Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier: W7GmIUeaY9iORNf8tVy4nCdsIeG0R9xp4NHkaCn9szk=
Subject key identifier: 38:BA:FA:1B:F3:9D:D8:40:08:24:EB:74:9A:0D:48:48:25:86:A6:41
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01993191C672AD3E1C2DEF55DEC8110A5051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number: 01E7
Signing time: Wed 10 Sep 2025 03:01:01 +0000
Manifest this update: Wed 10 Sep 2025 03:01:01 +0000
Manifest next update: Thu 11 Sep 2025 03:01:01 +0000
Files and hashes: 1: DIvBgZwS0Tso3aVf8EICkFleMLM.roa (hash: uFxBmENfxdwwVihL06QRGFulr8RLsRLP+PeZmW4yvHM=)
2: ciHagOHLSoKpc1FusaVxL3_Ptq8.roa (hash: qVZyRrrycJITJq8e+Oqg9n1s/m1DGfbQ92cmAOV1Z5A=)
3: hebYL6M-z610FLivX7dM3OowSRU.roa (hash: IcjCerJ7GmqoXjZHtfS/CxBpCm6nwEU8LVGTcI76v2s=)
4: xIyXjBVQ6PY7db0-kU0MPNqfG_k.roa (hash: hoQlQ49AMRXyr8IYH6xHVURJ84d0LGLOqucCIHUfGFM=)
5: yCKX0fbS_7jtlMuk4WWLpLIX-rQ.roa (hash: 2s+3hqGJCCdt80WUMCDYsHyYs+5JJ79MfYW2dbPfN18=)
6: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: mL+EtWwv+zXjNx+Wfj10UfCxdr1aNVQpWxjF+brMWQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:c6:72:ad:3e:1c:2d:ef:55:de:c8:11:0a:50:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Sep 10 03:01:01 2025 GMT
Not After : Sep 11 03:01:01 2025 GMT
Subject: CN=38bafa1bf39dd8400824eb749a0d48482586a641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:1e:c7:2b:94:25:20:2d:82:95:b8:99:e6:
bb:9b:9f:18:ae:d4:e4:1d:5f:b5:3e:b0:84:10:1d:
06:91:8e:33:0d:67:74:34:c2:50:8e:b4:18:94:cc:
c1:f1:20:07:74:49:37:c5:32:9f:fc:96:a0:e1:bd:
a0:0e:07:b8:40:0c:f4:98:1e:01:49:a9:1a:0f:b3:
42:6b:c9:00:68:0e:79:5e:cb:a0:14:34:af:5b:6d:
67:31:10:be:f8:39:cc:77:3f:7a:10:5a:2e:55:86:
e8:50:3e:18:23:1b:7b:15:66:b6:6c:06:f5:27:55:
2a:6b:16:13:65:6e:8f:6b:fb:6b:b8:1d:71:74:15:
c2:c9:00:9a:2d:b2:09:a9:99:f4:b8:d2:09:1e:76:
12:f1:d4:44:cd:79:59:60:e4:64:5f:ae:66:2b:1b:
6e:df:80:5b:bb:f7:13:dd:46:23:7a:18:2b:51:b7:
5e:52:af:2e:54:d1:2b:3e:e1:7e:2f:22:bc:11:ce:
70:3b:51:26:2d:ac:d0:e4:27:81:51:ac:ec:ce:b5:
f1:ab:77:9e:12:60:67:76:f4:29:fa:e7:d8:45:10:
44:78:cf:3a:79:a6:39:f3:ba:d2:74:7c:d5:e2:67:
11:ce:44:e6:48:85:0f:79:58:92:75:1b:5d:19:bf:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BA:FA:1B:F3:9D:D8:40:08:24:EB:74:9A:0D:48:48:25:86:A6:41
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:af:8a:ea:a9:1d:f2:f4:fb:e9:b0:f7:b3:58:20:0f:15:a2:
d1:50:cb:f2:90:14:dc:f6:1f:d5:84:71:2e:95:9f:a1:27:1e:
a9:f3:36:49:47:c3:52:4a:39:ee:8e:00:d0:4e:4c:5d:6c:f4:
9d:c1:0b:e1:47:aa:fe:51:df:97:89:f0:d6:56:7d:fc:d1:f3:
f6:a8:e3:a3:36:4d:ad:8e:ec:bd:08:a8:e5:85:ee:94:3e:69:
ed:07:93:1e:64:26:39:2e:b0:87:1f:0c:59:59:48:86:a5:5d:
34:5f:c6:85:e5:c4:60:e5:a3:1c:4e:c6:4a:e6:bc:81:34:34:
d2:55:94:88:e0:78:a9:5c:44:72:d8:23:da:37:e2:2d:46:cd:
51:ce:24:29:76:b5:ce:6e:a6:84:ef:62:97:7f:37:1f:e9:5e:
7b:b6:4f:ea:9c:22:33:81:ec:50:61:6e:28:f4:27:9e:d1:96:
65:5f:c8:3d:8f:93:73:84:fd:be:2f:80:de:5a:ab:a3:36:20:
1f:d1:95:6a:7b:15:50:ca:58:6d:1f:b2:92:b8:2b:d0:84:11:
a5:9c:cf:9f:a6:5c:e9:89:c6:8d:f1:25:a5:5a:bd:f0:6d:a3:
7d:3f:5c:53:db:e5:fe:ad:20:64:96:10:f2:b5:cb:5c:ce:1a:
4f:aa:c3:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxkcZyrT4cLe9V3sgRClBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0
YTdjZGMwHhcNMjUwOTEwMDMwMTAxWhcNMjUwOTExMDMwMTAxWjAzMTEwLwYDVQQD
EygzOGJhZmExYmYzOWRkODQwMDgyNGViNzQ5YTBkNDg0ODI1ODZhNjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTAexyuUJSAtgpW4mea7m58YrtTk
HV+1PrCEEB0GkY4zDWd0NMJQjrQYlMzB8SAHdEk3xTKf/Jag4b2gDge4QAz0mB4B
SakaD7NCa8kAaA55XsugFDSvW21nMRC++DnMdz96EFouVYboUD4YIxt7FWa2bAb1
J1UqaxYTZW6Pa/truB1xdBXCyQCaLbIJqZn0uNIJHnYS8dREzXlZYORkX65mKxtu
34Bbu/cT3UYjehgrUbdeUq8uVNErPuF+LyK8Ec5wO1EmLazQ5CeBUazszrXxq3ee
EmBndvQp+ufYRRBEeM86eaY587rSdHzV4mcRzkTmSIUPeViSdRtdGb9fswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi6+hvzndhACCTrdJoNSEglhqZBMB8GA1UdIwQY
MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt
MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5
LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASK+K6qkd
8vT76bD3s1ggDxWi0VDL8pAU3PYf1YRxLpWfoSceqfM2SUfDUko57o4A0E5MXWz0
ncEL4Ueq/lHfl4nw1lZ9/NHz9qjjozZNrY7svQio5YXulD5p7QeTHmQmOS6whx8M
WVlIhqVdNF/GheXEYOWjHE7GSua8gTQ00lWUiOB4qVxEctgj2jfiLUbNUc4kKXa1
zm6mhO9il383H+lee7ZP6pwiM4HsUGFuKPQnntGWZV/IPY+Tc4T9vi+A3lqrozYg
H9GVansVUMpYbR+ykrgr0IQRpZzPn6Zc6YnGjfElpVq98G2jfT9cU9vl/q0gZJYQ
8rXLXM4aT6rDFw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:53:11 2025 by rpki-client