Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: QYg3Gg8ckCeZEX+wK04ilokTvAmiUPplea/MvBedBco=
Subject key identifier: AB:85:6A:06:58:5D:3C:2E:68:E1:B8:85:42:D9:26:2C:FA:1B:25:DC
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 01983DCFEB327F8C0FB04534052289374E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 15F8
Signing time: Thu 24 Jul 2025 19:01:32 +0000
Manifest this update: Thu 24 Jul 2025 19:01:32 +0000
Manifest next update: Fri 25 Jul 2025 19:01:32 +0000
Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=)
2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: jx76TGA1rgO9ttfr9VihwVQRxvuXSVDbn8LPjV9Gskg=)
3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:eb:32:7f:8c:0f:b0:45:34:05:22:89:37:4e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Jul 24 19:01:32 2025 GMT
Not After : Jul 25 19:01:32 2025 GMT
Subject: CN=ab856a06585d3c2e68e1b88542d9262cfa1b25dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:21:b1:6b:4b:7e:96:70:7a:8c:80:40:4d:
c4:ec:a7:df:2e:f7:24:10:7d:b9:2c:05:cd:d0:78:
08:50:41:be:72:29:81:99:de:fe:e9:4d:d6:65:2e:
38:37:76:a6:01:cd:92:4d:64:f4:0b:6a:8c:04:73:
47:4e:a2:ee:75:4f:11:f6:f2:f8:bf:1c:09:7e:69:
8d:ec:77:75:9f:3a:a2:10:71:27:83:31:bd:d7:7e:
07:af:0c:fa:8b:25:b1:ae:16:63:93:87:85:d9:9d:
ef:d4:09:8f:cc:bc:6d:9d:75:c0:b0:ce:e8:29:11:
b9:80:1e:94:48:ca:39:34:28:b9:61:50:63:58:fb:
a3:5f:8c:13:ef:12:42:0d:d1:04:e9:d0:7b:97:75:
73:65:c2:4e:bf:38:88:34:ca:4e:f3:1e:d2:26:f2:
86:9f:2d:2c:aa:9f:67:20:85:8c:39:4d:a2:84:b7:
3e:c6:e8:d7:77:4a:7d:30:d1:46:42:54:a3:02:5d:
35:59:9a:68:3c:22:9b:39:30:c9:0d:13:f5:5e:bc:
c2:c7:fe:a2:40:4f:15:1b:dc:62:70:5c:5e:df:68:
8c:8c:9a:83:d0:d4:66:5d:d0:06:1b:32:65:04:fc:
7a:bd:60:ad:dd:69:b7:00:11:84:15:3a:fd:81:0d:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:85:6A:06:58:5D:3C:2E:68:E1:B8:85:42:D9:26:2C:FA:1B:25:DC
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1d:e2:e7:74:e4:19:d8:7b:40:85:ff:bb:fe:46:24:70:d6:
63:73:61:11:39:35:92:f5:af:8d:51:ba:25:1f:c6:4e:41:66:
23:a1:52:b6:0f:f0:8a:6d:b1:7e:4a:f6:eb:e3:35:eb:c6:f8:
8e:c4:b3:ec:01:c5:ca:f3:0b:1f:58:dd:1d:13:44:f6:f3:fd:
af:e1:1d:72:ef:ae:65:e4:fc:84:d3:80:a8:2c:9a:b2:6e:28:
f0:e4:97:4a:ac:04:8e:e4:ca:b5:28:21:91:e0:3e:6a:71:ac:
26:47:2f:01:94:b5:85:28:48:47:fd:c6:6d:4b:17:79:00:c7:
e0:99:4b:cd:7a:f6:34:bc:28:9d:66:fa:69:bb:4f:34:28:42:
b4:03:79:62:8c:2e:68:3e:b0:25:32:f2:8c:50:c8:bd:1c:c2:
f6:2a:7d:28:1d:e1:c6:50:6d:b1:2a:c5:43:5d:aa:00:d3:7e:
92:8d:7a:8b:78:13:e1:74:52:8d:81:4e:51:7c:f3:ef:dd:f7:
81:a2:9e:88:41:43:00:d2:fd:26:8d:a8:a6:76:bb:a0:02:6f:
73:06:43:02:77:73:a9:e0:8b:a7:30:24:06:81:db:91:a7:a9:
0f:4c:b1:e1:74:9a:de:a8:1c:c9:f4:0d:36:a7:35:8b:00:e6:
f4:80:b8:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg9z+syf4wPsEU0BSKJN04eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm
ZjQ5YjQwHhcNMjUwNzI0MTkwMTMyWhcNMjUwNzI1MTkwMTMyWjAzMTEwLwYDVQQD
EyhhYjg1NmEwNjU4NWQzYzJlNjhlMWI4ODU0MmQ5MjYyY2ZhMWIyNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOghsWtLfpZweoyAQE3E7KffLvck
EH25LAXN0HgIUEG+cimBmd7+6U3WZS44N3amAc2STWT0C2qMBHNHTqLudU8R9vL4
vxwJfmmN7Hd1nzqiEHEngzG9134Hrwz6iyWxrhZjk4eF2Z3v1AmPzLxtnXXAsM7o
KRG5gB6USMo5NCi5YVBjWPujX4wT7xJCDdEE6dB7l3VzZcJOvziINMpO8x7SJvKG
ny0sqp9nIIWMOU2ihLc+xujXd0p9MNFGQlSjAl01WZpoPCKbOTDJDRP1XrzCx/6i
QE8VG9xicFxe32iMjJqD0NRmXdAGGzJlBPx6vWCt3Wm3ABGEFTr9gQ0HRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuFagZYXTwuaOG4hULZJiz6GyXcMB8GA1UdIwQY
MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It
MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk
LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR3i53Tk
Gdh7QIX/u/5GJHDWY3NhETk1kvWvjVG6JR/GTkFmI6FStg/wim2xfkr26+M168b4
jsSz7AHFyvMLH1jdHRNE9vP9r+Edcu+uZeT8hNOAqCyasm4o8OSXSqwEjuTKtSgh
keA+anGsJkcvAZS1hShIR/3GbUsXeQDH4JlLzXr2NLwonWb6abtPNChCtAN5Yowu
aD6wJTLyjFDIvRzC9ip9KB3hxlBtsSrFQ12qANN+ko16i3gT4XRSjYFOUXzz7933
gaKeiEFDANL9Jo2opna7oAJvcwZDAndzqeCLpzAkBoHbkaepD0yx4XSa3qgcyfQN
Nqc1iwDm9IC4Gw==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:20:02 2025 by rpki-client