
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
File: ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json)
Hash identifier: 4jQi9EnA4kCx+AUsG2VwnXFBfqWmgZM6qy8fm40sag0=
Subject key identifier: 6D:D2:3A:34:61:F2:C1:43:05:EB:2E:EC:D2:0A:68:04:64:30:9C:24
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial: 0198D661815E2C176548492F44DA080487DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:50 +0000
Manifest this update: Sat 23 Aug 2025 10:02:50 +0000
Manifest next update: Sun 24 Aug 2025 10:02:50 +0000
Files and hashes: 1: u2ztrN64ny4t-5qedlgZVwCCd-I.roa (hash: L/fv9+pcl735U5hA8Uy57NEou3lVd9gt0o2oOToLmgY=)
2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: 9b4UNmzmEj8oGw3tekMGFsmWoZzB8vJnybcl7jypBfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:81:5e:2c:17:65:48:49:2f:44:da:08:04:87:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Validity
Not Before: Aug 23 10:02:50 2025 GMT
Not After : Aug 24 10:02:50 2025 GMT
Subject: CN=6dd23a3461f2c14305eb2eecd20a680464309c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:f4:30:b2:26:65:0f:c6:5d:63:d2:5b:88:
33:62:f4:65:98:0e:a2:38:3d:31:35:a9:e3:c2:d4:
e7:8e:90:78:fe:fb:fe:68:af:16:9f:33:a8:4f:4c:
49:18:00:00:89:16:02:53:ed:b8:ab:21:64:58:73:
e4:3e:cf:93:e2:ff:db:43:37:85:22:7e:19:c8:27:
51:c6:6d:38:65:1c:39:6a:fd:08:1c:d3:d6:e6:4a:
7f:c8:9a:8d:d5:07:a6:e0:54:c3:b4:04:b6:1f:78:
63:d5:9b:3b:3f:94:62:b4:a3:6c:76:bb:02:c5:01:
b0:c3:82:c7:b0:98:02:7a:18:8c:3c:92:35:92:97:
eb:fe:aa:95:80:65:95:a9:bb:83:4f:19:79:48:d5:
1e:59:19:e4:4c:e7:bd:95:ef:a6:af:7e:d0:af:dc:
18:3e:da:93:a4:b3:64:3b:79:c4:38:9c:3c:d9:4e:
00:bf:42:03:4c:2d:ef:a2:f5:4a:c3:e3:6c:a9:f0:
fc:85:b5:16:6b:1e:a8:4e:07:3a:b7:30:2e:22:b7:
85:6b:d8:11:9f:10:68:e9:48:6a:50:13:b6:29:7f:
c2:6f:7d:c5:f9:43:4f:a4:7b:13:89:66:47:f6:92:
08:3c:c4:c4:05:16:7c:48:27:63:69:c1:a5:f5:91:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D2:3A:34:61:F2:C1:43:05:EB:2E:EC:D2:0A:68:04:64:30:9C:24
X509v3 Authority Key Identifier:
keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:47:de:84:6c:3d:8d:6e:fc:3d:d6:24:18:60:7b:fb:7f:01:
58:38:96:1b:8a:fe:9d:ba:97:50:bd:bd:1c:6c:66:8f:81:3a:
0a:16:b5:4c:62:f3:67:b1:32:bc:10:3b:81:ad:b0:97:e6:da:
ac:f4:34:20:cd:d4:19:84:48:65:bf:83:07:58:62:6c:35:10:
9c:80:93:96:69:e6:c3:1f:f2:ca:84:be:38:57:c2:7d:8d:21:
71:db:ab:6c:6f:d6:9f:37:c1:07:d3:42:9d:d1:8b:e6:b8:9e:
86:4f:f2:11:37:64:97:0f:1b:76:41:95:16:93:be:51:dc:6d:
cd:c1:8c:85:71:bf:07:21:45:ce:08:2e:35:92:5e:ef:ca:cf:
c0:17:95:d5:52:13:14:0d:97:dd:17:d8:b8:e3:1e:e1:6c:d8:
bf:5f:bc:f7:9e:4d:4c:e3:6f:10:74:72:3a:99:cb:47:90:4c:
d2:15:ac:78:1b:a1:3b:77:e5:a6:3d:d2:bc:7b:9b:ab:bc:79:
ba:e3:07:ba:b8:d5:d6:22:80:88:b7:be:08:b4:79:c3:a0:05:
c0:92:79:cc:28:59:97:3a:29:d6:8b:4b:f5:10:ab:11:01:6f:
65:8a:20:9a:00:ef:cc:bf:8d:80:9b:ca:48:82:9e:a0:80:19:
1e:61:3d:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYYFeLBdlSEkvRNoIBIfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjRkNjgyM2VjYjI4YjRhMzVlNDBkYzExZWYyMjljYjIz
NzVjZGYwHhcNMjUwODIzMTAwMjUwWhcNMjUwODI0MTAwMjUwWjAzMTEwLwYDVQQD
Eyg2ZGQyM2EzNDYxZjJjMTQzMDVlYjJlZWNkMjBhNjgwNDY0MzA5YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5L0MLImZQ/GXWPSW4gzYvRlmA6i
OD0xNanjwtTnjpB4/vv+aK8WnzOoT0xJGAAAiRYCU+24qyFkWHPkPs+T4v/bQzeF
In4ZyCdRxm04ZRw5av0IHNPW5kp/yJqN1Qem4FTDtAS2H3hj1Zs7P5RitKNsdrsC
xQGww4LHsJgCehiMPJI1kpfr/qqVgGWVqbuDTxl5SNUeWRnkTOe9le+mr37Qr9wY
PtqTpLNkO3nEOJw82U4Av0IDTC3vovVKw+NsqfD8hbUWax6oTgc6tzAuIreFa9gR
nxBo6UhqUBO2KX/Cb33F+UNPpHsTiWZH9pIIPMTEBRZ8SCdjacGl9ZF8CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3SOjRh8sFDBesu7NIKaARkMJwkMB8GA1UdIwQY
MBaAFMm01oI+yyi0o15A3BHvIpyyN1zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQt
OWZhOTVhYTliMDc5LzEveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQtOWZhOTVhYTliMDc5
LzEveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUfehGw9
jW78PdYkGGB7+38BWDiWG4r+nbqXUL29HGxmj4E6Cha1TGLzZ7EyvBA7ga2wl+ba
rPQ0IM3UGYRIZb+DB1hibDUQnICTlmnmwx/yyoS+OFfCfY0hcdurbG/WnzfBB9NC
ndGL5riehk/yETdklw8bdkGVFpO+UdxtzcGMhXG/ByFFzgguNZJe78rPwBeV1VIT
FA2X3RfYuOMe4WzYv1+8955NTONvEHRyOpnLR5BM0hWseBuhO3flpj3SvHubq7x5
uuMHurjV1iKAiLe+CLR5w6AFwJJ5zChZlzop1otL9RCrEQFvZYogmgDvzL+NgJvK
SIKeoIAZHmE9tQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:34 2025 by rpki-client