Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: iHCB2EzIIMSKOi7crAuzbv4l1/pKQdTsZXTbqip1EhM=
Subject key identifier: 31:51:7F:83:62:DC:D9:EF:EA:C5:36:42:0A:08:97:A4:78:CD:B4:A8
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 019921B08F8DEABB6D16F46EF3990722162D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 0471
Signing time: Sun 07 Sep 2025 01:00:43 +0000
Manifest this update: Sun 07 Sep 2025 01:00:43 +0000
Manifest next update: Mon 08 Sep 2025 01:00:43 +0000
Files and hashes: 1: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (hash: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: LKeWCq57IClc6vu1oRGghy+Bx4aGX3lxBJ16nc1XXaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:8f:8d:ea:bb:6d:16:f4:6e:f3:99:07:22:16:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Sep 7 01:00:43 2025 GMT
Not After : Sep 8 01:00:43 2025 GMT
Subject: CN=31517f8362dcd9efeac536420a0897a478cdb4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:4a:a5:e0:b3:e8:20:dc:a7:76:16:3b:08:
b0:6e:c1:b4:37:e7:88:cd:dd:bf:61:93:b7:f8:ee:
11:3b:6e:60:7e:93:22:43:e8:ce:27:77:73:88:c0:
de:76:f6:ed:4b:66:66:2b:21:22:0a:97:cb:e3:53:
9d:8c:c0:01:83:46:89:b0:ee:e6:45:87:96:c9:96:
29:53:36:14:00:0d:ca:ec:e5:50:3f:a8:89:b1:43:
76:f5:55:84:c4:0e:0d:82:50:72:4e:38:8f:14:76:
8f:dd:5c:84:63:fa:e6:27:4b:84:e7:2e:da:fc:50:
2a:3a:74:53:4c:1e:98:13:37:03:0c:31:3d:05:a4:
82:f7:cc:d4:6a:69:db:a3:ac:f6:08:81:e2:e2:e5:
9e:29:7e:a4:51:00:f1:e2:45:46:91:24:57:7a:fa:
13:22:e7:31:d5:ae:80:70:6a:28:97:fe:07:e2:b8:
98:ce:9d:3e:ba:68:66:69:3d:bd:96:f3:3e:0a:e7:
6e:21:87:0f:20:b8:7e:49:49:fa:af:8e:7e:b5:78:
94:56:e0:fa:28:68:2d:51:6a:ef:b7:07:5b:71:8f:
d3:b1:4d:b6:f6:0c:59:ab:c3:33:94:b1:e9:0d:b2:
38:47:0e:7d:90:da:42:c9:19:59:fd:02:06:72:67:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:51:7F:83:62:DC:D9:EF:EA:C5:36:42:0A:08:97:A4:78:CD:B4:A8
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2d:84:76:57:1f:c1:57:16:81:e4:55:59:14:23:2f:eb:87:
f5:e9:d1:65:99:67:f7:32:6e:90:82:83:a8:6d:17:c8:71:2b:
86:17:c8:14:b2:73:ef:0a:f6:88:da:8d:88:db:64:b3:90:b9:
ce:b9:4e:62:6a:51:b7:79:49:ec:da:96:96:bf:b4:f4:ec:b5:
74:cd:07:fc:45:da:42:a0:3a:5d:7b:2a:b9:52:d0:0b:9d:32:
10:24:86:42:ce:d8:21:e5:2b:13:87:07:8d:38:af:b7:56:58:
f1:ca:b3:18:3a:c9:1b:00:fc:d2:01:a1:6a:fb:f9:a0:0c:43:
30:b6:82:19:3d:91:e6:ba:19:c8:5a:19:2f:e0:50:e1:cf:37:
13:92:0a:e5:69:74:6c:23:2c:c6:4a:5c:49:69:d5:81:e2:67:
96:d2:7f:b0:1d:0f:eb:03:ab:26:1e:4e:c2:20:32:47:ac:76:
ef:ce:79:dc:39:ce:46:6f:43:65:4a:f5:ec:6d:5c:01:3b:95:
7b:e3:e3:cd:ab:b6:e5:16:74:a6:ac:78:21:1f:71:da:8b:29:
41:4b:6d:0a:5c:c2:17:c0:0f:00:a4:bc:97:bd:5b:0c:ca:87:
b8:34:3d:03:6e:01:42:af:e8:59:35:42:cf:35:3c:c7:59:be:
09:b7:d4:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsI+N6rttFvRu85kHIhYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjk2ODhlMTc2Y2YzODY0MzZkN2JiODhkM2E0MDViNDZk
MGUyYjkwHhcNMjUwOTA3MDEwMDQzWhcNMjUwOTA4MDEwMDQzWjAzMTEwLwYDVQQD
EygzMTUxN2Y4MzYyZGNkOWVmZWFjNTM2NDIwYTA4OTdhNDc4Y2RiNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlFKpeCz6CDcp3YWOwiwbsG0N+eI
zd2/YZO3+O4RO25gfpMiQ+jOJ3dziMDedvbtS2ZmKyEiCpfL41OdjMABg0aJsO7m
RYeWyZYpUzYUAA3K7OVQP6iJsUN29VWExA4NglByTjiPFHaP3VyEY/rmJ0uE5y7a
/FAqOnRTTB6YEzcDDDE9BaSC98zUamnbo6z2CIHi4uWeKX6kUQDx4kVGkSRXevoT
Iucx1a6AcGool/4H4riYzp0+umhmaT29lvM+CuduIYcPILh+SUn6r45+tXiUVuD6
KGgtUWrvtwdbcY/TsU229gxZq8MzlLHpDbI4Rw59kNpCyRlZ/QIGcmfwgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFRf4Ni3Nnv6sU2QgoIl6R4zbSoMB8GA1UdIwQY
MBaAFMr5aI4XbPOGQ217uI06QFtG0OK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iNGFhZjYtMTBmNC00MTcxLWFjNWEt
YWIwYzFjNDQyZjVkLzEveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iNGFhZjYtMTBmNC00MTcxLWFjNWEtYWIwYzFjNDQyZjVk
LzEveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhC2Edlcf
wVcWgeRVWRQjL+uH9enRZZln9zJukIKDqG0XyHErhhfIFLJz7wr2iNqNiNtks5C5
zrlOYmpRt3lJ7NqWlr+09Oy1dM0H/EXaQqA6XXsquVLQC50yECSGQs7YIeUrE4cH
jTivt1ZY8cqzGDrJGwD80gGhavv5oAxDMLaCGT2R5roZyFoZL+BQ4c83E5IK5Wl0
bCMsxkpcSWnVgeJnltJ/sB0P6wOrJh5OwiAyR6x278553DnORm9DZUr17G1cATuV
e+Pjzau25RZ0pqx4IR9x2ospQUttClzCF8APAKS8l71bDMqHuDQ9A24BQq/oWTVC
zzU8x1m+CbfU8g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:24 2025 by rpki-client