Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: 7q+ZTKcpaThq+dJBV7CVh8UBFpt57YxOFLfG+6pTVAQ=
Subject key identifier: F3:08:69:71:5C:14:D5:4E:16:69:D0:88:E0:0F:84:D4:FF:D9:E1:E6
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 0199233183211877BF862D8D0E5F8E6C2720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 08:01:11 +0000
Manifest this update: Sun 07 Sep 2025 08:01:11 +0000
Manifest next update: Mon 08 Sep 2025 08:01:11 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: LRATQzrKmWMoQ/Ea3L3x4E0OHm2QFhnpYk7Z8tBZLW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:83:21:18:77:bf:86:2d:8d:0e:5f:8e:6c:27:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Sep 7 08:01:11 2025 GMT
Not After : Sep 8 08:01:11 2025 GMT
Subject: CN=f30869715c14d54e1669d088e00f84d4ffd9e1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:a5:84:1e:71:ee:00:6f:2b:f6:d4:91:36:
13:28:33:f4:65:a1:7c:78:a7:cb:c5:64:98:81:90:
5e:6a:91:2c:15:75:17:52:e2:f0:fd:3b:8e:6e:98:
ca:57:1b:e9:04:1e:91:a9:85:af:90:6d:2e:01:f6:
18:ab:dd:23:63:49:35:21:a3:2a:f1:d2:1f:84:36:
62:23:e1:0e:f8:0c:10:90:fc:c3:ce:83:ba:e0:c6:
8d:0c:a9:38:70:c9:45:88:47:94:64:69:21:c9:9e:
47:26:79:95:3c:8b:9f:5f:26:6f:c2:11:94:59:32:
ff:f5:00:fd:f4:34:7d:db:ff:c5:78:71:35:19:c5:
cf:55:94:f8:37:f2:d8:bf:54:e7:22:a7:4c:6a:d4:
ac:5f:0c:45:d3:b6:3e:17:cd:2c:d1:9a:58:cb:8a:
57:7d:f1:5b:ff:a1:5d:2e:b8:31:04:ad:4f:c2:68:
be:0e:7c:3d:39:6f:96:07:1b:83:b0:b6:35:72:0c:
96:91:33:b3:5d:7c:8c:90:c2:1f:c7:80:df:b7:47:
f3:9b:a1:3b:d3:08:02:76:c8:5e:5a:6f:f3:55:8a:
15:5b:61:74:e5:26:83:c8:d3:13:e6:e1:4f:40:c8:
a1:62:de:fd:5e:e3:66:57:85:33:b9:76:e5:8b:04:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:08:69:71:5C:14:D5:4E:16:69:D0:88:E0:0F:84:D4:FF:D9:E1:E6
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c8:cb:49:76:31:74:43:50:aa:d6:a1:a0:8a:67:0e:0d:ef:
21:b6:a1:1a:15:a2:0b:0d:3d:bd:e9:a8:76:5a:42:08:c7:94:
16:df:ac:8f:ca:cf:33:55:1b:0e:a1:b7:cb:dc:5d:01:3c:9a:
a0:43:9d:c1:bb:10:98:6b:08:cd:95:88:fc:2f:f9:7a:aa:68:
ea:16:5f:31:d0:1f:16:70:a3:7b:f0:4c:99:7f:c3:68:50:8a:
50:e0:c7:26:ea:ff:cc:23:8a:0f:97:e9:62:89:88:f4:45:d3:
86:b1:24:c5:6d:6e:f4:34:f5:de:a1:77:55:3f:e6:ac:1a:a5:
5b:66:00:29:41:4f:95:6d:65:db:e2:b7:c9:57:17:b5:32:04:
db:75:b0:36:cc:f1:73:e4:ac:35:f2:c2:ed:5a:b3:66:59:76:
a4:3f:db:9f:63:e2:1c:3e:60:5c:a6:a0:35:aa:56:7a:13:0a:
ef:18:ac:f2:0e:7d:93:d0:61:5e:f4:a2:d7:d1:d1:73:0f:9a:
ab:ac:af:6c:b5:32:0d:d6:71:1c:b2:b5:6c:3f:8f:ba:a7:36:
49:19:7b:c8:ec:19:8d:03:22:d1:a2:9c:37:b2:a7:69:44:02:
11:3c:1f:6b:42:e2:22:85:3a:4b:0e:11:e9:6a:84:ef:b8:6c:
cb:09:0a:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMYMhGHe/hi2NDl+ObCcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzVmNzZlOGY4OTQyNDc5MjNjMGUyNzYyMzRkOThhNGMz
ZWM1YzIwHhcNMjUwOTA3MDgwMTExWhcNMjUwOTA4MDgwMTExWjAzMTEwLwYDVQQD
EyhmMzA4Njk3MTVjMTRkNTRlMTY2OWQwODhlMDBmODRkNGZmZDllMWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTelhB5x7gBvK/bUkTYTKDP0ZaF8
eKfLxWSYgZBeapEsFXUXUuLw/TuObpjKVxvpBB6RqYWvkG0uAfYYq90jY0k1IaMq
8dIfhDZiI+EO+AwQkPzDzoO64MaNDKk4cMlFiEeUZGkhyZ5HJnmVPIufXyZvwhGU
WTL/9QD99DR92//FeHE1GcXPVZT4N/LYv1TnIqdMatSsXwxF07Y+F80s0ZpYy4pX
ffFb/6FdLrgxBK1Pwmi+Dnw9OW+WBxuDsLY1cgyWkTOzXXyMkMIfx4Dft0fzm6E7
0wgCdsheWm/zVYoVW2F05SaDyNMT5uFPQMihYt79XuNmV4UzuXbliwQv3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMIaXFcFNVOFmnQiOAPhNT/2eHmMB8GA1UdIwQY
MBaAFMh1926PiUJHkjwOJ2I02YpMPsXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAt
MzA1NjU4ZjkxNjM1LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAtMzA1NjU4ZjkxNjM1
LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8jLSXYx
dENQqtahoIpnDg3vIbahGhWiCw09vemodlpCCMeUFt+sj8rPM1UbDqG3y9xdATya
oEOdwbsQmGsIzZWI/C/5eqpo6hZfMdAfFnCje/BMmX/DaFCKUODHJur/zCOKD5fp
YomI9EXThrEkxW1u9DT13qF3VT/mrBqlW2YAKUFPlW1l2+K3yVcXtTIE23WwNszx
c+SsNfLC7VqzZll2pD/bn2PiHD5gXKagNapWehMK7xis8g59k9BhXvSi19HRcw+a
q6yvbLUyDdZxHLK1bD+Puqc2SRl7yOwZjQMi0aKcN7KnaUQCETwfa0LiIoU6Sw4R
6WqE77hsywkKuQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:57 2025 by rpki-client