Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: eEcCEPaj43V6jJ7wpya2+bcRqPUQP7U3rZLi1zz/Mjo=
Subject key identifier: 72:CA:4B:62:51:E4:39:EB:48:01:1B:5C:CE:5B:CB:03:DA:2E:3C:39
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 019873E2877D4CAE47CA64B0210B997ECE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0A3A
Signing time: Mon 04 Aug 2025 07:01:22 +0000
Manifest this update: Mon 04 Aug 2025 07:01:22 +0000
Manifest next update: Tue 05 Aug 2025 07:01:22 +0000
Files and hashes: 1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: iVU072ghuXKzu8/s02sKtAw3G4QobQQBKyR+rjo9qsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:87:7d:4c:ae:47:ca:64:b0:21:0b:99:7e:ce:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Aug 4 07:01:22 2025 GMT
Not After : Aug 5 07:01:22 2025 GMT
Subject: CN=72ca4b6251e439eb48011b5cce5bcb03da2e3c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:8b:c6:82:6f:ea:1c:d9:1b:27:d7:cf:55:
72:33:ee:8f:8b:7b:c8:21:02:6e:a9:e0:bd:75:e8:
f9:21:d7:51:92:f9:7e:77:89:29:0d:ac:0c:3f:26:
95:c9:c1:de:41:45:0c:fc:8c:69:7f:c4:1c:d9:d5:
7c:0f:67:69:61:7a:33:f5:0b:3e:bf:44:0e:72:cd:
0e:62:4e:54:cf:14:70:f3:e0:72:0e:39:07:37:b3:
17:ff:72:84:c7:5c:0d:25:50:d0:60:d8:5b:9e:0a:
2a:db:a8:9f:76:30:c3:67:eb:60:79:5a:70:e8:e2:
a1:4a:4d:9e:07:86:3d:1c:d8:86:af:94:1f:ac:6d:
9b:f6:03:c4:31:4f:b6:cb:db:cc:a7:cc:5a:bb:84:
1f:28:c3:87:75:f0:6b:a6:ee:e8:80:5b:02:e0:9e:
4e:6b:77:8d:09:7b:94:d7:ba:a3:90:be:39:7a:f3:
ba:cb:e2:72:3a:be:7c:3c:83:78:b1:6d:3a:36:10:
85:dc:8f:db:d6:af:64:68:a6:f2:c0:6a:55:a1:b5:
b1:66:66:22:21:5c:32:a9:b3:be:ad:0b:5f:eb:45:
e8:5d:0a:40:8b:71:3d:9c:f5:07:f8:d4:03:01:b0:
0e:f1:35:75:cf:9f:3c:be:6b:22:d4:6d:dd:62:30:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CA:4B:62:51:E4:39:EB:48:01:1B:5C:CE:5B:CB:03:DA:2E:3C:39
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f3:84:48:93:00:bb:30:65:c5:86:c7:dd:be:17:70:2a:03:
4c:e6:da:0e:a0:8f:ba:f8:80:7d:5f:47:84:78:cd:fe:89:90:
bc:46:0d:54:11:e3:54:5d:d7:eb:12:1d:5a:72:45:e9:c3:68:
f7:d2:2b:09:c3:c9:0b:c4:49:b8:9f:0e:ee:0e:0d:85:17:3f:
5e:8f:96:7f:9f:15:08:98:b3:1d:65:66:ff:dc:6c:65:bb:7a:
40:76:2c:12:35:ed:82:da:bb:9e:9f:03:31:bc:3c:3e:ff:08:
4e:2d:8a:db:d8:0a:8a:da:67:62:57:9b:c4:03:73:eb:a4:d2:
77:d1:79:1b:fc:6c:de:eb:52:93:10:c5:1c:49:99:a3:2e:32:
2e:5c:f8:cc:41:88:ff:37:fa:02:1a:d3:64:75:0d:f0:e1:d3:
53:da:7f:09:f7:4a:33:ee:44:39:2e:42:46:cd:57:fe:d5:e7:
b6:37:8c:5f:dc:84:31:66:96:2b:57:f4:bf:4e:8b:03:17:ec:
c5:99:1e:8a:d3:a2:ff:e4:61:fa:50:a5:09:b9:36:f4:4a:8b:
6d:7c:44:72:9c:e6:e2:08:4c:4e:fa:53:c2:84:1b:f4:e1:f6:
b2:80:6c:36:3e:4f:45:8d:f8:65:a5:a1:92:d8:98:43:f3:06:
3a:f3:74:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4od9TK5HymSwIQuZfs4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjliYWFiMWExM2RmMzBlZmYwZmNkNzgwYzRiYmM1NGJj
M2U2ZDUwHhcNMjUwODA0MDcwMTIyWhcNMjUwODA1MDcwMTIyWjAzMTEwLwYDVQQD
Eyg3MmNhNGI2MjUxZTQzOWViNDgwMTFiNWNjZTViY2IwM2RhMmUzYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpeLxoJv6hzZGyfXz1VyM+6Pi3vI
IQJuqeC9dej5IddRkvl+d4kpDawMPyaVycHeQUUM/Ixpf8Qc2dV8D2dpYXoz9Qs+
v0QOcs0OYk5UzxRw8+ByDjkHN7MX/3KEx1wNJVDQYNhbngoq26ifdjDDZ+tgeVpw
6OKhSk2eB4Y9HNiGr5QfrG2b9gPEMU+2y9vMp8xau4QfKMOHdfBrpu7ogFsC4J5O
a3eNCXuU17qjkL45evO6y+JyOr58PIN4sW06NhCF3I/b1q9kaKbywGpVobWxZmYi
IVwyqbO+rQtf60XoXQpAi3E9nPUH+NQDAbAO8TV1z588vmsi1G3dYjDNcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLKS2JR5DnrSAEbXM5bywPaLjw5MB8GA1UdIwQY
MBaAFMj5uqsaE98w7/D814DEu8VLw+bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDIt
ZGI0ODRjY2U3MjkzLzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDItZGI0ODRjY2U3Mjkz
LzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfOESJMA
uzBlxYbH3b4XcCoDTObaDqCPuviAfV9HhHjN/omQvEYNVBHjVF3X6xIdWnJF6cNo
99IrCcPJC8RJuJ8O7g4NhRc/Xo+Wf58VCJizHWVm/9xsZbt6QHYsEjXtgtq7np8D
Mbw8Pv8ITi2K29gKitpnYlebxANz66TSd9F5G/xs3utSkxDFHEmZoy4yLlz4zEGI
/zf6AhrTZHUN8OHTU9p/CfdKM+5EOS5CRs1X/tXntjeMX9yEMWaWK1f0v06LAxfs
xZkeitOi/+Rh+lClCbk29EqLbXxEcpzm4ghMTvpTwoQb9OH2soBsNj5PRY34ZaWh
ktiYQ/MGOvN0zg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:49 2025 by rpki-client