Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier: iPCO4GBY3c5koIteVPPR1sPl3JpgwX9yDx2kjdyHMoo=
Subject key identifier: 3B:E4:77:54:99:BF:97:8A:50:AC:5C:50:C1:A7:04:FC:3A:98:13:C7
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 0198D6CD29C878F1418B5997E8555E9FDDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 12:00:26 +0000
Manifest this update: Sat 23 Aug 2025 12:00:26 +0000
Manifest next update: Sun 24 Aug 2025 12:00:26 +0000
Files and hashes: 1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: LY91sPyGGWuEtzWnd57SIP5/YwSt+5YjsbxyicR8/Vw=)
2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=)
3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:29:c8:78:f1:41:8b:59:97:e8:55:5e:9f:dd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Aug 23 12:00:26 2025 GMT
Not After : Aug 24 12:00:26 2025 GMT
Subject: CN=3be4775499bf978a50ac5c50c1a704fc3a9813c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:54:03:50:56:ad:82:73:97:3c:57:e7:be:
67:ee:f9:a5:68:bd:90:fa:4d:73:e2:03:24:13:df:
68:2c:ab:a1:37:78:bf:0d:8c:e9:6d:cd:24:e1:7b:
b0:b1:e1:63:a8:f3:6f:9c:38:1d:66:55:b5:7a:b1:
fb:fe:7f:83:d6:72:a0:63:87:87:45:18:d6:b4:ee:
31:03:60:69:cb:3e:8f:3b:1d:97:f3:8b:1a:aa:f2:
36:78:1e:e3:9f:ca:a8:49:2c:fa:b0:38:70:10:f4:
4d:5d:94:a2:94:1d:b6:79:79:2f:39:be:76:df:60:
87:bb:c4:f5:0d:aa:8d:b8:8f:d5:9d:54:9f:c3:d3:
2a:d3:93:18:86:03:89:3c:2f:84:b0:1e:17:d3:2d:
7c:d9:11:a1:9d:8b:c5:d8:36:d4:36:b7:08:dd:e9:
a3:17:27:2a:e8:b3:74:34:65:51:14:60:57:d4:e3:
3d:0e:3c:8e:b2:01:ac:dd:f5:c9:a6:a9:33:bc:f9:
88:2a:e3:ef:2b:da:a6:fa:2a:a7:69:5b:53:81:fb:
39:69:7d:25:0c:c9:2a:ec:e8:af:2d:3a:5d:10:e1:
be:96:00:19:b1:46:87:ee:32:23:45:ad:3b:92:75:
84:78:8f:df:1d:59:00:02:81:23:3c:d5:70:90:ce:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E4:77:54:99:BF:97:8A:50:AC:5C:50:C1:A7:04:FC:3A:98:13:C7
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:72:06:25:ed:de:19:b9:c2:92:87:5a:fa:85:cb:f2:d9:57:
47:f4:f5:a6:17:c2:1b:ef:dc:e1:70:a0:a4:09:9b:4f:0c:ae:
a6:a1:5c:ea:c8:20:b3:b1:dc:19:4d:86:87:d9:9a:d8:4a:18:
4e:34:92:8c:97:16:08:a5:2c:e5:e7:29:0e:72:03:33:33:16:
65:f7:a4:4f:0a:32:30:1b:70:b2:b7:7e:bb:ae:49:df:f9:ab:
cd:29:a1:40:55:8a:b4:16:cc:84:4f:f0:9c:bb:03:c1:fc:19:
c7:49:28:b9:6e:a0:7f:cc:21:0b:71:1f:ba:c3:44:fd:cf:b8:
a1:79:ff:3e:2f:ed:2a:b0:c9:7a:05:5a:f2:93:0b:79:b0:b4:
12:53:e1:01:ef:39:67:d5:14:f0:e5:1b:71:49:5f:d0:6f:3d:
56:56:a1:27:a3:9a:68:b5:92:15:fd:94:a3:80:66:02:6b:8f:
c4:f2:83:43:d3:fc:be:34:2e:d1:ad:50:d3:75:82:61:22:33:
1c:f5:bf:3c:26:b3:f9:f2:e1:39:6c:2a:d6:f8:5b:19:d4:43:
e9:e2:61:eb:8d:a3:c9:49:68:d6:c3:6e:4d:fa:40:49:09:0e:
c3:71:94:0c:12:ac:5b:fd:0b:34:f7:9e:da:70:4b:2e:05:e4:
c6:06:b5:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzSnIePFBi1mX6FVen93kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5
ZjBhOTMwHhcNMjUwODIzMTIwMDI2WhcNMjUwODI0MTIwMDI2WjAzMTEwLwYDVQQD
EygzYmU0Nzc1NDk5YmY5NzhhNTBhYzVjNTBjMWE3MDRmYzNhOTgxM2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sBUA1BWrYJzlzxX575n7vmlaL2Q
+k1z4gMkE99oLKuhN3i/DYzpbc0k4XuwseFjqPNvnDgdZlW1erH7/n+D1nKgY4eH
RRjWtO4xA2Bpyz6POx2X84saqvI2eB7jn8qoSSz6sDhwEPRNXZSilB22eXkvOb52
32CHu8T1DaqNuI/VnVSfw9Mq05MYhgOJPC+EsB4X0y182RGhnYvF2DbUNrcI3emj
Fycq6LN0NGVRFGBX1OM9DjyOsgGs3fXJpqkzvPmIKuPvK9qm+iqnaVtTgfs5aX0l
DMkq7OivLTpdEOG+lgAZsUaH7jIjRa07knWEeI/fHVkAAoEjPNVwkM5jtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvkd1SZv5eKUKxcUMGnBPw6mBPHMB8GA1UdIwQY
MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt
N2NmZDk1N2YwOGZmLzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm
LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonIGJe3e
GbnCkoda+oXL8tlXR/T1phfCG+/c4XCgpAmbTwyupqFc6sggs7HcGU2Gh9ma2EoY
TjSSjJcWCKUs5ecpDnIDMzMWZfekTwoyMBtwsrd+u65J3/mrzSmhQFWKtBbMhE/w
nLsDwfwZx0kouW6gf8whC3EfusNE/c+4oXn/Pi/tKrDJegVa8pMLebC0ElPhAe85
Z9UU8OUbcUlf0G89VlahJ6OaaLWSFf2Uo4BmAmuPxPKDQ9P8vjQu0a1Q03WCYSIz
HPW/PCaz+fLhOWwq1vhbGdRD6eJh642jyUlo1sNuTfpASQkOw3GUDBKsW/0LNPee
2nBLLgXkxga14g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:43:40 2025 by rpki-client