Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: OpMQKb2aZYvURoIdlBCn9b9xGVo6G6Q7OQRIOcwOS7A=
Subject key identifier: F9:CF:EC:F5:30:F0:DF:46:35:CA:A5:66:8B:6B:3F:D1:C9:D3:17:15
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 0199221E3D51A758F858515709ABB4AD0FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 0EFA
Signing time: Sun 07 Sep 2025 03:00:31 +0000
Manifest this update: Sun 07 Sep 2025 03:00:31 +0000
Manifest next update: Mon 08 Sep 2025 03:00:31 +0000
Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: qG5aNDG0pnUaORaQNmLYg6G+F+chJHRjlv1u8HNRrHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:3d:51:a7:58:f8:58:51:57:09:ab:b4:ad:0f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Sep 7 03:00:31 2025 GMT
Not After : Sep 8 03:00:31 2025 GMT
Subject: CN=f9cfecf530f0df4635caa5668b6b3fd1c9d31715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:61:11:49:bc:01:ed:53:1b:bf:83:5a:ac:
72:e7:7a:16:e7:7a:9b:ce:7d:20:bf:5b:0f:3c:4f:
13:aa:49:f2:6d:f0:0f:d1:3f:ba:e4:ce:59:61:99:
8b:d9:25:d6:68:10:40:c9:05:f1:0f:a2:66:66:65:
95:de:c3:02:02:ce:6c:b3:4a:2b:3a:2b:d9:db:14:
c8:44:fc:50:e0:e4:df:76:78:9c:1a:70:48:c9:15:
57:6c:3d:cd:7c:13:ef:88:d3:95:cb:ca:ce:b3:fd:
db:2e:57:2d:e3:29:57:39:a8:a2:a2:85:48:2c:72:
7b:c9:23:44:2b:1c:08:93:9c:82:76:03:a7:40:95:
72:a3:a2:c8:d0:00:1e:b0:8e:f5:30:16:05:e5:a0:
36:c8:c1:03:6e:db:3f:1c:40:ec:1a:69:22:81:4d:
c3:7b:8a:de:2b:d2:fd:0a:d6:38:42:3b:8e:28:30:
4d:cd:35:33:03:b1:b9:d5:35:32:59:31:e0:b2:95:
26:e0:c5:29:ac:e7:11:dc:9d:f0:91:34:ab:fa:79:
9a:cd:3d:ba:e5:41:b1:ae:a1:82:ee:74:bd:27:bb:
f2:5b:9f:27:17:4f:7e:7a:29:07:3e:e4:d2:59:de:
32:2f:4d:0d:2d:57:ee:c3:a6:8f:f8:00:7d:c8:9a:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:EC:F5:30:F0:DF:46:35:CA:A5:66:8B:6B:3F:D1:C9:D3:17:15
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5b:f6:a0:fc:ac:2d:1b:b6:1a:3f:2b:96:6e:8f:96:62:d7:
bb:69:65:84:3d:9c:6a:ae:09:09:33:c7:d1:48:89:07:cb:e7:
76:0f:e9:0d:75:cc:e1:71:9d:60:31:18:a3:b8:6e:0f:c5:5c:
89:ff:6c:92:43:bf:58:16:96:f8:18:89:8e:c3:f4:1f:70:9d:
b8:fe:0c:6c:74:3c:b0:32:cf:52:53:58:88:1a:52:9e:3e:87:
64:d2:fc:aa:a7:82:5a:f8:15:6e:54:34:4b:c9:b2:a0:9a:54:
8f:1d:87:53:54:52:8d:79:c8:e2:b8:35:40:7b:d8:e5:0a:27:
2c:e4:0c:cd:43:25:48:b1:13:0e:4c:87:9b:f4:6f:4d:cc:99:
7e:c7:91:e0:d7:ca:fc:d7:31:2e:e5:5e:15:ba:72:63:d1:94:
d3:98:2d:05:28:0d:44:f7:f0:53:7b:88:43:4b:b8:cf:c0:f2:
d6:44:28:05:08:62:3f:92:8a:04:4c:c4:b3:46:4e:8c:30:01:
d2:69:0b:b2:ba:ef:1f:01:24:41:ff:72:3a:b3:07:8f:21:fd:
00:b6:e1:2c:89:47:17:45:d1:31:6a:de:9a:d1:a3:51:d4:59:
1d:01:3f:8b:fa:f2:f5:c8:a3:5d:e7:12:53:ea:ff:88:d9:ec:
47:49:91:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHj1Rp1j4WFFXCau0rQ/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGFjNTJlMmI1NzJjYzJhOTlhNzQxMjU3ZTU2OWFhMzcx
ZTM1NjgwHhcNMjUwOTA3MDMwMDMxWhcNMjUwOTA4MDMwMDMxWjAzMTEwLwYDVQQD
EyhmOWNmZWNmNTMwZjBkZjQ2MzVjYWE1NjY4YjZiM2ZkMWM5ZDMxNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c1hEUm8Ae1TG7+DWqxy53oW53qb
zn0gv1sPPE8TqknybfAP0T+65M5ZYZmL2SXWaBBAyQXxD6JmZmWV3sMCAs5ss0or
OivZ2xTIRPxQ4OTfdnicGnBIyRVXbD3NfBPviNOVy8rOs/3bLlct4ylXOaiiooVI
LHJ7ySNEKxwIk5yCdgOnQJVyo6LI0AAesI71MBYF5aA2yMEDbts/HEDsGmkigU3D
e4reK9L9CtY4QjuOKDBNzTUzA7G51TUyWTHgspUm4MUprOcR3J3wkTSr+nmazT26
5UGxrqGC7nS9J7vyW58nF09+eikHPuTSWd4yL00NLVfuw6aP+AB9yJriIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnP7PUw8N9GNcqlZotrP9HJ0xcVMB8GA1UdIwQY
MBaAFMhKxS4rVyzCqZp0Elflaao3HjVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQt
MmNjMzQyYjAwNTE5LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQtMmNjMzQyYjAwNTE5
LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVv2oPys
LRu2Gj8rlm6PlmLXu2llhD2caq4JCTPH0UiJB8vndg/pDXXM4XGdYDEYo7huD8Vc
if9skkO/WBaW+BiJjsP0H3CduP4MbHQ8sDLPUlNYiBpSnj6HZNL8qqeCWvgVblQ0
S8myoJpUjx2HU1RSjXnI4rg1QHvY5QonLOQMzUMlSLETDkyHm/RvTcyZfseR4NfK
/NcxLuVeFbpyY9GU05gtBSgNRPfwU3uIQ0u4z8Dy1kQoBQhiP5KKBEzEs0ZOjDAB
0mkLsrrvHwEkQf9yOrMHjyH9ALbhLIlHF0XRMWremtGjUdRZHQE/i/ry9cijXecS
U+r/iNnsR0mRaA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:13 2025 by rpki-client