Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: poUmeMOG+jZlgB+YZs3/ahcI1FaD/ce0ELucTQwNr9U=
Subject key identifier: 28:A1:2F:EB:87:15:5D:9D:AB:25:F1:FB:A3:63:AA:FB:01:5D:C5:57
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 0198D4A79FE58C9A164AA92CD2E2621D8AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 0952
Signing time: Sat 23 Aug 2025 02:00:11 +0000
Manifest this update: Sat 23 Aug 2025 02:00:11 +0000
Manifest next update: Sun 24 Aug 2025 02:00:11 +0000
Files and hashes: 1: EdKvKktbhV253248rH8OS7KgOJc.roa (hash: OVq8FxeeYttd7uYMiCGl4rm6BCNN8JrWv82y6k+zOKs=)
2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: HGLtkBcZsGJjr/0P8DyRbBg5lyLzaRQCUjrjNDRJUcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9f:e5:8c:9a:16:4a:a9:2c:d2:e2:62:1d:8a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Aug 23 02:00:11 2025 GMT
Not After : Aug 24 02:00:11 2025 GMT
Subject: CN=28a12feb87155d9dab25f1fba363aafb015dc557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:b0:28:22:36:db:49:ba:49:af:e8:a5:57:
50:df:d6:9e:e3:3a:68:46:e5:40:40:f5:ae:c2:61:
41:c6:8b:f7:15:c9:1e:93:a9:ea:96:65:a1:a3:23:
79:10:4f:f9:dc:f5:64:ee:36:7d:0d:61:d2:a9:62:
a4:33:5c:ed:0d:7d:a6:ef:1e:d7:3c:10:47:09:42:
6f:9c:52:32:e7:32:b8:25:d1:82:e7:53:66:b6:b8:
50:f9:78:c8:fe:8a:84:3f:f4:54:06:60:3b:f1:3b:
20:63:89:2d:71:b7:31:a8:5c:a2:2d:3f:dc:86:27:
05:e9:3b:90:a1:76:59:84:f3:5a:df:a1:5c:e7:46:
e7:33:de:03:b6:f7:6a:b1:37:d0:05:8b:85:35:f1:
ad:2d:f5:b0:18:01:79:04:89:55:7e:64:66:d8:46:
5c:21:db:52:60:4b:4f:7b:39:f8:be:42:b1:01:38:
0d:a6:8f:3a:fe:b4:4a:76:5f:c5:99:4b:38:41:fe:
8f:7b:51:2f:35:86:b3:8d:a3:45:d1:12:34:43:66:
36:4e:9a:5a:86:ce:ef:98:9f:62:a6:4b:8a:b1:b1:
f2:b8:27:4b:a4:38:07:52:bb:e0:bf:f1:84:51:57:
a6:f1:3a:a1:66:4d:99:2c:97:3a:c4:1b:9e:77:47:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A1:2F:EB:87:15:5D:9D:AB:25:F1:FB:A3:63:AA:FB:01:5D:C5:57
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ff:a4:21:75:01:5d:ec:7f:ab:e4:16:42:91:7f:71:1e:67:
ec:36:fd:2d:1f:12:91:c3:23:f7:45:86:c2:2f:ec:a9:b8:47:
b1:75:a4:55:34:8c:97:56:ed:e7:63:fa:90:28:ba:cd:88:dc:
2f:1c:7e:cc:10:ab:7d:39:d2:02:9e:f7:55:98:82:2c:9e:db:
8c:22:3b:a8:7f:03:0e:c9:93:65:6c:a4:08:c6:6f:12:26:46:
74:25:63:4d:17:d5:0c:a0:0b:8e:e9:2a:91:f5:90:25:4b:c2:
79:4e:18:73:16:34:1c:80:f2:46:f8:5e:15:b9:38:31:8a:19:
08:ec:13:a0:82:38:a2:c8:c0:da:67:5c:34:00:66:fd:24:39:
1e:9e:85:c9:be:6d:46:cf:c3:d4:b9:d6:5b:fb:cd:f2:bf:7c:
26:f6:ea:06:6a:b4:c8:db:ee:03:0f:74:e3:99:b6:96:d1:44:
c8:b7:93:de:1e:61:7f:b4:a7:6b:e5:a9:c8:19:47:0e:1f:a9:
9f:cc:a9:f1:08:d5:a6:90:68:fd:f6:a2:1a:6b:5c:f8:de:5d:
76:8d:63:7a:98:8e:5f:03:2b:06:4d:20:59:e9:6f:42:0c:12:
2b:a2:a4:fd:af:cc:dd:13:d1:ee:65:35:82:91:38:28:ec:25:
11:c3:2d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp5/ljJoWSqks0uJiHYr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ODk2NjBiZjE0N2Y2MjhmYjdjZjhiMjcxODczN2ZlYTg2
Mjk4ZDAwHhcNMjUwODIzMDIwMDExWhcNMjUwODI0MDIwMDExWjAzMTEwLwYDVQQD
EygyOGExMmZlYjg3MTU1ZDlkYWIyNWYxZmJhMzYzYWFmYjAxNWRjNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst2wKCI220m6Sa/opVdQ39ae4zpo
RuVAQPWuwmFBxov3Fckek6nqlmWhoyN5EE/53PVk7jZ9DWHSqWKkM1ztDX2m7x7X
PBBHCUJvnFIy5zK4JdGC51NmtrhQ+XjI/oqEP/RUBmA78TsgY4ktcbcxqFyiLT/c
hicF6TuQoXZZhPNa36Fc50bnM94DtvdqsTfQBYuFNfGtLfWwGAF5BIlVfmRm2EZc
IdtSYEtPezn4vkKxATgNpo86/rRKdl/FmUs4Qf6Pe1EvNYazjaNF0RI0Q2Y2Tppa
hs7vmJ9ipkuKsbHyuCdLpDgHUrvgv/GEUVem8TqhZk2ZLJc6xBued0eBRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCihL+uHFV2dqyXx+6NjqvsBXcVXMB8GA1UdIwQY
MBaAFMmJZgvxR/Yo+3z4snGHN/6oYpjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYt
YzE5ODY1M2FhYzVmLzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYtYzE5ODY1M2FhYzVm
LzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv+kIXUB
Xex/q+QWQpF/cR5n7Db9LR8SkcMj90WGwi/sqbhHsXWkVTSMl1bt52P6kCi6zYjc
Lxx+zBCrfTnSAp73VZiCLJ7bjCI7qH8DDsmTZWykCMZvEiZGdCVjTRfVDKALjukq
kfWQJUvCeU4YcxY0HIDyRvheFbk4MYoZCOwToII4osjA2mdcNABm/SQ5Hp6Fyb5t
Rs/D1LnWW/vN8r98JvbqBmq0yNvuAw9045m2ltFEyLeT3h5hf7Sna+WpyBlHDh+p
n8yp8QjVppBo/faiGmtc+N5ddo1jepiOXwMrBk0gWelvQgwSK6Kk/a/M3RPR7mU1
gpE4KOwlEcMtzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:52 2025 by rpki-client