Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: VXHEcZbyfhKjdNj6sGQ9mTOJLSH6cQStH4/n2fz5+V0=
Subject key identifier: A0:B3:6F:F9:36:38:AC:E0:31:C4:50:00:B2:3E:B5:65:8E:98:C3:8A
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 019874194A44BBAD62007457CF2C16B491E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 15AA
Signing time: Mon 04 Aug 2025 08:01:11 +0000
Manifest this update: Mon 04 Aug 2025 08:01:11 +0000
Manifest next update: Tue 05 Aug 2025 08:01:11 +0000
Files and hashes: 1: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (hash: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: IJnlR14lKAutRT65db19R3iobgB+ot/hnai0a+RqGUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:4a:44:bb:ad:62:00:74:57:cf:2c:16:b4:91:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Aug 4 08:01:11 2025 GMT
Not After : Aug 5 08:01:11 2025 GMT
Subject: CN=a0b36ff93638ace031c45000b23eb5658e98c38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:be:90:2b:1f:30:54:1d:61:48:41:4f:59:
a8:81:8c:e5:ab:90:eb:bc:3d:db:ce:f2:12:81:a0:
43:d1:70:51:17:7c:e5:92:f0:4c:c1:2f:33:f8:a3:
57:57:b5:db:c3:26:04:81:7b:91:1a:24:91:23:8b:
2e:8d:52:29:1e:d3:eb:d0:ca:4c:ba:b4:99:41:24:
a8:7f:28:18:3a:26:5d:2a:8b:d9:b5:dd:87:21:55:
a2:cf:20:02:29:3d:1c:34:e0:10:07:c6:96:71:d4:
94:30:e7:10:b2:8c:d8:c2:1e:5d:4b:c1:8d:9a:c6:
d9:f4:a0:ee:61:da:8b:ff:99:fd:67:ad:95:c5:30:
11:5d:6c:e5:79:81:b1:04:d6:d2:b8:4c:aa:5a:80:
89:49:d5:f5:6b:48:0e:f3:2e:ef:61:e4:45:97:78:
4b:f8:40:f9:dd:3b:14:2c:dd:31:e9:6d:e3:59:f7:
ad:94:eb:1e:64:f8:99:64:48:2d:49:e6:76:8c:5c:
08:86:fc:a0:51:0e:6a:4f:13:1d:af:25:be:fd:08:
14:4e:92:24:90:b1:91:18:94:c8:4a:92:f3:8c:48:
3c:28:8a:e4:8f:71:c7:82:f5:57:d6:d5:5f:c4:44:
c8:41:88:65:2a:ab:ea:9e:d2:b1:87:68:0c:c1:76:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B3:6F:F9:36:38:AC:E0:31:C4:50:00:B2:3E:B5:65:8E:98:C3:8A
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:86:dc:3c:88:80:59:06:8b:38:df:60:54:7e:63:4c:91:fd:
29:fe:39:36:65:05:ca:8d:db:bb:8a:bc:f8:f7:00:8f:cd:88:
e2:b9:28:2d:cf:95:76:91:ed:2f:93:ca:d5:c3:26:a4:b7:2a:
43:c2:0a:6d:ba:1c:58:29:98:5b:9d:d4:38:e7:43:b3:43:7c:
4c:58:9d:71:57:38:1c:b5:b3:d6:89:e7:8f:43:1d:ae:cb:cf:
b6:f3:71:f7:69:a4:ed:ef:6f:c4:b6:48:20:9d:c1:f7:04:8a:
22:de:19:44:52:85:32:13:25:d3:40:3e:34:16:ab:6d:b5:22:
0b:10:81:17:95:29:6b:28:f8:2a:80:10:99:d8:71:ca:c0:85:
97:e0:a3:1a:fc:91:0b:61:ad:8a:e4:38:c1:ee:5c:24:61:d9:
37:9c:ab:02:29:06:af:bf:c7:29:62:15:8f:7d:f1:13:93:3c:
11:08:d3:eb:28:c5:93:a7:cf:d9:ab:ee:b4:21:19:d8:af:7e:
31:67:b1:65:5b:19:80:e9:e5:dd:a4:5c:59:62:c6:27:08:8e:
d6:17:08:8d:96:3b:bf:d2:b3:4a:ea:d2:8c:53:9b:14:b4:eb:
25:32:ce:a4:c0:90:c5:7e:5d:52:f8:f1:84:c2:f2:d0:60:88:
c9:31:ed:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GUpEu61iAHRXzywWtJHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjAxNDEwMWZmYmNlNjc1MTM5Y2Q0YzAyYmEwMDYzNGFk
ODZlMDIwHhcNMjUwODA0MDgwMTExWhcNMjUwODA1MDgwMTExWjAzMTEwLwYDVQQD
EyhhMGIzNmZmOTM2MzhhY2UwMzFjNDUwMDBiMjNlYjU2NThlOThjMzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqG+kCsfMFQdYUhBT1mogYzlq5Dr
vD3bzvISgaBD0XBRF3zlkvBMwS8z+KNXV7XbwyYEgXuRGiSRI4sujVIpHtPr0MpM
urSZQSSofygYOiZdKovZtd2HIVWizyACKT0cNOAQB8aWcdSUMOcQsozYwh5dS8GN
msbZ9KDuYdqL/5n9Z62VxTARXWzleYGxBNbSuEyqWoCJSdX1a0gO8y7vYeRFl3hL
+ED53TsULN0x6W3jWfetlOseZPiZZEgtSeZ2jFwIhvygUQ5qTxMdryW+/QgUTpIk
kLGRGJTISpLzjEg8KIrkj3HHgvVX1tVfxETIQYhlKqvqntKxh2gMwXb5kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCzb/k2OKzgMcRQALI+tWWOmMOKMB8GA1UdIwQY
MBaAFGFgFBAf+85nUTnNTAK6AGNK2G4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jYzg0NDEtZGRiNi00Nzk1LTkwMzAt
NTljZGRiYTE3NmVmLzEvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jYzg0NDEtZGRiNi00Nzk1LTkwMzAtNTljZGRiYTE3NmVm
LzEvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4bcPIiA
WQaLON9gVH5jTJH9Kf45NmUFyo3bu4q8+PcAj82I4rkoLc+VdpHtL5PK1cMmpLcq
Q8IKbbocWCmYW53UOOdDs0N8TFidcVc4HLWz1onnj0MdrsvPtvNx92mk7e9vxLZI
IJ3B9wSKIt4ZRFKFMhMl00A+NBarbbUiCxCBF5Upayj4KoAQmdhxysCFl+CjGvyR
C2GtiuQ4we5cJGHZN5yrAikGr7/HKWIVj33xE5M8EQjT6yjFk6fP2avutCEZ2K9+
MWexZVsZgOnl3aRcWWLGJwiO1hcIjZY7v9KzSurSjFObFLTrJTLOpMCQxX5dUvjx
hMLy0GCIyTHtKA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:47 2025 by rpki-client