Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: FBtT+QModEeKwA3NPF0vSNo2kZmUqqV5EeW9lWam+A4=
Subject key identifier: 2A:79:1F:58:A2:33:0B:16:29:3A:CF:30:76:0A:A1:40:97:8B:02:58
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 0198D5BBAD757830701B6F57531459980836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: FpSNZXq3Bs_lAOfoxnm2_1Ntexk.roa (hash: P0ueHi3T6HBQ/Yjh4YAxSote8hQe/slz/U1OtoX8X6M=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: zZNvx7M+fUuJSqhmIyBazmxCwVFMuCnpZlk8ZUMUoyQ=)
3: iOzGDAy-qErjiYCUQPq5S2xsHRA.roa (hash: EO5Nyg7UrTNVSVoeALt1d3217TiALMgeZ+f/YmIuYh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ad:75:78:30:70:1b:6f:57:53:14:59:98:08:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=2a791f58a2330b16293acf30760aa140978b0258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:dd:d4:3c:a1:ae:33:48:10:9a:9a:69:82:
cd:6e:45:bf:e0:9c:b8:3c:a5:8d:28:0f:91:f3:7c:
43:5d:9e:b1:85:ab:bd:9d:58:4b:28:89:56:49:ad:
76:68:4f:19:18:25:8c:38:a4:e6:ce:1d:20:cb:7b:
9d:c4:f5:3b:ab:a9:c1:4a:b2:1d:9a:0a:0f:a7:58:
6a:b4:6c:95:d7:70:7f:f9:92:1b:bb:7d:b4:7c:6d:
46:d6:61:96:84:36:c2:42:43:e9:1d:67:96:cd:01:
94:67:ce:b3:20:2c:c2:98:48:5a:18:fe:38:6c:47:
ad:5d:b1:91:a0:95:67:dd:3a:8a:e3:90:f8:29:45:
fd:4e:13:a3:a8:73:fb:df:b2:e8:b6:44:bf:ef:b1:
00:1d:a2:1c:df:dd:26:81:cb:05:14:56:97:b2:d3:
91:cf:6e:41:3b:50:07:c8:70:dd:80:2a:c0:d5:ed:
cb:3b:c1:eb:08:a8:2b:00:01:ac:35:fc:b4:81:69:
90:a8:6f:5d:f4:e1:c6:fc:1a:4b:94:14:33:12:87:
8f:d6:64:ae:20:83:ab:16:a3:7d:11:d2:bb:7f:b3:
22:77:97:e4:59:41:8d:65:f1:9f:7c:e9:85:3c:06:
7f:b4:22:2f:87:4b:85:6a:3d:e4:52:2b:84:06:27:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:79:1F:58:A2:33:0B:16:29:3A:CF:30:76:0A:A1:40:97:8B:02:58
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8e:29:8c:88:87:bb:4d:9e:d9:c9:c2:17:19:14:ad:1f:47:
bb:92:bb:ff:22:39:09:21:ec:27:6a:36:74:0e:78:6c:66:4a:
e2:38:9c:94:87:e1:46:b1:8b:64:f1:3a:63:7d:8e:f4:f0:fa:
fa:66:7f:54:6e:3f:2f:81:44:4a:50:eb:82:ff:b0:f6:73:a2:
25:41:25:0a:22:9f:70:24:21:b9:09:b9:d2:be:c7:81:63:2f:
d6:af:b6:d8:c2:dd:dd:38:55:f5:f8:cf:88:ae:85:51:61:5f:
25:e8:19:45:83:b2:3b:59:f0:bb:b1:74:23:90:2b:46:8b:07:
c2:61:4e:40:0b:a0:71:05:5a:73:c9:5d:48:47:d3:93:44:10:
80:1e:1f:f6:d0:f6:a2:a2:7e:fd:62:f7:da:a7:b5:64:42:56:
f1:aa:87:e6:e9:40:9a:13:6f:a9:a4:7d:96:fe:f7:de:af:ad:
37:2e:64:61:b3:18:ee:0c:a5:31:5e:13:36:85:2e:5d:d7:c9:
a0:d9:80:e4:b8:8b:7c:4a:df:89:f5:f4:89:2b:94:9f:35:82:
39:8a:14:7b:4c:db:a8:6d:26:e2:09:c0:90:fa:63:16:45:89:
3c:6e:31:e8:cc:91:48:25:da:a7:d7:88:66:39:ec:d9:00:5c:
f0:35:0f:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu611eDBwG29XUxRZmAg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDRmNmVhNzllNGUyYTNlMDJhOGIzOGVkMGNkM2E0MDU5
MTM4YWMwHhcNMjUwODIzMDcwMTQzWhcNMjUwODI0MDcwMTQzWjAzMTEwLwYDVQQD
EygyYTc5MWY1OGEyMzMwYjE2MjkzYWNmMzA3NjBhYTE0MDk3OGIwMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtand1DyhrjNIEJqaaYLNbkW/4Jy4
PKWNKA+R83xDXZ6xhau9nVhLKIlWSa12aE8ZGCWMOKTmzh0gy3udxPU7q6nBSrId
mgoPp1hqtGyV13B/+ZIbu320fG1G1mGWhDbCQkPpHWeWzQGUZ86zICzCmEhaGP44
bEetXbGRoJVn3TqK45D4KUX9ThOjqHP737LotkS/77EAHaIc390mgcsFFFaXstOR
z25BO1AHyHDdgCrA1e3LO8HrCKgrAAGsNfy0gWmQqG9d9OHG/BpLlBQzEoeP1mSu
IIOrFqN9EdK7f7Mid5fkWUGNZfGffOmFPAZ/tCIvh0uFaj3kUiuEBifONwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp5H1iiMwsWKTrPMHYKoUCXiwJYMB8GA1UdIwQY
MBaAFGBE9up55OKj4CqLOO0M06QFkTisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVUMjZubms0cVBnS29zNDdRelRwQVdST0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82MTFhNDAtYjQ0NC00OTBjLTlkZWUt
MjdkNjA4ZDIwODczLzEvWUVUMjZubms0cVBnS29zNDdRelRwQVdST0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82MTFhNDAtYjQ0NC00OTBjLTlkZWUtMjdkNjA4ZDIwODcz
LzEvWUVUMjZubms0cVBnS29zNDdRelRwQVdST0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI4pjIiH
u02e2cnCFxkUrR9Hu5K7/yI5CSHsJ2o2dA54bGZK4jiclIfhRrGLZPE6Y32O9PD6
+mZ/VG4/L4FESlDrgv+w9nOiJUElCiKfcCQhuQm50r7HgWMv1q+22MLd3ThV9fjP
iK6FUWFfJegZRYOyO1nwu7F0I5ArRosHwmFOQAugcQVac8ldSEfTk0QQgB4f9tD2
oqJ+/WL32qe1ZEJW8aqH5ulAmhNvqaR9lv733q+tNy5kYbMY7gylMV4TNoUuXdfJ
oNmA5LiLfErfifX0iSuUnzWCOYoUe0zbqG0m4gnAkPpjFkWJPG4x6MyRSCXap9eI
Zjns2QBc8DUP1w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:19 2025 by rpki-client