Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: jqf/Ium6nPHRcJfBKhvju/ZUyDXOHrDoCMlBNv1aHUA=
Subject key identifier: 62:A8:43:DB:59:68:81:2C:00:52:24:41:F0:E9:83:C2:16:7A:66:CA
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 01984B54708E1D143A13AEDCA4B69B21F885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 10:01:21 +0000
Manifest this update: Sun 27 Jul 2025 10:01:21 +0000
Manifest next update: Mon 28 Jul 2025 10:01:21 +0000
Files and hashes: 1: 6thBO5jod-S22ld5I7cCUqU9PPU.roa (hash: whhraWURnepuYYNpLNQlvK7It8S7aCrmfs8zXpfqsOc=)
2: bNZ4Q9wcD7yZAP2RwlbB4JNFkjQ.roa (hash: JZzkHPxKw9rE1eeiiSJfGm5FFzPkvIECAGzsNfZT2+0=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: 8/cH9tnRajwvu5p0NWcLmAg7EMMYhDUxUZ0SXVrCdOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:70:8e:1d:14:3a:13:ae:dc:a4:b6:9b:21:f8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jul 27 10:01:21 2025 GMT
Not After : Jul 28 10:01:21 2025 GMT
Subject: CN=62a843db5968812c00522441f0e983c2167a66ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:a0:60:42:19:90:d4:e5:f0:00:af:6c:d8:
bc:bd:9f:f7:9a:cb:83:6c:c1:f1:11:7b:b2:2c:30:
36:cd:af:5e:b7:ae:cd:ba:4b:ad:05:36:cd:d5:06:
2a:d7:1a:1f:e8:54:a4:07:a5:89:4c:23:c2:96:cd:
95:c6:73:03:8a:ef:86:a3:59:96:81:f2:d0:30:c1:
74:ec:fd:fb:70:d9:6e:89:9b:77:60:32:68:63:96:
a2:f4:3b:76:d7:0c:c6:3b:c4:8e:4d:0c:30:23:0a:
c2:af:02:55:0c:92:5c:28:80:83:73:7e:2e:f3:21:
86:29:61:07:52:15:74:2b:65:db:39:97:1c:a5:b2:
c7:5b:8f:b4:15:c7:46:34:08:6c:73:9b:04:bd:9a:
f6:71:19:ba:61:87:c8:8e:61:eb:71:11:1e:96:59:
c2:c5:3e:0e:d3:80:e3:c3:e2:5d:60:ed:24:c1:24:
73:ae:b4:63:1a:15:d7:99:1c:33:7b:89:18:05:4d:
15:c5:10:cf:4e:e2:14:7e:c9:ca:43:99:6a:19:d7:
58:e2:b5:34:f0:78:44:33:c5:b6:ac:f1:aa:14:b4:
11:39:49:7c:d8:66:be:7a:8a:2e:f5:75:c4:74:27:
65:9d:a9:ce:dc:3e:9b:dd:23:7c:31:0e:5b:94:88:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A8:43:DB:59:68:81:2C:00:52:24:41:F0:E9:83:C2:16:7A:66:CA
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:30:39:cc:8c:4c:4c:66:de:b5:6f:9a:7f:af:02:da:8e:af:
33:e1:d5:5d:6e:ae:a8:76:5d:36:7c:e9:0b:b4:59:6e:23:9d:
70:74:ce:28:93:b6:20:16:b0:c7:fa:b3:9d:d3:ee:fa:98:2a:
e6:fe:8f:83:ea:d6:0b:c1:37:cf:36:7f:8c:93:58:57:b1:87:
17:f2:1d:f3:59:b4:6d:dd:19:38:cc:5a:e4:08:ad:a8:bf:59:
cd:58:30:77:2b:09:eb:06:2b:6f:ef:2d:8a:ac:0a:16:c5:19:
2b:68:5a:65:7c:35:55:6f:c3:24:2a:3d:e9:41:ee:b3:5f:dd:
e9:63:a8:02:2c:56:2a:ce:6b:42:2d:32:1c:5b:55:63:ee:6e:
ed:69:8b:03:20:90:56:71:da:74:3b:4a:98:e6:47:4f:0a:d2:
40:4c:e6:6f:ac:45:fc:00:eb:17:83:e8:12:12:00:89:c5:ab:
c3:82:04:51:a6:36:e6:9a:13:c5:48:33:e8:2b:ef:29:69:fc:
54:11:66:b7:8e:63:30:c9:1f:64:98:04:c5:1d:bd:3c:51:9d:
bc:da:b0:06:8b:07:95:ad:25:47:ee:40:d4:65:6e:67:a1:f3:
9f:a1:25:45:6c:47:73:21:43:10:97:90:e1:7d:ba:01:d5:29:
94:65:dc:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVHCOHRQ6E67cpLabIfiFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQ3NGNlYjg1YWYzMTEyMmVkZTU4NmQ0ZDY1YjBmNWI0
ZDk3ZjAwHhcNMjUwNzI3MTAwMTIxWhcNMjUwNzI4MTAwMTIxWjAzMTEwLwYDVQQD
Eyg2MmE4NDNkYjU5Njg4MTJjMDA1MjI0NDFmMGU5ODNjMjE2N2E2NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE+gYEIZkNTl8ACvbNi8vZ/3msuD
bMHxEXuyLDA2za9et67NukutBTbN1QYq1xof6FSkB6WJTCPCls2VxnMDiu+Go1mW
gfLQMMF07P37cNluiZt3YDJoY5ai9Dt21wzGO8SOTQwwIwrCrwJVDJJcKICDc34u
8yGGKWEHUhV0K2XbOZccpbLHW4+0FcdGNAhsc5sEvZr2cRm6YYfIjmHrcREellnC
xT4O04Djw+JdYO0kwSRzrrRjGhXXmRwze4kYBU0VxRDPTuIUfsnKQ5lqGddY4rU0
8HhEM8W2rPGqFLQROUl82Ga+eoou9XXEdCdlnanO3D6b3SN8MQ5blIhhlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKoQ9tZaIEsAFIkQfDpg8IWembKMB8GA1UdIwQY
MBaAFMh0dM64WvMRIu3lhtTWWw9bTZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYt
MDM1ODY1MjNiMTMzLzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYtMDM1ODY1MjNiMTMz
LzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTA5zIxM
TGbetW+af68C2o6vM+HVXW6uqHZdNnzpC7RZbiOdcHTOKJO2IBawx/qzndPu+pgq
5v6Pg+rWC8E3zzZ/jJNYV7GHF/Id81m0bd0ZOMxa5AitqL9ZzVgwdysJ6wYrb+8t
iqwKFsUZK2haZXw1VW/DJCo96UHus1/d6WOoAixWKs5rQi0yHFtVY+5u7WmLAyCQ
VnHadDtKmOZHTwrSQEzmb6xF/ADrF4PoEhIAicWrw4IEUaY25poTxUgz6CvvKWn8
VBFmt45jMMkfZJgExR29PFGdvNqwBosHla0lR+5A1GVuZ6Hzn6ElRWxHcyFDEJeQ
4X26AdUplGXcMw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:02:13 2025 by rpki-client