Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: ttp2iQClAzlVDeZ80NmrlEebI/EiSqmsH1P1ccJWuGo=
Subject key identifier: 15:77:83:A6:0F:B2:48:CE:99:87:26:B0:02:A1:3F:E6:74:9F:C9:8E
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 019768BBCE1BF20018D16F2AE2B18C1CB26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 10:00:27 +0000
Manifest this update: Fri 13 Jun 2025 10:00:27 +0000
Manifest next update: Sat 14 Jun 2025 10:00:27 +0000
Files and hashes: 1: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (hash: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: f1h0y2zMgd0JFG4/8RxnT4uMBVVeAjIHUTAWEOIKnLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ce:1b:f2:00:18:d1:6f:2a:e2:b1:8c:1c:b2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Jun 13 10:00:27 2025 GMT
Not After : Jun 14 10:00:27 2025 GMT
Subject: CN=157783a60fb248ce998726b002a13fe6749fc98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:2b:5b:48:f1:62:96:ec:b2:65:fc:55:3c:
cb:24:7a:5b:cb:cb:9c:fa:75:55:ef:e6:53:63:1c:
10:79:37:8b:63:ee:14:98:42:ea:f1:42:8c:9f:f7:
a5:2b:8a:28:c6:bd:95:66:5f:3d:31:31:b9:13:0e:
44:fe:37:07:86:9a:fd:a6:eb:22:83:ef:e8:6a:b9:
0f:0b:22:e6:70:34:60:e7:06:be:cd:65:ce:c4:cc:
e7:2e:0f:c8:ed:cc:5f:62:67:bd:5d:0e:eb:3a:b5:
0a:18:41:87:95:f7:dc:08:a7:39:a4:b4:27:ec:80:
02:85:86:78:ff:4f:6c:bd:85:50:71:05:21:bd:52:
47:56:13:6b:0b:1f:8b:58:06:de:46:e3:c5:1c:97:
65:10:b7:19:4c:33:04:17:07:d7:4a:ae:90:10:ac:
57:94:98:6b:3c:12:3e:ef:76:cf:3e:e6:cb:fb:8a:
e1:33:13:8c:80:a6:97:36:70:6d:6f:20:6c:b9:8f:
f7:bd:97:7d:22:35:39:a0:25:49:9f:c0:14:18:be:
51:24:7f:5d:ed:81:80:cf:ac:03:65:76:41:c9:2e:
8f:84:8a:2f:72:11:9d:b9:54:18:7d:bb:69:19:a9:
e8:80:4b:fa:d8:ad:68:9e:d7:0d:d2:26:37:ae:14:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:83:A6:0F:B2:48:CE:99:87:26:B0:02:A1:3F:E6:74:9F:C9:8E
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0a:fc:d9:cb:df:ea:bd:ca:7e:9b:3c:7c:58:85:33:8e:5c:
58:b0:0e:3c:3d:b3:19:e8:6c:b0:d9:b7:e3:c3:8c:40:ca:ea:
bd:6c:1d:1c:e8:da:a9:b5:4d:46:31:67:f4:50:13:b1:c8:b4:
a0:e2:69:03:be:f8:87:e3:f3:7f:91:c7:8a:d8:05:aa:11:41:
06:5c:34:a2:e5:92:a9:7b:38:ba:c1:b6:a2:40:0e:ce:70:84:
f3:0e:43:29:94:d9:da:5d:26:0a:c9:27:19:96:50:07:ec:85:
7c:65:b2:4e:c0:a6:a2:38:da:dd:17:d4:3d:52:a5:46:5d:56:
42:3c:67:20:b8:70:15:d0:ce:4c:62:ff:cf:47:15:d6:2b:24:
f0:3a:43:86:9e:a6:8a:52:8d:b3:7d:97:6e:19:62:f0:c5:40:
9b:f1:86:b8:de:d3:59:0c:5e:20:d2:f8:5a:3a:09:ee:08:4f:
cc:64:e2:8e:95:da:bb:a5:45:1c:c6:4d:71:50:65:3b:f8:27:
be:7f:8b:04:d6:ad:bf:5a:20:59:75:d3:98:13:12:02:ce:b3:
79:4c:00:e8:14:2e:2b:e9:e9:4c:9d:b8:c0:57:c5:27:6e:eb:
11:a5:ea:35:7f:8e:e4:ff:25:0d:65:cf:40:a5:d5:d6:c7:03:
8d:55:3f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou84b8gAY0W8q4rGMHLJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjcwZDk3ZWRmMjhjNzYwNzZjMGYwNjliNTJiY2Q4ZTI2
YWUwYmQwHhcNMjUwNjEzMTAwMDI3WhcNMjUwNjE0MTAwMDI3WjAzMTEwLwYDVQQD
EygxNTc3ODNhNjBmYjI0OGNlOTk4NzI2YjAwMmExM2ZlNjc0OWZjOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs24rW0jxYpbssmX8VTzLJHpby8uc
+nVV7+ZTYxwQeTeLY+4UmELq8UKMn/elK4ooxr2VZl89MTG5Ew5E/jcHhpr9pusi
g+/oarkPCyLmcDRg5wa+zWXOxMznLg/I7cxfYme9XQ7rOrUKGEGHlffcCKc5pLQn
7IAChYZ4/09svYVQcQUhvVJHVhNrCx+LWAbeRuPFHJdlELcZTDMEFwfXSq6QEKxX
lJhrPBI+73bPPubL+4rhMxOMgKaXNnBtbyBsuY/3vZd9IjU5oCVJn8AUGL5RJH9d
7YGAz6wDZXZByS6PhIovchGduVQYfbtpGanogEv62K1ontcN0iY3rhQl5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV3g6YPskjOmYcmsAKhP+Z0n8mOMB8GA1UdIwQY
MBaAFMm3DZft8ox2B2wPBptSvNjiauC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYt
ODk3M2IyZDcwNjJjLzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYtODk3M2IyZDcwNjJj
LzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQr82cvf
6r3Kfps8fFiFM45cWLAOPD2zGehssNm348OMQMrqvWwdHOjaqbVNRjFn9FATsci0
oOJpA774h+Pzf5HHitgFqhFBBlw0ouWSqXs4usG2okAOznCE8w5DKZTZ2l0mCskn
GZZQB+yFfGWyTsCmojja3RfUPVKlRl1WQjxnILhwFdDOTGL/z0cV1isk8DpDhp6m
ilKNs32Xbhli8MVAm/GGuN7TWQxeINL4WjoJ7ghPzGTijpXau6VFHMZNcVBlO/gn
vn+LBNatv1ogWXXTmBMSAs6zeUwA6BQuK+npTJ24wFfFJ27rEaXqNX+O5P8lDWXP
QKXV1scDjVU/Og==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:42 2025 by rpki-client