
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: IhHbO6up/amePJIq2E+B+xe/5j5Wu7gopYDvhpKYU7M=
Subject key identifier: DF:36:37:81:75:83:F2:A2:EE:DE:09:1A:57:FD:A3:78:4C:4F:ED:DC
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 019880C1CDEC886F7B10BFDFFE53B3041CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0D8B
Signing time: Wed 06 Aug 2025 19:00:41 +0000
Manifest this update: Wed 06 Aug 2025 19:00:41 +0000
Manifest next update: Thu 07 Aug 2025 19:00:41 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: cmAWuGZvbJP32LOkanHK2cPO10mAK1128p35yovMHmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:cd:ec:88:6f:7b:10:bf:df:fe:53:b3:04:1c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Aug 6 19:00:41 2025 GMT
Not After : Aug 7 19:00:41 2025 GMT
Subject: CN=df3637817583f2a2eede091a57fda3784c4feddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:89:7f:54:0e:c5:b5:62:d7:17:a9:f7:a6:
8a:d0:43:85:70:8b:a4:57:9b:5b:fc:a0:7a:5e:b2:
e9:70:4b:00:49:d4:6a:e1:7e:40:6d:ca:e1:6c:ff:
80:bc:49:bb:99:b0:7c:ff:fc:43:eb:3c:20:b3:df:
d4:80:14:3f:bd:bd:f5:f9:a9:e4:20:b2:02:36:b3:
c8:d0:43:af:13:13:d2:6e:33:7c:6a:b0:18:94:65:
24:8d:33:b2:c7:14:43:37:65:2f:7f:56:11:4e:cc:
62:78:1c:0f:28:71:e1:90:a5:06:25:89:16:47:c2:
02:ec:e9:bc:06:2c:21:55:0c:e7:11:a9:e4:8c:e5:
29:7a:e6:c1:6d:2b:19:71:18:37:f5:ab:79:5a:03:
b2:f7:7a:0b:ee:b2:1f:70:54:7e:8a:b6:b5:64:a8:
60:ab:94:05:31:0e:81:b1:80:d0:45:10:e6:e8:3b:
03:34:f8:a1:5a:eb:c9:86:a8:20:3d:27:85:2c:60:
4d:7a:26:27:26:ca:c5:62:1f:9e:11:79:09:67:20:
07:84:2b:97:95:06:f7:29:05:1f:51:b0:80:af:05:
95:16:e6:c2:27:36:0a:99:1d:b9:e4:15:bb:fb:92:
50:29:e9:31:57:19:29:07:57:98:bc:6c:d3:03:52:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:37:81:75:83:F2:A2:EE:DE:09:1A:57:FD:A3:78:4C:4F:ED:DC
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:03:16:14:fc:c6:f1:9a:2c:48:bf:36:43:ff:20:ac:a0:90:
b6:19:52:62:cd:5b:64:9f:3e:58:ea:b6:21:6e:4d:46:7b:cd:
dd:6a:8a:30:e8:63:bd:88:d6:df:4c:f2:ac:d6:b7:0c:27:31:
d7:cb:e0:8f:a3:0a:c0:a0:25:ab:22:f1:79:1e:5e:24:ce:a6:
ac:31:7f:80:87:ba:12:66:97:80:6a:6f:e7:1c:6f:69:04:2f:
7a:8b:a9:72:ee:c4:99:01:e4:34:67:df:dd:c9:f4:26:e8:0d:
04:91:30:91:ab:81:f3:89:d4:db:1f:74:7b:78:ff:d5:34:ed:
ad:aa:c8:1f:02:7c:31:a6:41:9c:f1:f7:6b:1f:15:e0:7e:91:
27:6c:4b:1f:53:d0:64:e0:cb:8e:d5:03:e8:13:e8:7d:80:1f:
b8:5b:87:46:c5:11:36:f4:b8:58:32:49:8e:30:b5:54:b8:05:
ff:5b:91:a9:2b:22:0a:4d:cd:1c:36:5d:5a:f4:10:ad:ca:ce:
d4:7e:e4:0b:29:40:7d:c6:6f:f2:02:76:2b:bc:00:10:ea:5a:
0d:51:37:a9:d9:9b:4a:7e:23:67:e8:6a:4c:6b:0c:dd:e0:a3:
db:9e:5f:00:43:02:1d:70:11:95:b7:21:97:4e:50:5e:db:03:
f2:d8:0e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwc3siG97EL/f/lOzBBzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGEyZmY1YTc3ZTc4ZWVjMzAzM2RkYTU3NDlhNGE4YzFl
NTUxNjQwHhcNMjUwODA2MTkwMDQxWhcNMjUwODA3MTkwMDQxWjAzMTEwLwYDVQQD
EyhkZjM2Mzc4MTc1ODNmMmEyZWVkZTA5MWE1N2ZkYTM3ODRjNGZlZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCGJf1QOxbVi1xep96aK0EOFcIuk
V5tb/KB6XrLpcEsASdRq4X5AbcrhbP+AvEm7mbB8//xD6zwgs9/UgBQ/vb31+ank
ILICNrPI0EOvExPSbjN8arAYlGUkjTOyxxRDN2Uvf1YRTsxieBwPKHHhkKUGJYkW
R8IC7Om8BiwhVQznEankjOUpeubBbSsZcRg39at5WgOy93oL7rIfcFR+ira1ZKhg
q5QFMQ6BsYDQRRDm6DsDNPihWuvJhqggPSeFLGBNeiYnJsrFYh+eEXkJZyAHhCuX
lQb3KQUfUbCArwWVFubCJzYKmR255BW7+5JQKekxVxkpB1eYvGzTA1K07QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN82N4F1g/Ki7t4JGlf9o3hMT+3cMB8GA1UdIwQY
MBaAFMnaL/WnfnjuwwM92ldJpKjB5VFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMt
NmMwNGE2ZWQxM2M1LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMtNmMwNGE2ZWQxM2M1
LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAMWFPzG
8ZosSL82Q/8grKCQthlSYs1bZJ8+WOq2IW5NRnvN3WqKMOhjvYjW30zyrNa3DCcx
18vgj6MKwKAlqyLxeR5eJM6mrDF/gIe6EmaXgGpv5xxvaQQveoupcu7EmQHkNGff
3cn0JugNBJEwkauB84nU2x90e3j/1TTtrarIHwJ8MaZBnPH3ax8V4H6RJ2xLH1PQ
ZODLjtUD6BPofYAfuFuHRsURNvS4WDJJjjC1VLgF/1uRqSsiCk3NHDZdWvQQrcrO
1H7kCylAfcZv8gJ2K7wAEOpaDVE3qdmbSn4jZ+hqTGsM3eCj255fAEMCHXARlbch
l05QXtsD8tgOmw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:26 2025 by rpki-client