Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier: nJenV+vHBi3clJWT4e4fb4WglKZZT42OQpLcznxq2w8=
Subject key identifier: 28:C5:23:8A:60:F0:2B:4B:A2:E2:B7:62:08:75:CB:1F:A7:7A:56:A3
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 0198D65F6464E68C5BD0F6343B097AE9E1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 10:00:32 +0000
Manifest this update: Sat 23 Aug 2025 10:00:32 +0000
Manifest next update: Sun 24 Aug 2025 10:00:32 +0000
Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=)
2: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: aeeKpO6WO3brZNnVocdDwSPXyk6bjqWAePeSyxYKC6E=)
3: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:64:64:e6:8c:5b:d0:f6:34:3b:09:7a:e9:e1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Aug 23 10:00:32 2025 GMT
Not After : Aug 24 10:00:32 2025 GMT
Subject: CN=28c5238a60f02b4ba2e2b7620875cb1fa77a56a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:09:7e:ed:16:db:c7:4f:92:3e:2b:d8:4b:
b7:b2:ac:c4:12:a3:77:45:4d:5e:bc:31:9d:56:3c:
dd:df:08:f8:cb:38:62:0d:bf:5b:f5:2f:cc:8c:77:
17:14:38:6e:70:49:13:c5:c1:08:c8:7f:be:af:a1:
ab:1c:0e:94:18:02:9b:02:19:eb:d8:b3:9e:90:c5:
d7:b2:02:be:10:16:30:20:4b:e8:01:ca:d4:4c:6f:
2f:48:e2:84:59:c8:f9:57:38:da:8d:d0:0d:ae:e2:
35:d6:da:9f:cc:58:6a:88:92:5f:4b:79:7d:92:2a:
fa:90:53:a7:39:4d:1d:d8:4e:9a:34:ad:33:13:82:
5a:6b:b4:2d:cb:7c:b8:d5:67:62:52:6f:aa:09:23:
b3:25:0d:0a:a0:1a:0e:f1:ab:51:2a:79:36:a0:bf:
ea:21:6e:e7:26:45:a1:44:95:60:b9:25:f2:9f:fa:
fa:ab:3a:d4:66:55:fe:15:23:04:98:33:46:c4:5e:
8e:1c:c5:a9:41:ee:72:4b:5e:06:07:03:7f:c2:82:
ac:4e:0c:cb:73:a7:06:1f:e8:b7:61:44:57:b9:e9:
70:fa:60:2c:f9:42:e8:92:5b:b8:e6:0a:9b:74:51:
50:2e:1a:db:bc:f6:d5:a1:d3:f4:fb:ac:57:29:eb:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C5:23:8A:60:F0:2B:4B:A2:E2:B7:62:08:75:CB:1F:A7:7A:56:A3
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b0:a9:dc:9f:fb:7d:d6:25:78:e2:17:56:78:45:d1:13:09:
6b:99:bf:cd:3b:f7:69:8d:eb:0e:69:8e:af:e5:d1:54:45:be:
f6:cf:1e:ae:78:92:9e:82:4b:d6:34:44:57:18:f2:17:35:6e:
20:37:8f:38:f2:ae:8a:4f:c8:7b:f2:80:ce:96:6f:bd:b4:80:
5a:9b:9f:b5:c4:7d:5e:5a:97:99:44:18:ac:d6:cb:d2:5c:cc:
89:a3:1d:5d:9b:80:72:e3:42:2b:24:c8:00:66:26:a8:96:36:
c5:27:b7:68:66:ed:5b:0a:ad:f0:04:ac:a0:d7:c3:6c:68:36:
6c:5b:c5:19:51:b6:95:e8:e1:d6:b4:05:3d:0e:8a:b3:75:dc:
36:55:73:4a:a0:86:5b:10:40:5a:73:a9:13:97:a0:14:8d:21:
21:f4:4a:4b:25:42:2d:05:e7:3c:58:d9:63:43:ae:6f:9d:b4:
e9:3e:a2:49:94:f8:9a:96:e7:08:33:af:4a:6c:4c:9c:1d:1a:
05:4a:82:e2:4a:9c:88:81:f0:51:ca:bf:df:4b:a0:75:51:29:
de:ee:a5:7a:13:ed:0f:bb:82:de:d3:93:b5:6c:74:bd:88:60:
9f:cd:8a:2f:33:0e:e9:66:25:62:83:90:54:0e:32:d9:c5:c1:
73:18:c6:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX2Rk5oxb0PY0Owl66eHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2
NDZjMmEwHhcNMjUwODIzMTAwMDMyWhcNMjUwODI0MTAwMDMyWjAzMTEwLwYDVQQD
EygyOGM1MjM4YTYwZjAyYjRiYTJlMmI3NjIwODc1Y2IxZmE3N2E1NmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFgJfu0W28dPkj4r2Eu3sqzEEqN3
RU1evDGdVjzd3wj4yzhiDb9b9S/MjHcXFDhucEkTxcEIyH++r6GrHA6UGAKbAhnr
2LOekMXXsgK+EBYwIEvoAcrUTG8vSOKEWcj5VzjajdANruI11tqfzFhqiJJfS3l9
kir6kFOnOU0d2E6aNK0zE4Jaa7Qty3y41WdiUm+qCSOzJQ0KoBoO8atRKnk2oL/q
IW7nJkWhRJVguSXyn/r6qzrUZlX+FSMEmDNGxF6OHMWpQe5yS14GBwN/woKsTgzL
c6cGH+i3YURXuelw+mAs+ULoklu45gqbdFFQLhrbvPbVodP0+6xXKeuLCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjFI4pg8CtLouK3Ygh1yx+nelajMB8GA1UdIwQY
MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt
NjAxNmQ1YzA1ZjMwLzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQtNjAxNmQ1YzA1ZjMw
LzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7Cp3J/7
fdYleOIXVnhF0RMJa5m/zTv3aY3rDmmOr+XRVEW+9s8erniSnoJL1jREVxjyFzVu
IDePOPKuik/Ie/KAzpZvvbSAWpuftcR9XlqXmUQYrNbL0lzMiaMdXZuAcuNCKyTI
AGYmqJY2xSe3aGbtWwqt8ASsoNfDbGg2bFvFGVG2lejh1rQFPQ6Ks3XcNlVzSqCG
WxBAWnOpE5egFI0hIfRKSyVCLQXnPFjZY0Oub5206T6iSZT4mpbnCDOvSmxMnB0a
BUqC4kqciIHwUcq/30ugdVEp3u6lehPtD7uC3tOTtWx0vYhgn82KLzMO6WYlYoOQ
VA4y2cXBcxjG8A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:26 2025 by rpki-client