Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
File: rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json)
Hash identifier: nPTv8YHaqVuh2MBGUFibvsY45by/5ew6K0CRUuCagmE=
Subject key identifier: 64:7B:5A:24:12:BC:9B:DC:9B:A2:02:8D:36:D0:06:8E:4F:B0:67:61
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial: 0199240D1B5A62BF1C26F1CB274C1D70300B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 12:01:02 +0000
Manifest this update: Sun 07 Sep 2025 12:01:02 +0000
Manifest next update: Mon 08 Sep 2025 12:01:02 +0000
Files and hashes: 1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=)
2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: afyg24qUrtF8Wer8Q/P7+jDBokeLAhe+iCV3mSaSohg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:1b:5a:62:bf:1c:26:f1:cb:27:4c:1d:70:30:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Validity
Not Before: Sep 7 12:01:02 2025 GMT
Not After : Sep 8 12:01:02 2025 GMT
Subject: CN=647b5a2412bc9bdc9ba2028d36d0068e4fb06761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:72:24:bf:e3:73:00:ae:cf:e6:01:2e:fa:
5c:82:57:d9:b6:b8:db:07:fd:04:24:ce:66:04:74:
ba:ad:60:9b:b0:ac:05:fa:c1:73:3e:eb:70:fe:5c:
3b:8b:76:68:d1:95:a2:f5:fc:0d:1a:2a:86:d5:84:
02:30:bc:3c:77:02:7c:a0:34:6b:65:c2:3e:1e:fa:
20:da:0a:25:b4:08:44:ee:f7:ef:0e:7b:11:e9:01:
5e:a2:25:bb:9c:cf:83:fb:25:89:45:89:d7:7e:4d:
73:5f:c2:98:f7:c5:31:26:a0:b5:63:c3:5d:dd:ab:
d3:5d:6d:8c:aa:31:9f:08:00:6f:50:b0:65:1f:9b:
ea:10:24:d8:3d:79:60:02:08:8b:51:f9:83:8d:1b:
b2:55:60:c6:62:b8:fe:ca:a9:96:ea:97:43:8b:58:
b4:f6:9c:55:80:d3:07:0a:f4:77:ab:17:8e:1a:04:
8e:41:5b:89:8c:48:75:2e:fb:97:35:13:fd:53:68:
60:78:f1:52:e5:0d:dc:60:3e:d6:b7:12:44:eb:0c:
ab:d6:73:21:2f:a6:a7:70:27:2f:01:7e:86:f3:1c:
90:ee:4a:eb:f7:78:52:f5:54:b1:c2:92:94:69:e2:
10:b8:21:fa:96:b4:4d:3e:bb:02:a4:b5:4e:d9:cc:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:5A:24:12:BC:9B:DC:9B:A2:02:8D:36:D0:06:8E:4F:B0:67:61
X509v3 Authority Key Identifier:
keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8a:73:aa:b9:e5:39:db:ce:c7:93:de:bf:e4:57:ba:62:cf:
59:6d:2e:89:ea:85:3a:30:1d:67:a8:8f:ba:cc:d0:e5:f2:c2:
34:2a:71:9b:3f:dd:76:3b:4f:ca:25:cf:be:97:73:85:73:3e:
d6:c0:48:b1:ce:b3:8d:37:16:2b:e5:3f:03:59:59:3c:73:52:
c7:b9:50:67:b7:26:18:80:a7:b0:34:38:98:c1:0b:1d:fc:f3:
48:fc:23:7f:75:d7:78:7b:cd:cc:25:5b:78:11:18:e6:87:8a:
49:b1:82:82:7e:1e:dd:9a:7e:6c:a3:c5:fc:21:03:4e:3b:bb:
a7:61:31:38:6b:0b:b5:65:71:4d:02:ad:66:9d:54:30:dc:e8:
0f:e0:ec:f4:a7:12:04:01:aa:fb:1b:da:48:f6:58:a2:c7:db:
b5:73:9c:64:bc:8b:ee:65:25:20:a4:9e:41:77:5a:25:64:72:
a2:e2:bf:81:d3:0b:05:f4:f7:a3:d6:05:89:bb:ea:42:87:b6:
42:9d:9c:aa:ed:41:61:cf:98:68:5c:03:4f:16:f4:43:2b:03:
80:dd:ba:17:1e:e0:4e:52:7b:73:eb:88:92:11:09:ab:ba:d8:
24:9f:9b:9f:9b:a8:56:3f:c5:1b:1b:aa:29:c4:0d:c4:81:2b:
f0:18:61:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDRtaYr8cJvHLJ0wdcDALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGU4NTdmYzAwYmUxNGVkOTJiOWU3OGNjM2NhNjliOGFk
YzI0ODUwHhcNMjUwOTA3MTIwMTAyWhcNMjUwOTA4MTIwMTAyWjAzMTEwLwYDVQQD
Eyg2NDdiNWEyNDEyYmM5YmRjOWJhMjAyOGQzNmQwMDY4ZTRmYjA2NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEdyJL/jcwCuz+YBLvpcglfZtrjb
B/0EJM5mBHS6rWCbsKwF+sFzPutw/lw7i3Zo0ZWi9fwNGiqG1YQCMLw8dwJ8oDRr
ZcI+Hvog2goltAhE7vfvDnsR6QFeoiW7nM+D+yWJRYnXfk1zX8KY98UxJqC1Y8Nd
3avTXW2MqjGfCABvULBlH5vqECTYPXlgAgiLUfmDjRuyVWDGYrj+yqmW6pdDi1i0
9pxVgNMHCvR3qxeOGgSOQVuJjEh1LvuXNRP9U2hgePFS5Q3cYD7WtxJE6wyr1nMh
L6ancCcvAX6G8xyQ7krr93hS9VSxwpKUaeIQuCH6lrRNPrsCpLVO2cwzfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR7WiQSvJvcm6ICjTbQBo5PsGdhMB8GA1UdIwQY
MBaAFK2OhX/AC+FO2SueeMw8ppuK3CSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAt
ZGIwOTllNTg1ZTRiLzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAtZGIwOTllNTg1ZTRi
LzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIpzqrnl
OdvOx5Pev+RXumLPWW0uieqFOjAdZ6iPuszQ5fLCNCpxmz/ddjtPyiXPvpdzhXM+
1sBIsc6zjTcWK+U/A1lZPHNSx7lQZ7cmGICnsDQ4mMELHfzzSPwjf3XXeHvNzCVb
eBEY5oeKSbGCgn4e3Zp+bKPF/CEDTju7p2ExOGsLtWVxTQKtZp1UMNzoD+Ds9KcS
BAGq+xvaSPZYosfbtXOcZLyL7mUlIKSeQXdaJWRyouK/gdMLBfT3o9YFibvqQoe2
Qp2cqu1BYc+YaFwDTxb0QysDgN26Fx7gTlJ7c+uIkhEJq7rYJJ+bn5uoVj/FGxuq
KcQNxIEr8BhhfA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:22 2025 by rpki-client