Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File: yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier: KN1bTYVsNVU29BxcwvvspQ7OmYUZB3/W2THT7iwFnnY=
Subject key identifier: C1:F1:DF:1D:16:7E:25:C2:14:7B:11:E9:1C:DE:99:D5:4C:FB:C2:40
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 0198C7C9C76FF9A66EA06F8445E86ACF6127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number: 1643
Signing time: Wed 20 Aug 2025 14:02:26 +0000
Manifest this update: Wed 20 Aug 2025 14:02:26 +0000
Manifest next update: Thu 21 Aug 2025 14:02:26 +0000
Files and hashes: 1: NjUsN_LdeGQK3Mrw9jk5yZ9XQc4.roa (hash: lewK8USqDYZNa7izSnIPvxOYg8crLlWZPbCwGgwM490=)
2: czIqi1JTFBnqU1-Xoy9WpWfsNLA.roa (hash: IEW0KjjrxdIVeOiEzEJ5xNLzQLH13MYJ7dw5cMoL57c=)
3: tr3Mau39VcKJ_XgMpDq905F47G0.roa (hash: MVZ9b8y+XoeBXJPJhRIiCaVtjlCBIl4VmA21jHMQa5o=)
4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: QI5CIvBTh1PmlfuNc5WKWtTpjYou+JjfKouwvgWJMnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:c9:c7:6f:f9:a6:6e:a0:6f:84:45:e8:6a:cf:61:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Aug 20 14:02:26 2025 GMT
Not After : Aug 21 14:02:26 2025 GMT
Subject: CN=c1f1df1d167e25c2147b11e91cde99d54cfbc240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:a4:52:01:7a:21:8d:a2:00:97:2d:89:35:
e9:6b:6b:04:21:33:df:cd:f9:82:33:80:11:00:26:
f8:3f:34:0c:e4:fd:8a:b3:e6:c9:51:d6:fd:04:89:
ad:75:ff:5d:83:40:16:ea:ee:2b:07:c6:fb:76:22:
b7:34:18:d7:4c:64:8a:18:93:45:57:ab:97:44:81:
4f:10:5a:23:7a:03:41:7a:ae:9c:0f:0f:9e:f2:1c:
35:e3:91:0b:27:88:fe:10:8e:5b:0d:84:9b:b7:6d:
2c:ef:80:c5:54:7e:42:12:9f:1a:24:86:1d:1e:f4:
bc:b7:17:a7:dc:2f:cf:9b:ef:62:d1:c0:31:67:b7:
33:d0:35:2a:a4:66:d5:f9:22:5f:3c:87:f3:ee:77:
af:f2:f2:84:7b:9f:d1:60:0b:78:f2:90:75:20:d4:
1a:1f:ba:a5:a0:95:37:63:dc:f5:68:4f:97:fa:e2:
be:43:b0:93:42:93:28:1a:05:5f:b3:f4:9e:51:72:
4c:82:61:47:ba:c5:1d:e9:74:1c:6d:81:57:3d:22:
9a:53:48:9b:cf:26:b4:b4:7b:55:91:98:68:e7:53:
e4:65:f3:ee:bc:a7:0e:67:5d:3d:a5:7c:fd:04:7d:
7e:30:15:70:9b:ea:58:07:58:d2:c1:e3:64:fb:6f:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:DF:1D:16:7E:25:C2:14:7B:11:E9:1C:DE:99:D5:4C:FB:C2:40
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:83:46:12:ca:46:a0:b0:48:09:8c:4a:62:8e:22:ad:ee:52:
94:66:80:20:50:54:db:56:ed:06:92:48:9c:29:f6:2a:49:12:
56:d6:9d:3f:d3:35:57:d6:c3:e1:da:f7:dd:2f:05:fb:80:87:
18:7d:c1:13:60:78:a6:85:12:32:65:cb:82:67:d3:37:1d:da:
2b:53:52:8b:5c:90:58:27:ee:02:01:8c:6e:18:56:88:bf:f5:
d9:17:26:ff:52:7d:87:47:be:0d:09:9d:66:9d:5c:a1:c3:cd:
78:b5:0d:10:8f:83:4e:b1:4e:05:08:66:bb:21:68:bb:6f:ee:
16:6e:3d:e8:f5:7d:b5:17:98:ab:e1:c3:4e:48:03:03:4b:72:
45:86:ad:3d:3d:04:e7:f2:63:05:73:9a:d7:a7:c8:d4:e2:43:
2d:d7:d0:76:e0:c8:25:06:39:b9:ad:3c:4e:05:d7:4c:85:cc:
81:b1:0c:94:08:74:0e:f0:70:d8:25:84:f7:3b:f2:71:a2:07:
50:b4:dd:2d:4b:cd:08:b2:21:23:29:37:87:d6:36:f3:50:5f:
e8:c6:d3:66:be:aa:77:9d:fd:6f:b7:2b:8c:27:6a:3a:9e:6d:
c0:ae:e8:eb:00:ea:44:32:5b:bd:56:6e:8b:0e:bc:f8:ef:1c:
b1:e9:e4:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjHycdv+aZuoG+ERehqz2EnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NDcwYWU0MThlZWRkZDZiMzlkYWU5ZTdhMTc3YTE5Yzc3
OTljNDEwHhcNMjUwODIwMTQwMjI2WhcNMjUwODIxMTQwMjI2WjAzMTEwLwYDVQQD
EyhjMWYxZGYxZDE2N2UyNWMyMTQ3YjExZTkxY2RlOTlkNTRjZmJjMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlekUgF6IY2iAJctiTXpa2sEITPf
zfmCM4ARACb4PzQM5P2Ks+bJUdb9BImtdf9dg0AW6u4rB8b7diK3NBjXTGSKGJNF
V6uXRIFPEFojegNBeq6cDw+e8hw145ELJ4j+EI5bDYSbt20s74DFVH5CEp8aJIYd
HvS8txen3C/Pm+9i0cAxZ7cz0DUqpGbV+SJfPIfz7nev8vKEe5/RYAt48pB1INQa
H7qloJU3Y9z1aE+X+uK+Q7CTQpMoGgVfs/SeUXJMgmFHusUd6XQcbYFXPSKaU0ib
zya0tHtVkZho51PkZfPuvKcOZ109pXz9BH1+MBVwm+pYB1jSweNk+29m6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHx3x0WfiXCFHsR6RzemdVM+8JAMB8GA1UdIwQY
MBaAFMlHCuQY7t3Ws52unnoXehnHeZxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMt
YjA5MTIxNWQ1ZTRkLzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMtYjA5MTIxNWQ1ZTRk
LzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIINGEspG
oLBICYxKYo4ire5SlGaAIFBU21btBpJInCn2KkkSVtadP9M1V9bD4dr33S8F+4CH
GH3BE2B4poUSMmXLgmfTNx3aK1NSi1yQWCfuAgGMbhhWiL/12Rcm/1J9h0e+DQmd
Zp1cocPNeLUNEI+DTrFOBQhmuyFou2/uFm496PV9tReYq+HDTkgDA0tyRYatPT0E
5/JjBXOa16fI1OJDLdfQduDIJQY5ua08TgXXTIXMgbEMlAh0DvBw2CWE9zvycaIH
ULTdLUvNCLIhIyk3h9Y281Bf6MbTZr6qd539b7crjCdqOp5twK7o6wDqRDJbvVZu
iw68+O8csenkyQ==
-----END CERTIFICATE-----
Generated at Wed Aug 20 17:03:23 2025 by rpki-client