
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: RZ3etn/ly6DdpLQ2VvDF3HBu3mII8MFXMqieoCRw7A4=
Subject key identifier: A7:C8:C1:B2:3A:27:0E:0D:BB:30:D2:A9:CE:8C:25:76:5B:B9:2E:BF
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 0198C6EE1BF490FCDC14173063727086576F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 0145
Signing time: Wed 20 Aug 2025 10:02:30 +0000
Manifest this update: Wed 20 Aug 2025 10:02:30 +0000
Manifest next update: Thu 21 Aug 2025 10:02:30 +0000
Files and hashes: 1: 39eMlym5-vUY7eWOJGWxfmeXbRY.roa (hash: WY0sOOmZNXOfMNrzfd1Jh0Sr1ckGzWAuxPnTphEkb9w=)
2: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
3: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
4: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: 7vzoIgIb6xSiiSUF2z+mfhZ5JlpVqa72C9RDLVav97M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ee:1b:f4:90:fc:dc:14:17:30:63:72:70:86:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Aug 20 10:02:30 2025 GMT
Not After : Aug 21 10:02:30 2025 GMT
Subject: CN=a7c8c1b23a270e0dbb30d2a9ce8c25765bb92ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:aa:a7:42:61:37:41:63:9f:58:ce:20:14:
32:ac:aa:e6:f3:52:d2:cb:91:bb:d7:84:46:56:37:
b7:3a:a1:88:cd:ea:a1:af:75:d5:b5:c7:4c:de:2d:
11:1b:94:15:12:08:78:54:06:fb:79:de:2d:63:55:
0e:2d:f1:0d:8e:fd:1f:05:2f:dc:3a:6c:97:9e:1f:
72:d2:aa:b1:3a:0d:49:0a:d5:8b:53:d5:59:e3:9d:
69:7e:ae:bb:58:5e:51:fa:95:a6:ca:c6:1c:d4:e5:
2a:61:ce:27:70:5c:c3:b1:e3:ed:ac:74:0c:39:65:
ef:cf:c4:6f:ae:fa:c5:c6:f0:59:66:b8:fe:c9:b1:
33:94:69:6b:78:5c:51:bc:32:a6:30:20:30:d8:a7:
a8:9e:bc:53:20:fa:02:aa:a6:87:b2:43:de:f2:c9:
5f:a8:7f:66:e9:46:00:9e:22:b2:4a:c0:3d:11:19:
7e:43:6a:c2:fd:ab:b5:ec:cc:d8:59:ad:d1:c3:ba:
ce:1b:3e:3c:70:05:0c:b9:33:14:88:b1:07:83:1d:
2c:ef:0a:bf:2a:dc:1d:2a:f0:5b:24:47:dd:bd:27:
e7:9f:fb:2b:66:97:27:ba:f5:7e:1a:89:7d:68:fe:
5c:73:82:89:32:a0:ad:7c:bc:aa:06:dd:f1:73:80:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:C1:B2:3A:27:0E:0D:BB:30:D2:A9:CE:8C:25:76:5B:B9:2E:BF
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:51:07:2b:0a:45:e7:88:08:28:11:3d:7c:06:1d:8d:be:83:
fe:5e:6f:43:a0:e2:31:00:f4:9d:17:d6:20:86:08:1f:0e:4f:
b3:25:c5:96:d6:5e:31:bd:55:81:6c:aa:12:59:61:dc:3f:09:
6d:cd:63:91:db:4d:e3:ff:2d:2b:44:d4:1f:b0:6d:38:1d:a7:
77:27:41:0c:86:fa:62:fb:6b:3f:ec:aa:b2:4d:45:ae:d5:b6:
69:09:c4:7b:cf:91:1a:16:36:44:39:f2:53:0c:e8:74:4c:d2:
12:3c:03:10:eb:4f:17:8b:e3:5b:cc:52:dd:67:2c:82:8d:54:
33:28:a8:4c:61:23:05:b4:18:d1:80:30:80:cd:9a:97:8b:07:
e5:5b:96:91:2c:fa:60:f2:8f:94:25:e7:d6:7a:b9:5d:79:84:
39:44:18:4b:19:50:d8:2f:7d:ec:7d:64:5e:c4:7f:4a:43:c0:
19:6c:07:18:d9:5e:a1:94:37:9d:8b:77:a8:38:ba:b9:51:8e:
fa:eb:f1:75:27:cf:aa:26:f6:f9:5e:2e:86:b4:0a:a9:e9:a5:
22:c4:6d:dd:8f:18:dc:fd:51:fa:02:5f:9a:9c:fe:03:2f:22:
61:5d:35:4c:63:fc:ca:51:aa:9b:b3:59:b7:4a:7c:5c:d7:73:
c5:d1:ce:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjG7hv0kPzcFBcwY3JwhldvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5
MzFiYjkwHhcNMjUwODIwMTAwMjMwWhcNMjUwODIxMTAwMjMwWjAzMTEwLwYDVQQD
EyhhN2M4YzFiMjNhMjcwZTBkYmIzMGQyYTljZThjMjU3NjViYjkyZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt96qp0JhN0Fjn1jOIBQyrKrm81LS
y5G714RGVje3OqGIzeqhr3XVtcdM3i0RG5QVEgh4VAb7ed4tY1UOLfENjv0fBS/c
OmyXnh9y0qqxOg1JCtWLU9VZ451pfq67WF5R+pWmysYc1OUqYc4ncFzDsePtrHQM
OWXvz8RvrvrFxvBZZrj+ybEzlGlreFxRvDKmMCAw2KeonrxTIPoCqqaHskPe8slf
qH9m6UYAniKySsA9ERl+Q2rC/au17MzYWa3Rw7rOGz48cAUMuTMUiLEHgx0s7wq/
KtwdKvBbJEfdvSfnn/srZpcnuvV+Gol9aP5cc4KJMqCtfLyqBt3xc4CyzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfIwbI6Jw4NuzDSqc6MJXZbuS6/MB8GA1UdIwQY
MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt
M2IxMDNkNWE2OTBhLzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh
LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFEHKwpF
54gIKBE9fAYdjb6D/l5vQ6DiMQD0nRfWIIYIHw5PsyXFltZeMb1VgWyqEllh3D8J
bc1jkdtN4/8tK0TUH7BtOB2ndydBDIb6YvtrP+yqsk1FrtW2aQnEe8+RGhY2RDny
UwzodEzSEjwDEOtPF4vjW8xS3Wcsgo1UMyioTGEjBbQY0YAwgM2al4sH5VuWkSz6
YPKPlCXn1nq5XXmEOUQYSxlQ2C997H1kXsR/SkPAGWwHGNleoZQ3nYt3qDi6uVGO
+uvxdSfPqib2+V4uhrQKqemlIsRt3Y8Y3P1R+gJfmpz+Ay8iYV01TGP8ylGqm7NZ
t0p8XNdzxdHONA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:40:35 2025 by rpki-client