4QWiqPmsYxFPYk3rAdOCi9wigExeNrWOEi+xMjbsJCrLM7Yfl1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcXz0nWG81Xit+G9BZgwRCC4tYrMB8GA1UdIwQY
MBaAFMng5Mmsv3AfkwFJsyXOBCz5+SpZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEt
YmU3YzgyOGMzNjkzLzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEtYmU3YzgyOGMzNjkz
LzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkniJJiIm
x5c0cYPgOEJ04TiScDEoJENSPxgP44CjOy+ILlMb5/9Ck7vgkKLAxz0AngvLkhdF
yF7EE83sKgrWhwJuenbOn3EroS6RMOcuiqOUb8kUrz9vrWaQbZxpak2GdMbRGHsj
MQRVDj9X02wkCmPNTqJ6GA+IX2mZczIAhuM3LcwkVUl3HrE5MycDkqbl2+J+5GTC
rYyrL1TbaK6RYc3Ujvb/NzGGsFbqZPO5hcp2DyhkiTsXtbtaWYSNujXki1PxFKzz
maQBLSKVecwu9+91Z/tE8crbrqIvkNdVkkf6YQ49toY/VQAdhQ42Ion35BQ8iQn8
CFv/iqzw/bZxFg==
-----END CERTIFICATE-----
Generated at Mon Jul 28 23:02:26 2025 by rpki-client