Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
File: yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json)
Hash identifier: hyasvn63EOg6xuqumy5QrYCmH2U58hovapLQ+DNyLoU=
Subject key identifier: 34:91:C2:BF:EC:75:CB:EF:6B:1E:39:AD:84:81:59:A7:CF:D2:2B:B6
Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
Certificate issuer: /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Certificate serial: 019922FAF91AE4177851FC9548541A141420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
Manifest number: 0D2A
Signing time: Sun 07 Sep 2025 07:01:36 +0000
Manifest this update: Sun 07 Sep 2025 07:01:36 +0000
Manifest next update: Mon 08 Sep 2025 07:01:36 +0000
Files and hashes: 1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: 2/CWsClrUN3FOv8G+Q2l9XFk45IZoP/P8fLRZUio68k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:f9:1a:e4:17:78:51:fc:95:48:54:1a:14:14:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Validity
Not Before: Sep 7 07:01:36 2025 GMT
Not After : Sep 8 07:01:36 2025 GMT
Subject: CN=3491c2bfec75cbef6b1e39ad848159a7cfd22bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:28:38:b8:05:fc:5d:13:2b:15:3f:9a:df:
bb:66:d1:52:17:90:07:48:84:d9:55:7c:09:75:5a:
d8:93:b5:68:1f:c5:03:b4:fd:0f:df:91:fb:07:41:
64:5e:e6:0d:33:5b:44:93:74:51:a9:41:34:53:0a:
10:59:44:1b:6c:5e:a0:05:32:94:62:bb:ae:fd:15:
f6:e2:4a:e8:09:b9:0d:e5:87:c4:f2:46:1b:b5:2d:
8a:a6:4f:62:03:84:9e:de:ed:aa:35:3c:73:04:6d:
f8:18:01:c3:2c:b6:7b:d0:5d:9a:77:8f:42:54:56:
9d:67:b8:3e:b4:d9:5e:7a:6f:23:3f:43:9d:8e:5c:
71:35:3f:5f:0f:02:78:5c:5c:3a:fa:d3:8a:c6:69:
85:1e:40:5a:1d:d0:5a:f0:7a:46:d9:2f:49:54:cf:
dc:51:72:32:d6:f5:05:55:e4:56:c8:34:1d:3c:8c:
5c:f0:45:52:a5:c4:b8:4a:4f:f1:e6:1a:c4:19:26:
49:35:a1:04:ef:38:2c:0a:c2:7c:c7:a1:59:3b:79:
7a:a8:94:d7:d4:5f:2b:19:12:34:da:b6:48:ad:9b:
ee:2a:75:1b:3c:65:15:98:20:57:7a:04:67:e8:2b:
86:66:61:a3:ee:aa:a5:f3:d5:09:3b:19:ae:86:e6:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:C2:BF:EC:75:CB:EF:6B:1E:39:AD:84:81:59:A7:CF:D2:2B:B6
X509v3 Authority Key Identifier:
keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:66:10:8b:46:6d:d9:a4:96:f8:03:5d:22:b5:95:dd:63:17:
ce:ea:a8:7b:d1:7e:26:f7:21:fc:f9:09:e3:6c:bb:65:83:7c:
8d:0e:42:c5:e7:6d:3f:e5:c0:2f:f2:ca:e2:11:95:31:86:39:
be:9f:a3:64:42:48:ca:09:15:7e:7f:61:cd:2a:26:83:e6:e7:
66:ad:a5:a7:d8:5f:56:ae:65:77:89:2b:f1:05:9e:fc:da:d6:
fa:ca:33:f6:e4:73:83:2a:af:c4:ac:40:dd:a9:d6:00:3a:4c:
7e:67:ee:24:3f:46:06:8e:a0:f8:f5:83:e3:22:14:ad:0e:39:
28:c5:cf:0c:b8:31:78:c8:fc:fe:ff:4b:98:fe:c8:ba:65:48:
7e:0c:65:48:86:fa:e7:8f:62:1a:27:34:05:f8:30:88:4f:dd:
db:31:11:e5:3e:d5:b5:86:b1:51:e1:d1:92:28:b5:45:05:6c:
cb:5d:f5:d5:83:a9:d7:f0:94:fb:ce:9e:72:9a:58:92:46:7d:
f5:4b:6c:57:3e:62:f0:9c:0a:b2:e1:c0:82:aa:13:05:20:54:
1a:48:83:2c:6d:46:7c:e8:cb:20:77:9b:27:02:4a:24:7b:30:
90:a4:ec:f7:6f:38:81:5e:71:59:f1:2e:26:c6:17:dc:8a:09:
6d:78:2d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+vka5Bd4UfyVSFQaFBQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Njc2ZmZkZTMxN2YyZWMxYjgxMDBkMmQ5ZDQ0YTNlN2Q4
Zjc4ZDYwHhcNMjUwOTA3MDcwMTM2WhcNMjUwOTA4MDcwMTM2WjAzMTEwLwYDVQQD
EygzNDkxYzJiZmVjNzVjYmVmNmIxZTM5YWQ4NDgxNTlhN2NmZDIyYmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzYoOLgF/F0TKxU/mt+7ZtFSF5AH
SITZVXwJdVrYk7VoH8UDtP0P35H7B0FkXuYNM1tEk3RRqUE0UwoQWUQbbF6gBTKU
Yruu/RX24kroCbkN5YfE8kYbtS2Kpk9iA4Se3u2qNTxzBG34GAHDLLZ70F2ad49C
VFadZ7g+tNleem8jP0OdjlxxNT9fDwJ4XFw6+tOKxmmFHkBaHdBa8HpG2S9JVM/c
UXIy1vUFVeRWyDQdPIxc8EVSpcS4Sk/x5hrEGSZJNaEE7zgsCsJ8x6FZO3l6qJTX
1F8rGRI02rZIrZvuKnUbPGUVmCBXegRn6CuGZmGj7qql89UJOxmuhuYLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSRwr/sdcvvax45rYSBWafP0iu2MB8GA1UdIwQY
MBaAFMhnb/3jF/LsG4EA0tnUSj59j3jWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdkdl9lTVg4dXdiZ1FEUzJkUktQbjJQZU5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80OWIzMDctZmRjYS00YzU3LWFmZGYt
NzA5NzkzY2QwMTIzLzEveUdkdl9lTVg4dXdiZ1FEUzJkUktQbjJQZU5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS80OWIzMDctZmRjYS00YzU3LWFmZGYtNzA5NzkzY2QwMTIz
LzEveUdkdl9lTVg4dXdiZ1FEUzJkUktQbjJQZU5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2YQi0Zt
2aSW+ANdIrWV3WMXzuqoe9F+Jvch/PkJ42y7ZYN8jQ5CxedtP+XAL/LK4hGVMYY5
vp+jZEJIygkVfn9hzSomg+bnZq2lp9hfVq5ld4kr8QWe/NrW+soz9uRzgyqvxKxA
3anWADpMfmfuJD9GBo6g+PWD4yIUrQ45KMXPDLgxeMj8/v9LmP7IumVIfgxlSIb6
549iGic0BfgwiE/d2zER5T7VtYaxUeHRkii1RQVsy1311YOp1/CU+86ecppYkkZ9
9UtsVz5i8JwKsuHAgqoTBSBUGkiDLG1GfOjLIHebJwJKJHswkKTs9284gV5xWfEu
JsYX3IoJbXgtsA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:46 2025 by rpki-client