Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File: YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier: PRIVHHOQzpFPObyuka+oFTM2GjVn+4Pyx6lPRJmPKk8=
Subject key identifier: 16:B7:F6:09:B6:86:15:1C:CF:9C:12:A7:F9:B5:41:6B:B5:F5:98:C3
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial: 0198D65F270E1C99EDCB3A2C74C5F7529252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number: 0EEF
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: 0FTKbgv4RHPOrzyk3CEYkZiT5vqAceIPMR4xTkKDaeM=)
2: orR6QmUobPq58IiNnqewDNf0I7s.roa (hash: cEMGLelbH1U4lpzSE43pcUZRdK2/HRG/uJ16sgFxOVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:27:0e:1c:99:ed:cb:3a:2c:74:c5:f7:52:92:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=16b7f609b686151ccf9c12a7f9b5416bb5f598c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:ab:d5:db:36:c0:45:17:26:8d:d8:d8:3e:
1f:2e:8d:5c:29:c4:3a:05:72:1a:a4:a5:28:df:16:
9f:e2:b6:72:17:2a:73:1d:34:fe:bc:88:f9:fe:f4:
30:fb:49:57:03:0d:b2:91:ba:11:43:bf:b5:b8:0b:
42:8e:d3:7c:37:4c:91:3d:c3:38:d8:00:fa:b9:40:
c3:00:f5:f5:13:f7:4b:3c:ec:65:cb:0b:25:39:02:
ee:17:12:90:61:98:68:1a:13:d3:e8:be:f6:d2:b6:
7f:0e:00:85:31:68:64:15:a4:65:98:b1:74:50:ef:
52:06:62:2d:e2:d6:dc:2d:19:4b:16:ec:3b:19:6f:
e0:1e:b4:8a:94:84:7e:9a:36:7c:45:24:70:44:9c:
1e:a0:3c:c0:5d:bb:ee:cf:c5:a6:f5:63:f5:42:e0:
8b:c3:2a:36:32:d4:8f:63:b4:43:a9:86:c3:0d:e5:
56:eb:d0:5e:bf:54:05:48:07:e9:d2:f2:1c:f3:8a:
ee:a9:21:89:9f:e5:57:d1:6f:3e:f8:e9:0b:9e:66:
7c:47:fc:52:e9:5c:60:c8:e3:4a:30:4b:b5:19:d1:
5f:e8:73:68:9f:e3:0a:0f:d2:5a:c7:e9:77:be:05:
02:1b:32:29:99:4f:a3:00:64:5c:d0:aa:67:bc:41:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B7:F6:09:B6:86:15:1C:CF:9C:12:A7:F9:B5:41:6B:B5:F5:98:C3
X509v3 Authority Key Identifier:
keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:37:3c:31:6e:4f:9f:60:a5:a4:d3:34:67:8c:66:34:21:f9:
22:75:64:fc:50:1b:6d:de:73:0b:cb:e2:4b:5b:75:36:de:cb:
1e:30:03:8d:c4:bd:d3:b1:13:17:4a:26:6e:66:9b:b9:df:59:
94:13:77:0e:1e:d1:26:e3:99:9e:15:b1:c2:73:7d:b8:bc:98:
48:da:f1:01:3d:c7:ff:12:42:8b:8f:72:24:c7:0b:b2:e6:73:
09:79:9e:9f:e7:e8:7f:c5:6c:cb:b1:11:07:3b:f7:74:e3:d9:
d0:df:ed:b9:80:41:f2:d5:35:12:fa:39:d2:79:8f:89:48:e1:
74:43:d6:4f:da:03:6f:70:11:82:e9:a5:be:44:68:a6:1a:4f:
98:8c:55:2f:49:f4:81:a6:fa:e3:28:0a:b8:33:2f:89:19:11:
82:d2:1f:2f:9b:ed:18:bb:00:5b:35:e4:f5:f9:da:a6:6d:6f:
e8:e4:2f:ef:84:d6:69:00:d2:8d:ef:63:7d:51:07:19:95:7d:
49:b7:17:57:de:f2:ec:9e:0b:93:5b:a7:61:71:1b:75:c3:de:
74:cf:6a:49:db:b2:b2:aa:d0:f7:04:0d:b4:e9:7b:c9:9c:e4:
63:f8:07:8a:aa:82:62:bc:f0:f3:6a:ba:d1:53:f3:13:96:7e:
d2:27:be:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXycOHJntyzosdMX3UpJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjg0MTczNjFjMWM0MDZhZTlhNzI1N2RhYTlmYjA2MjA3
ODJkMzUwHhcNMjUwODIzMTAwMDE2WhcNMjUwODI0MTAwMDE2WjAzMTEwLwYDVQQD
EygxNmI3ZjYwOWI2ODYxNTFjY2Y5YzEyYTdmOWI1NDE2YmI1ZjU5OGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07qr1ds2wEUXJo3Y2D4fLo1cKcQ6
BXIapKUo3xaf4rZyFypzHTT+vIj5/vQw+0lXAw2ykboRQ7+1uAtCjtN8N0yRPcM4
2AD6uUDDAPX1E/dLPOxlywslOQLuFxKQYZhoGhPT6L720rZ/DgCFMWhkFaRlmLF0
UO9SBmIt4tbcLRlLFuw7GW/gHrSKlIR+mjZ8RSRwRJweoDzAXbvuz8Wm9WP1QuCL
wyo2MtSPY7RDqYbDDeVW69Bev1QFSAfp0vIc84ruqSGJn+VX0W8++OkLnmZ8R/xS
6VxgyONKMEu1GdFf6HNon+MKD9Jax+l3vgUCGzIpmU+jAGRc0KpnvEHS2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa39gm2hhUcz5wSp/m1QWu19ZjDMB8GA1UdIwQY
MBaAFGIoQXNhwcQGrppyV9qp+wYgeC01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MWYyZTgtYmQ4Ni00YzVlLTk1NTEt
NGQzYTU5Y2I5NDM5LzEvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC83MWYyZTgtYmQ4Ni00YzVlLTk1NTEtNGQzYTU5Y2I5NDM5
LzEvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjc8MW5P
n2ClpNM0Z4xmNCH5InVk/FAbbd5zC8viS1t1Nt7LHjADjcS907ETF0ombmabud9Z
lBN3Dh7RJuOZnhWxwnN9uLyYSNrxAT3H/xJCi49yJMcLsuZzCXmen+fof8Vsy7ER
Bzv3dOPZ0N/tuYBB8tU1Evo50nmPiUjhdEPWT9oDb3ARgumlvkRophpPmIxVL0n0
gab64ygKuDMviRkRgtIfL5vtGLsAWzXk9fnapm1v6OQv74TWaQDSje9jfVEHGZV9
SbcXV97y7J4Lk1unYXEbdcPedM9qSduysqrQ9wQNtOl7yZzkY/gHiqqCYrzw82q6
0VPzE5Z+0ie+qg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:21 2025 by rpki-client