Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: 97mWFH2p2DdUBuW7ynqIEMFGy6E2s+tdMNbd79Hszfw=
Subject key identifier: 06:2D:E3:9F:68:74:3D:E1:D8:99:AC:D1:0B:73:FE:37:D9:CB:83:39
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 019951C0F1D0A346114AA0AE577FE61D026C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 168A
Signing time: Tue 16 Sep 2025 09:00:23 +0000
Manifest this update: Tue 16 Sep 2025 09:00:23 +0000
Manifest next update: Wed 17 Sep 2025 09:00:23 +0000
Files and hashes: 1: XCar8SNrGHj7mUVHaBXEnUvq1KY.roa (hash: p4pcecBBeg+02FW19VP+ZJ5O31/pLj9QyP3szv9c6Sg=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: dWsAllT6RuzPi86KP+oN6bzs53k8YfA+CAAWeNqR6K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:c0:f1:d0:a3:46:11:4a:a0:ae:57:7f:e6:1d:02:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Sep 16 09:00:23 2025 GMT
Not After : Sep 17 09:00:23 2025 GMT
Subject: CN=062de39f68743de1d899acd10b73fe37d9cb8339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:13:0a:6b:93:30:8a:fb:0a:e5:7b:2a:b9:
97:14:a4:14:2e:30:fe:49:fa:fc:49:ff:88:bb:01:
8d:c8:ca:11:ad:ff:27:09:10:30:0b:fd:9e:3b:81:
ac:dc:75:13:44:b0:b2:fb:f1:d6:c3:6c:a0:c9:9d:
e4:78:14:f9:5b:10:ca:2d:c1:c8:0b:3e:aa:08:f3:
68:ab:71:5e:1e:6b:e0:a1:84:c3:e9:d7:73:86:d8:
24:cb:0f:38:17:fd:7d:ca:57:46:c4:a2:02:b2:98:
50:bf:0f:5f:5e:84:62:29:1b:ac:19:f0:eb:8a:26:
c4:e3:6d:f2:e8:1f:13:e7:85:37:c7:e2:f0:9a:ce:
53:79:fd:db:62:37:40:15:98:a9:bc:be:d7:1e:62:
01:31:0e:fb:c5:c6:82:a8:78:7e:2e:d7:e6:3b:6e:
6f:a5:5d:38:b5:63:4b:e7:70:8e:33:b3:2b:3c:a2:
ef:47:57:4c:57:8e:69:ae:04:52:3a:4f:d1:e6:71:
1f:20:93:9b:69:95:06:8d:c0:55:05:60:78:bf:b7:
4c:57:42:ec:9f:90:be:2b:36:c4:da:f6:aa:94:3c:
ca:25:e5:4c:5d:4a:a9:ce:60:9f:bb:88:b6:c2:60:
ac:d8:ab:a2:84:73:af:06:d2:fe:b5:aa:2a:85:e5:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:E3:9F:68:74:3D:E1:D8:99:AC:D1:0B:73:FE:37:D9:CB:83:39
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bd:f0:1e:cd:4e:58:5f:73:f8:53:03:bb:81:23:d1:c0:ed:
c5:aa:74:48:ab:35:e6:41:cc:d0:95:45:4b:a0:54:f9:04:11:
66:90:ab:f7:6e:cb:49:8c:db:61:de:e0:ea:ac:2a:02:5a:ce:
ab:e3:3e:c1:2a:a9:69:f5:0f:28:e6:ab:af:3f:7a:83:42:c7:
90:ab:16:33:a9:aa:4b:c9:51:94:13:db:cd:13:7a:ca:b2:20:
e1:40:bd:1f:82:b3:98:3e:bc:ad:2e:7f:e1:4a:48:00:b2:b2:
40:75:4c:4b:b3:dd:8b:8e:dd:ce:66:0c:f6:7a:6c:8b:59:99:
59:74:d7:1b:48:01:9c:3e:c4:ac:3f:c0:ee:cc:4f:2a:e4:0c:
43:a7:28:d0:77:2d:56:dd:06:fd:09:e1:dc:2d:51:a8:06:5f:
e6:81:00:8c:e8:d0:38:ea:8a:2c:73:95:09:53:11:11:f6:6b:
2f:4b:7b:44:4f:04:cf:cc:48:2e:57:1a:0b:46:a1:d1:4d:ad:
a3:eb:84:bf:9a:f8:90:94:f4:ad:f9:18:a1:4a:79:43:cb:e0:
74:6f:17:1f:27:35:ce:1c:3b:5a:c0:44:1a:cb:fe:b9:fc:4b:
33:16:f1:69:7b:f5:7f:8c:67:d3:a6:70:58:f4:b9:a2:7b:09:
9f:bf:02:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlRwPHQo0YRSqCuV3/mHQJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjI3NmRiOWQ5YjM0Y2RlYzI2MjBjNzI1N2RjNWFkNGFl
YjgzMmQwHhcNMjUwOTE2MDkwMDIzWhcNMjUwOTE3MDkwMDIzWjAzMTEwLwYDVQQD
EygwNjJkZTM5ZjY4NzQzZGUxZDg5OWFjZDEwYjczZmUzN2Q5Y2I4MzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlUTCmuTMIr7CuV7KrmXFKQULjD+
Sfr8Sf+IuwGNyMoRrf8nCRAwC/2eO4Gs3HUTRLCy+/HWw2ygyZ3keBT5WxDKLcHI
Cz6qCPNoq3FeHmvgoYTD6ddzhtgkyw84F/19yldGxKICsphQvw9fXoRiKRusGfDr
iibE423y6B8T54U3x+Lwms5Tef3bYjdAFZipvL7XHmIBMQ77xcaCqHh+LtfmO25v
pV04tWNL53COM7MrPKLvR1dMV45prgRSOk/R5nEfIJObaZUGjcBVBWB4v7dMV0Ls
n5C+KzbE2vaqlDzKJeVMXUqpzmCfu4i2wmCs2KuihHOvBtL+taoqheWa+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYt459odD3h2Jms0Qtz/jfZy4M5MB8GA1UdIwQY
MBaAFGIidtudmzTN7CYgxyV9xa1K64MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUt
ZTZlZTU4MzRjOTk1LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUtZTZlZTU4MzRjOTk1
LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo73wHs1O
WF9z+FMDu4Ej0cDtxap0SKs15kHM0JVFS6BU+QQRZpCr927LSYzbYd7g6qwqAlrO
q+M+wSqpafUPKOarrz96g0LHkKsWM6mqS8lRlBPbzRN6yrIg4UC9H4KzmD68rS5/
4UpIALKyQHVMS7Pdi47dzmYM9npsi1mZWXTXG0gBnD7ErD/A7sxPKuQMQ6co0Hct
Vt0G/Qnh3C1RqAZf5oEAjOjQOOqKLHOVCVMREfZrL0t7RE8Ez8xILlcaC0ah0U2t
o+uEv5r4kJT0rfkYoUp5Q8vgdG8XHyc1zhw7WsBEGsv+ufxLMxbxaXv1f4xn06Zw
WPS5onsJn78Cdg==
-----END CERTIFICATE-----
Generated at Tue Sep 16 16:16:16 2025 by rpki-client