Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier: qyIbgyJatDSau0iR0CUgs7TxOS4kw6AKox1UbpTBgGQ=
Subject key identifier: 99:4E:2C:32:97:A3:61:33:74:94:EF:85:FE:06:24:90:B2:89:2E:54
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 019849D30F8D202D6194429D020647869C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 03:00:25 +0000
Manifest this update: Sun 27 Jul 2025 03:00:25 +0000
Manifest next update: Mon 28 Jul 2025 03:00:25 +0000
Files and hashes: 1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: h15fxyV5WatbABYfNut4by4/yPj2ptBFk2LokfR1Pko=)
2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=)
3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:0f:8d:20:2d:61:94:42:9d:02:06:47:86:9c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Jul 27 03:00:25 2025 GMT
Not After : Jul 28 03:00:25 2025 GMT
Subject: CN=994e2c3297a361337494ef85fe062490b2892e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:37:88:2a:14:a7:56:ac:8b:6e:fb:0a:28:
99:1f:52:12:60:27:d6:5d:42:c7:27:57:a9:81:36:
6d:46:c8:ab:e9:79:37:01:bc:f4:52:dc:de:9f:08:
a9:92:42:0c:a1:27:a1:16:6a:06:a7:e3:ab:7a:06:
cf:00:68:cb:d1:9f:34:a8:55:b2:22:49:51:67:1f:
2d:ba:f7:27:19:c6:4e:2a:a9:f0:3a:23:2f:f6:d4:
1e:8f:86:8c:7c:b0:61:74:f0:50:b1:70:45:4b:34:
c9:5c:13:50:5c:6a:3a:d2:d0:a8:35:e1:08:b7:a3:
80:84:19:40:a8:ac:c0:45:13:bb:0a:54:22:83:12:
d9:61:1a:5b:78:4f:ed:66:36:00:a1:ff:f5:97:e7:
00:b1:ee:b7:ed:f1:ea:e8:e5:6e:15:72:f3:6f:f4:
b0:a6:9b:39:9f:6a:8f:b0:c2:f6:c2:be:cb:42:01:
9f:de:eb:92:b6:b5:35:9f:11:c4:e2:3e:a8:08:c2:
27:87:7f:75:e5:a8:a8:da:3a:f6:82:dc:c0:02:76:
bd:f5:64:54:2c:c1:b7:42:4b:1c:cf:3f:18:20:b1:
87:09:38:bb:4f:c9:00:71:cd:74:ff:a9:63:aa:cc:
df:7b:0c:26:3e:90:85:a7:8d:11:e6:7f:ff:cd:80:
99:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4E:2C:32:97:A3:61:33:74:94:EF:85:FE:06:24:90:B2:89:2E:54
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:af:a9:1c:29:6b:2f:4c:a7:08:32:bb:ef:e5:cd:d5:99:4b:
ad:97:fd:ec:ec:6c:47:94:65:15:69:8a:79:2e:45:4d:56:0f:
a5:84:ec:2a:5a:fd:15:1a:8b:1f:8c:b0:f3:09:8e:71:1d:b6:
8c:37:f8:1b:62:4a:5a:a8:20:19:dd:6c:91:2e:f2:15:d7:ea:
81:4c:1c:53:52:b7:94:9c:9f:b0:0c:65:03:7c:e5:a7:da:ec:
cf:0d:88:ce:92:71:c6:6d:02:b6:54:e0:5f:8f:c5:11:c6:5d:
c8:62:8f:d0:13:bc:db:9a:8a:e5:e3:a6:4a:96:78:47:d9:f1:
80:12:91:2a:ab:3e:63:2d:21:57:45:c8:d1:9c:02:2f:72:c6:
c0:93:a4:62:bf:b7:9d:9c:29:92:e4:d1:35:ab:9c:9e:e3:b7:
79:0f:58:db:6d:cc:0f:8c:c1:28:8a:8c:a4:7f:d9:00:5d:66:
1e:20:d0:31:e3:6a:a1:c7:84:05:ad:85:bc:30:8d:a2:73:34:
aa:03:4d:0f:38:96:c7:a6:d3:8b:d7:15:36:2a:ae:03:5f:ce:
17:c1:d8:da:9e:87:6a:79:e9:2f:68:34:a3:b9:cd:ca:06:01:
d0:89:9b:7e:1b:3f:1b:2b:ed:4d:53:82:db:28:b8:f5:da:fd:
19:fb:10:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0w+NIC1hlEKdAgZHhpxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5
ZjBhOTMwHhcNMjUwNzI3MDMwMDI1WhcNMjUwNzI4MDMwMDI1WjAzMTEwLwYDVQQD
Eyg5OTRlMmMzMjk3YTM2MTMzNzQ5NGVmODVmZTA2MjQ5MGIyODkyZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqM3iCoUp1asi277CiiZH1ISYCfW
XULHJ1epgTZtRsir6Xk3Abz0UtzenwipkkIMoSehFmoGp+OregbPAGjL0Z80qFWy
IklRZx8tuvcnGcZOKqnwOiMv9tQej4aMfLBhdPBQsXBFSzTJXBNQXGo60tCoNeEI
t6OAhBlAqKzARRO7ClQigxLZYRpbeE/tZjYAof/1l+cAse637fHq6OVuFXLzb/Sw
pps5n2qPsML2wr7LQgGf3uuStrU1nxHE4j6oCMInh3915aio2jr2gtzAAna99WRU
LMG3Qksczz8YILGHCTi7T8kAcc10/6ljqszfewwmPpCFp40R5n//zYCZcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlOLDKXo2EzdJTvhf4GJJCyiS5UMB8GA1UdIwQY
MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt
N2NmZDk1N2YwOGZmLzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm
LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq+pHClr
L0ynCDK77+XN1ZlLrZf97OxsR5RlFWmKeS5FTVYPpYTsKlr9FRqLH4yw8wmOcR22
jDf4G2JKWqggGd1skS7yFdfqgUwcU1K3lJyfsAxlA3zlp9rszw2IzpJxxm0CtlTg
X4/FEcZdyGKP0BO825qK5eOmSpZ4R9nxgBKRKqs+Yy0hV0XI0ZwCL3LGwJOkYr+3
nZwpkuTRNaucnuO3eQ9Y223MD4zBKIqMpH/ZAF1mHiDQMeNqoceEBa2FvDCNonM0
qgNNDziWx6bTi9cVNiquA1/OF8HY2p6HannpL2g0o7nNygYB0Imbfhs/GyvtTVOC
2yi49dr9GfsQdQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:07 2025 by rpki-client