Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: ruHFIImG09zXOkZFFoof2h9Q+yPnGGiKQSgscsgZffs=
Subject key identifier: 71:42:20:F4:50:3B:8C:F5:CA:9C:EA:34:E3:6F:1D:2D:DB:AE:6D:02
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 01988166F717FCA1C8709F94F4C0903E845F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0CB0
Signing time: Wed 06 Aug 2025 22:01:05 +0000
Manifest this update: Wed 06 Aug 2025 22:01:05 +0000
Manifest next update: Thu 07 Aug 2025 22:01:05 +0000
Files and hashes: 1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: qlG9qOOOgVdWlheBG+vDheN25tZkOjBNa8ivNdNdQBQ=)
3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:f7:17:fc:a1:c8:70:9f:94:f4:c0:90:3e:84:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Aug 6 22:01:05 2025 GMT
Not After : Aug 7 22:01:05 2025 GMT
Subject: CN=714220f4503b8cf5ca9cea34e36f1d2ddbae6d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:6d:eb:29:d4:86:7e:5a:f1:1d:24:6a:30:
46:68:b3:6c:6c:2d:22:ba:66:d5:b3:97:b8:3e:9f:
0c:53:01:72:6c:8b:86:ff:17:64:6d:f4:8c:6a:68:
44:34:e8:a3:46:ac:5f:f6:54:c5:9b:a7:b5:c3:c6:
87:b7:e6:f9:4f:06:de:5f:e7:9a:32:a5:3f:fb:8e:
12:09:01:07:79:8d:b0:34:51:4e:46:96:6a:a7:b2:
31:b1:a4:ba:ae:58:f4:97:8f:ef:1b:24:2e:0c:f9:
ad:2a:37:74:08:48:f5:d9:db:95:44:b8:d5:69:d1:
b0:d4:5d:e4:c4:c5:8f:24:90:2c:60:56:ce:62:df:
39:6c:c7:69:2b:92:32:d0:28:9c:74:d7:1e:6b:2a:
13:62:1a:3a:b4:d2:1d:9c:bf:1a:a8:34:1f:9e:01:
6e:12:47:80:94:1e:a2:e7:00:97:2f:1d:f7:4d:57:
8a:7e:0f:78:ea:1e:8b:46:1c:6d:98:06:f9:7c:91:
1a:30:f6:2e:cd:61:e2:be:9b:bb:81:45:a3:9d:f2:
51:fd:ab:fd:3f:a3:f5:f2:82:1d:fc:0b:31:70:2f:
30:2c:b8:5e:6d:86:82:74:66:72:31:a7:7a:1a:d0:
19:19:b0:7e:11:18:db:4f:92:87:fc:9f:51:2b:38:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:20:F4:50:3B:8C:F5:CA:9C:EA:34:E3:6F:1D:2D:DB:AE:6D:02
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c3:43:f5:27:55:64:06:a9:5d:74:1f:df:1b:a2:f4:2a:37:
63:35:4e:18:5f:6c:af:2d:b2:48:17:43:43:6b:49:44:4a:8f:
0b:b8:d0:25:ac:b2:77:49:76:34:f0:14:6a:ce:ae:28:5d:30:
af:50:a1:e2:d0:4f:8c:9a:8d:63:53:50:3b:a4:e2:ea:19:50:
d5:cc:c9:4a:48:42:15:d7:5c:20:f9:f7:1e:54:5c:c9:23:df:
1d:42:e5:50:dd:78:e5:fa:6c:34:e5:ae:d9:9c:21:d7:ac:cf:
a5:32:35:77:6f:4a:f2:95:76:c6:bc:e6:d3:3b:f7:58:2d:bf:
c3:7e:0f:6f:3e:f6:a5:a7:1c:9b:03:2a:e7:20:5c:8c:73:81:
1a:eb:ee:f8:78:b6:d3:d4:a8:d5:d6:02:fd:32:79:42:78:b3:
5d:65:a1:8e:d1:7b:63:8d:4b:f6:16:7e:50:53:b6:4a:28:59:
f4:d7:46:10:a8:df:29:c9:27:98:7c:33:f6:59:79:99:23:b5:
96:02:a2:fd:4e:56:76:f5:15:d6:11:50:5a:20:a5:6a:ce:0a:
2f:bc:a5:d5:39:8e:d0:2d:11:d3:9f:0f:47:85:75:95:64:15:
94:4a:04:83:2c:bb:7e:82:2e:24:e7:96:74:ae:76:c6:22:af:
86:6c:77:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZvcX/KHIcJ+U9MCQPoRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh
NDY0ZWUwHhcNMjUwODA2MjIwMTA1WhcNMjUwODA3MjIwMTA1WjAzMTEwLwYDVQQD
Eyg3MTQyMjBmNDUwM2I4Y2Y1Y2E5Y2VhMzRlMzZmMWQyZGRiYWU2ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Zht6ynUhn5a8R0kajBGaLNsbC0i
umbVs5e4Pp8MUwFybIuG/xdkbfSMamhENOijRqxf9lTFm6e1w8aHt+b5TwbeX+ea
MqU/+44SCQEHeY2wNFFORpZqp7IxsaS6rlj0l4/vGyQuDPmtKjd0CEj12duVRLjV
adGw1F3kxMWPJJAsYFbOYt85bMdpK5Iy0CicdNceayoTYho6tNIdnL8aqDQfngFu
EkeAlB6i5wCXLx33TVeKfg946h6LRhxtmAb5fJEaMPYuzWHivpu7gUWjnfJR/av9
P6P18oId/AsxcC8wLLhebYaCdGZyMad6GtAZGbB+ERjbT5KH/J9RKzgXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFCIPRQO4z1ypzqNONvHS3brm0CMB8GA1UdIwQY
MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt
MzgyMGY3ZWUyY2I4LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4
LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8ND9SdV
ZAapXXQf3xui9Co3YzVOGF9sry2ySBdDQ2tJREqPC7jQJayyd0l2NPAUas6uKF0w
r1Ch4tBPjJqNY1NQO6Ti6hlQ1czJSkhCFddcIPn3HlRcySPfHULlUN145fpsNOWu
2Zwh16zPpTI1d29K8pV2xrzm0zv3WC2/w34Pbz72paccmwMq5yBcjHOBGuvu+Hi2
09So1dYC/TJ5QnizXWWhjtF7Y41L9hZ+UFO2SihZ9NdGEKjfKcknmHwz9ll5mSO1
lgKi/U5WdvUV1hFQWiClas4KL7yl1TmO0C0R058PR4V1lWQVlEoEgyy7foIuJOeW
dK52xiKvhmx3pg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:01:49 2025 by rpki-client