Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier: vkPM8Pr17xbkO9Gxj7WQjZ9n9rVFFEIiXyFhDgrvAC0=
Subject key identifier: 98:8D:67:10:4C:20:10:68:70:48:63:37:68:48:7D:29:6B:F2:60:94
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial: 019921B1EE861AAFDF2E675AC3E0573B8D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number: 0755
Signing time: Sun 07 Sep 2025 01:02:13 +0000
Manifest this update: Sun 07 Sep 2025 01:02:13 +0000
Manifest next update: Mon 08 Sep 2025 01:02:13 +0000
Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: IYZ6sU7RlL8Xd0dbCe5xCt71Z0q6Cv4/y+QKCUb0dqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:ee:86:1a:af:df:2e:67:5a:c3:e0:57:3b:8d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Validity
Not Before: Sep 7 01:02:13 2025 GMT
Not After : Sep 8 01:02:13 2025 GMT
Subject: CN=988d67104c2010687048633768487d296bf26094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:7f:66:33:b9:fb:0a:ed:f7:62:fc:dc:5d:
65:75:1b:35:09:78:3a:9c:4d:6a:02:1f:79:28:e6:
10:67:c8:64:0c:c1:c1:3f:97:5b:57:60:81:93:bb:
cd:0f:ad:82:cd:3f:e3:6b:be:44:8f:ae:3c:b4:50:
09:c3:91:48:7d:7c:80:e9:71:e5:57:74:3b:50:60:
64:20:47:16:02:0b:9e:fe:12:7c:83:d0:27:52:58:
92:18:09:29:01:c2:65:9a:39:be:c3:44:8b:e3:a4:
aa:66:cd:a8:11:12:ed:cc:36:c0:3d:d2:ad:7b:3c:
f5:d8:5e:ad:82:47:e9:23:37:f1:83:4d:c8:20:f3:
26:e6:a3:29:16:17:12:13:ae:0a:cf:db:19:49:c5:
84:63:63:ff:9c:0f:4c:da:fa:8e:2b:99:82:08:e4:
d7:d2:f1:e1:00:4f:d4:19:6e:5d:e8:ef:3d:27:41:
2d:1e:73:a0:1b:8f:28:6a:39:6f:b0:57:73:b2:44:
50:97:ae:74:6c:d7:89:71:e9:d9:d2:a9:5c:a5:88:
7b:2d:70:aa:99:80:82:e3:99:98:af:51:54:f3:a6:
aa:db:35:4f:82:3b:66:4b:3e:0d:d5:f7:a4:fc:d2:
a7:bb:87:b4:1e:6d:2b:c8:b7:d5:3a:3b:8d:03:01:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8D:67:10:4C:20:10:68:70:48:63:37:68:48:7D:29:6B:F2:60:94
X509v3 Authority Key Identifier:
keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c0:af:9f:ad:5b:67:2c:34:82:a3:fa:67:7a:96:9e:c6:20:
eb:f6:db:ad:c4:c6:ab:c2:98:3b:c6:8c:3d:3a:62:a0:56:6a:
41:17:3b:a7:78:4c:ab:06:f5:c4:9e:8e:96:36:81:ac:94:c9:
7b:bf:2b:d0:2e:6e:25:f1:b6:fb:da:2e:2c:e8:cb:2b:ea:0a:
b7:79:8d:88:56:95:6a:66:1f:78:27:c0:d0:4a:de:49:5b:11:
07:46:85:9c:8b:0d:a0:ea:a2:b1:4e:24:6d:ac:10:b6:a3:4a:
8c:c8:88:aa:8e:73:cc:df:28:9c:a9:21:bf:8f:ad:78:cb:ba:
ee:b9:b9:2c:0a:4e:a4:3d:9a:97:85:8c:03:5f:25:94:cd:23:
e7:b5:b5:09:7e:52:84:1a:94:55:10:52:51:0d:18:8a:c3:d7:
92:bf:dd:7d:31:47:aa:99:c4:fb:10:1c:92:d0:27:32:84:a5:
0d:02:fc:c4:ad:7d:e0:72:6a:a2:3f:4f:fd:6b:0e:19:8a:5d:
81:d7:b9:84:6e:f1:7c:39:f5:00:47:91:20:46:bd:42:fd:05:
ff:b5:82:50:30:3e:60:b4:eb:ee:79:d4:ff:46:32:13:af:03:
f1:55:13:59:6e:ec:f8:4a:ed:38:d7:80:83:e7:9d:a9:cc:e2:
ad:3b:4e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhse6GGq/fLmdaw+BXO41zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzBmYWQ4ODk3ZWEyNTgyZjk1MzA3NzllMGU2OGVhMDhj
Y2U2NDMwHhcNMjUwOTA3MDEwMjEzWhcNMjUwOTA4MDEwMjEzWjAzMTEwLwYDVQQD
Eyg5ODhkNjcxMDRjMjAxMDY4NzA0ODYzMzc2ODQ4N2QyOTZiZjI2MDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuap/ZjO5+wrt92L83F1ldRs1CXg6
nE1qAh95KOYQZ8hkDMHBP5dbV2CBk7vND62CzT/ja75Ej648tFAJw5FIfXyA6XHl
V3Q7UGBkIEcWAgue/hJ8g9AnUliSGAkpAcJlmjm+w0SL46SqZs2oERLtzDbAPdKt
ezz12F6tgkfpIzfxg03IIPMm5qMpFhcSE64Kz9sZScWEY2P/nA9M2vqOK5mCCOTX
0vHhAE/UGW5d6O89J0EtHnOgG48oajlvsFdzskRQl650bNeJcenZ0qlcpYh7LXCq
mYCC45mYr1FU86aq2zVPgjtmSz4N1fek/NKnu4e0Hm0ryLfVOjuNAwGmFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiNZxBMIBBocEhjN2hIfSlr8mCUMB8GA1UdIwQY
MBaAFGLA+tiJfqJYL5Uwd54OaOoIzOZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81MWQwNGYtMjQ2ZS00MWYxLTk0MTIt
Y2VlMWIxZDFlYzA2LzEvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81MWQwNGYtMjQ2ZS00MWYxLTk0MTItY2VlMWIxZDFlYzA2
LzEvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8Cvn61b
Zyw0gqP6Z3qWnsYg6/bbrcTGq8KYO8aMPTpioFZqQRc7p3hMqwb1xJ6OljaBrJTJ
e78r0C5uJfG2+9ouLOjLK+oKt3mNiFaVamYfeCfA0EreSVsRB0aFnIsNoOqisU4k
bawQtqNKjMiIqo5zzN8onKkhv4+teMu67rm5LApOpD2al4WMA18llM0j57W1CX5S
hBqUVRBSUQ0YisPXkr/dfTFHqpnE+xAcktAnMoSlDQL8xK194HJqoj9P/WsOGYpd
gde5hG7xfDn1AEeRIEa9Qv0F/7WCUDA+YLTr7nnU/0YyE68D8VUTWW7s+ErtONeA
g+edqczirTtOzQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:38 2025 by rpki-client