Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
File: YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json)
Hash identifier: Wih12UEqoUqzQevP+I5jQ4SgGBAFgx1ybg1D+fQOfgw=
Subject key identifier: 7D:18:94:AC:B9:2D:EB:2B:E4:09:75:4F:75:89:03:91:E2:28:BF:5A
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial: 0198537ABE9910BFAFCA8F2D1B72AFF7CC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 00:00:09 +0000
Manifest this update: Tue 29 Jul 2025 00:00:09 +0000
Manifest next update: Wed 30 Jul 2025 00:00:09 +0000
Files and hashes: 1: Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa (hash: q1LYdMsfXSEFkYw+v/2PtBLKm0CXtMVR1H0DEe1ErnY=)
2: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: 9lVFyLGn7gY+gS0AAoJ2R2N5sP0jerHEYh4IgGhc3lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:be:99:10:bf:af:ca:8f:2d:1b:72:af:f7:cc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
Validity
Not Before: Jul 29 00:00:09 2025 GMT
Not After : Jul 30 00:00:09 2025 GMT
Subject: CN=7d1894acb92deb2be409754f75890391e228bf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:2d:3c:b5:3c:7b:e9:b5:26:3b:cb:fa:d4:
e6:b7:80:a0:59:c3:63:27:d3:6b:01:19:c4:25:9f:
81:0e:97:7a:64:a0:dc:3e:91:b7:98:0a:6a:c9:d0:
66:09:b4:c8:ef:8c:4a:bb:41:d8:01:04:98:30:23:
bd:63:e5:01:33:1f:7d:c5:d1:89:24:ad:e6:a3:4c:
02:cd:f4:bb:16:f0:1f:dc:e1:99:7c:70:6a:3f:8b:
f0:b1:3f:bc:53:dc:ff:dd:84:5d:93:06:7a:b2:84:
23:7d:42:4b:bc:36:a0:9c:ff:2c:49:8c:14:3f:8d:
ae:50:0a:f1:d7:dd:7a:cf:eb:b8:60:9a:78:6c:3b:
7e:e3:48:8b:1d:f3:d6:8e:39:e0:b1:74:fa:fc:25:
7e:52:02:ef:6f:5a:90:85:30:a0:3c:da:a6:32:a7:
e2:d3:e1:96:79:9c:34:eb:f6:66:f2:64:00:5b:3d:
a5:92:69:9d:e9:c4:9e:1e:ee:87:09:1a:a7:12:28:
56:b3:41:d4:0c:78:7f:cd:92:0d:f4:a3:ff:f9:64:
ce:b1:cd:87:7a:0e:a6:6c:68:c5:f5:2b:81:5c:fb:
a2:de:a9:6c:76:36:a6:09:c4:f3:89:12:1c:5b:f4:
79:c5:36:9c:75:f1:d1:06:00:6a:3d:16:af:b3:10:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:18:94:AC:B9:2D:EB:2B:E4:09:75:4F:75:89:03:91:E2:28:BF:5A
X509v3 Authority Key Identifier:
keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8b:fa:25:73:a3:37:de:13:bb:b7:7f:3f:fe:6e:b5:34:ac:
d6:42:57:60:29:31:e6:bd:66:c2:57:6c:90:93:eb:94:68:11:
b8:e8:78:47:22:0c:73:cd:fb:81:91:72:32:34:cc:d0:e7:06:
2e:43:50:ac:8b:20:f6:22:10:12:f6:6b:53:c0:f8:98:81:11:
40:14:93:13:60:ec:a2:4f:ff:54:18:80:5d:d7:3a:2a:fd:ac:
6b:78:31:ed:b5:6e:2a:91:b0:4a:5b:17:28:d7:f2:03:b1:25:
cd:9c:14:1a:b9:7a:f7:ef:4b:b3:b0:f8:a4:3b:0e:c3:8b:5f:
dc:01:0a:4b:1f:d8:e6:e9:dc:3f:35:89:50:2f:a3:43:fd:06:
d2:e2:29:5b:a1:ad:c5:be:0f:9c:97:4f:26:f9:cb:33:eb:0a:
f3:f9:07:31:f3:9b:ee:08:7f:e1:8b:d7:c2:3b:fb:bc:34:c2:
59:90:44:a5:f6:39:6c:1f:4a:1d:d6:e7:c0:45:47:fe:2f:87:
ae:80:c2:8d:a0:04:92:7d:6d:66:c4:c1:ef:dd:9c:ea:58:e4:
f0:7e:4f:79:1c:cd:28:f9:8c:a3:e6:51:75:fb:5a:78:e2:a6:
d1:61:6d:c9:65:b3:da:4c:25:0c:9f:2f:ae:11:51:b0:3f:6e:
c0:ce:4f:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTer6ZEL+vyo8tG3Kv98wpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjE5NWQxMzA1MGZmM2M0NjhhMTQ5Nzc4NzEwYjUzNTgy
MjUxZDkwHhcNMjUwNzI5MDAwMDA5WhcNMjUwNzMwMDAwMDA5WjAzMTEwLwYDVQQD
Eyg3ZDE4OTRhY2I5MmRlYjJiZTQwOTc1NGY3NTg5MDM5MWUyMjhiZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzEtPLU8e+m1JjvL+tTmt4CgWcNj
J9NrARnEJZ+BDpd6ZKDcPpG3mApqydBmCbTI74xKu0HYAQSYMCO9Y+UBMx99xdGJ
JK3mo0wCzfS7FvAf3OGZfHBqP4vwsT+8U9z/3YRdkwZ6soQjfUJLvDagnP8sSYwU
P42uUArx1916z+u4YJp4bDt+40iLHfPWjjngsXT6/CV+UgLvb1qQhTCgPNqmMqfi
0+GWeZw06/Zm8mQAWz2lkmmd6cSeHu6HCRqnEihWs0HUDHh/zZIN9KP/+WTOsc2H
eg6mbGjF9SuBXPui3qlsdjamCcTziRIcW/R5xTacdfHRBgBqPRavsxBV9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0YlKy5Lesr5Al1T3WJA5HiKL9aMB8GA1UdIwQY
MBaAFGGxldEwUP88RooUl3hxC1NYIlHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yZjNjMTktNTZkNS00OTI0LThiY2It
YmFjNDcyYWI3YjZhLzEvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yZjNjMTktNTZkNS00OTI0LThiY2ItYmFjNDcyYWI3YjZh
LzEvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYv6JXOj
N94Tu7d/P/5utTSs1kJXYCkx5r1mwldskJPrlGgRuOh4RyIMc837gZFyMjTM0OcG
LkNQrIsg9iIQEvZrU8D4mIERQBSTE2Dsok//VBiAXdc6Kv2sa3gx7bVuKpGwSlsX
KNfyA7ElzZwUGrl69+9Ls7D4pDsOw4tf3AEKSx/Y5uncPzWJUC+jQ/0G0uIpW6Gt
xb4PnJdPJvnLM+sK8/kHMfOb7gh/4YvXwjv7vDTCWZBEpfY5bB9KHdbnwEVH/i+H
roDCjaAEkn1tZsTB792c6ljk8H5PeRzNKPmMo+ZRdftaeOKm0WFtyWWz2kwlDJ8v
rhFRsD9uwM5PYQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 06:32:34 2025 by rpki-client