Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier: D38v3jButAqyBaKcRCc5qtr6e87Qnx7853bschCp/S8=
Subject key identifier: 91:C0:72:CD:0F:6A:4A:77:06:52:84:91:FD:6F:21:CD:04:C6:34:F5
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 019923316618DF8519D6D920B68B0C3E3854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number: 13B9
Signing time: Sun 07 Sep 2025 08:01:03 +0000
Manifest this update: Sun 07 Sep 2025 08:01:03 +0000
Manifest next update: Mon 08 Sep 2025 08:01:03 +0000
Files and hashes: 1: GEnuOQleBBUDKJ-4Y-M3IyBH42g.roa (hash: OrN9ZjjDEjR1Mar15xKYXAUpkqA7O1AMRBJLOwwo76o=)
2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: c4axiFbvS9dp5kHSsBtmB+xsb8xiTznetjGlMAoxuzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:66:18:df:85:19:d6:d9:20:b6:8b:0c:3e:38:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: Sep 7 08:01:03 2025 GMT
Not After : Sep 8 08:01:03 2025 GMT
Subject: CN=91c072cd0f6a4a7706528491fd6f21cd04c634f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:e1:65:1e:5b:7c:64:4f:37:6b:a7:73:4a:
b9:5e:77:a1:38:3d:c2:0c:d2:94:59:24:ca:4b:aa:
45:77:80:7e:1c:c5:53:ab:af:77:b8:04:2e:b1:81:
d1:4e:9a:4a:72:14:86:eb:6f:15:19:4a:69:16:a5:
38:0b:1b:b7:5b:cf:aa:a3:37:a5:25:87:9e:f6:fe:
3a:50:20:05:5e:aa:5d:79:4d:09:8d:d3:c9:c1:a6:
67:d9:cc:02:93:5b:9e:01:f5:d4:70:f8:c0:8f:d9:
b7:00:4f:33:9a:48:9d:b6:5f:07:ba:50:e1:43:5f:
1d:d2:a3:e1:35:78:a4:31:bc:6a:6b:a6:50:9e:13:
ad:56:45:23:c7:c0:4d:2d:ad:f2:0a:d4:da:14:cf:
da:59:0c:88:38:8b:66:58:3b:e7:35:cb:59:ce:b8:
9b:6b:5b:12:eb:f4:26:01:56:60:ea:7a:5b:8c:d8:
18:94:b7:0a:92:bd:ec:c2:33:d1:82:ec:d1:6c:ad:
6f:f6:18:96:00:ee:c9:ad:36:6f:94:78:56:18:77:
8e:e9:6b:e0:fe:91:35:c5:ed:64:81:a7:1f:14:fe:
43:9e:0a:6b:72:2c:5e:81:b7:0a:77:6f:be:7f:9e:
cc:5f:7f:1d:82:3c:ad:12:9e:f1:65:44:96:c4:a8:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:72:CD:0F:6A:4A:77:06:52:84:91:FD:6F:21:CD:04:C6:34:F5
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:92:d4:60:dd:44:bb:2f:14:34:9d:ea:c9:7e:b9:80:66:b3:
5c:a4:07:21:3c:5f:fb:dd:40:e2:bf:cb:b6:6f:0a:ea:b4:60:
37:36:c4:8a:f2:66:f1:bb:a6:f2:8d:08:79:4e:e1:c8:d3:af:
34:f5:66:c1:75:16:28:c2:bc:60:a1:fc:23:e4:cd:e4:d2:82:
fa:2c:2f:e3:9b:f0:01:b9:e1:97:79:d2:1d:d7:ce:e8:5f:3f:
6a:b8:cd:e4:8a:6f:ed:2e:5f:98:ec:b1:e9:f0:8c:92:75:3a:
b5:66:cf:9e:b4:a1:d3:a2:4a:e6:74:4a:51:dc:32:d4:8e:d6:
6a:31:2a:95:96:81:7d:19:4e:cb:2c:f8:3e:84:40:11:33:e0:
80:a2:e4:06:72:b8:46:50:c9:7b:8a:57:03:3f:69:72:55:f2:
cb:9f:b8:6f:6f:3f:9e:a3:00:a0:6e:35:7d:cc:f2:61:15:8c:
12:75:ef:ee:e7:02:dd:c5:84:f0:a7:e4:50:f7:08:3d:18:5d:
f3:d1:c3:80:8b:27:e4:db:64:37:cc:c5:10:9e:de:3d:f6:17:
51:19:91:dc:69:ba:22:22:6f:80:2c:31:96:d3:84:4f:02:38:
0f:36:2b:1f:4a:84:b8:8d:ab:d4:b6:7f:e6:a9:87:61:3d:d7:
74:4a:6f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMWYY34UZ1tkgtosMPjhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYWVlNTc5ZTAxMzIxOGY1NzEzODY0MTNlMmM1YjJiYzI0
NWE4MzYwHhcNMjUwOTA3MDgwMTAzWhcNMjUwOTA4MDgwMTAzWjAzMTEwLwYDVQQD
Eyg5MWMwNzJjZDBmNmE0YTc3MDY1Mjg0OTFmZDZmMjFjZDA0YzYzNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mLhZR5bfGRPN2unc0q5XnehOD3C
DNKUWSTKS6pFd4B+HMVTq693uAQusYHRTppKchSG628VGUppFqU4Cxu3W8+qozel
JYee9v46UCAFXqpdeU0JjdPJwaZn2cwCk1ueAfXUcPjAj9m3AE8zmkidtl8HulDh
Q18d0qPhNXikMbxqa6ZQnhOtVkUjx8BNLa3yCtTaFM/aWQyIOItmWDvnNctZzrib
a1sS6/QmAVZg6npbjNgYlLcKkr3swjPRguzRbK1v9hiWAO7JrTZvlHhWGHeO6Wvg
/pE1xe1kgacfFP5DngprcixegbcKd2++f57MX38dgjytEp7xZUSWxKgsdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHAcs0Pakp3BlKEkf1vIc0ExjT1MB8GA1UdIwQY
MBaAFMqu5XngEyGPVxOGQT4sWyvCRag2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQt
YTVkMTE0OGYyNWJkLzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQtYTVkMTE0OGYyNWJk
LzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepLUYN1E
uy8UNJ3qyX65gGazXKQHITxf+91A4r/Ltm8K6rRgNzbEivJm8bum8o0IeU7hyNOv
NPVmwXUWKMK8YKH8I+TN5NKC+iwv45vwAbnhl3nSHdfO6F8/arjN5Ipv7S5fmOyx
6fCMknU6tWbPnrSh06JK5nRKUdwy1I7WajEqlZaBfRlOyyz4PoRAETPggKLkBnK4
RlDJe4pXAz9pclXyy5+4b28/nqMAoG41fczyYRWMEnXv7ucC3cWE8KfkUPcIPRhd
89HDgIsn5NtkN8zFEJ7ePfYXURmR3Gm6IiJvgCwxltOETwI4DzYrH0qEuI2r1LZ/
5qmHYT3XdEpv8w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:25 2025 by rpki-client