Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: KTOQJqSpQMNzi9NIAPzAXkEYMg/Ru2/K4rNDTEPvvq0=
Subject key identifier: D5:B2:D7:B8:EC:5E:80:58:8F:97:83:AA:3B:49:D4:92:B3:3F:DE:8E
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 01983795EB7157E9D98E8B96CE7D3B881053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 15F6
Signing time: Wed 23 Jul 2025 14:00:28 +0000
Manifest this update: Wed 23 Jul 2025 14:00:28 +0000
Manifest next update: Thu 24 Jul 2025 14:00:28 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: KRCoxhTDSQqjnHqos/5Hcw+v2UvWLPJtiqrBzyLHMdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:95:eb:71:57:e9:d9:8e:8b:96:ce:7d:3b:88:10:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Jul 23 14:00:28 2025 GMT
Not After : Jul 24 14:00:28 2025 GMT
Subject: CN=d5b2d7b8ec5e80588f9783aa3b49d492b33fde8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:51:ce:4c:69:da:a4:7c:0f:5c:22:fb:f4:
0e:3b:77:84:e4:17:23:3f:14:c0:06:62:69:78:42:
25:e1:f3:ca:28:34:9a:f3:b6:af:63:10:97:2f:cd:
5f:bb:0d:9a:93:d0:f0:0a:bb:10:ec:e8:e5:e6:1b:
41:d0:2a:25:e2:cf:bf:bf:f3:5e:2c:e1:ec:62:3a:
58:c2:81:e2:53:c5:b2:f4:f1:e6:4d:2b:43:08:9a:
96:51:d6:74:a6:65:c2:55:93:27:a0:f4:bf:0e:54:
7b:0e:43:c4:0c:12:2e:33:27:ed:0c:f1:a6:3b:f0:
92:54:7f:b5:bb:49:0e:96:3a:38:a8:20:f4:69:91:
93:a9:14:c6:53:32:cc:35:ba:8d:70:bc:a0:87:b9:
be:94:8b:9a:56:73:19:9a:28:b4:cd:69:21:b6:82:
45:f4:8d:7f:1f:b0:50:82:7e:4d:b4:f5:cb:9f:99:
29:2f:f6:9c:a9:43:a1:3d:70:fb:44:53:00:0d:a3:
0e:56:0f:19:fd:68:4b:ed:b7:3d:ef:dd:23:be:29:
69:ec:e6:33:2e:64:8a:e7:e2:3c:e3:d0:30:b4:29:
af:f1:7e:d2:ef:68:4b:23:b8:11:66:aa:46:ab:a2:
60:1f:bc:14:4b:c6:18:23:4c:2f:1b:cd:e0:51:ae:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:D7:B8:EC:5E:80:58:8F:97:83:AA:3B:49:D4:92:B3:3F:DE:8E
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a3:c5:1e:73:43:ce:11:a6:24:2f:9a:b2:fd:9c:9b:d6:75:
44:4a:ee:18:14:c2:9b:4e:ca:18:c1:8f:96:1f:bd:60:98:14:
76:aa:39:35:d4:2b:c0:ab:e7:16:0f:40:af:d5:a5:36:28:59:
ed:f9:73:d9:ee:23:76:04:33:ea:ab:a0:6e:aa:a9:2e:e1:d5:
7c:b6:ea:1d:18:3c:ac:32:12:2c:13:6a:dd:77:77:45:7a:0c:
d5:71:03:14:9e:21:da:cf:3b:aa:6b:7b:78:93:49:16:15:ad:
99:c9:1d:0a:67:37:c1:91:7e:b5:02:17:40:dc:9f:fb:e1:14:
75:a6:ab:92:16:48:a1:0f:57:1b:2d:7b:25:5e:c4:15:a1:4e:
76:b3:d6:a7:19:02:05:e7:a2:c3:71:63:24:0a:0e:e6:ce:83:
21:31:a1:10:e3:ed:77:47:d9:3d:aa:2f:c8:3a:06:4d:3c:82:
55:7c:e8:4f:38:ac:fe:c9:5b:d0:36:f9:81:92:ad:9c:d5:a2:
5d:f2:58:c3:70:49:c4:e3:c8:e1:d8:a0:8f:2f:29:85:e2:1d:
c3:cf:2e:83:e8:ee:ce:56:2d:71:5c:9e:2a:f6:d2:c8:c2:78:
66:11:f4:e2:e1:c4:6b:6f:d9:93:a1:14:06:a4:27:75:4b:c4:
84:65:5f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg3letxV+nZjouWzn07iBBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNWUzZWM1YTkwNjIzY2NiOTc3ODRkM2NlZjI0MjEyYTMx
Y2JhZjEwHhcNMjUwNzIzMTQwMDI4WhcNMjUwNzI0MTQwMDI4WjAzMTEwLwYDVQQD
EyhkNWIyZDdiOGVjNWU4MDU4OGY5NzgzYWEzYjQ5ZDQ5MmIzM2ZkZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/tRzkxp2qR8D1wi+/QOO3eE5Bcj
PxTABmJpeEIl4fPKKDSa87avYxCXL81fuw2ak9DwCrsQ7Ojl5htB0Col4s+/v/Ne
LOHsYjpYwoHiU8Wy9PHmTStDCJqWUdZ0pmXCVZMnoPS/DlR7DkPEDBIuMyftDPGm
O/CSVH+1u0kOljo4qCD0aZGTqRTGUzLMNbqNcLygh7m+lIuaVnMZmii0zWkhtoJF
9I1/H7BQgn5NtPXLn5kpL/acqUOhPXD7RFMADaMOVg8Z/WhL7bc9790jvilp7OYz
LmSK5+I849AwtCmv8X7S72hLI7gRZqpGq6JgH7wUS8YYI0wvG83gUa6dEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWy17jsXoBYj5eDqjtJ1JKzP96OMB8GA1UdIwQY
MBaAFMpePsWpBiPMuXeE087yQhKjHLrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMt
NmYzMWY2ZjdmMTZiLzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMtNmYzMWY2ZjdmMTZi
LzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6PFHnND
zhGmJC+asv2cm9Z1REruGBTCm07KGMGPlh+9YJgUdqo5NdQrwKvnFg9Ar9WlNihZ
7flz2e4jdgQz6qugbqqpLuHVfLbqHRg8rDISLBNq3Xd3RXoM1XEDFJ4h2s87qmt7
eJNJFhWtmckdCmc3wZF+tQIXQNyf++EUdaarkhZIoQ9XGy17JV7EFaFOdrPWpxkC
Beeiw3FjJAoO5s6DITGhEOPtd0fZPaovyDoGTTyCVXzoTzis/slb0Db5gZKtnNWi
XfJYw3BJxOPI4digjy8pheIdw88ug+juzlYtcVyeKvbSyMJ4ZhH04uHEa2/Zk6EU
BqQndUvEhGVfBA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:06:25 2025 by rpki-client