Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: oDqt5SOPK585HBkEklylHLPGfSQdJ9kN6KVCdUfyltE=
Subject key identifier: 3A:83:07:30:4C:7B:65:B8:E6:8B:43:22:98:C6:71:5A:D3:14:59:8E
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 019916F5BAD9B8EABD3DC884ACCE428EFE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0B3E
Signing time: Thu 04 Sep 2025 23:00:26 +0000
Manifest this update: Thu 04 Sep 2025 23:00:26 +0000
Manifest next update: Fri 05 Sep 2025 23:00:26 +0000
Files and hashes: 1: 67MB3uIiPBNhFM08ZckoWW6iFi8.roa (hash: JV/MdthgHrxhWbvFQASmk0ngMZHEyExozVaoGSmnqvc=)
2: 9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa (hash: HpbK15QHkCq2yrHDhDOHMvxiVYVvHPgmBjt3qtyByjQ=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: ILPTz3kHMqJ+L6kgmPt2nmvx5NCeX74Dj7f26kqpcrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:ba:d9:b8:ea:bd:3d:c8:84:ac:ce:42:8e:fe:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Sep 4 23:00:26 2025 GMT
Not After : Sep 5 23:00:26 2025 GMT
Subject: CN=3a8307304c7b65b8e68b432298c6715ad314598e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:07:25:17:f4:7f:47:d1:48:d6:84:2f:e6:
72:02:62:96:b2:6b:0b:ea:5d:76:b4:07:4d:a6:9b:
2d:d5:72:02:fb:f7:b4:8b:33:e5:72:51:a0:5b:34:
12:c8:1a:fb:4e:98:06:c5:50:8d:a6:c9:cd:24:f6:
9a:5e:21:79:c2:db:08:2b:c0:60:47:cf:40:e2:ba:
3a:51:b8:59:f8:e1:86:d1:f1:a5:4f:4f:d3:b1:18:
ac:cd:38:46:59:ce:34:d9:96:31:c8:18:c3:63:1a:
c6:ef:f6:3b:91:50:75:0f:cb:fc:e8:a5:f8:1d:6d:
ad:37:33:82:e7:3d:2a:77:79:f4:63:a3:2a:1a:35:
9f:30:ca:a8:a2:ee:d0:02:90:ef:98:ab:21:0f:73:
83:b1:74:7a:6d:46:97:8b:1a:50:39:8f:f8:45:b2:
f7:cd:27:d8:37:f4:a1:59:4e:78:01:ef:50:d5:9d:
c5:2e:11:8d:66:6a:c9:26:eb:17:d7:18:01:fe:c0:
a6:09:2e:0c:2f:7a:15:43:7b:f8:84:44:03:56:06:
54:36:43:4c:9c:d2:7f:f6:1a:eb:6c:35:52:85:fe:
f3:95:7b:dd:96:ec:b8:10:09:06:cf:13:46:96:57:
44:a8:c6:2b:e5:a0:22:b7:f7:ee:ca:3f:10:a9:8c:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:83:07:30:4C:7B:65:B8:E6:8B:43:22:98:C6:71:5A:D3:14:59:8E
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9b:07:60:bc:9c:13:96:3c:5d:8e:93:08:35:ba:2e:ac:21:
c0:9a:46:3e:d8:d3:d5:7b:16:f5:c8:92:98:10:9b:f2:c4:16:
8c:15:e3:e3:a5:44:c2:7d:ef:97:4d:4d:65:09:b5:98:c1:3d:
5b:f6:5b:67:1e:2b:d2:c0:7c:f7:92:63:b8:c5:5e:5d:ca:fd:
e2:72:38:f2:42:9c:fe:38:2e:3d:e2:92:f4:bf:f6:69:42:0d:
3a:96:21:d9:3f:f7:db:66:e7:c1:ae:c3:6f:89:7b:fc:ae:be:
a0:f7:12:e2:cf:1b:d0:45:ec:3f:f4:98:01:5a:e3:1b:c4:84:
13:7c:fa:80:9e:c1:51:0c:a7:e4:da:12:1a:08:6a:01:e7:9f:
fd:26:84:cb:da:7d:4d:b6:66:06:7c:d0:9f:ab:a0:b1:17:26:
01:40:07:ba:9b:d1:60:2c:a4:2f:9a:29:67:bc:18:45:7d:c6:
07:40:d8:36:b2:85:36:39:c2:fe:e5:aa:be:ef:f1:59:b0:6f:
ec:df:f7:3d:8e:49:18:29:fa:a1:38:01:36:4f:26:e9:31:c2:
57:55:22:9a:e4:38:76:dc:5e:35:c0:38:f0:89:46:65:a1:9a:
ea:e5:81:c0:da:18:7a:de:6f:50:7f:b2:cc:78:34:43:d5:8b:
3a:da:ca:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkW9brZuOq9PciErM5Cjv41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE1ZTJiZWMwYTNlYzc5NWY4ZjE5Y2Q0N2ZlY2M2ODA2
NzhiMDgwHhcNMjUwOTA0MjMwMDI2WhcNMjUwOTA1MjMwMDI2WjAzMTEwLwYDVQQD
EygzYTgzMDczMDRjN2I2NWI4ZTY4YjQzMjI5OGM2NzE1YWQzMTQ1OThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u4HJRf0f0fRSNaEL+ZyAmKWsmsL
6l12tAdNppst1XIC+/e0izPlclGgWzQSyBr7TpgGxVCNpsnNJPaaXiF5wtsIK8Bg
R89A4ro6UbhZ+OGG0fGlT0/TsRiszThGWc402ZYxyBjDYxrG7/Y7kVB1D8v86KX4
HW2tNzOC5z0qd3n0Y6MqGjWfMMqoou7QApDvmKshD3ODsXR6bUaXixpQOY/4RbL3
zSfYN/ShWU54Ae9Q1Z3FLhGNZmrJJusX1xgB/sCmCS4ML3oVQ3v4hEQDVgZUNkNM
nNJ/9hrrbDVShf7zlXvdluy4EAkGzxNGlldEqMYr5aAit/fuyj8QqYyOjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqDBzBMe2W45otDIpjGcVrTFFmOMB8GA1UdIwQY
MBaAFGP6XivsCj7HlfjxnNR/7MaAZ4sIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2Et
ZTRmMmNkYzdhNDExLzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2EtZTRmMmNkYzdhNDEx
LzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZsHYLyc
E5Y8XY6TCDW6LqwhwJpGPtjT1XsW9ciSmBCb8sQWjBXj46VEwn3vl01NZQm1mME9
W/ZbZx4r0sB895JjuMVeXcr94nI48kKc/jguPeKS9L/2aUINOpYh2T/322bnwa7D
b4l7/K6+oPcS4s8b0EXsP/SYAVrjG8SEE3z6gJ7BUQyn5NoSGghqAeef/SaEy9p9
TbZmBnzQn6ugsRcmAUAHupvRYCykL5opZ7wYRX3GB0DYNrKFNjnC/uWqvu/xWbBv
7N/3PY5JGCn6oTgBNk8m6THCV1UimuQ4dtxeNcA48IlGZaGa6uWBwNoYet5vUH+y
zHg0Q9WLOtrKGA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:16 2025 by rpki-client