Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: 20hVPp/SFPXNBj+rohpUPNpHtiXsiOC2N8MYUKDEvQU=
Subject key identifier: 32:B9:AD:E2:68:43:5C:6C:0E:D2:71:68:46:8A:4C:20:66:77:9E:B1
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 0198CB019416495372C023CE15FAF0A2CCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 1664
Signing time: Thu 21 Aug 2025 05:02:14 +0000
Manifest this update: Thu 21 Aug 2025 05:02:14 +0000
Manifest next update: Fri 22 Aug 2025 05:02:14 +0000
Files and hashes: 1: BiH4T1QItrDeKmbSQQD10MbyJM0.roa (hash: 1DccZm+wbtnRwvwFHLQW36Ec7g4Qt5rsBnmXwCd1CCk=)
2: lIzlzaB9MfYSOvJtbmvms4JbSXQ.roa (hash: 7pNuzEMq5SGi7oY7hUTVuLhRAftrVbTi7LJ5DaYy2Z4=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: 9PMNfPs6HuVQb8F+kzLAQxPO5SH271aIi5UeOrp9OhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 05:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:01:94:16:49:53:72:c0:23:ce:15:fa:f0:a2:cc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Aug 21 05:02:14 2025 GMT
Not After : Aug 22 05:02:14 2025 GMT
Subject: CN=32b9ade268435c6c0ed27168468a4c2066779eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:b6:82:3a:37:1d:dd:6d:18:4c:1c:fa:42:
fe:80:7b:59:c7:f0:0a:06:2f:c6:81:c7:38:5d:76:
fe:1f:c3:95:8b:a0:15:67:3a:d6:4c:45:73:49:cb:
d1:0b:17:f6:0c:16:07:1e:e2:23:ca:6d:0e:23:f0:
77:5b:fb:84:a9:3c:2a:3a:ee:e7:fe:48:61:6b:2d:
8a:83:b8:5c:e2:10:8f:58:0c:7a:af:65:6d:78:e4:
ae:64:73:3c:56:dd:8c:fb:b3:14:3b:7f:29:d9:3a:
a5:60:ed:64:ab:3b:cd:c4:f1:c9:cc:45:7f:d1:c4:
b1:31:1d:d0:ff:12:e5:01:80:2a:3c:bb:e7:4e:60:
85:e2:bf:58:20:b7:21:3b:fd:f0:12:3b:04:c8:d9:
6e:b7:4e:84:98:1c:63:cd:ac:ef:82:ff:5d:88:9b:
cc:69:74:52:c3:3e:07:07:24:c8:6c:95:7d:6e:f7:
01:91:ee:7d:f2:b4:82:00:dc:2a:bb:9e:27:cf:5f:
1f:a0:df:13:98:77:95:d0:0f:5f:88:63:0c:88:17:
26:d9:93:73:3b:7b:39:11:00:69:1d:98:1f:d0:96:
62:e3:db:6b:09:27:93:c5:e9:2b:62:cd:63:4d:d5:
3c:18:da:41:32:d2:66:f4:34:d7:80:e3:50:b4:8b:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:AD:E2:68:43:5C:6C:0E:D2:71:68:46:8A:4C:20:66:77:9E:B1
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9d:17:7e:60:f2:14:98:e9:81:19:55:35:b5:5c:21:58:d3:
21:f7:60:f8:58:4b:de:e3:bd:de:fc:9a:c1:9b:fa:2e:0d:fb:
80:4d:a9:82:19:93:36:ad:0e:57:d2:22:6e:77:27:94:96:f1:
20:aa:4d:88:54:5a:3d:88:6b:a5:51:69:0e:e2:25:dc:ef:8e:
d6:04:46:8a:ef:c0:b2:ef:aa:5d:e8:50:5e:38:60:08:65:f8:
ff:0a:a5:9f:14:4b:69:a7:7d:b2:16:3b:3c:c8:7d:58:d6:f4:
ad:bf:b6:bc:dd:36:4c:6d:6c:c1:12:d1:71:06:fd:06:96:09:
8f:9e:5c:c7:72:84:02:e3:05:94:cf:dd:df:62:01:7a:d5:55:
cb:ca:ec:b9:1d:cc:5e:0d:2f:f9:6d:5e:be:75:db:76:8a:12:
7f:3d:f1:5d:ca:8e:04:78:c7:ac:21:d8:0c:6b:5d:3b:85:f0:
4a:de:e8:9a:75:24:90:df:fe:f8:67:91:55:a7:82:d3:c7:19:
47:0b:e8:b0:1f:e6:43:06:29:36:ba:0c:ec:98:6b:ea:70:f7:
73:a2:24:be:54:01:61:27:cf:7a:26:42:65:ae:d0:4f:60:15:
9d:28:3f:13:cb:67:20:84:e4:cc:c9:76:bf:3e:aa:a6:d5:fc:
60:4f:67:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjLAZQWSVNywCPOFfrwoszJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjhjYTgyMTQ3ZWQyMjc3YjRiY2M2OWE1Mjg1YmFlNzM1
ZjJlNDQwHhcNMjUwODIxMDUwMjE0WhcNMjUwODIyMDUwMjE0WjAzMTEwLwYDVQQD
EygzMmI5YWRlMjY4NDM1YzZjMGVkMjcxNjg0NjhhNGMyMDY2Nzc5ZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNO2gjo3Hd1tGEwc+kL+gHtZx/AK
Bi/Ggcc4XXb+H8OVi6AVZzrWTEVzScvRCxf2DBYHHuIjym0OI/B3W/uEqTwqOu7n
/khhay2Kg7hc4hCPWAx6r2VteOSuZHM8Vt2M+7MUO38p2TqlYO1kqzvNxPHJzEV/
0cSxMR3Q/xLlAYAqPLvnTmCF4r9YILchO/3wEjsEyNlut06EmBxjzazvgv9diJvM
aXRSwz4HByTIbJV9bvcBke598rSCANwqu54nz18foN8TmHeV0A9fiGMMiBcm2ZNz
O3s5EQBpHZgf0JZi49trCSeTxekrYs1jTdU8GNpBMtJm9DTXgONQtIsflQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK5reJoQ1xsDtJxaEaKTCBmd56xMB8GA1UdIwQY
MBaAFMhoyoIUftIne0vMaaUoW65zXy5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTIt
NjY4NDkwMTk2MjdlLzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTItNjY4NDkwMTk2Mjdl
LzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbp0XfmDy
FJjpgRlVNbVcIVjTIfdg+FhL3uO93vyawZv6Lg37gE2pghmTNq0OV9IibncnlJbx
IKpNiFRaPYhrpVFpDuIl3O+O1gRGiu/Asu+qXehQXjhgCGX4/wqlnxRLaad9shY7
PMh9WNb0rb+2vN02TG1swRLRcQb9BpYJj55cx3KEAuMFlM/d32IBetVVy8rsuR3M
Xg0v+W1evnXbdooSfz3xXcqOBHjHrCHYDGtdO4XwSt7omnUkkN/++GeRVaeC08cZ
RwvosB/mQwYpNroM7Jhr6nD3c6IkvlQBYSfPeiZCZa7QT2AVnSg/E8tnIITkzMl2
vz6qptX8YE9nLQ==
-----END CERTIFICATE-----
Generated at Thu Aug 21 15:57:48 2025 by rpki-client