Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
File: y3yVUPThoer5UHL7G5q7JpVNJj0.mft (raw, json)
Hash identifier: SeYRYqAd/97XUJSh4Yt3Uhg1eqZfCb9E6KTYmjMwZ70=
Subject key identifier: 55:AD:D0:8D:2A:2F:0C:96:C9:AD:63:98:B7:31:BA:B7:60:63:3A:72
Authority key identifier: CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D
Certificate issuer: /CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d
Certificate serial: 0199228C2D812894C160E1EB58071F554A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
Manifest number: 0D19
Signing time: Sun 07 Sep 2025 05:00:35 +0000
Manifest this update: Sun 07 Sep 2025 05:00:35 +0000
Manifest next update: Mon 08 Sep 2025 05:00:35 +0000
Files and hashes: 1: y3yVUPThoer5UHL7G5q7JpVNJj0.crl (hash: cnF6oat+Am7p61QKFhy/Sq+tuJd9zfOUlxGYOtdWCac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:2d:81:28:94:c1:60:e1:eb:58:07:1f:55:4a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d
Validity
Not Before: Sep 7 05:00:35 2025 GMT
Not After : Sep 8 05:00:35 2025 GMT
Subject: CN=55add08d2a2f0c96c9ad6398b731bab760633a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:28:b5:2c:33:4e:e9:dc:30:96:75:e2:2e:87:
11:42:f1:a3:64:be:4d:cf:50:83:64:f7:de:22:20:
23:f6:74:f5:e5:7d:85:96:43:ec:8c:5d:14:24:c0:
10:26:56:90:e3:6f:fb:d3:52:f7:5d:2b:14:27:80:
aa:7c:88:47:14:1e:96:02:5a:e8:e6:30:5a:f2:4d:
ae:f9:97:4a:62:d9:af:9c:e7:0c:25:fe:52:20:c9:
73:79:61:3f:23:24:f0:cd:5f:1d:9a:17:cd:3b:b7:
d7:25:8b:74:e7:57:4c:93:c9:81:de:85:2f:44:47:
d5:b8:dd:ad:93:7d:5b:1f:31:32:cb:39:34:2b:7a:
3e:b2:9f:61:5e:d8:17:ef:3b:eb:cb:c2:9c:cc:0d:
1e:3c:f2:58:7d:f2:48:be:97:1f:65:8a:fa:35:c8:
6d:16:3c:f7:92:b2:46:1a:0a:9f:6e:20:0e:ad:4c:
43:38:8b:56:75:aa:04:75:ed:d3:53:ec:0b:a2:08:
6f:59:30:d8:3c:bf:2a:d9:d3:df:5a:9e:56:ef:24:
65:7e:22:e8:fe:5c:55:43:22:ec:ad:4d:cd:9d:90:
d5:d5:60:ab:14:ae:dc:5b:bb:b5:9c:3a:6f:cb:3b:
d2:a4:fc:a5:d2:7f:2d:4c:fe:d4:5a:6a:7e:da:3e:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AD:D0:8D:2A:2F:0C:96:C9:AD:63:98:B7:31:BA:B7:60:63:3A:72
X509v3 Authority Key Identifier:
keyid:CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b1:24:ca:e8:47:eb:25:37:7c:73:b4:a2:20:95:7f:9e:86:
16:79:15:3c:a3:14:4f:2c:51:22:4d:ce:4d:c4:d5:9f:b7:58:
13:1e:e8:f2:56:ec:af:a7:d9:a2:c6:34:24:84:4c:a7:25:56:
3b:bd:c1:43:20:4f:b7:9b:f0:a2:7d:71:ad:41:51:80:0e:90:
83:41:a7:74:d9:07:4f:49:7e:b3:a0:96:24:bf:6f:bd:b1:6d:
74:ae:59:20:ff:84:36:8e:b3:c4:ec:9e:1b:63:d6:ed:75:da:
58:4e:c3:95:20:39:2a:c5:c7:b0:26:ac:9b:82:85:20:ac:64:
f5:69:22:31:b9:e4:7d:dd:1c:79:e8:2a:cd:65:51:91:b4:1a:
fc:bd:fb:7d:39:7d:d5:65:a6:82:70:9f:68:00:d1:f9:86:84:
90:dc:e2:bf:2c:13:43:ee:42:00:e8:81:14:80:29:89:c7:ed:
9b:2c:1f:45:49:89:59:fb:e7:74:7e:ae:ba:50:c9:2b:4c:b2:
a8:37:41:8d:8d:10:ff:93:b6:aa:df:d2:0e:74:e7:8a:07:05:
1e:b5:39:3c:67:b5:72:4e:9a:d2:74:ce:3a:f4:e0:4b:0e:0f:
34:a9:a3:a5:3b:e9:a5:cb:9d:7a:c1:51:95:c7:76:88:2b:d2:
85:0f:fd:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijC2BKJTBYOHrWAcfVUpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiN2M5NTUwZjRlMWExZWFmOTUwNzJmYjFiOWFiYjI2OTU0
ZDI2M2QwHhcNMjUwOTA3MDUwMDM1WhcNMjUwOTA4MDUwMDM1WjAzMTEwLwYDVQQD
Eyg1NWFkZDA4ZDJhMmYwYzk2YzlhZDYzOThiNzMxYmFiNzYwNjMzYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjii1LDNO6dwwlnXiLocRQvGjZL5N
z1CDZPfeIiAj9nT15X2FlkPsjF0UJMAQJlaQ42/701L3XSsUJ4CqfIhHFB6WAlro
5jBa8k2u+ZdKYtmvnOcMJf5SIMlzeWE/IyTwzV8dmhfNO7fXJYt051dMk8mB3oUv
REfVuN2tk31bHzEyyzk0K3o+sp9hXtgX7zvry8KczA0ePPJYffJIvpcfZYr6Ncht
Fjz3krJGGgqfbiAOrUxDOItWdaoEde3TU+wLoghvWTDYPL8q2dPfWp5W7yRlfiLo
/lxVQyLsrU3NnZDV1WCrFK7cW7u1nDpvyzvSpPyl0n8tTP7UWmp+2j5D4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWt0I0qLwyWya1jmLcxurdgYzpyMB8GA1UdIwQY
MBaAFMt8lVD04aHq+VBy+xuauyaVTSY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTN5VlVQVGhvZXI1VUhMN0c1cTdKcFZOSmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ODliMTktNDk1OC00NDIzLTg1YTkt
OTYyNmY5ZjZjZGEyLzEveTN5VlVQVGhvZXI1VUhMN0c1cTdKcFZOSmowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82ODliMTktNDk1OC00NDIzLTg1YTktOTYyNmY5ZjZjZGEy
LzEveTN5VlVQVGhvZXI1VUhMN0c1cTdKcFZOSmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbEkyuhH
6yU3fHO0oiCVf56GFnkVPKMUTyxRIk3OTcTVn7dYEx7o8lbsr6fZosY0JIRMpyVW
O73BQyBPt5vwon1xrUFRgA6Qg0GndNkHT0l+s6CWJL9vvbFtdK5ZIP+ENo6zxOye
G2PW7XXaWE7DlSA5KsXHsCasm4KFIKxk9WkiMbnkfd0ceegqzWVRkbQa/L37fTl9
1WWmgnCfaADR+YaEkNzivywTQ+5CAOiBFIApicftmywfRUmJWfvndH6uulDJK0yy
qDdBjY0Q/5O2qt/SDnTnigcFHrU5PGe1ck6a0nTOOvTgSw4PNKmjpTvppcudesFR
lcd2iCvShQ/9+A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:26 2025 by rpki-client