Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: jwpRtuvnBXYJogTea2uFtlpuKS6PEOFFEflO3ApIk84=
Subject key identifier: D0:69:6C:E5:91:81:38:AC:77:DE:A7:E7:71:D0:11:63:5B:70:0A:CC
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 0199356E47400C3FE51458EAA9CCBA1EC498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 15A8
Signing time: Wed 10 Sep 2025 21:00:43 +0000
Manifest this update: Wed 10 Sep 2025 21:00:43 +0000
Manifest next update: Thu 11 Sep 2025 21:00:43 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: l6dFjOV7vPT6+qv+ob5aEyPGxg1gyylFabV6V70db9w=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:47:40:0c:3f:e5:14:58:ea:a9:cc:ba:1e:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Sep 10 21:00:43 2025 GMT
Not After : Sep 11 21:00:43 2025 GMT
Subject: CN=d0696ce5918138ac77dea7e771d011635b700acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:bd:24:4a:5f:b8:9f:d8:c1:d0:97:af:72:
0c:9f:f3:28:2a:8d:23:87:01:c6:d9:20:b2:15:75:
2b:73:3b:d0:c7:50:c1:f5:3e:d1:ff:3a:61:8a:12:
f2:45:06:5e:c5:24:1f:02:e1:82:d0:98:15:01:7c:
ef:8c:07:84:ee:11:aa:b3:f1:ce:ce:14:76:7a:d7:
5b:97:20:7f:59:e6:8c:d0:b9:ac:79:6f:e8:fd:85:
58:ec:6b:96:b8:4a:c4:26:60:14:ac:75:73:8b:de:
df:a8:9c:c6:07:8e:51:76:37:30:13:2b:74:c3:70:
52:da:06:f9:ec:eb:d8:8b:a2:ce:37:04:89:89:84:
fa:3e:10:03:e3:cc:3f:73:fb:8b:4d:99:d8:67:9e:
d6:13:0e:57:5c:83:ad:14:62:1d:12:b7:cf:d7:7e:
20:2e:d0:ce:ee:0b:79:e3:18:6f:11:8d:06:31:dc:
80:22:0e:b4:7d:ca:5d:09:62:1b:83:fb:91:ef:da:
21:62:1d:3e:9e:36:a0:56:c4:c3:77:60:9a:b5:b4:
5b:77:0b:50:a0:98:1f:29:b7:e9:d4:22:a9:5a:63:
05:0a:11:70:e8:fe:0f:dc:a7:a0:1d:9c:fd:9f:c9:
d1:35:cc:ad:af:ff:ea:ed:62:f8:c0:ec:05:ae:9b:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:69:6C:E5:91:81:38:AC:77:DE:A7:E7:71:D0:11:63:5B:70:0A:CC
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:84:19:3f:bb:29:4d:8c:8a:3a:14:f8:ac:9f:df:aa:2f:fc:
fd:03:cc:6b:d9:09:17:92:c7:5b:91:a1:af:8f:80:e8:e9:3c:
41:e9:11:ef:21:89:81:28:33:fb:5a:8b:33:4f:75:b1:51:c0:
69:ff:b9:39:0d:0d:22:a0:1b:c9:6d:23:bb:41:8c:ba:6e:59:
b0:8d:e8:ff:04:f4:a4:c1:24:9c:70:a9:7c:4e:b3:dc:9d:3a:
95:75:7a:2f:b3:bf:c3:7a:fa:bd:c7:75:2e:66:ef:81:bf:b8:
83:92:f6:a9:cf:e5:aa:0e:aa:91:d3:23:33:b9:60:6f:f2:16:
9d:9a:dc:38:b3:96:86:b9:fb:61:53:ec:bd:54:38:6f:79:74:
f3:cf:a4:03:18:e5:95:b1:ad:c8:2b:f8:4a:61:9e:6c:67:53:
bb:35:ec:1f:8c:cd:73:b5:19:f6:3d:08:f5:a7:81:f3:09:15:
c1:4c:19:bb:3c:ab:37:0f:cf:af:09:18:c1:2d:bd:b9:fa:42:
12:12:e1:cd:91:28:40:69:a3:8b:78:b3:42:6c:9a:10:10:58:
46:30:20:d6:2c:5c:50:c5:6d:95:07:a5:4a:c0:a6:4e:9f:67:
98:b6:68:53:0d:f5:86:58:8e:df:25:78:53:56:56:28:a0:cb:
ba:c0:61:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1bkdADD/lFFjqqcy6HsSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1
NDFiMjUwHhcNMjUwOTEwMjEwMDQzWhcNMjUwOTExMjEwMDQzWjAzMTEwLwYDVQQD
EyhkMDY5NmNlNTkxODEzOGFjNzdkZWE3ZTc3MWQwMTE2MzViNzAwYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox69JEpfuJ/YwdCXr3IMn/MoKo0j
hwHG2SCyFXUrczvQx1DB9T7R/zphihLyRQZexSQfAuGC0JgVAXzvjAeE7hGqs/HO
zhR2etdblyB/WeaM0LmseW/o/YVY7GuWuErEJmAUrHVzi97fqJzGB45RdjcwEyt0
w3BS2gb57OvYi6LONwSJiYT6PhAD48w/c/uLTZnYZ57WEw5XXIOtFGIdErfP134g
LtDO7gt54xhvEY0GMdyAIg60fcpdCWIbg/uR79ohYh0+njagVsTDd2CatbRbdwtQ
oJgfKbfp1CKpWmMFChFw6P4P3KegHZz9n8nRNcytr//q7WL4wOwFrpuwmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBpbOWRgTisd96n53HQEWNbcArMMB8GA1UdIwQY
MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt
ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz
LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYQZP7sp
TYyKOhT4rJ/fqi/8/QPMa9kJF5LHW5Ghr4+A6Ok8QekR7yGJgSgz+1qLM091sVHA
af+5OQ0NIqAbyW0ju0GMum5ZsI3o/wT0pMEknHCpfE6z3J06lXV6L7O/w3r6vcd1
Lmbvgb+4g5L2qc/lqg6qkdMjM7lgb/IWnZrcOLOWhrn7YVPsvVQ4b3l088+kAxjl
lbGtyCv4SmGebGdTuzXsH4zNc7UZ9j0I9aeB8wkVwUwZuzyrNw/PrwkYwS29ufpC
EhLhzZEoQGmji3izQmyaEBBYRjAg1ixcUMVtlQelSsCmTp9nmLZoUw31hliO3yV4
U1ZWKKDLusBhVw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:53:37 2025 by rpki-client