Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: RP9SSBoQ41RaQHhjpguOSHrVVaDH/78fbRKpaAwSQMg=
Subject key identifier: C8:80:67:9F:7B:1E:62:A8:D6:8D:C0:D5:43:4F:AD:58:43:15:55:79
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 01987298881E8EE99012B0B70644F31FF31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 01:00:55 +0000
Manifest this update: Mon 04 Aug 2025 01:00:55 +0000
Manifest next update: Tue 05 Aug 2025 01:00:55 +0000
Files and hashes: 1: 4mIaRiVfusRCW_nZ919kue73VcU.roa (hash: KAlnZdYdnEt6W3Qh7SxuikxG/eJq1ZmaN4m/5vXa+us=)
2: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: xKKncG6pEmH3ZN3SElrtLE6oJuD9kGv296xph1irQv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:88:1e:8e:e9:90:12:b0:b7:06:44:f3:1f:f3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: Aug 4 01:00:55 2025 GMT
Not After : Aug 5 01:00:55 2025 GMT
Subject: CN=c880679f7b1e62a8d68dc0d5434fad5843155579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:7d:00:b6:a7:ba:22:4e:2f:32:38:ce:36:
af:16:18:e7:25:6c:58:5b:fd:66:d7:7f:8c:f5:2d:
cb:29:76:42:0a:bf:ad:44:b1:80:58:9f:b6:8c:86:
44:06:fa:7e:28:ab:05:1a:73:14:70:7f:9a:ae:51:
fe:8f:2b:ec:c8:8a:28:45:a4:a0:d6:2e:98:03:05:
1f:8d:f0:d5:81:be:20:2f:8e:9b:78:59:a1:b2:52:
b1:05:53:02:0c:35:40:7c:c4:e8:71:62:6f:9b:34:
a4:da:ca:41:52:67:20:6e:1d:0b:53:c9:dd:3a:95:
c2:fb:df:a4:c8:9c:7b:ad:11:4e:88:b4:22:92:aa:
5c:74:ee:54:48:00:7e:9a:a9:47:bc:b9:42:3b:64:
c1:1f:15:c9:ec:57:41:4b:92:79:58:ab:71:1a:d6:
48:d5:7b:aa:11:f8:52:5e:05:01:8f:10:47:6b:09:
e4:c9:42:2a:cd:78:e2:c4:57:03:62:93:7e:82:9d:
1d:a6:c8:e3:e9:ed:b2:f4:59:d9:38:26:10:ae:13:
c3:bb:03:5e:1f:4b:0f:72:49:a6:14:12:2f:f9:b9:
46:f9:75:d0:44:0e:7e:41:28:59:64:14:f3:66:f5:
d6:1d:e8:51:f7:14:b8:1f:5a:33:36:fb:a8:92:18:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:80:67:9F:7B:1E:62:A8:D6:8D:C0:D5:43:4F:AD:58:43:15:55:79
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ad:80:dd:a1:c3:5e:a9:fc:2c:5f:1d:25:75:7d:62:15:bf:
71:de:da:82:77:3d:f0:c8:ad:ac:3b:24:c0:c9:06:bd:53:76:
67:16:41:1d:f8:08:8e:2e:4b:aa:d2:3a:3d:e6:45:e9:fb:d2:
69:e6:7d:34:25:d7:de:6d:76:89:e4:b3:50:c3:52:ad:2d:db:
f9:a4:4d:01:39:9e:2d:69:17:42:0b:93:8b:b4:8a:3a:f9:eb:
ed:c7:d6:15:22:34:3c:ad:63:f0:09:99:5a:6a:98:35:11:09:
3c:3d:3c:30:5e:32:aa:4b:c8:75:c0:3b:3d:3c:eb:12:98:2f:
18:fe:ee:c1:4e:e3:4a:f5:20:2b:fc:a3:ea:ff:21:a0:cd:c2:
6a:56:87:5e:92:46:d1:88:c6:dd:58:07:ab:29:0f:97:97:11:
4d:5b:c6:8d:b9:ec:1c:6a:2d:ae:6c:f1:d2:d6:88:af:bf:bb:
4e:68:3c:0e:34:fa:8f:e8:a7:a1:1c:1d:3c:9e:b7:e2:57:76:
e3:41:8a:47:4b:ef:28:e9:56:4b:d8:c2:4e:16:ff:7f:cf:88:
43:64:3f:dd:8a:e2:2d:20:19:22:e3:62:bf:a8:45:7a:54:b6:
d3:42:f0:96:a5:71:8a:1a:31:d2:f4:59:99:0f:f0:c5:c8:26:
65:97:aa:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymIgejumQErC3BkTzH/MdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWRjMDBmOWE0ODFiNDE1MDg2YjE0M2E3ZGQ0Y2RhMWZm
YjI0NzAwHhcNMjUwODA0MDEwMDU1WhcNMjUwODA1MDEwMDU1WjAzMTEwLwYDVQQD
EyhjODgwNjc5ZjdiMWU2MmE4ZDY4ZGMwZDU0MzRmYWQ1ODQzMTU1NTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfN9ALanuiJOLzI4zjavFhjnJWxY
W/1m13+M9S3LKXZCCr+tRLGAWJ+2jIZEBvp+KKsFGnMUcH+arlH+jyvsyIooRaSg
1i6YAwUfjfDVgb4gL46beFmhslKxBVMCDDVAfMTocWJvmzSk2spBUmcgbh0LU8nd
OpXC+9+kyJx7rRFOiLQikqpcdO5USAB+mqlHvLlCO2TBHxXJ7FdBS5J5WKtxGtZI
1XuqEfhSXgUBjxBHawnkyUIqzXjixFcDYpN+gp0dpsjj6e2y9FnZOCYQrhPDuwNe
H0sPckmmFBIv+blG+XXQRA5+QShZZBTzZvXWHehR9xS4H1ozNvuokhiBRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiAZ597HmKo1o3A1UNPrVhDFVV5MB8GA1UdIwQY
MBaAFGAdwA+aSBtBUIaxQ6fdTNof+yRwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUt
ZmJhNDliMGNkZGVkLzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUtZmJhNDliMGNkZGVk
LzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV62A3aHD
Xqn8LF8dJXV9YhW/cd7agnc98MitrDskwMkGvVN2ZxZBHfgIji5LqtI6PeZF6fvS
aeZ9NCXX3m12ieSzUMNSrS3b+aRNATmeLWkXQguTi7SKOvnr7cfWFSI0PK1j8AmZ
WmqYNREJPD08MF4yqkvIdcA7PTzrEpgvGP7uwU7jSvUgK/yj6v8hoM3CalaHXpJG
0YjG3VgHqykPl5cRTVvGjbnsHGotrmzx0taIr7+7Tmg8DjT6j+inoRwdPJ634ld2
40GKR0vvKOlWS9jCThb/f8+IQ2Q/3YriLSAZIuNiv6hFelS200LwlqVxihox0vRZ
mQ/wxcgmZZeqVw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:27 2025 by rpki-client