Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: 5nmm3re1c1UcHbJ7s1dCDSujOVzQj8DUiEu4IxG8oqo=
Subject key identifier: 6E:81:C4:6E:B3:D0:9A:1D:E6:6C:45:A0:47:70:A5:36:18:C6:94:8E
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 0198D5BBF4442C36DA9E4BF603DF6DAFE7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (hash: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: jS50YbZ17jSvTNic/JpEcZjMqrD8cLyvnxVoPAgrizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f4:44:2c:36:da:9e:4b:f6:03:df:6d:af:e7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=6e81c46eb3d09a1de66c45a04770a53618c6948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:19:e6:d0:03:fe:40:2d:fa:2e:86:06:17:
a8:1f:d2:13:66:62:7b:b2:cc:8e:74:6e:52:69:2f:
43:00:18:5a:1d:00:ee:7e:35:9b:a9:b3:1d:e3:ea:
1b:b9:9f:b6:c3:ea:8b:99:cd:54:4b:27:37:03:d7:
59:8a:c8:b1:79:ce:08:37:c1:2c:ae:4d:52:27:d7:
21:a0:a4:39:2c:16:65:8e:a9:97:1a:09:22:74:ac:
0f:b8:3f:6d:9d:bc:10:ed:a3:44:d9:1a:96:07:00:
ed:14:b9:c4:ab:e3:00:28:fa:59:97:6f:24:4f:73:
7f:61:9c:52:ff:cf:71:5d:86:51:bb:b5:ef:b2:39:
23:11:4a:b6:0f:ad:31:2d:bc:9c:f7:82:9b:7f:b8:
50:86:1b:3a:27:e5:8c:b2:93:c8:11:38:a5:56:31:
e2:62:a8:80:bd:41:9f:4f:30:08:87:c8:fe:a7:9a:
20:c4:e6:25:d7:62:ad:51:bf:86:2d:c3:fa:c4:5a:
47:8c:e9:70:03:e4:83:e0:d8:f1:f1:ed:16:4b:82:
f5:19:67:a1:76:ac:6e:d9:43:12:42:60:9f:c5:26:
50:4c:9e:88:63:f1:fc:85:82:02:84:78:6b:af:d8:
eb:83:82:10:8c:c9:26:06:47:a7:f0:50:22:e0:d0:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:C4:6E:B3:D0:9A:1D:E6:6C:45:A0:47:70:A5:36:18:C6:94:8E
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:57:06:27:3e:88:a0:8b:9b:56:24:02:5f:f1:e8:9a:f7:ff:
8d:2c:07:2a:91:b5:77:9a:b2:c9:54:73:5e:a2:8a:41:e4:3c:
48:38:9c:8a:94:14:f7:9a:5e:ce:5e:d5:47:34:c0:8b:2b:30:
20:21:21:7c:e0:2e:40:8b:f6:07:43:73:b4:70:ba:ac:f6:8e:
39:b2:b0:e0:3f:9f:d2:27:56:46:13:86:45:da:60:b8:fd:be:
e3:3e:22:83:65:75:37:3d:0e:2d:2d:a0:a7:4e:dd:66:18:d5:
1e:2c:de:d7:a1:e8:21:c2:5a:86:df:da:3f:22:62:b7:db:88:
c8:66:42:dd:9b:f0:f9:34:67:9a:31:95:1b:45:2e:71:de:37:
08:fa:c3:e3:73:d6:13:3d:a2:ae:21:98:b6:ba:f6:77:6b:e8:
b9:62:a4:fc:39:d0:2e:56:91:fd:e2:7b:29:10:eb:79:a0:35:
5a:8f:70:8a:dd:f8:f6:bf:0c:62:a5:42:04:5d:fe:8c:44:db:
7d:d2:75:ad:44:7d:4d:56:ad:1f:7c:db:5c:52:84:e4:2d:7e:
75:57:1a:4b:be:90:93:a2:24:dc:67:ee:67:b9:0b:90:7b:9d:
37:ea:c4:67:a0:4b:b7:6e:d6:1a:58:42:6e:9b:17:ac:29:9e:
b4:75:cc:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/RELDbankv2A99tr+fMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjcwZDk3ZWRmMjhjNzYwNzZjMGYwNjliNTJiY2Q4ZTI2
YWUwYmQwHhcNMjUwODIzMDcwMjAxWhcNMjUwODI0MDcwMjAxWjAzMTEwLwYDVQQD
Eyg2ZTgxYzQ2ZWIzZDA5YTFkZTY2YzQ1YTA0NzcwYTUzNjE4YzY5NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMsZ5tAD/kAt+i6GBheoH9ITZmJ7
ssyOdG5SaS9DABhaHQDufjWbqbMd4+obuZ+2w+qLmc1USyc3A9dZisixec4IN8Es
rk1SJ9choKQ5LBZljqmXGgkidKwPuD9tnbwQ7aNE2RqWBwDtFLnEq+MAKPpZl28k
T3N/YZxS/89xXYZRu7XvsjkjEUq2D60xLbyc94Kbf7hQhhs6J+WMspPIETilVjHi
YqiAvUGfTzAIh8j+p5ogxOYl12KtUb+GLcP6xFpHjOlwA+SD4Njx8e0WS4L1GWeh
dqxu2UMSQmCfxSZQTJ6IY/H8hYIChHhrr9jrg4IQjMkmBken8FAi4NCCpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6BxG6z0Jod5mxFoEdwpTYYxpSOMB8GA1UdIwQY
MBaAFMm3DZft8ox2B2wPBptSvNjiauC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYt
ODk3M2IyZDcwNjJjLzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYtODk3M2IyZDcwNjJj
LzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlcGJz6I
oIubViQCX/Homvf/jSwHKpG1d5qyyVRzXqKKQeQ8SDicipQU95pezl7VRzTAiysw
ICEhfOAuQIv2B0NztHC6rPaOObKw4D+f0idWRhOGRdpguP2+4z4ig2V1Nz0OLS2g
p07dZhjVHize16HoIcJaht/aPyJit9uIyGZC3Zvw+TRnmjGVG0Uucd43CPrD43PW
Ez2iriGYtrr2d2vouWKk/DnQLlaR/eJ7KRDreaA1Wo9wit349r8MYqVCBF3+jETb
fdJ1rUR9TVatH3zbXFKE5C1+dVcaS76Qk6Ik3GfuZ7kLkHudN+rEZ6BLt27WGlhC
bpsXrCmetHXMbw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:51 2025 by rpki-client