Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
File: yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json)
Hash identifier: 9OvlX91NMs0lkb6UvRepxnxPUgA20ZJN7S9WQqav7+A=
Subject key identifier: D0:6D:11:FA:85:9E:E6:E1:10:D6:ED:76:76:FF:37:2D:7F:62:2D:11
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 01992330CCB7F9FF3B62CFDC06DDB0CBCBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
Manifest number: 03A8
Signing time: Sun 07 Sep 2025 08:00:24 +0000
Manifest this update: Sun 07 Sep 2025 08:00:24 +0000
Manifest next update: Mon 08 Sep 2025 08:00:24 +0000
Files and hashes: 1: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: WaWoY8MNCK7eK8vFd3X+RZzI7T68/UXOqxzS3g3V0fY=)
2: z4GL3R9iwn241BwmecTavitjvmk.roa (hash: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:cc:b7:f9:ff:3b:62:cf:dc:06:dd:b0:cb:cb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Sep 7 08:00:24 2025 GMT
Not After : Sep 8 08:00:24 2025 GMT
Subject: CN=d06d11fa859ee6e110d6ed7676ff372d7f622d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:b0:e5:c1:14:7c:4a:d6:4e:85:bc:4c:f5:
44:66:86:e9:7a:74:d1:3f:60:9f:44:12:6c:f7:ab:
0b:ab:ba:b8:31:40:53:90:f1:0a:ff:e6:f2:c9:00:
b6:9a:d3:0d:ab:4e:47:a6:6c:33:df:31:14:93:1b:
4f:f1:10:23:01:69:96:b5:e4:15:1b:62:b3:48:08:
b7:3e:91:9a:69:93:b3:e6:84:75:2d:04:8c:ef:e7:
50:53:10:65:3f:34:78:c0:dd:9d:c3:93:88:2d:23:
f9:a5:d9:7f:25:7f:bd:16:15:d0:84:75:a7:c2:f5:
65:96:bf:2f:37:af:03:e1:84:af:2e:00:bc:ff:cb:
c2:96:bf:eb:8b:2b:ce:27:cb:a9:e3:3d:7f:b3:ae:
17:b2:2b:e4:a7:9b:e7:50:8f:6d:73:3d:64:e1:95:
d8:0c:3f:cc:1d:10:2f:01:f1:28:e9:5a:42:05:c3:
2b:75:95:b2:24:e1:40:ee:da:37:d2:f0:6e:a5:fb:
54:37:1d:e3:30:11:59:c8:68:48:e6:98:18:cb:53:
78:6d:46:be:4c:36:f9:2b:d6:e5:8a:35:19:79:03:
0a:36:2d:6d:b5:ce:b1:6d:4d:73:59:2c:6e:6f:27:
b9:fe:3c:2a:6e:41:d1:0a:4a:e4:3d:e9:72:02:a1:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6D:11:FA:85:9E:E6:E1:10:D6:ED:76:76:FF:37:2D:7F:62:2D:11
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:10:60:73:1b:b7:d0:4c:b7:19:ea:8a:f4:5a:04:85:a9:fd:
91:28:3f:fb:6e:1f:77:d7:32:3a:1c:26:64:e4:80:e6:e4:b9:
2c:ae:5b:95:90:19:7d:c5:1a:f8:d5:82:39:ed:2a:03:08:ae:
90:8d:39:cd:da:dd:15:56:04:f5:30:18:36:33:6a:93:88:75:
a1:76:79:97:90:90:c7:fc:23:a8:06:41:66:e5:8c:c7:70:99:
e7:0a:aa:a3:88:e5:ee:c3:38:91:a9:67:c4:a1:22:45:00:c4:
f1:ec:ba:da:02:68:97:4a:72:e1:99:04:ce:05:66:9b:71:89:
d2:f5:8a:20:47:e5:5e:5d:aa:03:4d:84:9b:85:04:08:85:fa:
53:07:cb:c4:f6:8c:7c:a8:d7:01:17:60:70:43:9f:79:32:43:
88:0b:a1:2e:e0:24:dd:f6:5a:1f:e7:c5:c9:0d:f9:e1:d9:90:
6a:7c:59:29:de:e9:ac:f6:4b:e5:cd:aa:0d:6d:13:4b:da:b9:
6c:93:2c:c2:c7:d8:99:ef:d1:91:f9:5d:b8:e5:fc:ca:78:5d:
aa:65:27:c1:81:00:91:67:1e:b0:0d:ac:7f:e0:5f:c5:53:ae:
19:f5:c6:9e:4f:20:7e:eb:e4:51:04:ca:67:d9:ec:26:af:06:
71:e2:cd:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMMy3+f87Ys/cBt2wy8vQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MWQ3ZTQ0OWNmZWMzMTIwYTk4NTExNjNjNzc5YTYwMjY5
ODYxNzIwHhcNMjUwOTA3MDgwMDI0WhcNMjUwOTA4MDgwMDI0WjAzMTEwLwYDVQQD
EyhkMDZkMTFmYTg1OWVlNmUxMTBkNmVkNzY3NmZmMzcyZDdmNjIyZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8qw5cEUfErWToW8TPVEZobpenTR
P2CfRBJs96sLq7q4MUBTkPEK/+byyQC2mtMNq05Hpmwz3zEUkxtP8RAjAWmWteQV
G2KzSAi3PpGaaZOz5oR1LQSM7+dQUxBlPzR4wN2dw5OILSP5pdl/JX+9FhXQhHWn
wvVllr8vN68D4YSvLgC8/8vClr/riyvOJ8up4z1/s64Xsivkp5vnUI9tcz1k4ZXY
DD/MHRAvAfEo6VpCBcMrdZWyJOFA7to30vBupftUNx3jMBFZyGhI5pgYy1N4bUa+
TDb5K9blijUZeQMKNi1ttc6xbU1zWSxubye5/jwqbkHRCkrkPelyAqGwswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBtEfqFnubhENbtdnb/Ny1/Yi0RMB8GA1UdIwQY
MBaAFMkdfkSc/sMSCphRFjx3mmAmmGFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVIxLVJKei13eElLbUZFV1BIZWFZQ2FZWVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZGU5NTQtOTdlOC00YzEzLTgzNGIt
Y2RhNmJiNDA2OTc0LzEveVIxLVJKei13eElLbUZFV1BIZWFZQ2FZWVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xZGU5NTQtOTdlOC00YzEzLTgzNGItY2RhNmJiNDA2OTc0
LzEveVIxLVJKei13eElLbUZFV1BIZWFZQ2FZWVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBBgcxu3
0Ey3GeqK9FoEhan9kSg/+24fd9cyOhwmZOSA5uS5LK5blZAZfcUa+NWCOe0qAwiu
kI05zdrdFVYE9TAYNjNqk4h1oXZ5l5CQx/wjqAZBZuWMx3CZ5wqqo4jl7sM4kaln
xKEiRQDE8ey62gJol0py4ZkEzgVmm3GJ0vWKIEflXl2qA02Em4UECIX6UwfLxPaM
fKjXARdgcEOfeTJDiAuhLuAk3fZaH+fFyQ354dmQanxZKd7prPZL5c2qDW0TS9q5
bJMswsfYme/RkflduOX8ynhdqmUnwYEAkWcesA2sf+BfxVOuGfXGnk8gfuvkUQTK
Z9nsJq8GceLNsw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:38 2025 by rpki-client