Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier: mf47jGqusDMKewnsHW5YsrVO5gs92MR3DXZIvBteGnY=
Subject key identifier: 9B:37:CD:C9:D6:6A:CA:AE:34:15:48:92:8D:0A:D4:FA:2F:5B:26:53
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 0198451A9C7270549655A2308FCCBF9340F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number: 0216
Signing time: Sat 26 Jul 2025 05:00:28 +0000
Manifest this update: Sat 26 Jul 2025 05:00:28 +0000
Manifest next update: Sun 27 Jul 2025 05:00:28 +0000
Files and hashes: 1: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: 70LqOJ6qK2VtRqkbwFAuZT0xZLab1Hv6rBo8vP+fNok=)
2: zIZvUw6LEttnk9GqCkFL8S-ncbM.roa (hash: g5dRThI/Wu6nM24igsF8Y2hQEgVjjdxUN3aRLJWGc3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:9c:72:70:54:96:55:a2:30:8f:cc:bf:93:40:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: Jul 26 05:00:28 2025 GMT
Not After : Jul 27 05:00:28 2025 GMT
Subject: CN=9b37cdc9d66acaae341548928d0ad4fa2f5b2653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:8a:35:c8:7b:4e:7c:09:43:50:4e:3f:f2:
fc:6b:0b:4c:54:de:49:5f:1b:47:47:4d:bc:93:d9:
69:d3:c9:db:c6:55:5f:81:b9:fc:cc:e1:eb:f5:87:
3d:2c:77:2b:a1:d8:bd:b4:2d:4e:be:e9:76:19:92:
c6:2a:e3:f8:fc:e8:42:c0:7e:f5:93:64:09:92:a8:
ff:60:94:b1:b9:dc:11:a5:59:66:24:a8:41:ce:af:
12:87:97:45:40:25:05:76:58:18:e5:53:fc:f7:9f:
5d:35:4b:31:62:5f:05:56:77:4f:0d:28:72:cb:8d:
a4:41:4d:fd:c3:8e:29:11:86:ea:1b:0f:15:a2:cd:
ce:bc:92:c6:bc:1b:e7:05:2d:17:05:0b:8a:5f:53:
03:8e:55:bf:3a:cd:21:03:62:0c:ce:ce:c8:96:c4:
80:f2:88:86:cb:c2:f1:bd:58:d6:d6:fc:47:67:ae:
f3:ac:33:23:a0:30:32:b6:41:63:5b:33:8d:d2:c7:
37:ac:ed:fe:04:f6:f1:f0:5b:94:3a:1c:06:40:ed:
20:4c:62:63:f0:a4:1f:78:01:de:4e:80:c8:c1:79:
20:39:7d:b5:dc:b9:4e:60:32:40:22:e2:4d:03:2b:
e6:07:9b:2d:68:ca:22:6a:75:79:32:e4:40:85:c7:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:CD:C9:D6:6A:CA:AE:34:15:48:92:8D:0A:D4:FA:2F:5B:26:53
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d4:95:64:cf:86:cd:a3:02:07:4d:d6:c0:20:2c:e3:20:4b:
78:3a:ba:18:8b:90:1f:62:f3:b7:e4:5b:8f:21:aa:1a:6e:4f:
74:05:b2:50:d3:03:d7:ce:e7:56:8c:ae:f9:f6:24:a3:d8:6a:
ed:6f:f4:f8:16:5d:7a:42:f4:c9:35:61:36:f8:fc:e7:1b:e3:
92:27:6f:21:77:bd:15:c7:ad:96:16:74:99:94:c6:cb:64:41:
83:ee:c0:49:c9:43:63:2a:07:5c:f4:ca:e1:90:ca:78:41:fd:
7f:0e:21:e7:fd:27:a3:35:94:50:2d:98:f5:66:26:78:95:f5:
bb:c6:be:d6:a9:d5:15:a1:3a:98:e7:4c:c3:a2:f3:7a:b3:62:
9a:dd:ce:32:99:71:71:f9:9d:f5:ee:b5:29:a6:18:09:f1:29:
bd:41:51:1b:5f:e3:eb:7e:2f:9b:07:ae:52:65:3f:6c:9c:fd:
37:b7:2c:72:b1:37:29:ba:2f:1f:b0:7b:56:0e:19:9f:16:06:
15:93:5c:5c:7f:04:23:53:8a:48:18:df:b1:1e:47:6f:27:e0:
cc:62:ee:4f:b5:9f:8a:7a:c8:dd:a3:00:55:97:52:a5:f2:b0:
79:3e:11:ad:55:05:c1:97:32:3b:dd:fd:f6:f5:88:d3:24:f5:
c6:2a:46:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGpxycFSWVaIwj8y/k0DwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTk5YmRjMWNmYzdhZThjYzJmYmExNWZjZDgwY2ExMTcz
Nzg0NjcwHhcNMjUwNzI2MDUwMDI4WhcNMjUwNzI3MDUwMDI4WjAzMTEwLwYDVQQD
Eyg5YjM3Y2RjOWQ2NmFjYWFlMzQxNTQ4OTI4ZDBhZDRmYTJmNWIyNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkuKNch7TnwJQ1BOP/L8awtMVN5J
XxtHR028k9lp08nbxlVfgbn8zOHr9Yc9LHcrodi9tC1Ovul2GZLGKuP4/OhCwH71
k2QJkqj/YJSxudwRpVlmJKhBzq8Sh5dFQCUFdlgY5VP8959dNUsxYl8FVndPDShy
y42kQU39w44pEYbqGw8Vos3OvJLGvBvnBS0XBQuKX1MDjlW/Os0hA2IMzs7IlsSA
8oiGy8LxvVjW1vxHZ67zrDMjoDAytkFjWzON0sc3rO3+BPbx8FuUOhwGQO0gTGJj
8KQfeAHeToDIwXkgOX213LlOYDJAIuJNAyvmB5staMoianV5MuRAhcdFAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs3zcnWasquNBVIko0K1PovWyZTMB8GA1UdIwQY
MBaAFMpZm9wc/HrozC+6FfzYDKEXN4RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xY2VjYjgtOTdkOS00NzNmLWIwMDQt
Y2M5MTI3NDZlNDdlLzEveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xY2VjYjgtOTdkOS00NzNmLWIwMDQtY2M5MTI3NDZlNDdl
LzEveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdSVZM+G
zaMCB03WwCAs4yBLeDq6GIuQH2Lzt+RbjyGqGm5PdAWyUNMD187nVoyu+fYko9hq
7W/0+BZdekL0yTVhNvj85xvjkidvIXe9FcetlhZ0mZTGy2RBg+7ASclDYyoHXPTK
4ZDKeEH9fw4h5/0nozWUUC2Y9WYmeJX1u8a+1qnVFaE6mOdMw6LzerNimt3OMplx
cfmd9e61KaYYCfEpvUFRG1/j634vmweuUmU/bJz9N7cscrE3KbovH7B7Vg4ZnxYG
FZNcXH8EI1OKSBjfsR5HbyfgzGLuT7WfinrI3aMAVZdSpfKweT4RrVUFwZcyO939
9vWI0yT1xipGHQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 08:17:02 2025 by rpki-client