Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier: hW9BFJfkrXRWx8HwcYRE9MuOiGnOZwlPA3LL3fcAk+w=
Subject key identifier: C9:FD:2F:7B:7C:80:2D:34:6C:9D:AC:62:59:BD:3F:47:E6:EE:2B:13
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial: 0198D58390BB0A2C85A79BB93D37F0CB356E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number: 74
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: d37vftT5Z9/cSOdVEKGvIfAeniwshxd14f171URBK+w=)
2: yJ1HWDzaQf8_v_QIkEVeJhHUsNs.roa (hash: uRF7ZuSGISVIOWjvLjFgvjfyhiciNwgKOFC9/lRcs/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:90:bb:0a:2c:85:a7:9b:b9:3d:37:f0:cb:35:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=c9fd2f7b7c802d346c9dac6259bd3f47e6ee2b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:85:51:5c:07:a7:40:bc:e6:44:67:c4:7c:
51:60:64:82:b6:b4:5c:cc:8c:4f:11:60:db:82:bb:
4d:33:7f:c0:53:34:5a:bf:b4:2b:25:e2:8d:c2:8c:
a9:d7:06:f9:84:c1:9f:c5:77:fc:0a:b8:2a:04:4c:
5d:62:89:93:eb:ee:de:76:3a:86:1a:05:2f:c0:9a:
6a:b3:8c:8a:81:f1:54:59:7f:d3:82:db:89:51:1f:
e0:fe:46:7a:45:6c:d7:18:21:8e:6d:6e:c2:bd:00:
01:88:4f:88:8a:e3:c3:c8:30:30:0e:f2:f5:05:f1:
2d:24:69:5d:9e:93:60:8e:5c:cf:3f:24:55:9b:87:
c6:6e:89:ac:49:79:ad:0e:1d:9b:92:59:3b:2c:ec:
b8:c0:54:50:4e:57:7b:d7:c9:4e:aa:3d:d3:1b:e9:
f3:22:7e:64:82:4a:25:e1:db:21:e6:35:64:4d:43:
ce:9d:56:92:d3:12:08:e8:9f:a3:7d:4c:d3:92:3b:
33:6d:78:c1:7b:fc:c2:88:d4:89:94:1f:85:c8:6f:
1a:b7:9d:d1:61:b8:8b:a5:0c:5b:53:62:3c:ab:e0:
2c:da:db:d4:11:a9:5e:d6:a2:61:e3:cf:d0:22:62:
de:9f:cd:0c:f2:8f:09:de:02:1f:e5:95:98:1e:24:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FD:2F:7B:7C:80:2D:34:6C:9D:AC:62:59:BD:3F:47:E6:EE:2B:13
X509v3 Authority Key Identifier:
keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bb:3d:05:a1:7a:87:89:91:46:48:18:40:15:a7:73:8c:ec:
2b:b2:4a:b2:b0:9b:16:db:7b:04:e8:59:2f:bc:79:8b:4a:2d:
4c:da:c3:e0:69:32:7c:03:bf:a7:5e:8f:9d:0c:ec:c0:d1:12:
2b:56:6e:a7:b0:21:36:da:84:52:bc:65:fe:62:87:66:54:96:
bf:73:1f:a3:cc:9d:82:59:97:29:fc:54:2a:6e:7d:3f:ee:53:
aa:8d:4e:62:22:e9:6d:6e:c7:cf:7a:6b:21:57:55:52:b6:e2:
8e:af:09:5d:a8:2a:f9:dc:bd:cd:3c:e6:81:3e:72:f0:8f:7e:
45:42:10:99:39:81:fb:e1:89:91:f1:bd:cb:20:a8:10:4a:c4:
4e:1d:e4:d7:fe:78:97:6a:f1:9a:46:9e:ea:4a:d1:94:ef:0c:
d4:8a:a9:bb:08:e8:03:47:65:01:53:3d:1d:a6:b5:ec:ac:a7:
18:cb:62:5d:08:c4:f7:82:78:3c:51:51:20:fd:89:4b:9f:1f:
ab:52:06:83:90:73:6a:ba:1a:da:08:b3:1f:ad:4c:4e:93:ac:
29:b5:1f:a5:3f:c0:84:83:60:14:57:d8:64:21:9c:31:91:0a:
91:fc:83:21:06:be:19:ea:94:93:1b:0f:ce:1b:43:03:23:a8:
77:68:65:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg5C7CiyFp5u5PTfwyzVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzhjYjYwZjM1N2Q2MWNiOThiNGM3Y2E5MTVhMTI4MThl
ZjJjNzcwHhcNMjUwODIzMDYwMDI1WhcNMjUwODI0MDYwMDI1WjAzMTEwLwYDVQQD
EyhjOWZkMmY3YjdjODAyZDM0NmM5ZGFjNjI1OWJkM2Y0N2U2ZWUyYjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiqFUVwHp0C85kRnxHxRYGSCtrRc
zIxPEWDbgrtNM3/AUzRav7QrJeKNwoyp1wb5hMGfxXf8CrgqBExdYomT6+7edjqG
GgUvwJpqs4yKgfFUWX/TgtuJUR/g/kZ6RWzXGCGObW7CvQABiE+IiuPDyDAwDvL1
BfEtJGldnpNgjlzPPyRVm4fGbomsSXmtDh2bklk7LOy4wFRQTld718lOqj3TG+nz
In5kgkol4dsh5jVkTUPOnVaS0xII6J+jfUzTkjszbXjBe/zCiNSJlB+FyG8at53R
YbiLpQxbU2I8q+As2tvUEale1qJh48/QImLen80M8o8J3gIf5ZWYHiTPdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMn9L3t8gC00bJ2sYlm9P0fm7isTMB8GA1UdIwQY
MBaAFGJ4y2DzV9YcuYtMfKkVoSgY7yx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTIt
MjQxZTg0YzlhNWQ5LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTItMjQxZTg0YzlhNWQ5
LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbs9BaF6
h4mRRkgYQBWnc4zsK7JKsrCbFtt7BOhZL7x5i0otTNrD4GkyfAO/p16PnQzswNES
K1Zup7AhNtqEUrxl/mKHZlSWv3Mfo8ydglmXKfxUKm59P+5Tqo1OYiLpbW7Hz3pr
IVdVUrbijq8JXagq+dy9zTzmgT5y8I9+RUIQmTmB++GJkfG9yyCoEErETh3k1/54
l2rxmkae6krRlO8M1IqpuwjoA0dlAVM9Haa17KynGMtiXQjE94J4PFFRIP2JS58f
q1IGg5Bzaroa2gizH61MTpOsKbUfpT/AhINgFFfYZCGcMZEKkfyDIQa+GeqUkxsP
zhtDAyOod2hlvA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:14 2025 by rpki-client