Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: 1qZjoW9bNK0sfc7yPqssrqRq0u0QytC0LzQ+F38cYPI=
Subject key identifier: E2:47:D6:A6:B8:44:5D:E8:D6:43:BF:99:3D:5D:35:5B:07:31:DC:4F
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 0198D51600B0F3C09141E35E0E2B49F194C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 1355
Signing time: Sat 23 Aug 2025 04:00:45 +0000
Manifest this update: Sat 23 Aug 2025 04:00:45 +0000
Manifest next update: Sun 24 Aug 2025 04:00:45 +0000
Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: iWaZ4tnqhtv7QsN+hOA8v3uHH6DL8nO9huCNf6NG7Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:00:b0:f3:c0:91:41:e3:5e:0e:2b:49:f1:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Aug 23 04:00:45 2025 GMT
Not After : Aug 24 04:00:45 2025 GMT
Subject: CN=e247d6a6b8445de8d643bf993d5d355b0731dc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:32:b4:2c:7f:b2:91:1b:ce:5c:28:70:68:
9d:ae:b6:a5:99:26:b6:c4:8e:c9:08:4c:6a:8d:b0:
2f:aa:aa:2c:24:17:b1:fb:fe:6c:54:63:3e:d7:49:
6f:82:98:0a:69:b0:13:f2:35:67:0c:3a:6e:98:d2:
c4:29:ec:ca:de:6b:17:9e:8f:ca:8d:e9:63:6d:c7:
9b:b6:62:90:75:06:8b:ff:49:ff:81:f6:35:81:47:
d3:ce:e7:c2:7b:7e:ca:0a:e3:c8:b7:2a:c5:71:3c:
98:86:1e:2d:18:88:51:25:55:da:2c:bd:d1:32:b7:
0e:a2:4e:ff:cf:8c:70:d6:20:5d:99:5a:e1:e8:88:
fe:72:fb:7e:2f:a0:cf:0d:71:c9:47:07:5a:cf:82:
c1:b7:fc:e6:ef:87:12:d9:ca:14:d9:13:ec:53:e8:
5f:3a:28:58:e9:e9:65:83:6d:05:c3:16:fe:69:de:
75:b3:f2:71:6b:d3:c9:61:e3:9a:e7:0c:43:f5:02:
10:91:57:bd:04:a0:22:f1:f2:73:d4:1e:26:ab:f4:
2b:78:1f:4c:3e:9c:43:20:a4:58:b7:28:42:34:07:
6e:7c:91:05:8a:4c:41:8e:01:ef:7c:b7:36:e6:05:
26:87:0f:03:05:22:37:02:41:dd:8e:aa:60:cc:4c:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:47:D6:A6:B8:44:5D:E8:D6:43:BF:99:3D:5D:35:5B:07:31:DC:4F
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c5:19:75:98:0a:cc:32:6c:ad:76:76:2d:e3:43:41:f6:05:
2b:58:eb:fa:32:fb:c2:2c:a2:1d:13:ff:cc:c1:8b:06:60:68:
40:42:b7:63:d0:f2:72:50:b1:82:11:70:41:16:5a:c2:16:12:
2d:b8:08:24:84:a4:d9:f3:57:b5:83:21:f1:65:45:08:fe:3d:
90:6b:9e:09:9c:18:81:01:34:72:32:e1:45:c7:18:94:e8:93:
ff:43:c7:e3:99:b3:a7:83:f6:d8:98:f5:82:36:d7:ef:3d:c4:
ce:7d:a3:8a:6f:53:47:89:dc:13:ef:a6:14:5a:12:0a:94:e5:
00:35:e3:ad:06:a0:0d:71:57:81:9f:85:a6:fa:df:81:38:34:
82:42:9a:ac:72:d2:ab:6d:08:f6:7c:de:11:87:00:05:50:fb:
b1:1a:25:4e:1e:82:29:3d:e0:12:f3:ae:d9:94:5c:0a:fb:38:
4d:c8:f3:e7:a3:52:e9:69:f2:5d:90:d1:15:78:5e:5a:35:f7:
75:ea:e2:bf:a1:5b:b5:21:f6:19:d2:5b:17:e5:6c:5a:33:9a:
78:cb:d2:99:84:21:58:fa:66:d6:44:9f:78:27:87:22:91:88:
38:06:62:55:0a:9d:65:c0:de:ab:fd:f9:e1:38:fd:c2:e0:d3:
e3:c3:d8:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFgCw88CRQeNeDitJ8ZTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Mzg3ZjAzNWIwOWQyYmMzOTNmN2Y2MGQ3NjIxZDMwMGNj
OTc3ZDgwHhcNMjUwODIzMDQwMDQ1WhcNMjUwODI0MDQwMDQ1WjAzMTEwLwYDVQQD
EyhlMjQ3ZDZhNmI4NDQ1ZGU4ZDY0M2JmOTkzZDVkMzU1YjA3MzFkYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlUytCx/spEbzlwocGidrralmSa2
xI7JCExqjbAvqqosJBex+/5sVGM+10lvgpgKabAT8jVnDDpumNLEKezK3msXno/K
jeljbcebtmKQdQaL/0n/gfY1gUfTzufCe37KCuPItyrFcTyYhh4tGIhRJVXaLL3R
MrcOok7/z4xw1iBdmVrh6Ij+cvt+L6DPDXHJRwdaz4LBt/zm74cS2coU2RPsU+hf
OihY6ellg20Fwxb+ad51s/Jxa9PJYeOa5wxD9QIQkVe9BKAi8fJz1B4mq/QreB9M
PpxDIKRYtyhCNAdufJEFikxBjgHvfLc25gUmhw8DBSI3AkHdjqpgzEyTFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJH1qa4RF3o1kO/mT1dNVsHMdxPMB8GA1UdIwQY
MBaAFMg4fwNbCdK8OT9/YNdiHTAMyXfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEt
YzFjM2M4NDg5MTJiLzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEtYzFjM2M4NDg5MTJi
LzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8UZdZgK
zDJsrXZ2LeNDQfYFK1jr+jL7wiyiHRP/zMGLBmBoQEK3Y9DyclCxghFwQRZawhYS
LbgIJISk2fNXtYMh8WVFCP49kGueCZwYgQE0cjLhRccYlOiT/0PH45mzp4P22Jj1
gjbX7z3Ezn2jim9TR4ncE++mFFoSCpTlADXjrQagDXFXgZ+FpvrfgTg0gkKarHLS
q20I9nzeEYcABVD7sRolTh6CKT3gEvOu2ZRcCvs4Tcjz56NS6WnyXZDRFXheWjX3
deriv6FbtSH2GdJbF+VsWjOaeMvSmYQhWPpm1kSfeCeHIpGIOAZiVQqdZcDeq/35
4Tj9wuDT48PYXg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:59 2025 by rpki-client