Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json)
Hash identifier: +7CdxDe2ZRp0ID+gjvYZ6xAdnEvavJEAt0/P2/lO3Ck=
Subject key identifier: CF:FD:95:5B:DF:54:1D:78:34:BF:21:9A:CC:1A:CC:02:D5:E1:B0:17
Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511
Certificate serial: 019922C313AC980B14FC7014EF832594A6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
Manifest number: 0181
Signing time: Sun 07 Sep 2025 06:00:33 +0000
Manifest this update: Sun 07 Sep 2025 06:00:33 +0000
Manifest next update: Mon 08 Sep 2025 06:00:33 +0000
Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: J+ACCn6Mr/8b3aAX+lAdXEUjJ6Rh0ldAb79ljHvk/EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:13:ac:98:0b:14:fc:70:14:ef:83:25:94:a6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511
Validity
Not Before: Sep 7 06:00:33 2025 GMT
Not After : Sep 8 06:00:33 2025 GMT
Subject: CN=cffd955bdf541d7834bf219acc1acc02d5e1b017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:58:12:48:e5:2f:89:83:ee:a5:73:8a:95:5f:
3d:80:32:33:86:8b:8f:34:f4:e8:16:77:b5:70:dc:
f3:8f:f3:08:0b:0e:1e:a4:2e:d1:b0:03:21:b7:fe:
2e:d1:47:08:39:35:75:7e:f8:67:e2:4b:6a:e1:73:
30:cf:69:55:2e:f8:6f:52:69:2e:7c:26:e9:62:50:
97:75:ae:b8:3f:70:8c:59:9c:cb:aa:5d:27:51:db:
a7:42:dc:bb:43:d0:76:f5:b8:52:51:df:17:7b:b0:
f1:82:9b:1f:32:5e:14:c1:a8:b5:93:34:ad:7c:85:
b2:35:28:6d:9f:4e:ad:6b:d5:62:bc:a3:61:bb:44:
08:49:c3:70:1b:67:f2:c0:ae:98:66:9e:68:4c:0d:
0d:50:f9:b7:f0:31:ab:b9:70:5e:bb:79:9e:0d:2e:
c0:2d:63:2f:c2:59:33:92:38:a8:14:80:e6:5d:25:
f7:13:19:57:bc:45:e9:cf:7d:21:da:49:df:f7:45:
9f:4b:12:27:bd:83:3c:12:87:66:89:fd:59:fe:3c:
07:7a:4e:cc:ee:5b:c6:ba:5e:1d:4c:08:db:c8:62:
fb:a4:7c:19:d0:4f:45:c8:9c:57:bf:77:65:c4:1c:
22:e6:87:a0:c9:6d:e6:a0:45:74:91:bb:d6:50:fc:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FD:95:5B:DF:54:1D:78:34:BF:21:9A:CC:1A:CC:02:D5:E1:B0:17
X509v3 Authority Key Identifier:
keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b3:14:3e:7f:58:7d:5a:5f:c2:fb:bc:cd:6b:45:85:3a:0b:
bd:3d:39:d0:0d:39:95:65:ff:f7:1b:7a:c5:53:70:16:37:51:
ec:b9:27:d3:a7:a5:c5:bf:1f:72:e8:3d:3a:83:ba:b0:5c:b6:
71:c4:e9:1a:fb:34:b9:6d:e8:8e:7f:ad:f2:92:15:56:23:ce:
4d:4b:d3:bf:f5:01:8a:be:7a:f0:99:40:69:d5:60:ef:e5:9e:
ad:66:25:b7:f0:dc:92:ac:d1:f9:78:cc:be:67:87:6d:8c:18:
c7:a6:6a:79:21:1b:74:6a:c5:fc:08:4e:9f:fe:b7:63:87:70:
90:72:ce:84:a1:a2:52:84:b0:3b:a8:18:83:00:62:a2:d0:c9:
d1:46:b3:08:68:f2:bf:00:85:f8:08:87:22:39:ca:f9:43:76:
fa:52:0f:86:8b:f2:d7:55:6c:c8:11:45:75:5d:bc:93:3e:0b:
45:5e:f0:ed:08:22:6f:90:f8:2d:02:af:5a:0c:30:53:8d:5c:
8d:3d:a1:9e:8a:53:ae:a5:3b:ba:d5:04:31:9e:64:fa:8a:23:
d4:92:79:76:d7:90:54:31:de:73:11:38:e7:a1:36:6e:24:01:
01:46:0f:72:cc:2b:e4:37:14:0e:1a:16:06:92:42:89:6d:c7:
3d:ea:e8:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwxOsmAsU/HAU74MllKa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTc1ODhjMTg0ZWRkNzIxZDA5MGEyZGE5NWMyNmUxYTI4
YzA1MTEwHhcNMjUwOTA3MDYwMDMzWhcNMjUwOTA4MDYwMDMzWjAzMTEwLwYDVQQD
EyhjZmZkOTU1YmRmNTQxZDc4MzRiZjIxOWFjYzFhY2MwMmQ1ZTFiMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFgSSOUviYPupXOKlV89gDIzhouP
NPToFne1cNzzj/MICw4epC7RsAMht/4u0UcIOTV1fvhn4ktq4XMwz2lVLvhvUmku
fCbpYlCXda64P3CMWZzLql0nUdunQty7Q9B29bhSUd8Xe7DxgpsfMl4Uwai1kzSt
fIWyNShtn06ta9VivKNhu0QIScNwG2fywK6YZp5oTA0NUPm38DGruXBeu3meDS7A
LWMvwlkzkjioFIDmXSX3ExlXvEXpz30h2knf90WfSxInvYM8Eodmif1Z/jwHek7M
7lvGul4dTAjbyGL7pHwZ0E9FyJxXv3dlxBwi5oegyW3moEV0kbvWUPzFtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/9lVvfVB14NL8hmswazALV4bAXMB8GA1UdIwQY
MBaAFMmXWIwYTt1yHQkKLalcJuGijAURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82MWNjNzgtMGQ0MC00MDRhLTlkMWQt
YTBlOTQwZDI5OTFmLzEveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82MWNjNzgtMGQ0MC00MDRhLTlkMWQtYTBlOTQwZDI5OTFm
LzEveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7MUPn9Y
fVpfwvu8zWtFhToLvT050A05lWX/9xt6xVNwFjdR7Lkn06elxb8fcug9OoO6sFy2
ccTpGvs0uW3ojn+t8pIVViPOTUvTv/UBir568JlAadVg7+WerWYlt/DckqzR+XjM
vmeHbYwYx6ZqeSEbdGrF/AhOn/63Y4dwkHLOhKGiUoSwO6gYgwBiotDJ0UazCGjy
vwCF+AiHIjnK+UN2+lIPhovy11VsyBFFdV28kz4LRV7w7Qgib5D4LQKvWgwwU41c
jT2hnopTrqU7utUEMZ5k+ooj1JJ5dteQVDHecxE456E2biQBAUYPcswr5DcUDhoW
BpJCiW3HPeroLQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:32 2025 by rpki-client