Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: gtTeAr5jgqChyv/h4Ge4bA+NEhxkPUSh1KXFBl2dcSM=
Subject key identifier: BF:E2:04:EF:55:CD:25:D4:A0:76:EF:6D:1E:93:74:6E:A0:07:52:B2
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 0198D5BBD2D0C852B02A65330CCD2D7F6A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 0F9A
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: CIZ/yrLOtC0PT4XJ24Y3ARwYWBYSTGT0qI5q1eoDNj4=)
2: _DQ1KzWidoIdXZoVyvdN20rg8gM.roa (hash: EOelW7rq3NkXTukVpXSmytqfvzEOSEmblKrH2XLqMOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d2:d0:c8:52:b0:2a:65:33:0c:cd:2d:7f:6a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=bfe204ef55cd25d4a076ef6d1e93746ea00752b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:bc:e8:7a:6b:c0:17:92:d3:2a:5d:d8:81:
0d:9b:be:67:60:4b:b6:df:91:cc:f4:03:b9:29:b3:
3a:aa:ec:3f:67:2d:ad:d9:4f:2a:98:0e:19:b1:d4:
d7:b0:1a:57:27:03:ad:08:bf:ce:dc:27:92:81:23:
de:5a:83:53:14:58:6e:24:64:7b:7e:80:23:42:80:
b4:44:e5:64:5c:57:22:54:1a:fe:16:b1:f9:a7:fa:
75:e4:6d:d0:37:92:07:fa:f0:a4:53:66:ea:71:d7:
98:2b:d8:8a:91:bb:6a:59:99:55:67:35:ac:62:7f:
00:a4:65:5c:bf:80:31:e1:fe:25:06:4e:12:c8:55:
6e:71:18:2f:b2:3a:c1:b9:b4:f8:97:38:4f:66:19:
fd:fb:5d:85:94:07:f3:84:7b:f5:10:c3:5c:95:5b:
06:9d:5e:d9:65:76:c0:b3:0e:90:bf:c0:1e:e1:4c:
e8:e3:3e:e5:47:40:a1:c5:e0:d5:e1:06:67:b4:43:
b9:77:b0:cb:2c:6a:dd:83:6e:eb:c8:00:a4:cc:0a:
a5:c4:4a:19:a5:df:67:53:3e:df:ee:42:87:e7:02:
d7:d2:be:af:41:37:99:16:0b:0a:c8:da:06:4f:98:
03:c9:ca:5f:6f:57:13:12:2f:1b:30:8b:81:2e:d8:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E2:04:EF:55:CD:25:D4:A0:76:EF:6D:1E:93:74:6E:A0:07:52:B2
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b2:c9:59:0e:e3:ce:4e:bf:1d:39:79:f0:ea:81:85:d6:15:
c7:5d:ba:5e:aa:fe:41:ca:23:7d:88:ef:52:57:45:ac:dc:88:
0f:70:33:21:a3:c1:dd:11:e9:fa:ad:50:d3:a4:bf:32:62:21:
06:4d:67:f2:60:33:9f:e6:07:95:70:ee:be:5e:b0:b8:07:2e:
3b:bc:9c:28:9f:a7:52:ab:f8:4e:57:e8:c0:0e:0e:36:f4:48:
a2:86:4c:63:29:1d:1a:84:e2:2f:14:91:86:07:52:fd:af:1e:
2b:b2:e1:48:6a:30:d4:88:51:4f:e3:c1:54:4a:46:cb:7a:a7:
ec:b2:b1:84:70:fa:2e:1e:88:a6:d2:8b:2c:f5:61:ae:c2:e7:
80:b3:3b:b6:6a:e6:e1:03:3b:1b:41:6b:11:77:bb:19:c2:36:
97:04:1a:73:38:de:f9:08:42:a2:b4:fe:1b:d5:ff:00:d5:1f:
88:f1:e2:46:fd:ba:9e:a1:e4:58:9f:11:de:81:8a:d3:90:20:
df:4a:b0:48:1b:78:fb:f5:55:a1:1b:50:21:fa:bf:45:e0:34:
ec:94:4c:ce:87:8d:8b:60:2e:06:3f:6b:f7:ec:ed:15:83:1d:
82:7c:df:03:37:b4:0f:4b:b0:c8:44:1a:93:26:cf:0e:98:fb:
60:f3:43:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9LQyFKwKmUzDM0tf2qJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYWVkZmRjNzEzM2U5NWY0MjQ5OGY3NzYwZjY4ZmI4MGZh
YTg0YWMwHhcNMjUwODIzMDcwMTUyWhcNMjUwODI0MDcwMTUyWjAzMTEwLwYDVQQD
EyhiZmUyMDRlZjU1Y2QyNWQ0YTA3NmVmNmQxZTkzNzQ2ZWEwMDc1MmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptK86HprwBeS0ypd2IENm75nYEu2
35HM9AO5KbM6quw/Zy2t2U8qmA4ZsdTXsBpXJwOtCL/O3CeSgSPeWoNTFFhuJGR7
foAjQoC0ROVkXFciVBr+FrH5p/p15G3QN5IH+vCkU2bqcdeYK9iKkbtqWZlVZzWs
Yn8ApGVcv4Ax4f4lBk4SyFVucRgvsjrBubT4lzhPZhn9+12FlAfzhHv1EMNclVsG
nV7ZZXbAsw6Qv8Ae4Uzo4z7lR0ChxeDV4QZntEO5d7DLLGrdg27ryACkzAqlxEoZ
pd9nUz7f7kKH5wLX0r6vQTeZFgsKyNoGT5gDycpfb1cTEi8bMIuBLthHBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/iBO9VzSXUoHbvbR6TdG6gB1KyMB8GA1UdIwQY
MBaAFGGu39xxM+lfQkmPd2D2j7gPqoSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEt
OWYzZThmOWVmYzk5LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEtOWYzZThmOWVmYzk5
LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbLJWQ7j
zk6/HTl58OqBhdYVx126Xqr+QcojfYjvUldFrNyID3AzIaPB3RHp+q1Q06S/MmIh
Bk1n8mAzn+YHlXDuvl6wuAcuO7ycKJ+nUqv4TlfowA4ONvRIooZMYykdGoTiLxSR
hgdS/a8eK7LhSGow1IhRT+PBVEpGy3qn7LKxhHD6Lh6IptKLLPVhrsLngLM7tmrm
4QM7G0FrEXe7GcI2lwQaczje+QhCorT+G9X/ANUfiPHiRv26nqHkWJ8R3oGK05Ag
30qwSBt4+/VVoRtQIfq/ReA07JRMzoeNi2AuBj9r9+ztFYMdgnzfAze0D0uwyEQa
kybPDpj7YPNDfw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:02:13 2025 by rpki-client