Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: L1E7/ieDLKChwcm5wkQS6oGcguIlUtzn3LQaUOSwE6w=
Subject key identifier: 64:41:5B:8C:BB:E7:FA:7C:CE:1A:36:9C:A3:67:8B:7B:0B:10:73:58
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 01984966CB8C8629DCDDBD3CBA02D2CED846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 01:02:10 +0000
Manifest this update: Sun 27 Jul 2025 01:02:10 +0000
Manifest next update: Mon 28 Jul 2025 01:02:10 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: rjNy3RNDM80+AzHOIEhCzYuJJ9NiWDgbqHIoKcJiE04=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:cb:8c:86:29:dc:dd:bd:3c:ba:02:d2:ce:d8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Jul 27 01:02:10 2025 GMT
Not After : Jul 28 01:02:10 2025 GMT
Subject: CN=64415b8cbbe7fa7cce1a369ca3678b7b0b107358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:4a:d6:b3:21:ea:8a:bc:48:95:c5:19:83:
d8:37:68:91:66:5d:ff:a9:ce:b6:6b:bf:2b:77:e9:
e7:f8:61:76:37:23:d5:d0:ee:49:34:54:41:b5:11:
b4:62:d8:fa:e4:11:69:f3:21:b2:35:3d:0f:d6:6b:
06:94:4b:1f:b8:e7:9e:90:bc:b7:e8:61:f1:b2:ef:
f4:20:27:2b:dd:d3:5c:63:12:5d:50:9f:48:70:dd:
3e:a6:ce:66:19:ab:b8:12:51:d1:14:be:2e:28:bf:
6b:68:b6:0d:ca:e3:c5:38:2b:80:6a:6f:ea:49:e1:
51:ec:19:2e:52:40:2f:17:98:76:84:22:40:40:56:
71:cf:8a:e5:ac:e4:ae:3e:66:08:a9:53:71:72:7c:
28:c5:98:00:8a:7e:7e:2d:c9:ba:e9:d6:40:18:00:
5a:6a:60:e1:ba:f0:f1:34:2e:9f:95:cf:78:e9:6b:
28:da:e4:f1:7e:01:61:f7:89:19:56:2c:5c:4b:d7:
e0:59:39:d9:54:fa:b2:85:7b:50:ba:6a:2d:90:7a:
ff:4a:18:b5:04:d8:ef:b3:04:6d:01:6d:2d:c8:a4:
e6:b9:91:7b:3a:a4:a9:09:9b:c0:53:8e:e7:18:ab:
0e:8d:3d:00:e6:db:9c:66:d9:d4:c1:bf:d8:7e:d8:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:41:5B:8C:BB:E7:FA:7C:CE:1A:36:9C:A3:67:8B:7B:0B:10:73:58
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d4:81:33:72:45:af:65:11:13:9d:60:e4:6c:57:31:46:d8:
ac:41:0a:d5:9a:1d:4c:ab:2d:ca:17:e9:40:77:a6:21:5d:2e:
7f:bc:04:b7:f1:e8:a4:ba:4c:7b:63:b5:98:aa:c6:d8:e5:f7:
a7:e3:e8:47:ca:83:ec:d4:23:d5:31:c6:ec:0b:bb:df:61:8a:
53:46:4b:bf:0d:63:a6:d0:a4:d2:25:3a:3b:f3:b4:66:42:5c:
8d:1d:c3:29:f7:e8:51:30:ae:c5:dd:4f:0e:20:c1:4d:19:34:
d1:0f:af:0b:6b:5a:bf:5a:78:99:f9:f4:78:c1:05:af:13:4e:
e0:d5:29:ec:88:4c:2b:b2:83:d4:5a:7f:59:fe:cd:d2:ea:38:
04:72:ab:64:72:4f:5b:e7:e9:48:eb:06:46:35:4e:a1:84:18:
5c:80:ec:7c:cd:bc:3e:93:3f:e2:2e:c5:06:17:e4:e8:6d:d7:
6c:1f:35:09:c6:0f:2f:6a:66:6d:fa:ab:7a:b7:2c:8b:3f:9a:
f5:c4:55:25:e9:c5:66:15:7c:23:a0:76:35:66:1f:6a:ce:4a:
bb:bc:a7:a4:3f:37:90:bf:7d:d1:7f:42:15:58:e0:5d:9f:10:
77:fc:59:56:e9:cc:6a:9d:5b:f1:75:9e:31:74:10:f0:4d:0d:
cd:eb:ce:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZsuMhinc3b08ugLSzthGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGM1MDljYjc3YjAxNDliNmY2NmY1MDE5Zjg1OGIzYWNm
OTQyZTkwHhcNMjUwNzI3MDEwMjEwWhcNMjUwNzI4MDEwMjEwWjAzMTEwLwYDVQQD
Eyg2NDQxNWI4Y2JiZTdmYTdjY2UxYTM2OWNhMzY3OGI3YjBiMTA3MzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUZK1rMh6oq8SJXFGYPYN2iRZl3/
qc62a78rd+nn+GF2NyPV0O5JNFRBtRG0Ytj65BFp8yGyNT0P1msGlEsfuOeekLy3
6GHxsu/0ICcr3dNcYxJdUJ9IcN0+ps5mGau4ElHRFL4uKL9raLYNyuPFOCuAam/q
SeFR7BkuUkAvF5h2hCJAQFZxz4rlrOSuPmYIqVNxcnwoxZgAin5+Lcm66dZAGABa
amDhuvDxNC6flc946Wso2uTxfgFh94kZVixcS9fgWTnZVPqyhXtQumotkHr/Shi1
BNjvswRtAW0tyKTmuZF7OqSpCZvAU47nGKsOjT0A5tucZtnUwb/Yfth1awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRBW4y75/p8zho2nKNni3sLEHNYMB8GA1UdIwQY
MBaAFGOMUJy3ewFJtvZvUBn4WLOs+ULpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQt
M2NjNGZmOWFhMWJjLzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQtM2NjNGZmOWFhMWJj
LzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNSBM3JF
r2URE51g5GxXMUbYrEEK1ZodTKstyhfpQHemIV0uf7wEt/HopLpMe2O1mKrG2OX3
p+PoR8qD7NQj1THG7Au732GKU0ZLvw1jptCk0iU6O/O0ZkJcjR3DKffoUTCuxd1P
DiDBTRk00Q+vC2tav1p4mfn0eMEFrxNO4NUp7IhMK7KD1Fp/Wf7N0uo4BHKrZHJP
W+fpSOsGRjVOoYQYXIDsfM28PpM/4i7FBhfk6G3XbB81CcYPL2pmbfqrercsiz+a
9cRVJenFZhV8I6B2NWYfas5Ku7ynpD83kL990X9CFVjgXZ8Qd/xZVunMap1b8XWe
MXQQ8E0NzevOSw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:52 2025 by rpki-client