Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: z9kCNz0te6qE/pXH5xy1FBn4ml2NXqsyWb20aOrcd7s=
Subject key identifier: 98:3D:0B:93:C2:A6:6C:0C:F0:3A:C0:DC:F9:FE:2D:7D:21:2C:91:26
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 019856EA2E580E73AF733B1A69E9045ECC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 16:00:44 +0000
Manifest this update: Tue 29 Jul 2025 16:00:44 +0000
Manifest next update: Wed 30 Jul 2025 16:00:44 +0000
Files and hashes: 1: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (hash: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: n7FWZjYQi2OkssqFE11lEInWnEYWVO2wIjVwJwo69C0=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:ea:2e:58:0e:73:af:73:3b:1a:69:e9:04:5e:cc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Jul 29 16:00:44 2025 GMT
Not After : Jul 30 16:00:44 2025 GMT
Subject: CN=983d0b93c2a66c0cf03ac0dcf9fe2d7d212c9126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:2c:51:f6:4b:ee:27:42:33:95:41:02:09:
a5:65:e7:d2:1e:08:43:2e:3d:66:b1:0d:c1:47:df:
60:ce:07:90:05:01:a7:44:4c:e5:2e:ba:fa:92:8e:
92:da:7b:ce:f0:28:cb:d4:96:67:d6:3f:54:84:5f:
c7:15:d3:5f:f1:ae:f8:09:72:71:45:ba:a5:8e:c5:
aa:33:02:87:b7:c1:5b:e0:8a:aa:a5:c5:59:f8:39:
b5:d2:bc:db:be:ca:d5:54:cf:14:27:f6:9c:ce:fe:
18:8e:cb:6a:ff:5f:fe:ac:8d:2c:47:47:57:bb:14:
6e:a1:47:e5:46:18:5c:cb:40:47:1d:1d:d4:a4:70:
8f:63:81:41:f5:d8:6b:f6:49:86:88:81:fa:3e:71:
11:ce:c2:96:16:ff:52:b7:3d:89:07:0e:c1:97:b6:
62:38:ff:36:b5:5a:1d:96:1e:fe:75:3d:fc:51:e5:
46:6c:23:57:82:19:50:d4:0c:e5:11:81:aa:80:ad:
2e:2c:ec:b6:a3:d0:bc:b6:fa:59:f3:76:4a:6b:70:
e4:8d:0b:85:39:c3:f3:f7:33:4a:b2:72:39:04:42:
44:a6:49:60:26:02:08:68:2c:82:7b:7b:55:d5:f9:
3e:57:b8:96:98:73:17:29:8a:f8:9f:c2:e3:1a:e2:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3D:0B:93:C2:A6:6C:0C:F0:3A:C0:DC:F9:FE:2D:7D:21:2C:91:26
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:b4:60:f6:b4:23:73:11:f9:3b:9e:a8:1d:34:35:a6:5c:
15:cc:c8:d5:06:31:5c:53:9d:85:19:93:ff:0d:36:6d:be:46:
50:58:4d:04:df:98:ec:83:ec:d0:66:f6:65:0f:c0:d6:b7:23:
44:f2:a3:ca:f3:0f:d1:4f:a1:53:a3:8f:f5:c6:04:43:a2:d8:
8e:37:d4:09:91:aa:fb:2a:63:a5:c3:44:c2:17:f2:71:a8:0b:
34:50:45:f7:30:aa:63:5b:65:9d:03:04:16:99:2c:bd:1c:0d:
ec:88:ce:37:48:21:e8:94:10:ed:64:e7:15:e4:c5:cf:79:ec:
d3:25:af:f3:0d:2c:6e:f1:79:d4:e3:29:29:df:9b:2f:1d:f4:
56:77:af:ae:ae:78:75:00:25:66:00:03:a5:3f:21:2c:f1:81:
46:1b:1f:49:02:6b:11:24:00:6f:e6:19:21:be:62:3e:09:26:
35:82:ce:2e:ac:3e:aa:11:1d:9e:bf:ea:81:04:cb:f0:85:60:
15:03:e6:11:f6:db:1e:f1:49:6a:47:49:03:04:aa:a6:a6:96:
4f:34:02:6d:04:2d:37:5b:34:78:f6:b3:44:d8:f8:3b:a4:29:
24:14:4d:97:69:40:f6:3b:1f:a9:2c:05:da:3f:a5:95:09:b3:
b6:7f:be:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhW6i5YDnOvczsaaekEXswLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjM3ZTYxNDRiZTdmNWRkOTNhZGI5YmFiZDgzZDQ4ZDUx
ODk0ZmQwHhcNMjUwNzI5MTYwMDQ0WhcNMjUwNzMwMTYwMDQ0WjAzMTEwLwYDVQQD
Eyg5ODNkMGI5M2MyYTY2YzBjZjAzYWMwZGNmOWZlMmQ3ZDIxMmM5MTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApecsUfZL7idCM5VBAgmlZefSHghD
Lj1msQ3BR99gzgeQBQGnREzlLrr6ko6S2nvO8CjL1JZn1j9UhF/HFdNf8a74CXJx
RbqljsWqMwKHt8Fb4IqqpcVZ+Dm10rzbvsrVVM8UJ/aczv4Yjstq/1/+rI0sR0dX
uxRuoUflRhhcy0BHHR3UpHCPY4FB9dhr9kmGiIH6PnERzsKWFv9Stz2JBw7Bl7Zi
OP82tVodlh7+dT38UeVGbCNXghlQ1AzlEYGqgK0uLOy2o9C8tvpZ83ZKa3DkjQuF
OcPz9zNKsnI5BEJEpklgJgIIaCyCe3tV1fk+V7iWmHMXKYr4n8LjGuIMdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg9C5PCpmwM8DrA3Pn+LX0hLJEmMB8GA1UdIwQY
MBaAFP/zfmFEvn9d2Trbm6vYPUjVGJT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYt
MGJjZTgwZDRkZmY5LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYtMGJjZTgwZDRkZmY5
LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMG0YPa0
I3MR+TueqB00NaZcFczI1QYxXFOdhRmT/w02bb5GUFhNBN+Y7IPs0Gb2ZQ/A1rcj
RPKjyvMP0U+hU6OP9cYEQ6LYjjfUCZGq+ypjpcNEwhfycagLNFBF9zCqY1tlnQME
FpksvRwN7IjON0gh6JQQ7WTnFeTFz3ns0yWv8w0sbvF51OMpKd+bLx30Vnevrq54
dQAlZgADpT8hLPGBRhsfSQJrESQAb+YZIb5iPgkmNYLOLqw+qhEdnr/qgQTL8IVg
FQPmEfbbHvFJakdJAwSqpqaWTzQCbQQtN1s0ePazRNj4O6QpJBRNl2lA9jsfqSwF
2j+llQmztn++fA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 19:00:38 2025 by rpki-client