Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: asEMc4Fvo+fOsgc+fMyuV8XgheCcHs34Qggm3RBFDWI=
Subject key identifier: A4:CA:C4:EB:64:AD:9E:DA:2C:6B:2E:88:82:59:1E:B1:D2:0E:AD:3A
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 0198C6EE0F15E0D70807C46550E4F32CB5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 14DD
Signing time: Wed 20 Aug 2025 10:02:26 +0000
Manifest this update: Wed 20 Aug 2025 10:02:26 +0000
Manifest next update: Thu 21 Aug 2025 10:02:26 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: 7iZpSgtIiML3UZWrQCNwq8/aTY0sNM1dGpf9SuLcOYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ee:0f:15:e0:d7:08:07:c4:65:50:e4:f3:2c:b5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Aug 20 10:02:26 2025 GMT
Not After : Aug 21 10:02:26 2025 GMT
Subject: CN=a4cac4eb64ad9eda2c6b2e8882591eb1d20ead3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:60:1b:cc:c9:65:5d:55:1b:81:74:16:ee:
0c:83:70:64:af:0a:ee:db:97:46:da:7a:00:96:e3:
69:13:8c:43:70:70:e2:a7:c8:a8:21:b1:f4:01:0e:
b3:5f:4a:1c:22:66:42:2c:75:95:e5:f9:46:76:01:
c0:3b:31:0f:78:cc:2b:b0:ff:96:17:95:27:de:41:
89:fe:b6:16:7c:e5:5f:2d:d6:cd:a6:18:e0:49:4b:
43:66:a2:f0:a3:db:0e:8c:14:27:38:b9:1e:f5:15:
5d:2c:21:c3:3e:7f:14:84:65:57:03:25:58:bf:1e:
af:f8:5f:1c:e8:f3:d2:9f:91:ae:24:26:98:b9:c8:
3c:f3:54:7d:a9:fd:5f:4c:dd:07:d3:98:4f:bd:70:
5c:65:e1:3a:f6:39:47:13:dc:87:c6:6f:6b:9c:63:
10:06:71:f1:68:b6:ec:a5:37:b0:bf:4b:4f:49:27:
1d:89:5e:c7:35:72:9a:64:1f:57:8b:e9:a7:f4:00:
34:a5:9b:61:83:37:88:c7:15:12:8b:68:4b:a7:87:
73:70:30:12:7d:25:0d:20:ef:ca:cc:34:8b:3d:59:
82:14:3b:a4:ff:87:08:95:12:80:f6:0e:fc:21:1a:
5b:47:8c:15:d3:31:72:73:e0:47:64:db:f6:e0:f2:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CA:C4:EB:64:AD:9E:DA:2C:6B:2E:88:82:59:1E:B1:D2:0E:AD:3A
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f4:1e:83:10:18:c6:c8:21:7e:e3:50:f4:64:80:69:c1:2a:
dd:d7:27:27:85:76:f6:5a:b2:58:b8:49:22:24:79:9b:1f:89:
5e:47:06:00:75:8e:4a:7c:cf:d7:ff:af:82:58:3f:3a:19:6c:
a1:f6:f2:bf:78:b9:50:07:00:a1:22:88:c0:4d:76:a8:a6:86:
ac:55:c4:e5:87:f7:9f:57:f0:ec:de:3a:ac:c6:56:62:be:c8:
af:ae:48:3f:49:af:45:d7:ff:85:c6:36:56:78:41:73:90:15:
30:46:08:8c:08:44:d1:19:9a:e3:eb:16:91:a1:ef:ce:ff:6b:
87:57:17:aa:6c:31:e5:c7:93:b2:02:4c:15:5a:16:53:1c:6a:
18:66:7c:08:fd:c6:93:e4:f6:92:f6:64:68:23:6a:da:1d:e3:
ad:8d:c9:c2:98:a2:f8:06:89:6e:41:f6:e0:1c:f0:d0:eb:be:
e7:00:2a:d9:11:b2:26:12:4a:a2:fc:1a:97:b1:03:72:fa:2b:
78:a0:c9:ea:45:8f:bb:b5:ce:c5:9b:48:07:bf:79:78:8e:af:
5a:44:62:a8:af:63:21:32:35:68:06:39:96:e2:86:6e:bd:a5:
c3:11:c3:1a:46:67:ba:53:dc:a4:2f:4e:34:c6:58:84:48:3d:
55:ca:00:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjG7g8V4NcIB8RlUOTzLLW7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNDc5MjFlNDQzMDUyMWE3NzI3ODg4YzEzYmM3YjhlMTA0
Y2JkYmUwHhcNMjUwODIwMTAwMjI2WhcNMjUwODIxMTAwMjI2WjAzMTEwLwYDVQQD
EyhhNGNhYzRlYjY0YWQ5ZWRhMmM2YjJlODg4MjU5MWViMWQyMGVhZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGFgG8zJZV1VG4F0Fu4Mg3Bkrwru
25dG2noAluNpE4xDcHDip8ioIbH0AQ6zX0ocImZCLHWV5flGdgHAOzEPeMwrsP+W
F5Un3kGJ/rYWfOVfLdbNphjgSUtDZqLwo9sOjBQnOLke9RVdLCHDPn8UhGVXAyVY
vx6v+F8c6PPSn5GuJCaYucg881R9qf1fTN0H05hPvXBcZeE69jlHE9yHxm9rnGMQ
BnHxaLbspTewv0tPSScdiV7HNXKaZB9Xi+mn9AA0pZthgzeIxxUSi2hLp4dzcDAS
fSUNIO/KzDSLPVmCFDuk/4cIlRKA9g78IRpbR4wV0zFyc+BHZNv24PLE3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTKxOtkrZ7aLGsuiIJZHrHSDq06MB8GA1UdIwQY
MBaAFMpHkh5EMFIadyeIjBO8e44QTL2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2It
ODNlNTVjNWY2ZjdkLzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2ItODNlNTVjNWY2Zjdk
LzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/QegxAY
xsghfuNQ9GSAacEq3dcnJ4V29lqyWLhJIiR5mx+JXkcGAHWOSnzP1/+vglg/Ohls
ofbyv3i5UAcAoSKIwE12qKaGrFXE5Yf3n1fw7N46rMZWYr7Ir65IP0mvRdf/hcY2
VnhBc5AVMEYIjAhE0Rma4+sWkaHvzv9rh1cXqmwx5ceTsgJMFVoWUxxqGGZ8CP3G
k+T2kvZkaCNq2h3jrY3Jwpii+AaJbkH24Bzw0Ou+5wAq2RGyJhJKovwal7EDcvor
eKDJ6kWPu7XOxZtIB795eI6vWkRiqK9jITI1aAY5luKGbr2lwxHDGkZnulPcpC9O
NMZYhEg9VcoA8A==
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:44:03 2025 by rpki-client