Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: Xp7sVJOac//Xy4TDwbJJZ/1SvQqj9FiytaMJ4wo4wwA=
Subject key identifier: 35:98:66:B0:3B:3B:02:C4:B5:D6:1C:60:90:0F:FC:50:71:0F:24:39
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 0198D6607D90C5044BE8C5D919833CFBAD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 0551
Signing time: Sat 23 Aug 2025 10:01:44 +0000
Manifest this update: Sat 23 Aug 2025 10:01:44 +0000
Manifest next update: Sun 24 Aug 2025 10:01:44 +0000
Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: idXFSmWmgpKCHI36e7R7kgthMQTSmlniuVbBBwhXeNs=)
2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=)
3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7d:90:c5:04:4b:e8:c5:d9:19:83:3c:fb:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Aug 23 10:01:44 2025 GMT
Not After : Aug 24 10:01:44 2025 GMT
Subject: CN=359866b03b3b02c4b5d61c60900ffc50710f2439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:ed:5a:ab:47:d4:a8:0b:d7:dd:b1:90:3f:
4f:c7:27:9e:2f:bb:94:61:77:86:b4:e3:6e:24:10:
e0:5e:7f:10:34:a6:6a:10:43:5c:42:5d:3a:df:c9:
3e:7c:16:c1:84:93:58:29:e6:7a:41:d7:fb:08:1a:
86:01:da:83:62:68:c6:54:31:8c:24:0d:ff:06:41:
14:7b:cd:7f:61:95:81:bf:d7:a8:ab:80:2d:f4:5c:
b9:0a:6e:29:b6:3d:6f:16:49:08:b2:25:6c:f0:b9:
3c:26:de:db:ea:58:8f:cf:38:70:30:bd:f6:8f:5f:
0d:e6:52:c4:5d:b4:32:bc:44:86:dc:52:b8:7c:a1:
61:c0:62:e0:c7:f7:cf:c9:64:bc:78:ec:fc:12:a0:
a9:c6:a3:52:d2:20:5d:c5:26:fc:a8:5a:38:ec:70:
7e:37:07:d0:37:d5:77:d9:ef:fd:dd:b2:c0:2c:2f:
f2:05:4d:0e:9f:13:f4:77:de:2b:ba:22:a7:35:b5:
ca:eb:98:c6:a2:91:37:ce:e3:7a:fa:d7:29:dc:cc:
ca:27:90:42:bd:3a:8d:1e:e2:31:68:9e:93:d4:49:
1f:10:6a:e1:34:cc:86:b4:6d:c6:57:c6:47:04:8e:
b2:3b:5d:06:ff:81:9c:07:83:ec:ac:76:91:55:5b:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:98:66:B0:3B:3B:02:C4:B5:D6:1C:60:90:0F:FC:50:71:0F:24:39
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fc:af:2a:02:cb:83:e8:0f:f6:28:61:a1:c7:df:bf:2d:43:
43:fb:c8:9a:68:eb:e4:70:db:8e:2a:89:e4:19:7c:02:e1:70:
9d:e8:49:97:a9:c3:59:85:61:f9:ad:f8:65:91:6c:81:90:df:
a4:53:95:75:e8:91:24:d2:da:da:68:68:3a:17:17:bb:5a:d8:
7e:04:b6:22:34:ea:66:46:40:2f:f4:82:99:c9:19:e5:2f:fb:
b4:61:a1:e6:35:57:57:c3:4b:c9:26:c7:39:25:fc:3e:39:75:
77:2e:14:f6:d9:f0:e7:b0:8e:f2:08:93:5f:d2:6a:3a:c3:99:
01:8b:b3:b0:a7:47:68:73:02:86:ec:bc:da:bb:6a:60:b0:c9:
3c:9a:54:49:13:b7:27:14:97:cd:73:29:4d:b0:1e:fc:e7:74:
d1:d4:3a:93:b3:9e:b1:36:4c:21:ec:6b:ac:24:cc:ce:fa:23:
f9:93:39:fe:30:df:f8:19:0a:ef:16:e7:f3:b3:f4:6c:e7:88:
65:e8:62:2b:4c:f9:b1:6e:a1:8d:4d:c1:c8:f8:f7:89:0f:5a:
7f:03:14:6f:f0:8f:21:5d:f0:87:c0:22:12:b5:33:b2:50:79:
d6:87:73:ae:2e:91:f5:26:a2:1c:32:0d:df:e1:04:e5:dd:38:
55:f1:d2:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYH2QxQRL6MXZGYM8+61YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3
MjRlODIwHhcNMjUwODIzMTAwMTQ0WhcNMjUwODI0MTAwMTQ0WjAzMTEwLwYDVQQD
EygzNTk4NjZiMDNiM2IwMmM0YjVkNjFjNjA5MDBmZmM1MDcxMGYyNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KjtWqtH1KgL192xkD9PxyeeL7uU
YXeGtONuJBDgXn8QNKZqEENcQl0638k+fBbBhJNYKeZ6Qdf7CBqGAdqDYmjGVDGM
JA3/BkEUe81/YZWBv9eoq4At9Fy5Cm4ptj1vFkkIsiVs8Lk8Jt7b6liPzzhwML32
j18N5lLEXbQyvESG3FK4fKFhwGLgx/fPyWS8eOz8EqCpxqNS0iBdxSb8qFo47HB+
NwfQN9V32e/93bLALC/yBU0OnxP0d94ruiKnNbXK65jGopE3zuN6+tcp3MzKJ5BC
vTqNHuIxaJ6T1EkfEGrhNMyGtG3GV8ZHBI6yO10G/4GcB4PsrHaRVVtg5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWYZrA7OwLEtdYcYJAP/FBxDyQ5MB8GA1UdIwQY
MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt
Yjc3NmEyMjA0NTZiLzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi
LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/yvKgLL
g+gP9ihhocffvy1DQ/vImmjr5HDbjiqJ5Bl8AuFwnehJl6nDWYVh+a34ZZFsgZDf
pFOVdeiRJNLa2mhoOhcXu1rYfgS2IjTqZkZAL/SCmckZ5S/7tGGh5jVXV8NLySbH
OSX8Pjl1dy4U9tnw57CO8giTX9JqOsOZAYuzsKdHaHMChuy82rtqYLDJPJpUSRO3
JxSXzXMpTbAe/Od00dQ6k7OesTZMIexrrCTMzvoj+ZM5/jDf+BkK7xbn87P0bOeI
ZehiK0z5sW6hjU3ByPj3iQ9afwMUb/CPIV3wh8AiErUzslB51odzri6R9SaiHDIN
3+EE5d04VfHSJg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:57 2025 by rpki-client