Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
File: ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json)
Hash identifier: kPz4ku6ADRLf4g4h9yvlM01FiM7fD0jDY1JYArgYs6w=
Subject key identifier: 5C:3E:BE:37:AF:29:26:36:E8:37:EA:BE:68:99:CD:AA:66:93:99:7C
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial: 01988B1064E40DBE466D680EF64C50C04669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 19:02:44 +0000
Manifest this update: Fri 08 Aug 2025 19:02:44 +0000
Manifest next update: Sat 09 Aug 2025 19:02:44 +0000
Files and hashes: 1: u2ztrN64ny4t-5qedlgZVwCCd-I.roa (hash: L/fv9+pcl735U5hA8Uy57NEou3lVd9gt0o2oOToLmgY=)
2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: GsuPpi25FBYXCqx9aRJnCaLcoLOrucB3c31LdusK0no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:64:e4:0d:be:46:6d:68:0e:f6:4c:50:c0:46:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Validity
Not Before: Aug 8 19:02:44 2025 GMT
Not After : Aug 9 19:02:44 2025 GMT
Subject: CN=5c3ebe37af292636e837eabe6899cdaa6693997c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:9e:eb:20:5a:40:d9:b1:5e:d6:87:a8:1c:
d0:a4:2f:d8:60:9f:6c:14:56:dd:3e:ff:07:ea:db:
10:ba:3f:22:c3:24:33:26:59:5c:d2:1a:31:c0:68:
61:9c:cd:dc:c5:6b:af:f3:cd:04:13:df:3c:2a:15:
35:46:00:03:e3:3e:17:9f:b1:f5:ed:04:fa:82:15:
22:e5:0a:fb:d9:f0:3a:7e:ba:88:44:fc:70:e1:0a:
25:33:6a:11:6f:52:9d:58:3e:d6:ad:5c:f9:d4:bb:
38:c9:f3:47:66:af:1c:97:1b:a9:4b:ea:90:db:7d:
6c:ae:3a:8d:94:1d:b6:36:48:49:de:74:ee:1a:91:
e9:be:44:8b:58:67:7b:6f:aa:01:39:8b:e1:7f:fe:
14:57:d8:6c:19:f8:e6:60:b4:7f:4e:69:90:88:57:
ec:7f:47:20:0e:5a:2f:15:fc:17:54:24:7b:fa:34:
7e:3a:ba:60:dc:a9:41:d8:64:ce:bb:87:c9:1e:1f:
60:b7:a9:e0:d5:69:82:c5:a0:96:12:5e:82:ee:20:
e9:1c:ea:42:6c:39:07:62:c9:d4:84:61:9c:0d:73:
f0:f6:0f:d1:b0:c4:9c:9b:fe:7f:87:60:81:37:0a:
93:5d:fa:9f:af:8c:25:dc:11:58:a7:90:d4:84:85:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3E:BE:37:AF:29:26:36:E8:37:EA:BE:68:99:CD:AA:66:93:99:7C
X509v3 Authority Key Identifier:
keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c4:72:f6:72:9c:d3:9a:0a:09:f0:df:a2:da:bd:ce:2c:47:
b8:56:42:be:b5:28:e6:fc:73:0f:45:a0:52:3c:c4:f4:86:1b:
47:b3:7b:ce:1b:82:f7:dd:4d:66:1b:f1:6a:1c:8d:47:d3:59:
ba:2c:36:5c:52:68:c2:b9:9f:37:1b:b1:dc:c3:ca:ce:24:ff:
94:1b:b4:3b:24:f6:99:8d:f1:41:28:4b:97:ba:54:ea:39:97:
d3:89:22:06:30:15:4f:0b:3f:5e:64:bd:4e:c1:1f:51:12:02:
90:65:4a:0a:02:67:19:b9:22:01:e0:e0:ef:c9:5b:90:e3:09:
2e:34:98:b0:44:a5:9a:85:34:f9:fd:d2:51:e0:3b:39:83:8a:
d3:c1:6f:3c:4e:e8:82:a4:4c:a6:cb:52:30:16:2e:10:bf:d7:
b7:31:8d:1b:b3:e2:de:52:4f:a7:be:a1:7e:b2:51:c5:c1:79:
3a:4a:0d:7e:aa:db:2f:cd:4c:33:dc:7e:3a:20:db:e9:6b:ed:
3b:71:d5:ca:81:f1:9a:8f:58:f8:f0:67:a6:0a:ad:4e:c1:a8:
82:67:2b:41:28:af:74:e4:36:4f:fd:c0:9e:1b:73:53:bf:84:
5c:fe:9d:58:66:d8:80:63:cd:5a:ce:97:b0:82:23:c3:86:37:
1d:ad:e2:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEGTkDb5GbWgO9kxQwEZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjRkNjgyM2VjYjI4YjRhMzVlNDBkYzExZWYyMjljYjIz
NzVjZGYwHhcNMjUwODA4MTkwMjQ0WhcNMjUwODA5MTkwMjQ0WjAzMTEwLwYDVQQD
Eyg1YzNlYmUzN2FmMjkyNjM2ZTgzN2VhYmU2ODk5Y2RhYTY2OTM5OTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAme6yBaQNmxXtaHqBzQpC/YYJ9s
FFbdPv8H6tsQuj8iwyQzJllc0hoxwGhhnM3cxWuv880EE988KhU1RgAD4z4Xn7H1
7QT6ghUi5Qr72fA6frqIRPxw4QolM2oRb1KdWD7WrVz51Ls4yfNHZq8clxupS+qQ
231srjqNlB22NkhJ3nTuGpHpvkSLWGd7b6oBOYvhf/4UV9hsGfjmYLR/TmmQiFfs
f0cgDlovFfwXVCR7+jR+Orpg3KlB2GTOu4fJHh9gt6ng1WmCxaCWEl6C7iDpHOpC
bDkHYsnUhGGcDXPw9g/RsMScm/5/h2CBNwqTXfqfr4wl3BFYp5DUhIWfKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw+vjevKSY26DfqvmiZzapmk5l8MB8GA1UdIwQY
MBaAFMm01oI+yyi0o15A3BHvIpyyN1zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQt
OWZhOTVhYTliMDc5LzEveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQtOWZhOTVhYTliMDc5
LzEveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsRy9nKc
05oKCfDfotq9zixHuFZCvrUo5vxzD0WgUjzE9IYbR7N7zhuC991NZhvxahyNR9NZ
uiw2XFJowrmfNxux3MPKziT/lBu0OyT2mY3xQShLl7pU6jmX04kiBjAVTws/XmS9
TsEfURICkGVKCgJnGbkiAeDg78lbkOMJLjSYsESlmoU0+f3SUeA7OYOK08FvPE7o
gqRMpstSMBYuEL/XtzGNG7Pi3lJPp76hfrJRxcF5OkoNfqrbL81MM9x+OiDb6Wvt
O3HVyoHxmo9Y+PBnpgqtTsGogmcrQSivdOQ2T/3AnhtzU7+EXP6dWGbYgGPNWs6X
sIIjw4Y3Ha3iRw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:26 2025 by rpki-client