Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: u4VIQ2By6qIuIHXr1Uu4+TNWe5oShEdWO+RvmuSLIgQ=
Subject key identifier: 89:5B:0F:12:6F:BA:72:3F:F2:98:2E:19:FF:EA:AF:0F:3F:6E:05:10
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 019897B7912B249AB07785F8326BDB81C5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0C25
Signing time: Mon 11 Aug 2025 06:00:46 +0000
Manifest this update: Mon 11 Aug 2025 06:00:46 +0000
Manifest next update: Tue 12 Aug 2025 06:00:46 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: 7ZF5HZ/tLtSIj6ZN4joIqX5T44NGNiDrWEBJ3hsFrCU=)
2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:91:2b:24:9a:b0:77:85:f8:32:6b:db:81:c5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Aug 11 06:00:46 2025 GMT
Not After : Aug 12 06:00:46 2025 GMT
Subject: CN=895b0f126fba723ff2982e19ffeaaf0f3f6e0510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:29:66:f7:23:bd:23:76:54:00:ac:75:72:
68:09:42:bb:18:97:2b:09:42:28:3d:d7:32:5c:10:
b2:2a:5b:56:c7:c3:f5:af:89:16:32:9d:5f:d0:6c:
62:80:8a:74:9c:68:cd:e4:93:1c:60:e5:06:a8:c1:
80:8e:5f:34:9b:19:3e:06:91:22:87:94:01:23:de:
57:25:46:84:42:7d:58:b1:6f:1e:54:5f:ab:11:f2:
0f:63:22:24:e3:e1:e9:de:8e:55:ee:25:fd:0b:de:
0a:58:8b:8f:92:67:7c:77:20:b4:ff:54:54:7c:f2:
b3:7b:9c:da:b2:fb:9f:f9:1d:1e:1b:53:1c:46:38:
90:b6:8a:4e:02:28:7e:f2:a1:53:48:52:df:4d:75:
60:a0:25:37:a1:8c:a3:14:4f:8f:7a:1e:17:c9:90:
ad:2f:4e:6b:24:c9:d9:23:3e:0f:8d:84:58:29:9c:
2e:60:e3:c1:e7:a8:93:78:04:5a:8d:97:65:87:36:
34:f5:23:f4:6c:75:58:3c:90:51:01:e4:5d:c4:da:
ca:4b:58:17:55:bf:47:5c:67:2a:38:79:55:bc:4f:
bc:58:97:b4:85:14:6e:a6:0e:79:27:89:5a:3b:72:
02:af:0f:31:17:bf:cb:0b:a5:72:2e:77:91:47:8b:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:0F:12:6F:BA:72:3F:F2:98:2E:19:FF:EA:AF:0F:3F:6E:05:10
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:70:04:25:93:de:e8:33:9c:59:b4:60:73:0f:fa:33:eb:59:
b1:4b:3a:51:19:2e:f4:53:a3:f8:0c:8b:6c:77:0f:5a:bc:06:
4b:97:f4:20:98:d9:0b:d5:cc:b6:5c:ee:f0:e6:d7:6c:07:ac:
95:a0:43:0e:55:21:90:3b:2c:46:a7:c9:50:8b:dc:8c:99:a5:
e1:06:db:f2:58:f0:ae:cc:63:ea:e4:7e:7a:f2:68:f3:69:a1:
fb:f6:a5:a0:e7:9c:8c:7c:9b:35:58:76:1b:fa:81:e3:6c:d0:
3c:3a:8d:41:92:d4:c4:02:3c:b2:78:f1:29:bb:76:69:2f:8e:
3a:01:e9:89:bc:6e:10:a8:ff:66:95:75:c0:17:00:9c:11:f9:
02:ac:ed:fc:df:22:a5:1b:d1:a6:d2:e0:58:63:fc:95:99:d5:
19:10:69:8a:8f:08:f8:69:ac:b8:b7:8d:7b:1c:01:2d:dd:9c:
8d:6d:70:1c:ac:13:8d:de:14:fc:46:ef:3a:8d:f5:8a:d0:f6:
8b:a9:0c:7b:1f:0d:eb:d2:32:2c:1a:37:c5:a7:5e:fc:69:b5:
54:7d:05:0f:78:e9:4a:8d:5b:d1:38:73:43:41:2a:35:8c:05:
08:58:1d:10:83:8b:0c:a0:5d:ad:c2:02:16:26:4c:25:52:24:
b8:e3:75:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt5ErJJqwd4X4MmvbgcX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjgyNGI4NWFiYTdiYzM1MTJiMTIxNGIzODVkZTU3MGZi
Mjk0YmYwHhcNMjUwODExMDYwMDQ2WhcNMjUwODEyMDYwMDQ2WjAzMTEwLwYDVQQD
Eyg4OTViMGYxMjZmYmE3MjNmZjI5ODJlMTlmZmVhYWYwZjNmNmUwNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgwpZvcjvSN2VACsdXJoCUK7GJcr
CUIoPdcyXBCyKltWx8P1r4kWMp1f0GxigIp0nGjN5JMcYOUGqMGAjl80mxk+BpEi
h5QBI95XJUaEQn1YsW8eVF+rEfIPYyIk4+Hp3o5V7iX9C94KWIuPkmd8dyC0/1RU
fPKze5zasvuf+R0eG1McRjiQtopOAih+8qFTSFLfTXVgoCU3oYyjFE+Peh4XyZCt
L05rJMnZIz4PjYRYKZwuYOPB56iTeARajZdlhzY09SP0bHVYPJBRAeRdxNrKS1gX
Vb9HXGcqOHlVvE+8WJe0hRRupg55J4laO3ICrw8xF7/LC6VyLneRR4ue5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlbDxJvunI/8pguGf/qrw8/bgUQMB8GA1UdIwQY
MBaAFGG4JLhaunvDUSsSFLOF3lcPspS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAt
ZWE2ZWQyOWNhYjVlLzEvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAtZWE2ZWQyOWNhYjVl
LzEvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHAEJZPe
6DOcWbRgcw/6M+tZsUs6URku9FOj+AyLbHcPWrwGS5f0IJjZC9XMtlzu8ObXbAes
laBDDlUhkDssRqfJUIvcjJml4Qbb8ljwrsxj6uR+evJo82mh+/aloOecjHybNVh2
G/qB42zQPDqNQZLUxAI8snjxKbt2aS+OOgHpibxuEKj/ZpV1wBcAnBH5Aqzt/N8i
pRvRptLgWGP8lZnVGRBpio8I+GmsuLeNexwBLd2cjW1wHKwTjd4U/EbvOo31itD2
i6kMex8N69IyLBo3xade/Gm1VH0FD3jpSo1b0ThzQ0EqNYwFCFgdEIOLDKBdrcIC
FiZMJVIkuON1WQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:57 2025 by rpki-client