Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier: IqFfXdVbV412PWqhA0zyXg4TmVj/tLl0W+6ZUI9zjiY=
Subject key identifier: D9:8F:44:84:98:97:AF:58:64:3A:88:F5:E8:CF:E3:69:D0:F0:AE:0D
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial: 01993EA90B9C43676840EDBBC4298A8772A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number: 1290
Signing time: Fri 12 Sep 2025 16:01:29 +0000
Manifest this update: Fri 12 Sep 2025 16:01:29 +0000
Manifest next update: Sat 13 Sep 2025 16:01:29 +0000
Files and hashes: 1: FMnMJSika8qzHn3rA1gugh6bskk.roa (hash: ifB+hpHW1Zidp1iRq+x5utdXKTTiyitHTNMMB+oocZw=)
2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: BxmdCCIkneqT7ySmNaIChn+UdObDgORN/xG6nFWf6+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 15:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:a9:0b:9c:43:67:68:40:ed:bb:c4:29:8a:87:72:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Validity
Not Before: Sep 12 16:01:29 2025 GMT
Not After : Sep 13 16:01:29 2025 GMT
Subject: CN=d98f44849897af58643a88f5e8cfe369d0f0ae0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:88:ba:ba:6e:00:8f:53:7c:1e:7a:c5:64:
3e:68:89:97:69:7a:21:89:79:30:e0:3e:42:2d:17:
ad:6d:0a:21:81:59:9a:5f:c2:5b:e2:f6:e2:b1:d6:
60:5a:45:8c:65:63:c2:e9:35:e9:59:4b:44:9f:b6:
66:cd:05:ce:5d:8d:cd:5f:f8:bb:b5:87:bf:6c:62:
23:d2:ec:6d:f0:7a:8b:60:07:a3:69:40:9b:8c:4a:
89:ad:10:c3:0d:4e:eb:70:9e:b3:3d:bd:1f:21:df:
60:7b:1b:3a:e2:fa:7e:fa:e0:09:20:65:6f:3c:ee:
6a:72:55:3b:45:d0:b7:e9:43:f7:21:17:84:e8:11:
cd:67:48:ad:fd:bb:4a:5a:99:5d:b9:ab:50:a4:97:
39:e5:29:43:50:84:42:58:5d:6d:9d:45:97:c0:2c:
29:03:44:93:14:24:9e:07:e9:e7:1c:33:62:fc:32:
2f:0c:fe:fa:f1:37:d1:83:33:cb:f1:56:01:bb:f8:
74:05:c5:b6:67:53:89:55:a8:90:f7:94:b6:91:d1:
4c:6d:b1:a5:42:48:b8:1f:14:1e:b5:19:48:7d:3f:
8c:45:2b:fb:bd:fd:84:9b:f7:e0:29:90:9b:e4:3f:
03:39:6d:2f:1b:c9:23:ef:b3:c3:22:33:bc:48:a1:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8F:44:84:98:97:AF:58:64:3A:88:F5:E8:CF:E3:69:D0:F0:AE:0D
X509v3 Authority Key Identifier:
keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ea:5c:8d:58:29:df:00:ed:a0:40:5c:fb:77:b6:bc:5d:c8:
2d:18:8a:e3:99:3a:3d:d8:13:a1:e4:70:e8:c6:b9:21:22:0c:
87:cc:a7:a4:75:d4:a5:d4:4d:b0:a7:46:a5:66:f4:a6:fc:73:
40:30:95:48:33:11:56:58:c4:80:2d:bd:f5:a5:3a:ee:99:4e:
49:e9:2d:4b:f8:c4:7c:e6:47:e0:17:c9:88:65:16:74:34:b9:
f8:00:de:dc:bb:2b:2b:ad:a9:45:c8:74:14:93:25:3c:00:20:
c7:75:72:36:ce:9b:0f:77:1f:1f:e6:63:ed:fe:11:37:d2:a2:
a8:21:17:eb:a4:64:5a:c0:9a:f2:75:c8:54:e2:cc:33:84:f9:
98:1f:35:23:8e:b3:42:43:19:c4:a9:f0:a2:e5:b0:d3:aa:0d:
cc:8e:1e:68:5f:4a:11:a6:92:cc:cd:22:89:79:de:a9:09:4f:
02:9f:05:1b:1f:12:5e:3b:72:55:2b:26:7b:7d:82:84:f7:f0:
b3:20:13:15:c7:12:b0:08:a1:70:a2:c8:05:86:1e:de:37:62:
2a:2c:06:16:47:00:9a:f5:85:24:b6:ae:c1:d6:c7:7c:5e:33:
4a:cd:f3:04:4e:85:f7:c7:58:4a:34:ef:ac:6a:88:86:33:5b:
15:1c:ae:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk+qQucQ2doQO27xCmKh3KmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl
ZWRiNjQwHhcNMjUwOTEyMTYwMTI5WhcNMjUwOTEzMTYwMTI5WjAzMTEwLwYDVQQD
EyhkOThmNDQ4NDk4OTdhZjU4NjQzYTg4ZjVlOGNmZTM2OWQwZjBhZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2SIurpuAI9TfB56xWQ+aImXaXoh
iXkw4D5CLRetbQohgVmaX8Jb4vbisdZgWkWMZWPC6TXpWUtEn7ZmzQXOXY3NX/i7
tYe/bGIj0uxt8HqLYAejaUCbjEqJrRDDDU7rcJ6zPb0fId9gexs64vp++uAJIGVv
PO5qclU7RdC36UP3IReE6BHNZ0it/btKWplduatQpJc55SlDUIRCWF1tnUWXwCwp
A0STFCSeB+nnHDNi/DIvDP768TfRgzPL8VYBu/h0BcW2Z1OJVaiQ95S2kdFMbbGl
Qki4HxQetRlIfT+MRSv7vf2Em/fgKZCb5D8DOW0vG8kj77PDIjO8SKHFrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmPRISYl69YZDqI9ejP42nQ8K4NMB8GA1UdIwQY
MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt
ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi
LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOpcjVgp
3wDtoEBc+3e2vF3ILRiK45k6PdgToeRw6Ma5ISIMh8ynpHXUpdRNsKdGpWb0pvxz
QDCVSDMRVljEgC299aU67plOSektS/jEfOZH4BfJiGUWdDS5+ADe3LsrK62pRch0
FJMlPAAgx3VyNs6bD3cfH+Zj7f4RN9KiqCEX66RkWsCa8nXIVOLMM4T5mB81I46z
QkMZxKnwouWw06oNzI4eaF9KEaaSzM0iiXneqQlPAp8FGx8SXjtyVSsme32ChPfw
syATFccSsAihcKLIBYYe3jdiKiwGFkcAmvWFJLauwdbHfF4zSs3zBE6F98dYSjTv
rGqIhjNbFRyuvg==
-----END CERTIFICATE-----
Generated at Fri Sep 12 23:13:57 2025 by rpki-client