Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: 8710D3ibf/co6Tx3Zx4eXtAPtVtmnb3q/cMlbiyBqlw=
Subject key identifier: A6:56:74:4F:4D:97:47:EB:8B:CD:30:CF:08:87:DC:BC:A1:61:7B:9C
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 0198D660F04E842F08871968E160E0CBD54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 097F
Signing time: Sat 23 Aug 2025 10:02:13 +0000
Manifest this update: Sat 23 Aug 2025 10:02:13 +0000
Manifest next update: Sun 24 Aug 2025 10:02:13 +0000
Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: o9LK1CYa6tF2xdkUrHIamEdnbQRMPMz4i6Lbmq7qwdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f0:4e:84:2f:08:87:19:68:e1:60:e0:cb:d5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Aug 23 10:02:13 2025 GMT
Not After : Aug 24 10:02:13 2025 GMT
Subject: CN=a656744f4d9747eb8bcd30cf0887dcbca1617b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:17:a5:9d:60:55:30:24:e1:6b:9c:5f:d0:
91:6f:5b:59:bc:39:99:b7:9b:02:8a:6d:ba:b2:8f:
4e:a6:a5:13:94:42:c3:b8:e9:15:dc:f7:00:1e:44:
42:cf:49:a1:92:95:5b:c9:24:ba:4e:02:d4:c6:a9:
ad:0e:a0:e9:94:63:65:36:50:28:ed:ed:88:30:56:
e1:52:cf:23:ef:c9:25:b1:60:b7:87:8c:47:0c:8b:
ac:ee:69:8f:1c:aa:f9:38:cc:e8:74:39:0a:bb:89:
60:a1:a3:a9:05:3a:66:92:e4:9e:82:49:0c:fc:fb:
85:42:a7:00:1f:5a:02:cf:8c:0b:79:7d:0a:24:a4:
42:e3:a0:61:00:b2:a9:67:07:52:02:e6:8a:10:80:
88:23:c0:ef:39:77:fc:81:b3:0c:83:e2:1c:9a:59:
9c:b3:17:f2:cc:3b:59:88:37:d6:e4:92:c0:f2:2f:
33:6d:1b:b9:71:e1:a8:41:42:95:5f:b7:22:65:f6:
b5:4e:58:8e:50:01:2b:e3:a9:4a:84:ff:c6:e4:ed:
c1:16:63:f7:6d:96:0c:af:e4:ed:a5:be:54:2a:d5:
a0:3a:8f:b8:bf:c3:f6:fa:1e:70:8e:11:37:f9:61:
7c:3c:69:c7:de:ec:34:cb:ee:96:db:1c:08:aa:8a:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:56:74:4F:4D:97:47:EB:8B:CD:30:CF:08:87:DC:BC:A1:61:7B:9C
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:87:48:50:1b:f8:02:7f:90:99:7d:7c:32:0b:2c:4e:56:8c:
41:54:74:c4:1e:21:ef:0b:8a:92:de:e8:b1:19:4a:d2:14:14:
d3:54:8f:13:1a:33:2c:d3:db:33:e8:41:68:3e:98:bb:ea:12:
4b:da:91:d6:81:92:a2:1f:69:de:bc:a4:71:d6:cd:95:76:0c:
d6:bc:3b:76:75:de:ce:6a:3d:4c:fb:bd:ee:f2:36:47:42:0c:
12:d9:69:f6:d5:56:a7:15:a3:4d:fc:42:42:6c:f1:c1:f5:66:
cf:a0:57:93:1c:72:7f:65:90:f4:e4:ae:d6:4d:e5:68:ee:7a:
a2:fa:ec:58:7c:c9:29:12:0c:51:82:95:71:2e:fa:66:e7:e9:
41:97:ea:ff:50:97:4a:98:b5:29:85:ab:9a:2f:e2:a3:92:f6:
dd:86:f9:b7:e5:49:68:9f:7b:b7:6a:2f:bc:55:10:8c:36:f7:
25:7f:40:ec:70:bb:72:27:f8:96:57:ed:02:4b:91:10:c2:e6:
26:be:7e:3d:05:99:33:4f:db:42:4c:22:da:7c:1c:b7:3c:2d:
2e:cb:a6:68:09:65:4e:00:8e:6d:6e:0f:fa:74:33:e0:b4:d9:
26:2e:e9:d4:b7:1d:62:00:9a:bf:3b:b7:9c:3d:72:92:64:33:
91:1f:41:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYPBOhC8Ihxlo4WDgy9VOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE3MTVjMmY0YjkwMDhjOGY0YjYwNjU0ZjdmM2M3NjM1
M2FlNjcwHhcNMjUwODIzMTAwMjEzWhcNMjUwODI0MTAwMjEzWjAzMTEwLwYDVQQD
EyhhNjU2NzQ0ZjRkOTc0N2ViOGJjZDMwY2YwODg3ZGNiY2ExNjE3YjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd4XpZ1gVTAk4WucX9CRb1tZvDmZ
t5sCim26so9OpqUTlELDuOkV3PcAHkRCz0mhkpVbySS6TgLUxqmtDqDplGNlNlAo
7e2IMFbhUs8j78klsWC3h4xHDIus7mmPHKr5OMzodDkKu4lgoaOpBTpmkuSegkkM
/PuFQqcAH1oCz4wLeX0KJKRC46BhALKpZwdSAuaKEICII8DvOXf8gbMMg+Icmlmc
sxfyzDtZiDfW5JLA8i8zbRu5ceGoQUKVX7ciZfa1TliOUAEr46lKhP/G5O3BFmP3
bZYMr+Ttpb5UKtWgOo+4v8P2+h5wjhE3+WF8PGnH3uw0y+6W2xwIqooOKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZWdE9Nl0fri80wzwiH3LyhYXucMB8GA1UdIwQY
MBaAFGP6cVwvS5AIyPS2BlT388djU65nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEt
NjVhNWVmMGFmMGI0LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEtNjVhNWVmMGFmMGI0
LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYdIUBv4
An+QmX18MgssTlaMQVR0xB4h7wuKkt7osRlK0hQU01SPExozLNPbM+hBaD6Yu+oS
S9qR1oGSoh9p3rykcdbNlXYM1rw7dnXezmo9TPu97vI2R0IMEtlp9tVWpxWjTfxC
QmzxwfVmz6BXkxxyf2WQ9OSu1k3laO56ovrsWHzJKRIMUYKVcS76ZufpQZfq/1CX
Spi1KYWrmi/io5L23Yb5t+VJaJ97t2ovvFUQjDb3JX9A7HC7cif4llftAkuREMLm
Jr5+PQWZM0/bQkwi2nwctzwtLsumaAllTgCObW4P+nQz4LTZJi7p1LcdYgCavzu3
nD1ykmQzkR9Bhw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:52 2025 by rpki-client