Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
File: yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json)
Hash identifier: Lj+IiARBBehyYu1fQpko4SJIpqPr1VxgA3NxpXaiAvY=
Subject key identifier: D0:70:DD:1D:AB:E3:F0:6B:83:A4:E3:FD:72:E6:62:23:51:58:C9:C8
Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
Certificate issuer: /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Certificate serial: 0199228D18ADC3174F2DAE5444DED60B09F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:36 +0000
Manifest this update: Sun 07 Sep 2025 05:01:36 +0000
Manifest next update: Mon 08 Sep 2025 05:01:36 +0000
Files and hashes: 1: rYX5OSjisXVBgIC77wXTzITcbqs.roa (hash: SPnPR9xhnE7+gAosfCHCqCDCEcNhjAT2MXJYL+lu5nM=)
2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: ysUx7mERG01ccg2ra4E1TxXUjcf7MB2YMdwjnGBQxWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:18:ad:c3:17:4f:2d:ae:54:44:de:d6:0b:09:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Validity
Not Before: Sep 7 05:01:36 2025 GMT
Not After : Sep 8 05:01:36 2025 GMT
Subject: CN=d070dd1dabe3f06b83a4e3fd72e662235158c9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:42:96:5c:0a:04:24:0c:b9:c9:fa:48:6b:
1d:95:93:cc:49:27:14:ba:c2:ee:f4:5e:c9:82:30:
83:d5:c0:45:15:3f:1c:1b:cf:6b:1d:e0:ce:d9:02:
59:bc:81:56:7b:59:27:ac:eb:8b:98:4f:dd:ce:2e:
65:cf:b6:e6:63:63:76:7b:eb:09:8d:30:01:4e:f8:
37:ff:49:1f:6a:91:da:1b:b3:e3:58:47:3f:82:14:
3e:98:4d:6d:fa:a9:99:7e:c7:31:f8:68:8b:94:e3:
43:c5:82:19:79:9e:a1:1d:72:52:2b:bf:74:77:f6:
eb:c4:96:91:1f:3d:5d:61:5a:57:e3:ab:95:4d:ea:
17:a1:4a:b6:18:d9:b8:e0:8f:0e:cf:73:81:93:2a:
2f:c6:bb:5b:22:9c:04:6c:cf:e6:b5:b6:8d:e4:5c:
d2:39:9c:15:47:fb:f5:6c:d9:c8:a1:65:0b:e2:5a:
12:1a:7a:5c:07:75:fc:cd:44:30:13:20:78:e9:97:
30:ad:c2:77:26:5d:27:42:e2:a8:d3:9e:32:dc:02:
f1:05:9d:ce:e9:5b:7f:ab:7b:07:13:2d:7a:90:ea:
31:a4:8e:79:d3:81:13:36:f4:3e:9c:82:48:39:3f:
fb:71:3b:9f:e0:f0:44:3e:00:c5:25:a1:82:c4:37:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:DD:1D:AB:E3:F0:6B:83:A4:E3:FD:72:E6:62:23:51:58:C9:C8
X509v3 Authority Key Identifier:
keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a7:0c:27:41:f6:ae:5f:11:af:41:e0:c9:54:62:f0:55:0c:
29:8a:89:50:dc:a5:9c:ae:da:fa:b2:11:1b:e9:39:02:dc:50:
04:f6:9c:58:4f:08:d3:e0:f7:cf:87:a0:f5:75:64:4d:c4:81:
7c:ec:1d:1a:32:93:58:d1:3a:71:fe:2d:77:fc:53:9d:af:c2:
c2:e1:a0:da:40:42:f3:22:a3:97:50:94:d5:60:a2:42:b5:8f:
a2:bb:1d:91:41:6c:8b:36:ee:56:fe:de:1f:20:83:71:15:3d:
6f:a3:99:23:9d:6c:ba:d0:1e:b3:17:86:ba:6a:9e:24:1c:e9:
e6:77:dc:2f:c0:d5:52:6b:57:d0:29:7e:83:b7:15:77:9b:02:
e3:9d:82:9e:e5:3d:3e:37:50:69:4e:93:87:86:55:d6:fa:7c:
ab:c0:5b:bb:7c:7c:f9:8b:4f:9d:15:01:bc:c1:f4:62:ff:b5:
6c:2c:a6:cf:98:aa:a9:fe:8c:d9:0f:aa:1c:ce:b2:ed:f6:5c:
8e:55:6c:e4:0b:ed:90:d9:cf:ac:bf:d3:99:5f:60:ec:a2:80:
6e:6d:2d:ed:ed:9f:ba:39:11:73:76:46:a1:5c:86:89:b8:8f:
0c:cf:2f:ac:3b:fc:86:00:ec:22:c2:35:0a:e5:40:88:32:11:
a8:8f:ff:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijRitwxdPLa5URN7WCwnyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMmNjN2NlNDJlNzljMzUxYWM3ZDI4ZjY0NWRlN2Y1OTM4
YWNjOWMwHhcNMjUwOTA3MDUwMTM2WhcNMjUwOTA4MDUwMTM2WjAzMTEwLwYDVQQD
EyhkMDcwZGQxZGFiZTNmMDZiODNhNGUzZmQ3MmU2NjIyMzUxNThjOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSxCllwKBCQMucn6SGsdlZPMSScU
usLu9F7JgjCD1cBFFT8cG89rHeDO2QJZvIFWe1knrOuLmE/dzi5lz7bmY2N2e+sJ
jTABTvg3/0kfapHaG7PjWEc/ghQ+mE1t+qmZfscx+GiLlONDxYIZeZ6hHXJSK790
d/brxJaRHz1dYVpX46uVTeoXoUq2GNm44I8Oz3OBkyovxrtbIpwEbM/mtbaN5FzS
OZwVR/v1bNnIoWUL4loSGnpcB3X8zUQwEyB46ZcwrcJ3Jl0nQuKo054y3ALxBZ3O
6Vt/q3sHEy16kOoxpI5504ETNvQ+nIJIOT/7cTuf4PBEPgDFJaGCxDfs0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBw3R2r4/Brg6Tj/XLmYiNRWMnIMB8GA1UdIwQY
MBaAFMssx85C55w1GsfSj2Rd5/WTisycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTct
NzgxZDhmYjFkMmZiLzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTctNzgxZDhmYjFkMmZi
LzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaacMJ0H2
rl8Rr0HgyVRi8FUMKYqJUNylnK7a+rIRG+k5AtxQBPacWE8I0+D3z4eg9XVkTcSB
fOwdGjKTWNE6cf4td/xTna/CwuGg2kBC8yKjl1CU1WCiQrWPorsdkUFsizbuVv7e
HyCDcRU9b6OZI51sutAesxeGumqeJBzp5nfcL8DVUmtX0Cl+g7cVd5sC452CnuU9
PjdQaU6Th4ZV1vp8q8Bbu3x8+YtPnRUBvMH0Yv+1bCymz5iqqf6M2Q+qHM6y7fZc
jlVs5AvtkNnPrL/TmV9g7KKAbm0t7e2fujkRc3ZGoVyGibiPDM8vrDv8hgDsIsI1
CuVAiDIRqI//KA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:11 2025 by rpki-client