Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json)
Hash identifier: 0SdJ+WRWOdOffw3jiuTPAC35sKXi18WSMusngrH+jQo=
Subject key identifier: 4A:14:9E:CB:FB:F3:95:7D:26:60:CA:13:E4:4E:55:50:C8:97:78:57
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 0199221F5427C2FA583B9BE9398907A6D8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
Manifest number: 0E1E
Signing time: Sun 07 Sep 2025 03:01:42 +0000
Manifest this update: Sun 07 Sep 2025 03:01:42 +0000
Manifest next update: Mon 08 Sep 2025 03:01:42 +0000
Files and hashes: 1: n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa (hash: yrWbMC7j+dM+coJf76N3ZfAw2TV7juT6B31o0/J59Ds=)
2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: whKE1mUHYgIT1EKGCWbTkYtjd5t73v4KHthQJ57dA/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:54:27:c2:fa:58:3b:9b:e9:39:89:07:a6:d8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Sep 7 03:01:42 2025 GMT
Not After : Sep 8 03:01:42 2025 GMT
Subject: CN=4a149ecbfbf3957d2660ca13e44e5550c8977857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:94:34:bb:1f:e0:b1:b0:4b:06:60:6a:c4:
cf:db:27:d0:37:30:ce:11:cc:10:53:97:2a:d0:4e:
31:a8:87:69:75:7c:28:f0:ea:65:f6:65:ac:53:78:
a4:1c:37:bd:c7:be:a5:94:6b:54:03:68:0e:e1:1b:
70:b1:e2:61:4c:2f:ba:6f:5b:28:0c:08:3b:0c:42:
d8:4b:44:2f:bd:fa:c2:21:29:bb:7a:fa:27:9a:25:
38:95:95:03:3c:60:cb:bf:98:75:04:dc:5d:0a:97:
7d:7e:71:50:f3:d5:87:1f:21:4f:3d:13:9e:0a:1e:
2a:e6:e6:57:71:ca:46:3d:c7:16:b4:55:ef:c1:3b:
ec:f1:2e:13:e0:ac:fd:0b:b4:32:20:ed:b8:27:49:
bf:7e:5d:2e:b8:c5:3d:1e:c7:1c:29:f8:1e:86:b1:
c9:4c:e2:77:7c:90:8b:08:71:4d:43:91:34:2d:16:
0d:1a:8e:a3:bb:d3:0e:8e:4e:75:4b:ac:3c:05:bf:
d9:8a:d2:c7:3f:cc:c3:0a:04:ed:10:1b:e8:31:ff:
ff:99:1f:5b:cc:bf:92:f5:75:8c:88:4a:c7:e4:f5:
bc:e3:2a:27:49:d2:d2:43:a9:eb:09:ee:34:69:89:
55:36:54:d5:4f:d0:64:9f:bb:4a:d7:7a:44:b5:b4:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:9E:CB:FB:F3:95:7D:26:60:CA:13:E4:4E:55:50:C8:97:78:57
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:8d:65:10:e7:a6:41:c7:59:97:26:0f:6f:de:3a:fa:f6:
4c:7c:38:ae:f0:df:63:7e:ee:c0:2c:0e:c6:aa:38:7a:be:32:
47:dc:c3:85:6a:7a:fb:0f:56:d0:a2:8d:20:5c:17:21:95:89:
4f:73:d4:f5:e3:ee:a6:7e:12:d8:03:c6:1d:e8:ed:2b:b2:1b:
29:f1:e0:07:e2:50:27:30:6c:3e:f7:fc:08:ce:35:a5:85:ef:
43:be:4b:67:c1:7f:a4:59:df:25:b7:e8:e1:da:d2:0e:58:40:
c4:51:2d:23:97:b4:66:7c:2b:07:62:ed:8b:f3:c7:5d:3c:8d:
93:91:43:76:9f:d6:fc:35:1c:c9:f3:bb:3c:32:71:5e:15:3c:
37:47:57:55:a9:6c:3b:7f:ae:55:45:20:0a:e4:d7:20:88:54:
12:3a:ba:65:09:41:a3:6c:e7:fe:a6:19:7c:8a:ee:34:84:4e:
11:49:a2:ed:11:37:ce:dd:c1:b3:b8:5c:f0:d5:0e:11:1b:54:
0c:2d:be:c8:40:c9:bc:e2:0e:76:ae:e6:21:64:64:f9:e8:29:
d8:d4:90:ff:ac:40:a0:50:4a:27:19:a9:be:4d:06:0f:03:f4:
f8:bb:f0:a6:35:5f:89:6a:61:ed:91:d0:4e:c8:2d:71:40:2c:
9c:55:50:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiH1QnwvpYO5vpOYkHptjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTVkNWMwY2QyMTQ2YmFhZmU4YWE2YjhiOWFhN2NlYjZl
NDE3NWEwHhcNMjUwOTA3MDMwMTQyWhcNMjUwOTA4MDMwMTQyWjAzMTEwLwYDVQQD
Eyg0YTE0OWVjYmZiZjM5NTdkMjY2MGNhMTNlNDRlNTU1MGM4OTc3ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBiUNLsf4LGwSwZgasTP2yfQNzDO
EcwQU5cq0E4xqIdpdXwo8Opl9mWsU3ikHDe9x76llGtUA2gO4RtwseJhTC+6b1so
DAg7DELYS0QvvfrCISm7evonmiU4lZUDPGDLv5h1BNxdCpd9fnFQ89WHHyFPPROe
Ch4q5uZXccpGPccWtFXvwTvs8S4T4Kz9C7QyIO24J0m/fl0uuMU9HsccKfgehrHJ
TOJ3fJCLCHFNQ5E0LRYNGo6ju9MOjk51S6w8Bb/ZitLHP8zDCgTtEBvoMf//mR9b
zL+S9XWMiErH5PW84yonSdLSQ6nrCe40aYlVNlTVT9Bkn7tK13pEtbTA+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoUnsv785V9JmDKE+ROVVDIl3hXMB8GA1UdIwQY
MBaAFMgV1cDNIUa6r+iqa4uap8625BdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJYVndNMGhScnF2Nktwcmk1cW56cmJrRjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wZWVjZWYtYWU4Zi00YmY5LWFiNWUt
NTI0NzY0YTQwZTIyLzEveUJYVndNMGhScnF2Nktwcmk1cW56cmJrRjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wZWVjZWYtYWU4Zi00YmY5LWFiNWUtNTI0NzY0YTQwZTIy
LzEveUJYVndNMGhScnF2Nktwcmk1cW56cmJrRjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMKNZRDn
pkHHWZcmD2/eOvr2THw4rvDfY37uwCwOxqo4er4yR9zDhWp6+w9W0KKNIFwXIZWJ
T3PU9ePupn4S2APGHejtK7IbKfHgB+JQJzBsPvf8CM41pYXvQ75LZ8F/pFnfJbfo
4drSDlhAxFEtI5e0ZnwrB2Lti/PHXTyNk5FDdp/W/DUcyfO7PDJxXhU8N0dXVals
O3+uVUUgCuTXIIhUEjq6ZQlBo2zn/qYZfIruNIROEUmi7RE3zt3Bs7hc8NUOERtU
DC2+yEDJvOIOdq7mIWRk+egp2NSQ/6xAoFBKJxmpvk0GDwP0+LvwpjVfiWph7ZHQ
TsgtcUAsnFVQow==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:46 2025 by rpki-client