Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier: pdNDmERUrlv1T18eQ2/7R/zprL9UDqq37jrXBstuCuM=
Subject key identifier: 17:71:0B:58:FE:18:65:0C:82:C2:B1:29:CB:85:55:ED:96:EB:03:98
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 0198D5157F9686DE652154F8665AC967AEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number: 03A9
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: q46mhqb037SisDm5N4bZ1WyfVUE.roa (hash: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=)
2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: Iw96an0R6thjTJS8bWZDGbo4HK/jSOpb9N++RJcDBTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7f:96:86:de:65:21:54:f8:66:5a:c9:67:ae:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=17710b58fe18650c82c2b129cb8555ed96eb0398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:01:ee:11:8a:93:fe:79:4f:18:17:8c:67:
4d:52:19:de:f0:10:65:7e:fe:d0:df:82:3b:f2:4a:
cf:ce:98:70:4e:e6:59:16:f7:87:d8:5b:9f:02:f1:
06:83:2b:5a:58:e2:d7:54:fb:04:78:bc:61:8e:53:
a3:c7:58:d3:2c:a2:0d:93:25:65:d6:70:a4:3b:a3:
5c:fc:d9:bd:88:75:91:ed:a0:14:bf:63:af:5e:f4:
8c:d6:90:e8:e7:b9:43:38:22:a2:04:97:ec:46:e3:
a0:17:f4:91:b5:81:fb:4a:62:55:e0:cf:6e:35:30:
4b:75:1b:29:61:c7:66:34:f2:2e:cd:81:71:0b:cd:
4d:d3:19:d1:13:ef:61:9f:fc:86:8c:53:c4:3f:93:
de:23:84:4e:c7:2b:fb:fa:8f:12:9e:b6:7d:04:42:
be:be:7c:4c:85:7f:0e:df:d8:81:23:1a:ad:d5:21:
28:0c:7c:ea:ee:55:b5:1f:1b:b2:1f:a2:5f:9c:1d:
45:c4:ae:c2:73:a2:7f:cd:7b:ee:2d:e8:bf:5d:67:
25:eb:5a:3b:7d:89:fd:89:9c:56:93:83:9f:31:8c:
d8:27:6e:19:4f:ad:2c:95:25:7b:f9:45:55:a6:de:
b8:37:e6:fc:d5:82:a9:08:ec:e4:c6:d0:e4:03:3e:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:71:0B:58:FE:18:65:0C:82:C2:B1:29:CB:85:55:ED:96:EB:03:98
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:35:3d:8b:9e:fe:4d:f9:bb:98:70:82:db:37:2c:6f:62:1b:
47:9b:85:9b:7b:f7:a2:3c:a1:7b:86:ea:1c:97:d5:f3:fa:8a:
8b:25:18:37:5c:08:59:e3:9a:13:a4:02:0a:37:7d:de:a7:3b:
db:19:16:10:7e:da:a7:c6:60:df:7d:28:4a:72:d1:7d:2d:c3:
2a:aa:64:d4:82:d2:e8:5b:ad:b1:35:78:45:14:f7:63:bd:89:
10:01:1f:97:7c:10:f8:a8:86:c7:dd:36:06:74:8c:06:cd:eb:
00:41:87:4f:ca:79:e0:fd:fe:60:17:d5:5e:a2:20:10:ca:9e:
fc:aa:65:47:fb:95:28:c4:6e:f9:9e:78:73:16:01:7c:0b:d7:
38:72:3f:ae:d3:f5:fb:0f:b2:dc:b2:05:74:61:95:a0:82:10:
76:95:7d:4e:e9:83:f2:28:3a:26:99:52:af:76:32:09:4f:00:
3a:58:8f:a0:62:2b:97:92:d7:a8:b3:2d:1b:d3:69:69:f0:d4:
7f:b9:b0:2a:d0:13:9e:e1:ae:c8:06:5b:6f:b2:69:5d:a2:8a:
17:0c:6c:89:2f:fa:3f:93:df:0f:24:3f:a2:ce:73:49:01:33:
8f:80:fd:eb:cb:7f:7c:80:4c:d0:2c:1b:ff:b1:8f:43:47:9d:
a5:71:7d:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFX+Wht5lIVT4ZlrJZ67FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTlmYzcyNWIwYzNlZjEwMzczNDYwZjliZjU5YmNlM2Vk
NTBhMzQwHhcNMjUwODIzMDQwMDEyWhcNMjUwODI0MDQwMDEyWjAzMTEwLwYDVQQD
EygxNzcxMGI1OGZlMTg2NTBjODJjMmIxMjljYjg1NTVlZDk2ZWIwMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAwB7hGKk/55TxgXjGdNUhne8BBl
fv7Q34I78krPzphwTuZZFveH2FufAvEGgytaWOLXVPsEeLxhjlOjx1jTLKINkyVl
1nCkO6Nc/Nm9iHWR7aAUv2OvXvSM1pDo57lDOCKiBJfsRuOgF/SRtYH7SmJV4M9u
NTBLdRspYcdmNPIuzYFxC81N0xnRE+9hn/yGjFPEP5PeI4ROxyv7+o8SnrZ9BEK+
vnxMhX8O39iBIxqt1SEoDHzq7lW1HxuyH6JfnB1FxK7Cc6J/zXvuLei/XWcl61o7
fYn9iZxWk4OfMYzYJ24ZT60slSV7+UVVpt64N+b81YKpCOzkxtDkAz6yEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdxC1j+GGUMgsKxKcuFVe2W6wOYMB8GA1UdIwQY
MBaAFMvp/HJbDD7xA3NGD5v1m84+1Qo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDIt
NTVhNTRkZjE0MzRlLzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDItNTVhNTRkZjE0MzRl
LzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDU9i57+
Tfm7mHCC2zcsb2IbR5uFm3v3ojyhe4bqHJfV8/qKiyUYN1wIWeOaE6QCCjd93qc7
2xkWEH7ap8Zg330oSnLRfS3DKqpk1ILS6FutsTV4RRT3Y72JEAEfl3wQ+KiGx902
BnSMBs3rAEGHT8p54P3+YBfVXqIgEMqe/KplR/uVKMRu+Z54cxYBfAvXOHI/rtP1
+w+y3LIFdGGVoIIQdpV9TumD8ig6JplSr3YyCU8AOliPoGIrl5LXqLMtG9NpafDU
f7mwKtATnuGuyAZbb7JpXaKKFwxsiS/6P5PfDyQ/os5zSQEzj4D968t/fIBM0Cwb
/7GPQ0edpXF9vw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:38 2025 by rpki-client