
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: 6Ghayk3YvdB1Z+s84NYgmqS8cn4Xc57V10tLGaH5MW8=
Subject key identifier: 90:A8:2C:61:58:5A:F7:B1:DB:08:78:CB:A1:E4:79:5F:3F:19:B8:FB
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 0198D5F19853A3C71A822334A183639A2CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 138F
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: oaq/4yxP0aiuYPT84ddO0ttzkULH5mUaDKFQ0/0t5Kw=)
3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:98:53:a3:c7:1a:82:23:34:a1:83:63:9a:2c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=90a82c61585af7b1db0878cba1e4795f3f19b8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:84:25:5d:48:a6:dd:bf:a3:3a:04:21:48:
bb:b3:c4:f5:21:2a:10:c7:2b:87:98:75:68:18:53:
1d:7c:0c:73:76:af:7e:61:36:1e:4b:6c:d5:22:22:
75:64:48:d0:f9:4b:f3:8a:08:aa:4b:4b:c5:ac:09:
3c:d9:8f:2f:a9:cd:57:29:e0:77:75:f0:0a:93:e2:
fd:95:1a:ce:2e:bb:13:79:e8:ef:36:57:27:a5:0e:
b2:37:d2:80:c5:ab:c3:7a:03:7c:ad:63:54:29:ac:
b8:35:23:be:f6:96:c9:11:32:02:20:72:29:a2:3c:
28:25:e9:2e:1f:79:e8:dd:58:2d:5c:3b:a1:65:e9:
0c:35:5d:9c:ca:97:49:24:0d:4e:3b:59:b6:9b:ee:
48:39:18:7e:4b:df:55:a4:38:5c:e2:92:62:a2:a8:
32:41:ea:8b:d6:4a:d7:cf:72:21:ea:12:3f:73:fe:
7c:2d:4a:00:97:23:67:66:83:02:fb:85:43:d6:7a:
24:f2:9e:a3:65:96:05:89:fd:96:ce:e3:9b:fb:b5:
53:6c:ae:8c:88:e7:7d:d9:05:be:9a:ee:7d:8f:32:
4a:2c:b7:2d:17:cc:fb:ee:05:39:2f:03:f9:5d:c9:
e6:50:87:c5:e4:a8:b6:23:d6:fd:5f:1e:af:ec:eb:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A8:2C:61:58:5A:F7:B1:DB:08:78:CB:A1:E4:79:5F:3F:19:B8:FB
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f5:e1:45:b4:32:16:4d:a1:41:9b:5d:1c:50:c3:d8:73:c1:
14:ef:a7:44:16:51:98:95:bd:8c:06:f6:ae:39:55:3b:d5:b7:
92:57:00:67:3a:85:9d:7f:f2:3d:5a:f1:4b:fa:c3:cb:8c:d3:
1a:38:63:8f:94:9e:b7:45:16:b5:74:66:e5:ea:fd:56:ce:ce:
27:c0:ef:29:09:f3:b4:83:c7:3e:79:a8:2e:dc:1a:2f:c1:b3:
03:10:61:ae:46:92:44:fa:3a:ca:3c:3f:4d:a9:c2:2e:bd:88:
4d:ae:d5:7c:20:89:25:a9:67:a5:a0:42:1b:92:76:e5:49:be:
83:35:8f:82:86:6c:86:83:09:22:76:9a:aa:87:00:a5:b7:d7:
bb:2d:35:84:c6:05:8f:a4:4e:25:c4:b8:cf:67:78:7e:31:72:
0a:45:94:2f:43:f1:e9:a8:36:92:60:4f:d1:09:da:0d:0b:f6:
a0:69:af:84:9f:a3:39:ff:b1:31:cf:49:cf:97:ab:d3:a2:ec:
0a:a5:77:94:8c:71:2e:6d:48:e9:a9:69:03:f6:c6:62:c4:46:
62:b4:d0:f3:c8:c2:9f:54:d1:00:de:be:94:6f:36:64:34:17:
25:af:a7:fa:f7:f3:84:b1:18:25:1c:7a:4c:88:54:89:00:b6:
f9:a3:f7:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8ZhTo8cagiM0oYNjmizBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYmEwYmU3Y2NlMzgwZTZiYjc0ZTNjNWZjZWEwODFlOTc5
OWFlNTQwHhcNMjUwODIzMDgwMDM2WhcNMjUwODI0MDgwMDM2WjAzMTEwLwYDVQQD
Eyg5MGE4MmM2MTU4NWFmN2IxZGIwODc4Y2JhMWU0Nzk1ZjNmMTliOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3aEJV1Ipt2/ozoEIUi7s8T1ISoQ
xyuHmHVoGFMdfAxzdq9+YTYeS2zVIiJ1ZEjQ+UvzigiqS0vFrAk82Y8vqc1XKeB3
dfAKk+L9lRrOLrsTeejvNlcnpQ6yN9KAxavDegN8rWNUKay4NSO+9pbJETICIHIp
ojwoJekuH3no3VgtXDuhZekMNV2cypdJJA1OO1m2m+5IORh+S99VpDhc4pJioqgy
QeqL1krXz3Ih6hI/c/58LUoAlyNnZoMC+4VD1nok8p6jZZYFif2WzuOb+7VTbK6M
iOd92QW+mu59jzJKLLctF8z77gU5LwP5XcnmUIfF5Ki2I9b9Xx6v7OsuWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCoLGFYWvex2wh4y6HkeV8/Gbj7MB8GA1UdIwQY
MBaAFGG6C+fM44Dmu3TjxfzqCB6Xma5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDIt
MjEwZDQ4MmE0YjkzLzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDItMjEwZDQ4MmE0Yjkz
LzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPXhRbQy
Fk2hQZtdHFDD2HPBFO+nRBZRmJW9jAb2rjlVO9W3klcAZzqFnX/yPVrxS/rDy4zT
Gjhjj5Set0UWtXRm5er9Vs7OJ8DvKQnztIPHPnmoLtwaL8GzAxBhrkaSRPo6yjw/
TanCLr2ITa7VfCCJJalnpaBCG5J25Um+gzWPgoZshoMJInaaqocApbfXuy01hMYF
j6ROJcS4z2d4fjFyCkWUL0Px6ag2kmBP0QnaDQv2oGmvhJ+jOf+xMc9Jz5er06Ls
CqV3lIxxLm1I6alpA/bGYsRGYrTQ88jCn1TRAN6+lG82ZDQXJa+n+vfzhLEYJRx6
TIhUiQC2+aP3gQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:11 2025 by rpki-client