Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: LoeoeAddC74hbaJhOW7CkEKtEzH+RumewNfMxi3oBcw=
Subject key identifier: AA:64:07:0A:9D:60:E9:BD:59:FF:3C:61:3B:F2:91:75:36:0E:73:5A
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 0198D472FE67CDC8F2EA8ECEB948CE894FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 0331
Signing time: Sat 23 Aug 2025 01:02:42 +0000
Manifest this update: Sat 23 Aug 2025 01:02:42 +0000
Manifest next update: Sun 24 Aug 2025 01:02:42 +0000
Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=)
2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: NGwDJ8Wzleqrw8YubrHHbPDc4+lyTA1yzfe19PnTg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:fe:67:cd:c8:f2:ea:8e:ce:b9:48:ce:89:4f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Aug 23 01:02:42 2025 GMT
Not After : Aug 24 01:02:42 2025 GMT
Subject: CN=aa64070a9d60e9bd59ff3c613bf29175360e735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:41:18:1a:28:a7:2d:c2:72:1b:62:ee:f9:
40:d8:98:d3:0f:8e:8d:a7:41:cb:e2:58:21:85:a5:
99:98:72:54:9e:6b:54:1d:f5:92:b4:5e:3a:5f:4a:
f8:54:da:3f:9e:bc:6d:91:28:89:63:c3:05:33:8c:
0b:a5:06:08:52:4b:8f:13:37:31:b2:30:90:c6:8c:
7a:c6:22:0f:6c:96:06:08:20:e3:b2:66:21:23:cf:
34:13:6a:79:16:ce:3d:30:ea:90:51:5f:b5:b0:3b:
b2:95:a6:d2:ca:a2:f7:11:dc:96:b1:75:ae:4b:7f:
f0:0a:ee:2f:9c:56:16:9f:b2:c4:88:94:c0:ca:71:
e9:77:00:19:b0:d1:15:a0:83:50:ff:fb:10:d1:cd:
54:50:24:f7:74:d8:2f:c4:e0:fc:92:18:2b:39:c2:
d3:f7:8b:f6:2a:95:9b:d6:0a:c2:20:61:b6:cd:02:
16:2b:1a:74:f6:18:5c:ef:d8:77:e4:52:49:a0:6f:
19:5b:e4:3c:e8:96:17:1c:3f:58:53:6e:13:6e:cc:
22:1f:2f:a7:f8:c6:2a:90:30:6d:68:6c:1a:15:1d:
dc:e4:84:2a:8d:64:b1:a4:13:ff:99:8f:47:f6:5c:
84:de:99:72:87:9e:85:82:09:e9:74:6e:c8:d6:6b:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:07:0A:9D:60:E9:BD:59:FF:3C:61:3B:F2:91:75:36:0E:73:5A
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b4:98:25:12:1d:dd:0a:74:ac:86:92:f0:71:eb:ca:f5:2f:
2a:bb:f3:d8:19:8b:d2:c5:19:52:6b:d4:d1:07:9e:51:96:4d:
7d:e5:76:f8:09:65:3e:95:b8:6c:2c:20:84:62:79:3e:26:f8:
38:cd:7a:ad:55:20:8a:b8:a4:89:41:44:86:1a:74:01:ea:71:
93:e4:22:84:0e:58:74:b5:7c:9e:ba:61:3d:36:ea:26:ae:08:
cb:c7:a5:07:e9:d8:6c:5a:69:3f:4f:74:ac:b2:eb:75:7a:e9:
8b:db:1e:f0:92:7d:6f:a5:24:4d:b5:78:de:20:ba:ac:9f:32:
90:e0:67:76:e9:e2:3a:47:39:c2:2a:32:a5:bf:8a:2f:58:62:
04:9c:a5:06:86:02:f8:46:23:ea:99:bd:23:23:11:f0:dc:c7:
4c:44:93:4b:a0:f9:73:b1:b0:61:b4:cb:11:cf:b2:6c:e2:74:
39:8d:4d:94:24:3b:76:80:3e:33:97:b4:68:54:82:47:18:75:
b9:9f:8d:21:5f:5d:eb:d0:f2:4f:78:4e:71:96:a4:e0:b7:8e:
5b:4f:b0:b3:d5:28:a3:fd:86:49:46:ff:bc:c0:e7:a0:ec:35:
ad:88:68:81:fe:12:4d:b5:2e:6f:69:7d:53:36:fc:d1:d0:80:
5f:a8:48:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcv5nzcjy6o7OuUjOiU/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjBiNjAxMTM5YmUwMTM1NjllYmY4ZTFiZWI1YTY5NGI5
Yzg3ZWMwHhcNMjUwODIzMDEwMjQyWhcNMjUwODI0MDEwMjQyWjAzMTEwLwYDVQQD
EyhhYTY0MDcwYTlkNjBlOWJkNTlmZjNjNjEzYmYyOTE3NTM2MGU3MzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOpBGBoopy3Cchti7vlA2JjTD46N
p0HL4lghhaWZmHJUnmtUHfWStF46X0r4VNo/nrxtkSiJY8MFM4wLpQYIUkuPEzcx
sjCQxox6xiIPbJYGCCDjsmYhI880E2p5Fs49MOqQUV+1sDuylabSyqL3EdyWsXWu
S3/wCu4vnFYWn7LEiJTAynHpdwAZsNEVoINQ//sQ0c1UUCT3dNgvxOD8khgrOcLT
94v2KpWb1grCIGG2zQIWKxp09hhc79h35FJJoG8ZW+Q86JYXHD9YU24TbswiHy+n
+MYqkDBtaGwaFR3c5IQqjWSxpBP/mY9H9lyE3plyh56FggnpdG7I1mtUGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpkBwqdYOm9Wf88YTvykXU2DnNaMB8GA1UdIwQY
MBaAFGJgtgETm+ATVp6/jhvrWmlLnIfsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEt
MjliYjZhYjJjZjVjLzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEtMjliYjZhYjJjZjVj
LzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLSYJRId
3Qp0rIaS8HHryvUvKrvz2BmL0sUZUmvU0QeeUZZNfeV2+AllPpW4bCwghGJ5Pib4
OM16rVUgirikiUFEhhp0Aepxk+QihA5YdLV8nrphPTbqJq4Iy8elB+nYbFppP090
rLLrdXrpi9se8JJ9b6UkTbV43iC6rJ8ykOBnduniOkc5wioypb+KL1hiBJylBoYC
+EYj6pm9IyMR8NzHTESTS6D5c7GwYbTLEc+ybOJ0OY1NlCQ7doA+M5e0aFSCRxh1
uZ+NIV9d69DyT3hOcZak4LeOW0+ws9Uoo/2GSUb/vMDnoOw1rYhogf4STbUub2l9
Uzb80dCAX6hIOA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:23 2025 by rpki-client