
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
File: ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft (raw, json)
Hash identifier: VNbXQQvYe6DUaD+o7sDyx3vXj/UBdluswTE8DzIwhps=
Subject key identifier: 37:DA:9D:C1:89:23:83:F7:5B:76:C0:2D:3F:0A:2D:36:71:02:F9:2F
Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Certificate serial: 0198D4739E0E06BCF94F6C9062C12FB55B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
Manifest number: C1
Signing time: Sat 23 Aug 2025 01:03:23 +0000
Manifest this update: Sat 23 Aug 2025 01:03:23 +0000
Manifest next update: Sun 24 Aug 2025 01:03:23 +0000
Files and hashes: 1: Blt---jsIFQZ1r2IAxC-z0fx3gA.roa (hash: WMXyefoTuj2dAlvEBS8JjIjWNUd09eEAuE+gYKf1VT4=)
2: ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl (hash: LXGoNjqjtfNvMtJb9+/3gT0y7wEBMc5DJBzc1bok2do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:9e:0e:06:bc:f9:4f:6c:90:62:c1:2f:b5:5b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Validity
Not Before: Aug 23 01:03:23 2025 GMT
Not After : Aug 24 01:03:23 2025 GMT
Subject: CN=37da9dc1892383f75b76c02d3f0a2d367102f92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:ac:e3:82:4f:d9:cf:39:ac:e6:5d:01:e7:
af:cc:ec:97:83:87:37:18:68:2c:6a:74:24:2d:f3:
4c:de:5b:ac:59:eb:02:83:d8:75:cb:93:26:2b:e7:
47:69:2b:01:14:06:97:50:1e:ed:06:57:0d:54:11:
fc:3e:7b:d0:c8:47:1a:31:e8:86:f0:74:6c:87:8d:
4c:7e:74:a5:b6:63:2c:54:e4:39:0d:2f:f4:dc:40:
1f:2a:49:0d:7d:6e:40:f0:76:87:de:9c:37:01:62:
74:97:21:b2:2e:d0:14:3a:49:68:eb:7a:b4:56:97:
cd:42:0d:5e:16:ee:d0:fa:fb:f1:59:3c:bd:a3:76:
c8:4b:ba:23:14:54:f8:ab:1b:8d:ef:ef:52:99:35:
e2:fd:09:45:36:c2:b9:c3:ff:29:c2:2f:21:fe:1d:
f2:8f:10:e4:26:b0:17:d8:8d:c9:35:d9:16:11:12:
80:17:97:49:85:ce:e6:3e:df:95:89:e4:00:83:1a:
5a:cf:55:93:cc:8b:c1:08:a5:25:29:38:50:60:c5:
91:8e:60:56:af:4b:cd:ae:ab:54:70:1c:23:29:9c:
73:d0:66:81:9f:a0:7d:41:a6:07:e4:cd:f6:b0:4e:
4e:c2:a8:74:89:41:05:d2:f3:31:4f:fb:82:ff:52:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DA:9D:C1:89:23:83:F7:5B:76:C0:2D:3F:0A:2D:36:71:02:F9:2F
X509v3 Authority Key Identifier:
keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4c:94:6f:96:e0:2a:e3:11:d4:91:de:f6:b8:40:b8:0a:0e:
0f:ce:d4:25:14:72:7c:46:72:98:a7:e9:6e:78:be:b2:60:c8:
6f:8d:4d:0a:a2:f7:ea:b7:8e:72:11:62:aa:c5:39:f0:20:62:
b5:5f:de:3c:c4:ee:d1:45:e4:f3:54:a4:08:2c:61:76:a0:dd:
e7:6f:13:43:3f:5e:b9:98:60:a9:3b:aa:5d:a4:65:44:6e:7f:
96:30:75:fd:c5:b8:84:ef:54:f2:5e:b7:9b:ff:1a:8a:47:60:
bd:f9:b3:eb:5e:f9:f4:46:7c:93:d4:dd:6b:b7:17:41:77:6f:
77:15:1e:95:62:1f:e6:05:08:8e:44:44:85:b4:98:16:a9:c7:
14:58:99:ce:bf:fc:b6:08:91:07:ec:92:e4:05:1f:a5:42:4d:
fe:82:43:0a:f9:19:78:40:bb:81:a9:7a:95:47:b3:8a:be:6e:
40:09:cc:83:91:f6:01:eb:18:62:7c:25:8e:0c:6c:1e:d2:fa:
dd:23:3b:43:74:f1:b6:b8:54:5f:6f:2c:d9:40:c2:3c:66:07:
75:64:fe:6e:b9:e8:ed:ed:58:ff:c7:84:1f:b8:72:3f:97:89:
6e:33:d3:70:3b:ee:0d:34:17:a3:69:0a:ba:32:ba:76:cf:2d:
95:1b:88:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc54OBrz5T2yQYsEvtVuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMDMyNjhiYjY2NmIxYmQ0MjMwNzllNWRmMmJkNWE1NGUx
ZTk4NjEwHhcNMjUwODIzMDEwMzIzWhcNMjUwODI0MDEwMzIzWjAzMTEwLwYDVQQD
EygzN2RhOWRjMTg5MjM4M2Y3NWI3NmMwMmQzZjBhMmQzNjcxMDJmOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUes44JP2c85rOZdAeevzOyXg4c3
GGgsanQkLfNM3lusWesCg9h1y5MmK+dHaSsBFAaXUB7tBlcNVBH8PnvQyEcaMeiG
8HRsh41MfnSltmMsVOQ5DS/03EAfKkkNfW5A8HaH3pw3AWJ0lyGyLtAUOklo63q0
VpfNQg1eFu7Q+vvxWTy9o3bIS7ojFFT4qxuN7+9SmTXi/QlFNsK5w/8pwi8h/h3y
jxDkJrAX2I3JNdkWERKAF5dJhc7mPt+VieQAgxpaz1WTzIvBCKUlKThQYMWRjmBW
r0vNrqtUcBwjKZxz0GaBn6B9QaYH5M32sE5Owqh0iUEF0vMxT/uC/1KYKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfancGJI4P3W3bALT8KLTZxAvkvMB8GA1UdIwQY
MBaAFMoDJou2ZrG9QjB55d8r1aVOHphhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdNbWk3Wm1zYjFDTUhubDN5dlZwVTRlbUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iMzlhNTktYjQyNC00MTNiLWE2OTMt
MzlkNGIzZjU3MTBmLzEveWdNbWk3Wm1zYjFDTUhubDN5dlZwVTRlbUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iMzlhNTktYjQyNC00MTNiLWE2OTMtMzlkNGIzZjU3MTBm
LzEveWdNbWk3Wm1zYjFDTUhubDN5dlZwVTRlbUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEyUb5bg
KuMR1JHe9rhAuAoOD87UJRRyfEZymKfpbni+smDIb41NCqL36reOchFiqsU58CBi
tV/ePMTu0UXk81SkCCxhdqDd528TQz9euZhgqTuqXaRlRG5/ljB1/cW4hO9U8l63
m/8aikdgvfmz61759EZ8k9Tda7cXQXdvdxUelWIf5gUIjkREhbSYFqnHFFiZzr/8
tgiRB+yS5AUfpUJN/oJDCvkZeEC7gal6lUezir5uQAnMg5H2AesYYnwljgxsHtL6
3SM7Q3TxtrhUX28s2UDCPGYHdWT+brno7e1Y/8eEH7hyP5eJbjPTcDvuDTQXo2kK
ujK6ds8tlRuI7A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:37 2025 by rpki-client