
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: EEbF0A15AAGl9kNVbmtJs9uAKQWY+Syn8OtZiWdpu3k=
Subject key identifier: 81:8B:6B:F6:12:31:D9:88:E9:7B:34:1A:81:7F:8E:1B:52:0D:12:9E
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 019881683B5D3F8B79816E872ED4F8E66031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 086D
Signing time: Wed 06 Aug 2025 22:02:28 +0000
Manifest this update: Wed 06 Aug 2025 22:02:28 +0000
Manifest next update: Thu 07 Aug 2025 22:02:28 +0000
Files and hashes: 1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: RhyRsSGjhgbDuKJ0Rz0dPteOVCS7JUaA42FhPYiZx6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:3b:5d:3f:8b:79:81:6e:87:2e:d4:f8:e6:60:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Aug 6 22:02:28 2025 GMT
Not After : Aug 7 22:02:28 2025 GMT
Subject: CN=818b6bf61231d988e97b341a817f8e1b520d129e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:a8:fb:23:36:30:19:dc:e3:f1:98:88:47:
1d:0c:eb:41:0c:32:2b:da:2f:16:42:57:d8:2c:65:
06:4c:0e:8d:43:3d:e3:60:c9:08:86:27:0b:6a:c4:
d4:77:74:af:0d:d0:d8:5f:d8:4a:f6:eb:af:5b:ae:
6f:53:79:6b:eb:36:ff:41:d3:07:91:1d:cc:eb:cc:
05:52:e3:40:d4:cd:f0:09:50:7d:2b:c1:ca:0c:15:
26:b1:71:a5:55:9d:58:38:ed:b8:2d:10:b6:cc:cc:
e7:2b:a1:ee:7e:73:4b:6c:c1:32:fd:1c:7f:43:4e:
3c:57:c2:c2:02:7b:ce:b8:ca:5c:b5:e6:e4:09:2e:
d0:4d:6d:05:a1:d1:33:09:9e:01:6c:f1:45:12:2e:
de:b1:09:28:3d:45:4a:56:ed:e1:35:7e:5b:39:4c:
ad:9b:e0:b8:be:67:0b:22:48:f2:1f:0a:91:d4:98:
4b:8f:40:50:d8:7b:7a:ca:46:3f:74:99:49:14:a7:
5e:13:12:90:3c:67:e1:f5:cd:b4:d5:82:02:ed:81:
fb:5c:51:2c:8a:26:26:41:75:40:b2:9d:05:3a:1e:
ca:8e:3a:c9:b7:72:d8:3b:75:7f:55:5c:bd:a4:ce:
b7:c2:df:0b:c4:1f:77:d3:4f:04:8d:35:94:8b:ab:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8B:6B:F6:12:31:D9:88:E9:7B:34:1A:81:7F:8E:1B:52:0D:12:9E
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d4:fc:03:96:74:48:a4:c1:91:7e:64:45:32:c9:40:14:63:
d4:f6:9b:13:4c:bd:c6:9a:5e:70:02:35:70:c0:5b:3a:46:49:
73:5b:7f:7d:9a:fe:da:91:7d:dd:de:02:d7:43:94:fd:2d:1c:
f9:98:e5:9b:f5:3f:e8:76:11:06:39:7d:19:aa:15:2b:67:0c:
5a:38:19:54:c4:b1:08:da:1f:82:46:70:d6:e5:1c:ad:42:1f:
a7:17:89:66:d2:1a:83:11:7b:2f:10:27:63:88:5e:a8:e2:bb:
fb:c6:b1:77:37:c8:64:42:1f:00:82:66:12:bd:c9:c8:ae:fa:
86:b4:42:a2:7a:c1:26:66:08:0c:f5:8e:8a:36:67:30:a1:85:
36:23:10:d5:59:bb:1b:80:f6:0d:00:ee:13:fd:5c:da:ff:b8:
a3:46:3b:f9:f2:c5:f5:66:d0:53:6b:43:4b:2a:6a:9c:92:1f:
2e:a9:c3:5a:b1:c0:3a:ec:1c:c9:20:5c:a6:2f:40:b5:76:7a:
d6:9d:87:03:e4:67:c3:bb:e0:36:1f:2b:3b:a6:44:ef:96:cf:
d2:e7:42:3f:36:c8:d6:35:67:c9:e6:13:42:89:07:43:ce:40:
b8:7e:d2:4f:01:b1:73:61:25:3a:62:5c:9b:fe:26:3c:97:bc:
92:07:92:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaDtdP4t5gW6HLtT45mAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODgzYTg2ZTgyZDBkOTEwZmNmNTlmOGZmOWY3YmYxYTY3
MTQ4NzAwHhcNMjUwODA2MjIwMjI4WhcNMjUwODA3MjIwMjI4WjAzMTEwLwYDVQQD
Eyg4MThiNmJmNjEyMzFkOTg4ZTk3YjM0MWE4MTdmOGUxYjUyMGQxMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S+o+yM2MBnc4/GYiEcdDOtBDDIr
2i8WQlfYLGUGTA6NQz3jYMkIhicLasTUd3SvDdDYX9hK9uuvW65vU3lr6zb/QdMH
kR3M68wFUuNA1M3wCVB9K8HKDBUmsXGlVZ1YOO24LRC2zMznK6HufnNLbMEy/Rx/
Q048V8LCAnvOuMpctebkCS7QTW0FodEzCZ4BbPFFEi7esQkoPUVKVu3hNX5bOUyt
m+C4vmcLIkjyHwqR1JhLj0BQ2Ht6ykY/dJlJFKdeExKQPGfh9c201YIC7YH7XFEs
iiYmQXVAsp0FOh7KjjrJt3LYO3V/VVy9pM63wt8LxB93008EjTWUi6sqCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGLa/YSMdmI6Xs0GoF/jhtSDRKeMB8GA1UdIwQY
MBaAFK2IOoboLQ2RD89Z+P+fe/GmcUhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTIt
YTU2YmYwY2Y0Y2JlLzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTItYTU2YmYwY2Y0Y2Jl
LzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9T8A5Z0
SKTBkX5kRTLJQBRj1PabE0y9xppecAI1cMBbOkZJc1t/fZr+2pF93d4C10OU/S0c
+Zjlm/U/6HYRBjl9GaoVK2cMWjgZVMSxCNofgkZw1uUcrUIfpxeJZtIagxF7LxAn
Y4heqOK7+8axdzfIZEIfAIJmEr3JyK76hrRConrBJmYIDPWOijZnMKGFNiMQ1Vm7
G4D2DQDuE/1c2v+4o0Y7+fLF9WbQU2tDSypqnJIfLqnDWrHAOuwcySBcpi9AtXZ6
1p2HA+Rnw7vgNh8rO6ZE75bP0udCPzbI1jVnyeYTQokHQ85AuH7STwGxc2ElOmJc
m/4mPJe8kgeSOg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:19:34 2025 by rpki-client