Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
File: Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json)
Hash identifier: 4ihgQAnl740xIkldmicN2r6IuAWcFozl1XOLrx7fyAs=
Subject key identifier: A9:F5:59:6F:FC:AC:42:CC:C5:EC:C6:80:B2:97:E2:63:EF:6F:CE:0E
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 0198D5159D8AF0C228FBB7A3A9F889605399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:20 +0000
Manifest this update: Sat 23 Aug 2025 04:00:20 +0000
Manifest next update: Sun 24 Aug 2025 04:00:20 +0000
Files and hashes: 1: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: 6YUk3rORFtV2DLsGP2Ez1rC/176xxbzQmBQCjU0APrE=)
2: d6C8v6GoigEzg6pbLvTWJvddupU.roa (hash: EXaNGOIp/fMA/oSDDsbRGa0FHPZi/hzE5RwEYVseBGk=)
3: og-QYcWWG7blmQPnjS8N7Pfy2CI.roa (hash: F2sqc18qvqzf4/nshb6Uc/1k3H2tfbxW4Ckt/4G4dtQ=)
4: q8IlRbnDa7-lnFAs-hO2WPcOwLk.roa (hash: hbIKEj6KOMWmptm4f819IMKKqrXG2uGf4j2uozA9qks=)
5: zZc3DeDwts9pkaWZgvcKrYsKK6M.roa (hash: oGvkVQFGZUcaVi+hdfOY9pZnUYCxpKrEsPEP9NwnTEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9d:8a:f0:c2:28:fb:b7:a3:a9:f8:89:60:53:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Aug 23 04:00:20 2025 GMT
Not After : Aug 24 04:00:20 2025 GMT
Subject: CN=a9f5596ffcac42ccc5ecc680b297e263ef6fce0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:dd:b9:94:93:d2:51:f9:e5:d6:bb:7b:52:
a5:47:c0:d1:02:82:a2:58:e8:85:32:2a:9b:4d:6a:
ad:5c:1c:54:f9:ce:fe:29:0c:28:df:ba:d9:34:6b:
72:2b:70:47:60:8c:1a:d6:69:d7:09:5a:da:fd:ab:
30:74:c0:c7:fb:db:f9:d6:5a:28:35:0f:0b:43:52:
81:5f:73:7f:16:2f:9e:73:ab:81:9e:d2:22:a7:e0:
73:3e:68:e5:53:97:1e:86:8f:46:a3:41:fc:93:77:
46:37:c0:c0:18:ba:36:24:52:31:0c:b0:ef:3d:af:
f7:d9:97:35:c3:36:84:f5:bc:28:b6:2c:b4:aa:42:
38:97:19:74:12:f1:2c:de:b5:d3:fb:14:1b:37:c0:
42:10:ac:25:3b:4c:29:90:6d:69:48:8e:df:87:52:
5a:9e:91:e5:f5:ca:e1:56:49:0b:a8:dc:98:ba:aa:
b1:3c:a1:5f:18:48:06:82:33:27:ab:bc:fd:3b:10:
59:9f:ad:a9:a3:75:13:fd:76:d7:f6:b8:0d:a3:53:
e1:cc:5d:4a:02:a0:f1:d6:88:2e:8e:1c:56:4c:10:
bc:b9:db:71:90:8d:37:ed:57:b5:97:fe:29:52:0b:
d7:77:76:93:f3:b9:7c:c7:7a:69:eb:e9:fc:96:2d:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:59:6F:FC:AC:42:CC:C5:EC:C6:80:B2:97:E2:63:EF:6F:CE:0E
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:08:3c:e3:9c:24:32:dc:e8:16:24:f1:7d:63:00:ce:f5:59:
ca:92:10:a8:90:08:df:02:b0:09:12:ee:38:19:d6:8b:c5:3e:
67:98:96:c3:a0:97:cb:79:15:b4:01:2c:be:1b:44:16:70:0d:
80:56:09:51:f9:21:78:f1:b9:5e:e0:15:9e:b9:af:24:b0:12:
e3:32:db:ad:c5:56:74:99:6e:03:0b:8b:5b:4e:fb:34:4f:b6:
e6:46:32:60:f7:b4:d9:38:63:b3:82:8c:53:ba:75:93:ff:4b:
ee:01:64:8a:bb:c2:4c:44:65:72:65:d2:14:94:46:96:d1:89:
94:2a:7f:45:84:7b:7a:3c:e1:c5:4e:b1:73:b5:d2:3b:ce:4a:
df:60:ee:99:39:e8:20:7f:9a:48:2c:26:04:2d:81:87:21:e4:
45:91:04:50:dc:03:68:6e:79:b3:28:08:72:48:8a:a0:b5:93:
31:e6:a7:0b:c3:00:a1:30:a4:8b:d5:44:46:72:16:81:86:df:
1d:97:83:2b:98:dc:d6:81:e2:17:38:4d:f1:ee:6e:1e:b6:4a:
39:b0:c9:e6:58:95:b8:7c:ca:d7:65:45:61:1e:c8:f8:2c:89:
23:7e:3e:9b:78:f2:f8:b9:3c:24:8a:a4:ba:1f:86:a3:34:cd:
d7:fc:80:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZ2K8MIo+7ejqfiJYFOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjg2NmUzMjMzODJjYWVhOTYxZTdkMjQyM2U1M2NhYjUw
OTkxMzEwHhcNMjUwODIzMDQwMDIwWhcNMjUwODI0MDQwMDIwWjAzMTEwLwYDVQQD
EyhhOWY1NTk2ZmZjYWM0MmNjYzVlY2M2ODBiMjk3ZTI2M2VmNmZjZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NjduZST0lH55da7e1KlR8DRAoKi
WOiFMiqbTWqtXBxU+c7+KQwo37rZNGtyK3BHYIwa1mnXCVra/aswdMDH+9v51loo
NQ8LQ1KBX3N/Fi+ec6uBntIip+BzPmjlU5ceho9Go0H8k3dGN8DAGLo2JFIxDLDv
Pa/32Zc1wzaE9bwotiy0qkI4lxl0EvEs3rXT+xQbN8BCEKwlO0wpkG1pSI7fh1Ja
npHl9crhVkkLqNyYuqqxPKFfGEgGgjMnq7z9OxBZn62po3UT/XbX9rgNo1PhzF1K
AqDx1ogujhxWTBC8udtxkI037Ve1l/4pUgvXd3aT87l8x3pp6+n8li1mMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn1WW/8rELMxezGgLKX4mPvb84OMB8GA1UdIwQY
MBaAFGG4ZuMjOCyuqWHn0kI+U8q1CZExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80ZWY0YTktNmQ5Ni00OTg5LTljODEt
ZDkyZTY4ZGZmZmU0LzEvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS80ZWY0YTktNmQ5Ni00OTg5LTljODEtZDkyZTY4ZGZmZmU0
LzEvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAg845wk
MtzoFiTxfWMAzvVZypIQqJAI3wKwCRLuOBnWi8U+Z5iWw6CXy3kVtAEsvhtEFnAN
gFYJUfkhePG5XuAVnrmvJLAS4zLbrcVWdJluAwuLW077NE+25kYyYPe02Thjs4KM
U7p1k/9L7gFkirvCTERlcmXSFJRGltGJlCp/RYR7ejzhxU6xc7XSO85K32DumTno
IH+aSCwmBC2BhyHkRZEEUNwDaG55sygIckiKoLWTMeanC8MAoTCki9VERnIWgYbf
HZeDK5jc1oHiFzhN8e5uHrZKObDJ5liVuHzK12VFYR7I+CyJI34+m3jy+Lk8JIqk
uh+GozTN1/yAuw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:50 2025 by rpki-client