Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: VHgkQWXlImCluZProsSFslyYhsBJWPQfxCrwWt9+eoE=
Subject key identifier: 47:46:AF:51:06:D1:AC:EE:EE:95:88:23:95:60:D2:AB:F0:57:E3:25
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 0198D850693BAD9899FB4BA0F6303C4EE028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0A6E
Signing time: Sat 23 Aug 2025 19:03:25 +0000
Manifest this update: Sat 23 Aug 2025 19:03:25 +0000
Manifest next update: Sun 24 Aug 2025 19:03:25 +0000
Files and hashes: 1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: RECSqouQefrlp9IDEkrPRhI3JQPrqE4TwkK2I3BKFPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:69:3b:ad:98:99:fb:4b:a0:f6:30:3c:4e:e0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Aug 23 19:03:25 2025 GMT
Not After : Aug 24 19:03:25 2025 GMT
Subject: CN=4746af5106d1aceeee9588239560d2abf057e325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:60:15:28:b2:c8:74:82:27:6d:3f:ce:0b:8b:
a6:8a:bc:bd:a3:b0:8b:18:89:da:64:c0:93:e8:92:
fd:6b:05:4a:50:ab:19:9b:ad:4e:a4:a7:da:bc:43:
1d:cd:96:3a:19:98:99:c0:98:af:2d:d5:88:7f:ea:
8e:37:10:22:95:9a:25:35:ff:6a:94:89:b7:cf:3c:
e7:50:4a:30:d6:62:36:d8:f5:fc:3d:70:82:7d:c9:
ba:b6:26:41:e8:81:ba:03:da:ab:ec:5c:6b:3b:96:
0c:50:62:fa:b4:f6:68:2d:e1:27:15:c8:ea:16:07:
aa:26:8f:74:b7:0a:cc:0b:06:a6:2c:6e:7a:ae:36:
0a:db:c6:f0:a8:0f:23:3f:55:b1:79:93:48:a2:90:
90:04:5e:1c:de:52:77:7e:9d:05:6b:c0:25:55:22:
fc:5a:1e:ee:5c:11:1c:1a:45:c7:26:d4:0c:fe:a9:
0e:9d:81:f1:22:33:58:b5:41:91:c5:87:32:81:1e:
dd:20:d7:3b:e0:4d:df:6b:75:e3:ee:33:34:49:fd:
53:e6:5d:6e:a0:21:62:7d:17:30:73:b4:5e:6d:82:
c1:77:ef:91:8a:69:dd:98:da:8b:97:ec:c1:52:36:
05:90:a1:46:9d:6a:13:7b:c5:4d:0b:f8:b8:13:99:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:46:AF:51:06:D1:AC:EE:EE:95:88:23:95:60:D2:AB:F0:57:E3:25
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:17:cb:99:b8:1c:4b:90:41:26:5a:87:31:76:cf:d5:f9:bf:
8d:7b:a2:b4:ee:23:1d:d7:b3:4f:16:af:96:c8:5a:69:80:c5:
03:98:08:17:a5:ad:cc:a7:fa:cb:a5:c1:49:5e:e5:ab:9b:87:
a9:0f:12:d5:40:f3:2c:ef:3c:13:39:95:84:ec:e0:e0:0f:9e:
38:88:2c:10:8f:54:28:18:5b:7c:66:f3:18:6c:3d:e0:11:6d:
eb:77:d6:a6:5d:16:1e:b2:93:51:52:79:12:36:b5:b4:04:8d:
48:ff:69:a5:40:06:b0:c9:af:e6:81:e9:60:11:c1:70:d0:ee:
1f:0f:61:f8:7a:94:4c:65:2f:1e:a1:e6:dd:d4:4f:7c:3b:65:
5b:bd:b3:22:20:b6:ba:52:c6:9c:84:c7:d6:d6:3c:cc:eb:a5:
e0:72:19:2f:9d:5f:b9:08:29:6a:ff:e3:24:47:dc:83:09:4c:
20:c3:a5:49:de:df:84:d7:c5:ae:9d:76:4b:c2:2a:77:14:0c:
99:54:4f:3e:9b:a5:f8:8e:b3:ea:75:30:30:34:2a:f7:ef:80:
29:51:ee:7a:db:ff:cc:1d:53:41:37:f4:4b:ee:14:f5:76:3d:
f8:de:42:75:55:74:5f:e1:ae:ed:3f:82:d0:15:2d:4c:cc:3a:
3e:e1:d0:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUGk7rZiZ+0ug9jA8TuAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjliYWFiMWExM2RmMzBlZmYwZmNkNzgwYzRiYmM1NGJj
M2U2ZDUwHhcNMjUwODIzMTkwMzI1WhcNMjUwODI0MTkwMzI1WjAzMTEwLwYDVQQD
Eyg0NzQ2YWY1MTA2ZDFhY2VlZWU5NTg4MjM5NTYwZDJhYmYwNTdlMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42AVKLLIdIInbT/OC4umiry9o7CL
GInaZMCT6JL9awVKUKsZm61OpKfavEMdzZY6GZiZwJivLdWIf+qONxAilZolNf9q
lIm3zzznUEow1mI22PX8PXCCfcm6tiZB6IG6A9qr7FxrO5YMUGL6tPZoLeEnFcjq
FgeqJo90twrMCwamLG56rjYK28bwqA8jP1WxeZNIopCQBF4c3lJ3fp0Fa8AlVSL8
Wh7uXBEcGkXHJtQM/qkOnYHxIjNYtUGRxYcygR7dINc74E3fa3Xj7jM0Sf1T5l1u
oCFifRcwc7RebYLBd++RimndmNqLl+zBUjYFkKFGnWoTe8VNC/i4E5looQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdGr1EG0azu7pWII5Vg0qvwV+MlMB8GA1UdIwQY
MBaAFMj5uqsaE98w7/D814DEu8VLw+bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDIt
ZGI0ODRjY2U3MjkzLzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDItZGI0ODRjY2U3Mjkz
LzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRfLmbgc
S5BBJlqHMXbP1fm/jXuitO4jHdezTxavlshaaYDFA5gIF6WtzKf6y6XBSV7lq5uH
qQ8S1UDzLO88EzmVhOzg4A+eOIgsEI9UKBhbfGbzGGw94BFt63fWpl0WHrKTUVJ5
Eja1tASNSP9ppUAGsMmv5oHpYBHBcNDuHw9h+HqUTGUvHqHm3dRPfDtlW72zIiC2
ulLGnITH1tY8zOul4HIZL51fuQgpav/jJEfcgwlMIMOlSd7fhNfFrp12S8IqdxQM
mVRPPpul+I6z6nUwMDQq9++AKVHuetv/zB1TQTf0S+4U9XY9+N5CdVV0X+Gu7T+C
0BUtTMw6PuHQ/A==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:16 2025 by rpki-client