Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: 85rCsqMrWybj3qQ8nq8ea/3hCSr38vT5yuatsvFIpwc=
Subject key identifier: 37:67:2B:FA:BB:FB:60:DA:A4:AE:13:4C:7B:34:B6:9D:B2:B3:92:7D
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019938395A1E7C3160DEDC4916FCA0CA2F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0A39
Signing time: Thu 11 Sep 2025 10:01:46 +0000
Manifest this update: Thu 11 Sep 2025 10:01:46 +0000
Manifest next update: Fri 12 Sep 2025 10:01:46 +0000
Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: xRtlgePsRMu9bbQhIjF7Yqf+hCT897w2iptGnI7vGYg=)
3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:5a:1e:7c:31:60:de:dc:49:16:fc:a0:ca:2f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Sep 11 10:01:46 2025 GMT
Not After : Sep 12 10:01:46 2025 GMT
Subject: CN=37672bfabbfb60daa4ae134c7b34b69db2b3927d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:a6:79:df:0e:4e:14:91:97:83:c1:32:75:
b0:5b:43:21:f7:6d:cf:bb:c2:b8:03:0f:39:de:1d:
63:7b:27:fe:b7:1c:16:7a:a3:6d:2e:52:3f:ad:54:
65:b3:54:f8:1d:db:0b:ff:04:1b:21:68:48:70:c1:
b0:3a:07:f9:da:d6:be:dd:e8:c9:9b:df:cf:72:49:
df:7d:9c:cb:2c:41:66:5f:c0:26:d4:2a:6e:9d:71:
cb:ed:47:44:b0:82:e4:1d:15:42:21:6e:60:71:2d:
a8:b0:4c:dd:68:9b:c6:1e:40:7b:e2:22:51:39:ff:
50:75:72:21:77:e2:82:f6:fa:26:02:2f:83:be:9f:
c3:63:36:d7:95:0c:32:75:70:a7:74:08:a8:ff:cc:
70:40:8a:67:b0:18:51:ba:e2:58:05:4d:a5:8a:47:
c6:5a:3b:b4:de:0e:30:41:e3:a9:3f:fd:7a:4d:62:
b3:7e:6c:44:0c:bd:2d:76:22:c8:c0:b5:2d:16:21:
77:af:21:1c:30:98:3b:1e:42:b1:02:c4:f1:c7:7c:
f4:be:bc:70:28:de:4a:bd:a4:d3:29:ee:15:b2:1d:
aa:13:4f:da:ce:5f:bc:87:27:ed:9e:71:48:f4:33:
b3:95:0e:76:d1:df:e4:76:a4:d6:a8:1d:31:8b:56:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:67:2B:FA:BB:FB:60:DA:A4:AE:13:4C:7B:34:B6:9D:B2:B3:92:7D
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a0:6d:e9:fd:9f:9d:b0:b3:de:07:e8:41:b2:5a:cf:46:c5:
72:3e:1c:3e:36:c4:23:f2:8d:bd:33:fb:34:f1:ce:f4:b2:d5:
d1:a4:a9:21:c9:ed:f2:33:db:78:73:d8:90:e1:7a:11:9e:db:
1a:82:bf:38:20:cc:43:42:8f:85:bb:4d:49:a6:f2:77:38:23:
a9:04:59:f9:f6:3e:bb:7b:c5:e2:cd:54:8c:ce:95:18:62:ce:
b2:27:2d:eb:74:86:5b:a5:95:49:8e:93:e9:ff:26:fa:7d:73:
01:16:d6:c6:9d:03:4a:7b:97:ba:d6:be:4c:39:df:8e:3b:44:
70:f7:86:10:70:11:85:c2:72:91:58:99:03:2a:ed:77:7c:91:
b2:4e:1a:2f:df:84:0e:36:3a:c6:0b:89:49:be:fd:ba:2c:69:
8e:3f:65:50:42:16:e7:e8:9a:a2:11:3c:56:57:80:4d:d7:7b:
2f:cb:64:85:7c:7c:3d:d3:d5:f5:2a:0f:53:5c:eb:3e:c2:dc:
5c:0d:11:06:05:72:48:17:c2:8e:b2:bd:76:8b:c9:73:ea:49:
4e:da:66:08:59:5a:cc:c2:ca:a2:a8:21:17:f2:61:b2:c7:5a:
62:cd:21:ab:2b:4d:30:21:41:dc:d2:8f:02:30:ea:af:ca:3b:
80:03:c5:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4OVoefDFg3txJFvygyi8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzM2U3NTJjYTBkYzQyM2M3NGY1MDg0MDViYTUyMjhhOGMy
ZTUxNTcwHhcNMjUwOTExMTAwMTQ2WhcNMjUwOTEyMTAwMTQ2WjAzMTEwLwYDVQQD
EygzNzY3MmJmYWJiZmI2MGRhYTRhZTEzNGM3YjM0YjY5ZGIyYjM5MjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/ymed8OThSRl4PBMnWwW0Mh923P
u8K4Aw853h1jeyf+txwWeqNtLlI/rVRls1T4HdsL/wQbIWhIcMGwOgf52ta+3ejJ
m9/PcknffZzLLEFmX8Am1CpunXHL7UdEsILkHRVCIW5gcS2osEzdaJvGHkB74iJR
Of9QdXIhd+KC9vomAi+Dvp/DYzbXlQwydXCndAio/8xwQIpnsBhRuuJYBU2likfG
Wju03g4wQeOpP/16TWKzfmxEDL0tdiLIwLUtFiF3ryEcMJg7HkKxAsTxx3z0vrxw
KN5KvaTTKe4Vsh2qE0/azl+8hyftnnFI9DOzlQ520d/kdqTWqB0xi1aH+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdnK/q7+2DapK4TTHs0tp2ys5J9MB8GA1UdIwQY
MBaAFGM+dSyg3EI8dPUIQFulIoqMLlFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzkt
ZGU2MTg3YjcyOThhLzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzktZGU2MTg3YjcyOThh
LzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqBt6f2f
nbCz3gfoQbJaz0bFcj4cPjbEI/KNvTP7NPHO9LLV0aSpIcnt8jPbeHPYkOF6EZ7b
GoK/OCDMQ0KPhbtNSabydzgjqQRZ+fY+u3vF4s1UjM6VGGLOsict63SGW6WVSY6T
6f8m+n1zARbWxp0DSnuXuta+TDnfjjtEcPeGEHARhcJykViZAyrtd3yRsk4aL9+E
DjY6xguJSb79uixpjj9lUEIW5+iaohE8VleATdd7L8tkhXx8PdPV9SoPU1zrPsLc
XA0RBgVySBfCjrK9dovJc+pJTtpmCFlazMLKoqghF/JhssdaYs0hqytNMCFB3NKP
AjDqr8o7gAPFYg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 12:08:45 2025 by rpki-client