Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: egKdwhO8M722eL+u9XKEFmKLgKktRrr6660S+LWoXJw=
Subject key identifier: 18:C3:65:8B:D9:60:1E:48:88:AA:2C:D0:D4:A8:AA:85:15:32:B5:59
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 01984AAF256084D1D153AD1AC2B309B92F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 03D5
Signing time: Sun 27 Jul 2025 07:00:49 +0000
Manifest this update: Sun 27 Jul 2025 07:00:49 +0000
Manifest next update: Mon 28 Jul 2025 07:00:49 +0000
Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: ER0exb2bUxe0R0hkFj6KhMDSHlmfRw7yYvyMXD/iiGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:25:60:84:d1:d1:53:ad:1a:c2:b3:09:b9:2f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Jul 27 07:00:49 2025 GMT
Not After : Jul 28 07:00:49 2025 GMT
Subject: CN=18c3658bd9601e4888aa2cd0d4a8aa851532b559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:5e:6f:ca:b4:d9:45:31:1c:b9:97:bd:1f:
52:7b:35:8a:6b:0b:39:2c:50:2d:be:9f:9a:cd:4f:
41:e0:74:26:02:49:51:07:eb:76:9b:15:f6:cc:da:
fc:db:39:a2:b2:1a:c6:ec:eb:32:89:12:67:4b:91:
27:25:c1:17:5d:9f:6b:ea:92:db:0c:05:2a:cb:ee:
b1:d6:7a:2b:ba:a7:f8:6c:77:c5:72:db:73:6f:88:
aa:52:59:0a:a9:b7:89:9c:a0:aa:5c:90:ec:db:33:
4d:fd:9c:77:52:88:bc:c9:c9:ea:a5:32:0c:95:60:
aa:b5:07:57:99:74:5c:62:29:c2:60:15:63:36:85:
43:ae:95:ba:69:23:eb:19:07:81:02:52:28:0d:35:
31:95:d2:be:31:19:71:15:3f:a9:94:66:37:a5:5f:
35:3f:8e:22:c7:44:67:47:a4:a6:d2:27:16:8f:9b:
dc:42:e6:77:9b:42:08:b3:55:a9:3e:18:df:e5:6a:
72:85:eb:69:83:ac:e9:71:17:b6:88:0c:92:4c:81:
b3:4e:8f:a0:e8:ef:72:88:1a:c8:19:39:64:19:6d:
0b:a0:b4:f0:41:5c:7c:3b:ce:33:ac:f1:bb:9a:95:
77:e8:73:5e:e1:c5:49:10:7b:d5:19:88:46:b4:57:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C3:65:8B:D9:60:1E:48:88:AA:2C:D0:D4:A8:AA:85:15:32:B5:59
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f8:b8:d6:80:74:5a:47:16:06:d3:ff:21:80:d6:a2:b7:e1:
d3:c9:a5:3a:29:75:f9:d7:26:c8:f4:d7:00:a8:1e:22:e8:43:
2c:a9:ea:32:a6:3a:1d:d8:97:35:1b:6e:c7:43:e3:06:82:01:
a7:4b:9d:a6:6b:45:0c:32:d2:b1:bd:54:06:bb:af:7b:b1:ca:
87:ed:0b:aa:47:9d:36:20:34:a9:41:b3:84:44:8b:3a:03:d0:
de:62:dc:ac:47:9b:f4:0f:42:b9:a3:90:33:5e:ec:9a:92:d5:
cd:40:30:be:95:fc:71:42:e1:a6:4d:48:a8:dc:16:64:6f:de:
c8:cd:06:32:ff:ae:8c:bc:16:5a:c0:97:83:98:39:27:52:be:
8a:fa:57:67:96:aa:65:9a:ff:dd:51:35:22:94:4f:a9:55:fc:
14:92:e8:a6:72:e4:65:c9:72:3b:05:74:75:a8:31:6c:a0:de:
d9:f7:9d:87:bf:bd:39:fe:f5:b6:73:33:6e:5f:03:86:c6:41:
db:98:e1:9a:83:40:72:04:1d:a7:a7:ca:b8:c2:fd:20:98:34:
21:a3:d7:0f:ee:82:e6:7b:c2:14:31:94:ba:95:22:95:85:f1:
ca:9b:80:7c:1d:7a:5d:c6:43:63:2a:2b:42:10:49:20:c3:54:
fe:7e:39:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKryVghNHRU60awrMJuS94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTk3Y2QxNGYzYTZiYzM0NGEyYzkzOGVlMGZkZWI1NGQy
MjEyNDAwHhcNMjUwNzI3MDcwMDQ5WhcNMjUwNzI4MDcwMDQ5WjAzMTEwLwYDVQQD
EygxOGMzNjU4YmQ5NjAxZTQ4ODhhYTJjZDBkNGE4YWE4NTE1MzJiNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngteb8q02UUxHLmXvR9SezWKaws5
LFAtvp+azU9B4HQmAklRB+t2mxX2zNr82zmishrG7OsyiRJnS5EnJcEXXZ9r6pLb
DAUqy+6x1noruqf4bHfFcttzb4iqUlkKqbeJnKCqXJDs2zNN/Zx3Uoi8ycnqpTIM
lWCqtQdXmXRcYinCYBVjNoVDrpW6aSPrGQeBAlIoDTUxldK+MRlxFT+plGY3pV81
P44ix0RnR6Sm0icWj5vcQuZ3m0IIs1WpPhjf5Wpyhetpg6zpcRe2iAySTIGzTo+g
6O9yiBrIGTlkGW0LoLTwQVx8O84zrPG7mpV36HNe4cVJEHvVGYhGtFeunwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjDZYvZYB5IiKos0NSoqoUVMrVZMB8GA1UdIwQY
MBaAFMuZfNFPOmvDRKLJOO4P3rVNIhJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQt
MTZlOGZlM2M1MDZmLzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQtMTZlOGZlM2M1MDZm
LzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfi41oB0
WkcWBtP/IYDWorfh08mlOil1+dcmyPTXAKgeIuhDLKnqMqY6HdiXNRtux0PjBoIB
p0udpmtFDDLSsb1UBruve7HKh+0LqkedNiA0qUGzhESLOgPQ3mLcrEeb9A9CuaOQ
M17smpLVzUAwvpX8cULhpk1IqNwWZG/eyM0GMv+ujLwWWsCXg5g5J1K+ivpXZ5aq
ZZr/3VE1IpRPqVX8FJLopnLkZclyOwV0dagxbKDe2fedh7+9Of71tnMzbl8DhsZB
25jhmoNAcgQdp6fKuML9IJg0IaPXD+6C5nvCFDGUupUilYXxypuAfB16XcZDYyor
QhBJIMNU/n451A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:03 2025 by rpki-client