
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: VbmQXMJaATpqHgJhUknYQjd6ZVitzdodBD6wJ4+dYcI=
Subject key identifier: 92:CB:1A:11:F0:7B:3B:98:3A:04:3D:FB:26:1D:30:87:1B:D1:E4:8E
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 019925FB4E8E08F43D5007EE852CA7AE992E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 1246
Signing time: Sun 07 Sep 2025 21:00:50 +0000
Manifest this update: Sun 07 Sep 2025 21:00:50 +0000
Manifest next update: Mon 08 Sep 2025 21:00:50 +0000
Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: FfoD9X2qJdVLNKyK8e/AeRFzeqo4AA/2RXfmHo0hTfI=)
5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:fb:4e:8e:08:f4:3d:50:07:ee:85:2c:a7:ae:99:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Sep 7 21:00:50 2025 GMT
Not After : Sep 8 21:00:50 2025 GMT
Subject: CN=92cb1a11f07b3b983a043dfb261d30871bd1e48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:42:76:41:4b:81:72:29:83:c0:2c:77:97:
45:fe:00:32:42:4e:4e:7d:e5:9c:89:db:cc:07:e2:
fb:f8:ac:d9:98:e8:76:80:b0:65:eb:bf:4a:a6:03:
04:1c:81:a0:67:15:8d:aa:39:2d:d8:c6:58:91:08:
47:9b:3c:e7:ad:5f:78:dc:2d:48:7e:7a:a1:d4:0b:
cf:90:37:81:db:cb:7c:14:87:33:c6:c5:ac:4d:8d:
37:02:9b:5e:a0:c7:7f:e6:de:46:dc:72:e8:da:f8:
e8:fa:bf:8e:7b:b3:95:88:ad:ac:3c:db:1f:96:06:
8c:8a:55:e1:0e:fd:97:79:7b:b5:c8:be:d6:fe:5e:
d3:75:4f:79:07:7b:e8:6a:51:fb:ef:f6:63:87:fa:
88:3e:7f:31:48:02:18:23:a9:a8:92:9b:84:9d:b1:
dc:00:57:13:39:63:4d:c0:45:f5:ea:ac:4f:81:1c:
de:14:63:7e:64:dc:ae:d7:1a:49:0d:50:c5:e4:30:
14:e1:35:0a:23:c4:a4:ed:95:ec:f9:72:45:75:a3:
f4:82:3d:f7:54:83:6a:62:36:70:ae:7c:5c:22:f0:
fb:07:0b:44:ad:06:68:60:78:59:60:75:34:bb:9e:
5e:12:0f:c5:c8:05:33:3a:60:76:cb:0d:46:7e:ee:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:1A:11:F0:7B:3B:98:3A:04:3D:FB:26:1D:30:87:1B:D1:E4:8E
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:66:54:b4:09:ec:92:78:16:9d:84:ac:16:e3:5f:c3:47:8c:
9c:0c:30:58:7e:7c:b6:3c:20:5a:9e:ac:bd:55:06:b4:98:38:
0b:2f:a1:35:ff:36:38:7a:09:73:13:62:f7:fc:b0:1c:d0:14:
5b:46:31:c2:57:ea:d9:43:83:b0:4d:91:ac:6f:8b:58:03:3d:
fb:27:c9:3e:74:e8:cd:a3:a6:82:53:2e:9f:ee:c6:c8:af:fe:
d8:13:d2:56:25:6e:cb:c1:d0:c4:14:99:e0:ad:4b:6f:b3:39:
a3:59:05:01:e2:37:1e:4a:a6:38:08:6a:bc:fd:1f:c7:ae:76:
df:7a:80:4b:65:db:fe:90:5f:f9:c2:fc:51:0c:4a:49:63:ca:
b1:fe:76:1c:d4:19:90:32:92:d0:2b:4d:50:c4:3a:fb:45:64:
02:85:a1:a8:69:e2:71:23:72:22:b8:25:59:f6:97:a8:d0:ec:
88:7f:68:68:a8:2b:21:ff:3f:54:c3:1b:3b:6a:69:f8:20:cd:
42:3d:eb:a4:ee:7e:c1:a4:5f:25:78:7e:d3:ab:6f:99:3b:f2:
c9:2b:cb:6b:e9:cb:e8:ae:34:db:55:dc:99:97:68:ab:01:47:
e0:1a:ee:a7:7e:04:5f:10:4f:f7:c4:92:a1:b6:d1:16:ae:33:
4b:75:9a:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkl+06OCPQ9UAfuhSynrpkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWJkNGY3YWMzZDI0OTIwZGUxYzFmZjExODVkOTUwN2U5
YWQwNzgwHhcNMjUwOTA3MjEwMDUwWhcNMjUwOTA4MjEwMDUwWjAzMTEwLwYDVQQD
Eyg5MmNiMWExMWYwN2IzYjk4M2EwNDNkZmIyNjFkMzA4NzFiZDFlNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5dCdkFLgXIpg8Asd5dF/gAyQk5O
feWcidvMB+L7+KzZmOh2gLBl679KpgMEHIGgZxWNqjkt2MZYkQhHmzznrV943C1I
fnqh1AvPkDeB28t8FIczxsWsTY03ApteoMd/5t5G3HLo2vjo+r+Oe7OViK2sPNsf
lgaMilXhDv2XeXu1yL7W/l7TdU95B3voalH77/Zjh/qIPn8xSAIYI6mokpuEnbHc
AFcTOWNNwEX16qxPgRzeFGN+ZNyu1xpJDVDF5DAU4TUKI8Sk7ZXs+XJFdaP0gj33
VINqYjZwrnxcIvD7BwtErQZoYHhZYHU0u55eEg/FyAUzOmB2yw1Gfu70gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLLGhHwezuYOgQ9+yYdMIcb0eSOMB8GA1UdIwQY
MBaAFGDr1PesPSSSDeHB/xGF2VB+mtB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgt
ODdkM2IwMjNkOTE5LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgtODdkM2IwMjNkOTE5
LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmZUtAns
kngWnYSsFuNfw0eMnAwwWH58tjwgWp6svVUGtJg4Cy+hNf82OHoJcxNi9/ywHNAU
W0Yxwlfq2UODsE2RrG+LWAM9+yfJPnTozaOmglMun+7GyK/+2BPSViVuy8HQxBSZ
4K1Lb7M5o1kFAeI3HkqmOAhqvP0fx65233qAS2Xb/pBf+cL8UQxKSWPKsf52HNQZ
kDKS0CtNUMQ6+0VkAoWhqGnicSNyIrglWfaXqNDsiH9oaKgrIf8/VMMbO2pp+CDN
Qj3rpO5+waRfJXh+06tvmTvyySvLa+nL6K4021XcmZdoqwFH4Brup34EXxBP98SS
obbRFq4zS3WaFw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 04:15:00 2025 by rpki-client