Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: 3Op9+vuteLxZ0mXhTYtGYYZ7BsWGWCseahxyCbwbTKI=
Subject key identifier: DC:5F:18:01:A5:97:E3:91:BA:74:9D:EC:5E:3B:D9:A7:CC:3D:D4:C4
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 0199553061E8DAA025F5AF4E1A8FFE9315EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 168B
Signing time: Wed 17 Sep 2025 01:00:58 +0000
Manifest this update: Wed 17 Sep 2025 01:00:58 +0000
Manifest next update: Thu 18 Sep 2025 01:00:58 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: YxYVmnki5q5ln7QdgpZuL7KZI7h89KZff/T+gKq+yag=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:55:30:61:e8:da:a0:25:f5:af:4e:1a:8f:fe:93:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Sep 17 01:00:58 2025 GMT
Not After : Sep 18 01:00:58 2025 GMT
Subject: CN=dc5f1801a597e391ba749dec5e3bd9a7cc3dd4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:df:23:c2:2d:a0:45:48:ed:60:3a:7f:f2:
55:73:28:63:11:c9:86:dc:45:44:f0:47:80:49:2e:
4a:12:b9:6d:24:72:fc:5c:7e:8b:01:12:56:cf:3b:
5b:b3:21:68:e6:93:fd:d8:6c:a5:60:c3:f9:c8:42:
09:26:60:a0:4e:ab:d7:45:cc:81:7d:d2:bc:3d:e6:
69:60:3c:b0:35:c8:51:ea:bc:ab:8f:6c:b4:7c:49:
00:a9:42:92:cd:ab:59:c7:58:de:30:5f:db:f1:c4:
79:a6:72:ec:28:8d:7a:37:9e:cc:4b:8d:24:e0:37:
7c:04:18:f8:57:40:5c:c5:61:6b:9c:57:6b:6e:fb:
1b:ba:c9:7b:8e:16:58:c3:dc:cc:a4:91:66:d2:d2:
2d:49:30:02:cc:ee:06:85:7f:b7:9f:ab:94:63:9e:
4d:87:20:68:a3:94:91:03:27:2e:27:81:bb:ca:f1:
0c:0c:8f:5d:15:23:e6:13:a0:55:60:06:b2:da:73:
6d:56:9f:57:21:b7:61:56:34:49:3e:7a:2d:41:b8:
c4:1f:01:13:96:2a:99:97:71:19:52:c9:32:f5:42:
7d:52:d5:64:b7:be:5a:15:1d:5a:3b:a0:26:5e:4e:
1d:ff:07:a6:af:0b:81:db:27:2a:c6:b0:b0:c5:c5:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5F:18:01:A5:97:E3:91:BA:74:9D:EC:5E:3B:D9:A7:CC:3D:D4:C4
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:77:06:82:b3:86:e5:e0:cc:b1:1d:5c:ae:39:80:f4:cf:c7:
e3:f5:a4:fb:36:33:29:14:8d:b7:54:f9:e1:91:08:b5:ef:a8:
45:56:b6:f2:70:ba:eb:34:54:8b:10:61:4f:a4:df:d0:93:94:
35:ea:c6:9f:5d:cd:36:60:54:d9:26:0a:66:e2:d6:67:41:44:
40:dc:83:88:9f:73:b2:d9:c5:bb:db:ef:e3:0e:fc:13:3f:37:
a3:1e:c6:19:ca:c1:d4:25:8a:cb:d5:ee:55:9d:e6:9c:1f:dc:
53:ba:fd:05:c3:57:e0:44:1e:47:28:c7:1e:c6:b0:6c:44:bf:
1b:ac:74:98:b1:97:35:53:ea:e8:f0:50:37:c4:33:ef:16:ec:
26:5d:53:75:c8:48:68:0d:b1:51:c1:31:1b:2f:c1:dc:f0:1e:
c5:3d:4d:40:65:3e:56:40:86:22:91:d9:df:74:4f:49:b3:19:
db:c6:8a:78:16:b2:1b:68:20:6e:2e:e4:90:99:ae:07:2e:d7:
7c:61:e1:c2:8f:91:74:24:b2:68:89:aa:f7:37:e9:6d:ef:d0:
70:fc:e8:a0:46:68:74:7a:cc:a0:72:c7:ed:2a:d7:f0:e6:5b:
1b:21:c5:05:7f:35:d5:ec:f8:2b:2b:26:66:2d:46:28:16:87:
83:62:12:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlVMGHo2qAl9a9OGo/+kxXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj
NTVhNGEwHhcNMjUwOTE3MDEwMDU4WhcNMjUwOTE4MDEwMDU4WjAzMTEwLwYDVQQD
EyhkYzVmMTgwMWE1OTdlMzkxYmE3NDlkZWM1ZTNiZDlhN2NjM2RkNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzijfI8ItoEVI7WA6f/JVcyhjEcmG
3EVE8EeASS5KErltJHL8XH6LARJWzztbsyFo5pP92GylYMP5yEIJJmCgTqvXRcyB
fdK8PeZpYDywNchR6ryrj2y0fEkAqUKSzatZx1jeMF/b8cR5pnLsKI16N57MS40k
4Dd8BBj4V0BcxWFrnFdrbvsbusl7jhZYw9zMpJFm0tItSTACzO4GhX+3n6uUY55N
hyBoo5SRAycuJ4G7yvEMDI9dFSPmE6BVYAay2nNtVp9XIbdhVjRJPnotQbjEHwET
liqZl3EZUsky9UJ9UtVkt75aFR1aO6AmXk4d/wemrwuB2ycqxrCwxcXIrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxfGAGll+ORunSd7F472afMPdTEMB8GA1UdIwQY
MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt
YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj
LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3cGgrOG
5eDMsR1crjmA9M/H4/Wk+zYzKRSNt1T54ZEIte+oRVa28nC66zRUixBhT6Tf0JOU
NerGn13NNmBU2SYKZuLWZ0FEQNyDiJ9zstnFu9vv4w78Ez83ox7GGcrB1CWKy9Xu
VZ3mnB/cU7r9BcNX4EQeRyjHHsawbES/G6x0mLGXNVPq6PBQN8Qz7xbsJl1TdchI
aA2xUcExGy/B3PAexT1NQGU+VkCGIpHZ33RPSbMZ28aKeBayG2ggbi7kkJmuBy7X
fGHhwo+RdCSyaImq9zfpbe/QcPzooEZodHrMoHLH7SrX8OZbGyHFBX811ez4Kysm
Zi1GKBaHg2ISPw==
-----END CERTIFICATE-----
Generated at Wed Sep 17 08:28:03 2025 by rpki-client