
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier: yqoz66uiAlVgP1aoj6mnYBUrph9ok1PR5XJWbXkw9SQ=
Subject key identifier: 36:BE:CB:98:CA:E7:B3:2B:CE:9D:4D:CB:F4:1B:AB:D7:1C:BB:76:4C
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 01984A09C8878880807380124F7385A14D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number: 0361
Signing time: Sun 27 Jul 2025 04:00:11 +0000
Manifest this update: Sun 27 Jul 2025 04:00:11 +0000
Manifest next update: Mon 28 Jul 2025 04:00:11 +0000
Files and hashes: 1: q46mhqb037SisDm5N4bZ1WyfVUE.roa (hash: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=)
2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: xZ+hLK654eIt2qr6Rnk/KvcesdF2o4wxi4fMqcpTtSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:c8:87:88:80:80:73:80:12:4f:73:85:a1:4d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Jul 27 04:00:11 2025 GMT
Not After : Jul 28 04:00:11 2025 GMT
Subject: CN=36becb98cae7b32bce9d4dcbf41babd71cbb764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:53:90:13:d9:41:7b:02:0a:74:a1:f9:18:
19:68:2c:ea:50:a2:1d:2c:ba:28:49:b0:dc:b1:43:
68:cb:f7:b3:bd:0d:3e:a6:ea:2b:da:d9:a8:33:d2:
32:45:7f:9f:42:cd:83:aa:4e:95:dc:87:7b:bd:43:
be:7e:1e:ba:5c:95:b0:fe:1e:02:78:9f:1e:5c:b7:
8e:a4:29:ff:ed:bf:c6:4e:bf:7e:83:3f:24:ad:65:
46:8a:6b:06:f0:06:72:b9:c0:b9:35:4c:b5:69:4f:
bc:b0:50:37:ef:8d:55:d0:de:c3:c4:5f:5d:36:50:
ad:dc:bd:2b:e4:f3:37:60:8b:f9:4a:6d:32:b8:4f:
05:21:ba:ff:fd:bd:5d:c8:7e:c8:5d:4b:eb:55:62:
73:63:e8:9a:e2:0a:e7:9b:c5:f2:2a:de:7a:c6:df:
46:48:a9:3b:68:61:45:95:09:f2:b1:e4:ba:bc:2f:
c6:55:2f:f5:f0:c2:c7:2a:d8:48:ca:79:1f:68:dd:
d8:23:db:1a:7d:36:99:03:33:af:22:88:e9:02:54:
cd:4d:0d:d9:73:81:26:e5:d0:2b:15:d1:f5:41:57:
2d:42:16:76:24:42:54:0e:de:f8:34:d9:fe:7c:6f:
d6:de:5e:7f:b5:2f:72:19:47:30:4a:74:a4:ce:b5:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BE:CB:98:CA:E7:B3:2B:CE:9D:4D:CB:F4:1B:AB:D7:1C:BB:76:4C
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d6:76:e3:42:b1:3e:d8:c6:41:ca:21:73:5b:e1:e8:fc:b5:
5e:01:0d:75:73:00:03:f9:d4:12:9a:39:0f:17:0e:6e:68:68:
39:f0:f9:eb:6b:a3:4d:64:af:a0:cf:c7:75:fc:eb:2f:f4:4b:
e6:ef:31:0b:cf:12:9e:ab:91:a2:de:ba:f9:ab:66:9c:a0:c7:
7d:e5:65:2d:ee:84:7e:63:12:be:d8:33:d1:1a:8a:cb:8c:6c:
d9:f9:18:b7:bb:c6:b7:76:78:92:02:9c:7a:60:6b:20:aa:cb:
31:0a:ea:93:a1:ab:c8:a2:59:75:18:e4:a7:8c:0c:93:e0:58:
2c:41:3b:bd:58:2b:b7:28:ec:ca:5c:cb:56:37:67:3c:fc:ff:
37:b3:8a:98:cf:25:90:7a:1e:30:25:56:95:0a:b6:6a:6d:f0:
5e:17:07:44:0c:a9:20:0e:f8:00:c6:40:f1:38:14:6a:ac:43:
20:fd:04:f6:dd:fb:20:ce:b1:5d:b3:bd:b2:ef:17:09:21:3c:
f8:81:18:1f:44:cc:5f:7a:00:f0:4f:dd:5f:fc:d9:68:00:ac:
a8:87:86:15:1f:18:44:c4:f1:4b:f4:1b:fd:bc:12:37:f4:12:
1c:4e:40:f5:55:b3:f5:b2:8b:3b:6f:26:63:45:c0:d0:2d:11:
de:25:0b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCciHiICAc4AST3OFoU0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTlmYzcyNWIwYzNlZjEwMzczNDYwZjliZjU5YmNlM2Vk
NTBhMzQwHhcNMjUwNzI3MDQwMDExWhcNMjUwNzI4MDQwMDExWjAzMTEwLwYDVQQD
EygzNmJlY2I5OGNhZTdiMzJiY2U5ZDRkY2JmNDFiYWJkNzFjYmI3NjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR5TkBPZQXsCCnSh+RgZaCzqUKId
LLooSbDcsUNoy/ezvQ0+puor2tmoM9IyRX+fQs2Dqk6V3Id7vUO+fh66XJWw/h4C
eJ8eXLeOpCn/7b/GTr9+gz8krWVGimsG8AZyucC5NUy1aU+8sFA3741V0N7DxF9d
NlCt3L0r5PM3YIv5Sm0yuE8FIbr//b1dyH7IXUvrVWJzY+ia4grnm8XyKt56xt9G
SKk7aGFFlQnyseS6vC/GVS/18MLHKthIynkfaN3YI9safTaZAzOvIojpAlTNTQ3Z
c4Em5dArFdH1QVctQhZ2JEJUDt74NNn+fG/W3l5/tS9yGUcwSnSkzrU6mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDa+y5jK57Mrzp1Ny/Qbq9ccu3ZMMB8GA1UdIwQY
MBaAFMvp/HJbDD7xA3NGD5v1m84+1Qo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDIt
NTVhNTRkZjE0MzRlLzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDItNTVhNTRkZjE0MzRl
LzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNZ240Kx
PtjGQcohc1vh6Py1XgENdXMAA/nUEpo5DxcObmhoOfD562ujTWSvoM/HdfzrL/RL
5u8xC88SnquRot66+atmnKDHfeVlLe6EfmMSvtgz0RqKy4xs2fkYt7vGt3Z4kgKc
emBrIKrLMQrqk6GryKJZdRjkp4wMk+BYLEE7vVgrtyjsylzLVjdnPPz/N7OKmM8l
kHoeMCVWlQq2am3wXhcHRAypIA74AMZA8TgUaqxDIP0E9t37IM6xXbO9su8XCSE8
+IEYH0TMX3oA8E/dX/zZaACsqIeGFR8YRMTxS/Qb/bwSN/QSHE5A9VWz9bKLO28m
Y0XA0C0R3iULyQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:57 2025 by rpki-client