Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: EhmPnOt2A1O5jj6GYL98W6p1q4HaArWrxQ+JVbt/Rk4=
Subject key identifier: 1D:9F:66:2B:58:18:F8:2A:E5:B2:DA:E2:96:35:7A:89:F9:C9:AD:B3
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 019848F7A0387C2843A937FA803759074A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 12C2
Signing time: Sat 26 Jul 2025 23:00:44 +0000
Manifest this update: Sat 26 Jul 2025 23:00:44 +0000
Manifest next update: Sun 27 Jul 2025 23:00:44 +0000
Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: A1LXiTjucvST7TLVnoREGcZ22TTEoP4+VtpZmCR8A7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a0:38:7c:28:43:a9:37:fa:80:37:59:07:4a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Jul 26 23:00:44 2025 GMT
Not After : Jul 27 23:00:44 2025 GMT
Subject: CN=1d9f662b5818f82ae5b2dae296357a89f9c9adb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:71:b7:b1:85:99:e3:48:c3:45:7b:32:6b:
5e:80:f3:9a:08:f9:ba:28:4d:45:9e:8c:51:a7:97:
e2:29:3d:bf:49:46:c5:18:5c:b7:8c:1f:89:39:6b:
c8:b5:ee:65:c1:87:d7:a5:f0:51:a1:b0:7b:61:30:
89:f4:95:12:20:7e:32:a9:57:21:20:20:b5:6a:d4:
eb:ab:dc:7b:77:90:0d:c2:ec:56:1d:b6:a2:b3:76:
c2:f2:1f:a4:1a:73:d0:78:0a:83:8e:aa:4a:96:81:
1e:b3:4d:e1:82:21:40:7e:c4:bf:a5:34:57:bf:bb:
25:20:1c:b0:4a:a5:fb:54:49:db:d0:6b:93:66:4b:
3d:9f:bd:bb:1b:ad:29:de:61:87:32:fb:76:0e:f7:
33:c2:8e:82:a1:ea:69:7d:2f:ef:02:37:29:25:d4:
5c:3a:9d:06:51:e6:4a:52:42:87:8b:2b:2a:c9:c0:
da:ea:ac:30:c8:62:9c:7f:fc:e0:8d:54:35:3b:67:
fa:36:91:f1:d3:05:fc:15:42:b3:32:db:40:1c:36:
ff:ab:b4:db:bb:80:a3:87:1b:0e:de:ae:f6:91:9b:
7e:ac:1b:d5:c0:4d:02:18:a3:3a:b9:d3:5a:7c:66:
5c:86:c6:49:ba:eb:54:7a:39:5b:77:f5:26:88:d1:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9F:66:2B:58:18:F8:2A:E5:B2:DA:E2:96:35:7A:89:F9:C9:AD:B3
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8f:18:e6:59:f6:55:c8:50:d0:7a:c4:52:98:d0:b4:44:e5:
29:8f:d5:5b:f4:10:19:b2:7a:27:28:5c:ec:4d:e0:4e:3a:85:
05:9d:48:29:d2:07:29:89:cc:40:26:4c:30:e2:9d:cd:38:7f:
35:ff:29:d1:04:5c:b1:14:56:75:57:cb:6b:a0:9c:41:25:35:
c8:68:c6:fd:19:42:cc:c0:a2:c6:6d:bf:1e:fb:95:da:45:72:
c4:0c:d8:a3:ec:e8:a2:ab:4b:a2:9a:a1:fb:b9:a3:12:ad:33:
f7:ac:37:c5:b5:23:31:82:bf:13:47:ec:e8:e6:22:c4:36:d6:
a6:e4:e8:79:f3:77:d3:d8:c3:d0:0b:9d:72:cd:3f:94:36:31:
1f:ff:89:d9:f2:52:d3:ba:6a:4e:0f:33:b3:60:30:a4:64:45:
30:93:84:1b:62:6f:4b:84:88:0a:f4:a0:3d:c3:3a:58:af:e1:
49:53:25:b2:d6:33:a7:ee:0b:e3:19:07:ed:dd:ba:00:e5:fe:
d5:c6:3f:6f:b1:f7:3e:d2:bd:3b:3e:0a:9a:96:de:ff:4e:94:
c0:de:a6:18:31:5d:8f:fd:a1:2b:bb:ca:94:ab:07:67:be:6b:
6e:23:dd:69:14:06:d8:37:a2:ca:f4:a7:c4:7e:5b:c1:e2:a7:
fb:c3:05:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI96A4fChDqTf6gDdZB0oVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZjk3MjY3ZTdjMDA3OTUzMDk1MDlmMWU4ZDNkOWNkZTBh
NzZjNGUwHhcNMjUwNzI2MjMwMDQ0WhcNMjUwNzI3MjMwMDQ0WjAzMTEwLwYDVQQD
EygxZDlmNjYyYjU4MThmODJhZTViMmRhZTI5NjM1N2E4OWY5YzlhZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj9xt7GFmeNIw0V7MmtegPOaCPm6
KE1FnoxRp5fiKT2/SUbFGFy3jB+JOWvIte5lwYfXpfBRobB7YTCJ9JUSIH4yqVch
ICC1atTrq9x7d5ANwuxWHbais3bC8h+kGnPQeAqDjqpKloEes03hgiFAfsS/pTRX
v7slIBywSqX7VEnb0GuTZks9n727G60p3mGHMvt2Dvczwo6CoeppfS/vAjcpJdRc
Op0GUeZKUkKHiysqycDa6qwwyGKcf/zgjVQ1O2f6NpHx0wX8FUKzMttAHDb/q7Tb
u4CjhxsO3q72kZt+rBvVwE0CGKM6udNafGZchsZJuutUejlbd/UmiNEvVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2fZitYGPgq5bLa4pY1eon5ya2zMB8GA1UdIwQY
MBaAFGP5cmfnwAeVMJUJ8ejT2c3gp2xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83YTFjMmUtNzVmYi00NGM2LWE4M2Mt
MTQ2NzNjNzJhMWRmLzEvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83YTFjMmUtNzVmYi00NGM2LWE4M2MtMTQ2NzNjNzJhMWRm
LzEvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZY8Y5ln2
VchQ0HrEUpjQtETlKY/VW/QQGbJ6Jyhc7E3gTjqFBZ1IKdIHKYnMQCZMMOKdzTh/
Nf8p0QRcsRRWdVfLa6CcQSU1yGjG/RlCzMCixm2/HvuV2kVyxAzYo+zooqtLopqh
+7mjEq0z96w3xbUjMYK/E0fs6OYixDbWpuToefN309jD0Audcs0/lDYxH/+J2fJS
07pqTg8zs2AwpGRFMJOEG2JvS4SICvSgPcM6WK/hSVMlstYzp+4L4xkH7d26AOX+
1cY/b7H3PtK9Oz4Kmpbe/06UwN6mGDFdj/2hK7vKlKsHZ75rbiPdaRQG2DeiyvSn
xH5bweKn+8MFxg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:30 2025 by rpki-client