Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: dJRK15RoyZDytvRCkC03uoIEZbd/OF470a/EDF8tBC4=
Subject key identifier: 7D:81:CF:97:9B:34:10:E0:84:42:38:6A:B5:06:AD:A7:AD:29:A9:B4
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 01993123FA7963216C455D51EA26A00F2ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 12D7
Signing time: Wed 10 Sep 2025 01:01:05 +0000
Manifest this update: Wed 10 Sep 2025 01:01:05 +0000
Manifest next update: Thu 11 Sep 2025 01:01:05 +0000
Files and hashes: 1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: DEWV3c7Istq6fSw0OpjWQcGVflLQByNXVzl70XLOMYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:fa:79:63:21:6c:45:5d:51:ea:26:a0:0f:2a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Sep 10 01:01:05 2025 GMT
Not After : Sep 11 01:01:05 2025 GMT
Subject: CN=7d81cf979b3410e08442386ab506ada7ad29a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:21:4b:84:29:86:83:47:de:18:dd:8d:42:
ea:0b:0c:d8:e9:f5:63:cd:fe:af:50:69:09:29:fe:
dd:e5:9f:81:ee:da:24:8c:81:e4:4f:88:2f:43:fe:
4d:94:51:bb:46:07:15:24:65:bc:d9:01:cc:64:b6:
1a:d5:18:81:a9:b9:78:11:62:3a:7f:2b:bf:7e:a9:
85:17:b5:c9:3c:74:24:e5:8f:33:a4:8b:62:05:f7:
ff:d4:19:96:af:b1:78:81:16:44:03:f2:b1:a0:8f:
48:dc:58:69:fb:6b:27:cc:6d:ac:07:81:a4:1c:d5:
59:aa:8c:46:74:c9:b3:16:8d:4f:98:ac:de:4f:2f:
36:81:88:7a:ce:9b:2a:78:67:cd:e2:0b:47:1f:83:
b9:90:e4:5e:24:8e:61:59:c8:59:6a:d8:70:fe:b4:
5a:55:ad:14:45:bb:30:db:86:3a:05:e1:94:f0:e3:
e0:df:3b:1d:f0:75:36:0a:8d:f9:95:cf:c8:bb:86:
12:3d:a8:e2:fe:36:db:f5:92:c6:5f:e1:52:53:f9:
b5:82:c0:d1:7e:cf:b3:37:0b:4d:c5:ce:48:7f:fa:
92:8a:c0:58:fc:3c:86:80:ae:5b:17:81:d4:70:8b:
f8:98:3d:6c:ca:4d:d3:e2:03:f6:52:30:a1:11:64:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:81:CF:97:9B:34:10:E0:84:42:38:6A:B5:06:AD:A7:AD:29:A9:B4
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ab:ce:ce:8b:ca:36:0e:d0:a3:1b:e7:99:bb:a3:1c:2c:96:
db:8e:bc:05:74:95:26:af:08:40:79:f4:97:bb:18:19:83:14:
af:a6:6c:1e:13:1a:67:d5:d8:3b:7d:3a:47:43:a0:de:0a:bc:
1c:27:23:f6:00:7e:07:33:c9:35:e6:21:db:f5:55:a1:31:c4:
ef:eb:00:ba:05:1e:70:11:fb:7b:85:23:bb:a7:27:c2:1e:0a:
50:d0:f5:d7:93:f3:9b:29:a7:29:b6:12:4e:83:41:a9:bc:a3:
72:d0:71:3a:ec:31:9b:15:a4:e5:38:03:73:7d:e9:12:9f:87:
33:d4:41:f1:a6:bf:42:3c:8a:66:e8:5d:8e:19:73:7f:93:3c:
ec:14:d0:50:5d:e8:7e:e8:1a:4c:32:ad:9e:72:ea:c8:bd:4f:
ec:d0:81:cf:29:cf:b7:92:47:0e:a8:c8:17:ec:51:d3:53:8b:
67:21:13:2e:44:d6:9c:96:48:a3:e6:4a:80:6c:3d:02:11:a7:
18:13:33:6b:10:66:32:49:8f:69:d0:8a:ab:f8:73:82:03:35:
6e:34:ae:86:64:87:39:1a:7b:50:7a:da:d0:7e:ba:d4:14:e0:
f1:01:52:ef:c7:19:11:94:02:23:c5:97:4a:ad:90:92:15:a0:
81:3a:d4:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxI/p5YyFsRV1R6iagDyrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2U1Y2FmZjRmNDdiMmI4ZGM4MWNjMzZjOGUzNDY2NjI2
Mzk4OTgwHhcNMjUwOTEwMDEwMTA1WhcNMjUwOTExMDEwMTA1WjAzMTEwLwYDVQQD
Eyg3ZDgxY2Y5NzliMzQxMGUwODQ0MjM4NmFiNTA2YWRhN2FkMjlhOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroAhS4QphoNH3hjdjULqCwzY6fVj
zf6vUGkJKf7d5Z+B7tokjIHkT4gvQ/5NlFG7RgcVJGW82QHMZLYa1RiBqbl4EWI6
fyu/fqmFF7XJPHQk5Y8zpItiBff/1BmWr7F4gRZEA/KxoI9I3Fhp+2snzG2sB4Gk
HNVZqoxGdMmzFo1PmKzeTy82gYh6zpsqeGfN4gtHH4O5kOReJI5hWchZathw/rRa
Va0URbsw24Y6BeGU8OPg3zsd8HU2Co35lc/Iu4YSPaji/jbb9ZLGX+FSU/m1gsDR
fs+zNwtNxc5If/qSisBY/DyGgK5bF4HUcIv4mD1syk3T4gP2UjChEWTCcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2Bz5ebNBDghEI4arUGraetKam0MB8GA1UdIwQY
MBaAFGB+XK/09Hsrjcgcw2yONGZiY5iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYt
NjdmYmYyMTU1ZTRlLzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYtNjdmYmYyMTU1ZTRl
LzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKvOzovK
Ng7QoxvnmbujHCyW2468BXSVJq8IQHn0l7sYGYMUr6ZsHhMaZ9XYO306R0Og3gq8
HCcj9gB+BzPJNeYh2/VVoTHE7+sAugUecBH7e4Uju6cnwh4KUND115PzmymnKbYS
ToNBqbyjctBxOuwxmxWk5TgDc33pEp+HM9RB8aa/QjyKZuhdjhlzf5M87BTQUF3o
fugaTDKtnnLqyL1P7NCBzynPt5JHDqjIF+xR01OLZyETLkTWnJZIo+ZKgGw9AhGn
GBMzaxBmMkmPadCKq/hzggM1bjSuhmSHORp7UHra0H661BTg8QFS78cZEZQCI8WX
Sq2QkhWggTrUHA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:24:47 2025 by rpki-client