Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File: yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier: UWFdI+mKhBG73/IfmU0C2Des/CidUGITTLF1pe0uY/A=
Subject key identifier: 91:65:E0:D7:72:01:4A:EC:8D:39:1B:E2:6D:AB:40:E1:48:1B:A6:3E
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial: 0198D69868C5C478B62260DB1F55651D2670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 11:02:49 +0000
Manifest this update: Sat 23 Aug 2025 11:02:49 +0000
Manifest next update: Sun 24 Aug 2025 11:02:49 +0000
Files and hashes: 1: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (hash: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=)
2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: mAWuDf5yKf39+J6v+0A8RTJV/IubvTqIMF/pV2mqFcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:68:c5:c4:78:b6:22:60:db:1f:55:65:1d:26:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Validity
Not Before: Aug 23 11:02:49 2025 GMT
Not After : Aug 24 11:02:49 2025 GMT
Subject: CN=9165e0d772014aec8d391be26dab40e1481ba63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:d1:ff:d8:7a:b7:8d:e0:19:e6:2b:f6:d5:
28:b5:55:3c:4e:07:3a:6d:ba:e1:c1:80:e1:a1:76:
e2:0e:ab:08:e9:8a:f2:ff:9e:96:3e:31:eb:97:59:
a8:74:59:86:98:a1:3a:dc:8d:28:f0:40:96:17:a7:
81:b4:c0:a4:2a:0f:a2:a4:c2:0b:5d:d6:95:4d:8e:
a8:a6:91:42:db:f0:77:ae:c9:22:a6:b6:47:ee:53:
c8:23:7d:d4:39:3e:25:61:02:61:7a:62:49:2d:89:
f7:e8:f6:4f:b6:eb:e2:66:12:d1:d2:be:35:2f:c1:
00:d5:53:30:c9:4b:ea:97:c6:2a:39:12:58:30:8d:
d5:83:d2:53:e3:8a:24:b4:cf:92:e7:ea:36:db:eb:
2f:65:4b:2e:c1:52:98:34:7f:16:ea:85:53:32:ca:
e8:4a:e4:e9:89:8f:53:1c:e2:fe:97:11:a1:34:a1:
f4:51:df:9e:65:94:7e:fc:b9:32:3f:34:43:3f:17:
5d:cd:dc:ab:df:27:33:fd:fa:9a:1b:2a:90:7b:59:
eb:d6:55:be:ee:e6:97:d4:37:91:71:ab:77:e1:70:
c4:70:7f:ab:a8:80:40:f3:2c:70:5d:85:4a:3b:cb:
c8:bc:46:54:59:35:2c:16:04:de:da:ea:d1:3c:7f:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:65:E0:D7:72:01:4A:EC:8D:39:1B:E2:6D:AB:40:E1:48:1B:A6:3E
X509v3 Authority Key Identifier:
keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9f:ec:4b:fb:52:9a:96:2c:0b:0e:f3:63:c6:0f:90:82:26:
0b:2d:ad:e6:ae:72:e0:2d:cf:f7:17:f4:50:42:12:61:8e:10:
99:16:dc:dc:eb:83:37:70:a9:62:85:d9:98:da:88:9d:fa:f3:
61:c3:b2:58:97:96:e3:e4:17:4c:89:b1:43:55:f1:f8:94:2f:
6e:70:9c:96:0b:57:92:42:64:94:9e:57:98:3d:d5:fe:e4:1d:
99:87:a0:a3:42:d4:11:ef:52:a9:19:76:3d:49:6f:f0:61:0e:
c2:01:d7:46:c0:f1:72:e9:27:98:49:1b:92:42:ec:aa:6d:da:
f1:81:5c:40:82:f7:f0:d4:06:b2:5d:ab:8b:4f:69:0a:ed:6b:
f3:e4:a1:93:77:b9:6e:c8:6f:97:1f:c2:31:4f:60:48:41:1e:
c5:af:fe:f0:0c:15:88:28:91:e7:81:b6:91:d6:05:4c:26:09:
db:d3:05:e5:43:ea:8d:be:02:5f:0d:b2:f0:5e:05:cf:c2:e7:
1c:78:de:93:b8:06:21:dc:7c:c2:64:eb:70:ce:8e:94:3b:d6:
5b:25:e6:b9:74:75:6a:b1:b6:cc:bc:84:04:ef:0e:ac:da:58:
83:df:8a:32:81:88:ba:e7:7b:39:4c:f0:b5:1f:0a:54:3f:66:
e8:73:f2:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmGjFxHi2ImDbH1VlHSZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ODdkMDlmZDNmYzJiNzA0YzY2MTEwYmIwMjUyZWUwYzZi
MWJhNGEwHhcNMjUwODIzMTEwMjQ5WhcNMjUwODI0MTEwMjQ5WjAzMTEwLwYDVQQD
Eyg5MTY1ZTBkNzcyMDE0YWVjOGQzOTFiZTI2ZGFiNDBlMTQ4MWJhNjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiPR/9h6t43gGeYr9tUotVU8Tgc6
bbrhwYDhoXbiDqsI6Yry/56WPjHrl1modFmGmKE63I0o8ECWF6eBtMCkKg+ipMIL
XdaVTY6oppFC2/B3rskiprZH7lPII33UOT4lYQJhemJJLYn36PZPtuviZhLR0r41
L8EA1VMwyUvql8YqORJYMI3Vg9JT44oktM+S5+o22+svZUsuwVKYNH8W6oVTMsro
SuTpiY9THOL+lxGhNKH0Ud+eZZR+/LkyPzRDPxddzdyr3ycz/fqaGyqQe1nr1lW+
7uaX1DeRcat34XDEcH+rqIBA8yxwXYVKO8vIvEZUWTUsFgTe2urRPH83+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFl4NdyAUrsjTkb4m2rQOFIG6Y+MB8GA1UdIwQY
MBaAFMmH0J/T/CtwTGYRC7AlLuDGsbpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlmUW45UDhLM0JNWmhFTHNDVXU0TWF4dWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZTRmNmItMjIzNS00MzJlLWE2OWEt
MDdkYWM3YjkyZDQ0LzEveVlmUW45UDhLM0JNWmhFTHNDVXU0TWF4dWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zZTRmNmItMjIzNS00MzJlLWE2OWEtMDdkYWM3YjkyZDQ0
LzEveVlmUW45UDhLM0JNWmhFTHNDVXU0TWF4dWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZ/sS/tS
mpYsCw7zY8YPkIImCy2t5q5y4C3P9xf0UEISYY4QmRbc3OuDN3CpYoXZmNqInfrz
YcOyWJeW4+QXTImxQ1Xx+JQvbnCclgtXkkJklJ5XmD3V/uQdmYego0LUEe9SqRl2
PUlv8GEOwgHXRsDxcuknmEkbkkLsqm3a8YFcQIL38NQGsl2ri09pCu1r8+Shk3e5
bshvlx/CMU9gSEEexa/+8AwViCiR54G2kdYFTCYJ29MF5UPqjb4CXw2y8F4Fz8Ln
HHjek7gGIdx8wmTrcM6OlDvWWyXmuXR1arG2zLyEBO8OrNpYg9+KMoGIuud7OUzw
tR8KVD9m6HPy8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:53 2025 by rpki-client