Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: M5slQUBPtqIoeFQkDO4M5q2ibuFoa5mNrsDwiGUB8sY=
Subject key identifier: A1:FA:33:56:C8:F3:B0:BA:4B:EE:65:1D:B2:93:74:9C:71:FA:42:9C
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 0199239FBD6A77981DCC61193E285C00043B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 167A
Signing time: Sun 07 Sep 2025 10:01:35 +0000
Manifest this update: Sun 07 Sep 2025 10:01:35 +0000
Manifest next update: Mon 08 Sep 2025 10:01:35 +0000
Files and hashes: 1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: /JLDR12VB7ATOEZIdJ7zJG0a1MMI+y58KdBKh/1Kjik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:bd:6a:77:98:1d:cc:61:19:3e:28:5c:00:04:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Sep 7 10:01:35 2025 GMT
Not After : Sep 8 10:01:35 2025 GMT
Subject: CN=a1fa3356c8f3b0ba4bee651db293749c71fa429c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:13:b2:01:9c:b3:17:13:73:c2:86:92:09:
6f:83:c8:30:84:03:9e:b6:8e:24:21:e0:70:8e:ec:
55:21:74:5d:72:ac:b9:5c:b6:d4:49:12:50:47:65:
50:cf:a0:81:ed:07:ae:f0:52:61:76:a6:17:6a:c1:
4d:ac:90:8b:15:f6:db:6c:08:16:7d:41:0c:73:90:
fa:20:58:cb:24:90:8b:f2:c3:b3:88:55:b9:f8:1b:
62:74:97:6a:b9:b2:0d:8c:2b:b2:95:59:37:0a:03:
f8:8e:ad:a3:d4:6f:87:5d:5c:86:a7:37:45:45:c0:
0d:d4:c3:83:89:fc:19:1d:32:bc:bd:90:3c:aa:e2:
96:45:40:d7:1b:66:f0:fb:59:4f:a3:99:7d:ac:dd:
b6:ec:a2:53:ff:4c:bf:88:c0:85:c6:ee:5f:d8:0d:
1e:e5:6d:52:fe:5f:c3:c6:aa:bc:1b:f1:84:b5:e7:
b2:c3:59:bf:57:d2:48:ab:b7:5b:ad:f8:db:2c:16:
96:4b:ac:f7:80:cb:7a:70:a6:80:8f:1f:b6:60:0b:
fd:00:c3:71:5f:34:51:b5:bf:f1:09:7a:a6:f5:e7:
fc:23:0b:f2:5f:79:6d:9d:38:da:33:ee:db:28:43:
98:7c:eb:c2:a1:17:e3:49:d2:33:dc:fb:ce:b9:ff:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FA:33:56:C8:F3:B0:BA:4B:EE:65:1D:B2:93:74:9C:71:FA:42:9C
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:26:b1:63:4d:fa:94:d0:54:05:7d:6d:a2:9b:6d:35:c4:2d:
73:d1:9a:02:cc:68:bc:ef:99:12:e2:44:59:b4:35:24:1f:12:
67:14:4d:b6:98:b4:12:56:12:29:6f:f6:52:48:47:6a:35:56:
ae:d8:c8:b5:58:d0:bb:63:27:c1:50:68:f6:08:1f:2b:bd:62:
b8:76:c1:25:8a:ce:97:7f:80:d3:35:3b:2f:ff:76:6f:e2:e7:
0f:57:79:3c:51:c5:f1:eb:a5:95:98:2b:0c:31:2b:c2:48:49:
02:b2:06:ca:12:10:3c:98:68:fe:85:19:70:6c:f6:83:d0:b8:
92:2d:0f:8b:7f:76:98:ba:7a:f8:77:38:76:bd:27:99:6f:d8:
8d:27:2c:86:48:ab:1c:a3:62:ba:94:25:07:04:0d:63:75:c2:
06:f2:b6:1b:4b:da:e1:e7:44:99:73:96:4f:7c:22:3f:6e:2e:
2d:72:6e:02:e6:a9:60:4f:2f:cb:e9:bc:08:60:a7:15:b0:90:
40:4c:83:e9:48:90:46:ef:db:8e:ff:71:17:7f:cb:23:ff:5b:
94:1f:13:15:30:61:d2:e8:e0:9c:3b:03:ab:95:2f:11:27:87:
8e:2e:fd:0e:51:a6:fc:61:af:f2:37:a7:6d:f7:dc:97:d9:eb:
32:75:17:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn71qd5gdzGEZPihcAAQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODA2NzliOTZjYTMyMmJmYTg1NTAwY2FiMjA2YzZkNDc0
MTJlZGYwHhcNMjUwOTA3MTAwMTM1WhcNMjUwOTA4MTAwMTM1WjAzMTEwLwYDVQQD
EyhhMWZhMzM1NmM4ZjNiMGJhNGJlZTY1MWRiMjkzNzQ5YzcxZmE0MjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N4TsgGcsxcTc8KGkglvg8gwhAOe
to4kIeBwjuxVIXRdcqy5XLbUSRJQR2VQz6CB7Qeu8FJhdqYXasFNrJCLFfbbbAgW
fUEMc5D6IFjLJJCL8sOziFW5+BtidJdqubINjCuylVk3CgP4jq2j1G+HXVyGpzdF
RcAN1MODifwZHTK8vZA8quKWRUDXG2bw+1lPo5l9rN227KJT/0y/iMCFxu5f2A0e
5W1S/l/Dxqq8G/GEteeyw1m/V9JIq7dbrfjbLBaWS6z3gMt6cKaAjx+2YAv9AMNx
XzRRtb/xCXqm9ef8IwvyX3ltnTjaM+7bKEOYfOvCoRfjSdIz3PvOuf9+wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKH6M1bI87C6S+5lHbKTdJxx+kKcMB8GA1UdIwQY
MBaAFK2AZ5uWyjIr+oVQDKsgbG1HQS7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAt
OTBjMGJkZTA5ODY5LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAtOTBjMGJkZTA5ODY5
LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISaxY036
lNBUBX1topttNcQtc9GaAsxovO+ZEuJEWbQ1JB8SZxRNtpi0ElYSKW/2UkhHajVW
rtjItVjQu2MnwVBo9ggfK71iuHbBJYrOl3+A0zU7L/92b+LnD1d5PFHF8eullZgr
DDErwkhJArIGyhIQPJho/oUZcGz2g9C4ki0Pi392mLp6+Hc4dr0nmW/YjScshkir
HKNiupQlBwQNY3XCBvK2G0va4edEmXOWT3wiP24uLXJuAuapYE8vy+m8CGCnFbCQ
QEyD6UiQRu/bjv9xF3/LI/9blB8TFTBh0ujgnDsDq5UvESeHji79DlGm/GGv8jen
bffcl9nrMnUXvg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:55 2025 by rpki-client