Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File: yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier: 0VJmlTTS+xWmsebELUD/oOnmFs2uDe1/EQRjtdpAuDM=
Subject key identifier: 8E:B1:26:F7:1B:EE:EE:94:25:F4:47:E0:48:BD:FB:73:01:BA:87:0C
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 019911CFAB4534A54083161D59C724299AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number: 033A
Signing time: Wed 03 Sep 2025 23:00:46 +0000
Manifest this update: Wed 03 Sep 2025 23:00:46 +0000
Manifest next update: Thu 04 Sep 2025 23:00:46 +0000
Files and hashes: 1: 9G61nTw40oudLW3JOC_FQ0aHHQs.roa (hash: PZHJFgFZ1M5t+8j0But6rI9U9bsojNq5vU54p68gWrI=)
2: AdoLpxkGdJU9MVB2mFDieYW6JUM.roa (hash: M3306US/H6B4VGXvtuAxz3jajRvPMjKiTsFnDjT1Itk=)
3: ajlhxYNtAPzeTPjXCJjwu3u7DCY.roa (hash: IqXuM6//Ku9jh4JzK+2CUndK/ugkLqCne4Oz+cOP1rE=)
4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: NsrWad/vz2ZfwN9xvRychpUR/rtYKGvISBJEtmgej2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 18:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:11:cf:ab:45:34:a5:40:83:16:1d:59:c7:24:29:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Sep 3 23:00:46 2025 GMT
Not After : Sep 4 23:00:46 2025 GMT
Subject: CN=8eb126f71beeee9425f447e048bdfb7301ba870c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:03:6f:45:a8:b9:0d:3d:d7:ac:fb:11:fd:
40:3c:6f:fc:f5:1a:e8:2b:f4:12:a4:f3:f4:15:16:
51:a7:26:1c:16:89:74:93:8a:1f:aa:5a:30:20:71:
60:7c:86:a4:4a:20:4c:16:23:d4:bc:f0:f8:9c:e3:
99:4a:f8:e0:14:b2:7e:11:d4:46:df:f1:71:0c:7a:
f4:86:fc:ab:8f:25:2e:83:47:7b:22:1b:48:7a:d2:
39:1c:af:c7:fe:39:b8:d8:01:b4:cd:8f:b3:a2:38:
e9:e8:07:c5:2d:6d:87:a3:70:70:75:31:24:5f:a0:
19:ac:dc:4e:1b:fb:88:f3:25:6f:d2:96:a5:94:c1:
4c:74:3a:1b:13:87:72:6d:98:45:f5:f9:a1:1d:a8:
6d:cd:68:03:d8:61:ee:f6:52:92:fe:03:90:53:28:
e6:32:bf:e4:a6:36:be:3d:bc:92:96:b9:f6:bb:44:
e5:d2:88:6f:2a:1f:9c:89:d1:29:1d:6b:86:a3:7c:
45:3b:63:05:9a:27:25:9b:74:56:26:af:17:10:d9:
21:37:83:27:97:7c:ea:38:71:fb:67:a7:b3:9f:3a:
da:f7:a2:d5:b9:32:d6:a4:37:f6:91:7c:0b:46:72:
16:07:46:44:eb:63:8d:fd:64:56:bb:dc:28:ae:43:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B1:26:F7:1B:EE:EE:94:25:F4:47:E0:48:BD:FB:73:01:BA:87:0C
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:86:d5:53:4d:62:75:87:fb:e5:83:c8:01:72:59:de:12:63:
af:d6:9f:ad:e8:42:9b:2f:88:10:1a:4a:6f:5e:95:9a:c7:3b:
01:86:e8:b4:bb:5e:32:81:ef:f6:8b:34:fd:9e:ff:bc:c5:72:
12:6d:c4:56:d0:05:25:4a:96:4f:5e:52:0e:d2:18:32:ac:6e:
17:6b:ee:e2:e9:92:fe:6b:1c:fc:3c:49:85:7a:1c:17:27:61:
af:a7:46:e3:7a:96:74:cc:31:ec:5c:f3:8f:e7:f6:19:51:94:
e5:f6:ce:9e:6a:9a:fb:68:ae:9a:fb:e4:ec:1f:f1:49:87:b0:
ae:15:f4:d6:3f:e1:4e:0a:69:49:7e:96:28:66:f6:a1:a6:c6:
74:ef:ca:53:9a:0c:fe:bf:c4:da:b6:a1:2c:c2:4e:64:e5:32:
96:69:73:c4:ae:e8:72:a1:6e:b9:2b:6b:29:a7:c8:81:23:96:
7d:fd:d5:66:92:88:ad:f6:e1:1e:01:eb:57:85:fb:e4:bf:77:
08:1d:16:92:c5:4e:0f:5e:b9:ce:41:e0:9b:1b:e5:f8:7b:e3:
55:ea:d1:ba:71:3d:86:72:c2:00:79:59:a8:89:e8:41:66:5a:
25:aa:4c:4b:9c:65:7c:29:33:ca:80:07:57:45:a1:29:84:f4:
4a:0e:c7:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkRz6tFNKVAgxYdWcckKZr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQxMzJjMTJmODY5OTVmZTI4OTNlNGRlYTcyNjM4ZDI2
MDEwNzkwHhcNMjUwOTAzMjMwMDQ2WhcNMjUwOTA0MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg4ZWIxMjZmNzFiZWVlZTk0MjVmNDQ3ZTA0OGJkZmI3MzAxYmE4NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJkDb0WouQ0916z7Ef1APG/89Rro
K/QSpPP0FRZRpyYcFol0k4ofqlowIHFgfIakSiBMFiPUvPD4nOOZSvjgFLJ+EdRG
3/FxDHr0hvyrjyUug0d7IhtIetI5HK/H/jm42AG0zY+zojjp6AfFLW2Ho3BwdTEk
X6AZrNxOG/uI8yVv0pallMFMdDobE4dybZhF9fmhHahtzWgD2GHu9lKS/gOQUyjm
Mr/kpja+PbySlrn2u0Tl0ohvKh+cidEpHWuGo3xFO2MFmiclm3RWJq8XENkhN4Mn
l3zqOHH7Z6eznzra96LVuTLWpDf2kXwLRnIWB0ZE62ON/WRWu9workM1ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6xJvcb7u6UJfRH4Ei9+3MBuocMMB8GA1UdIwQY
MBaAFMh0EywS+GmV/iiT5N6nJjjSYBB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUt
NGMwOGI0YWEyMGZlLzEveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUtNGMwOGI0YWEyMGZl
LzEveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4bVU01i
dYf75YPIAXJZ3hJjr9afrehCmy+IEBpKb16Vmsc7AYbotLteMoHv9os0/Z7/vMVy
Em3EVtAFJUqWT15SDtIYMqxuF2vu4umS/msc/DxJhXocFydhr6dG43qWdMwx7Fzz
j+f2GVGU5fbOnmqa+2iumvvk7B/xSYewrhX01j/hTgppSX6WKGb2oabGdO/KU5oM
/r/E2rahLMJOZOUylmlzxK7ocqFuuStrKafIgSOWff3VZpKIrfbhHgHrV4X75L93
CB0WksVOD165zkHgmxvl+HvjVerRunE9hnLCAHlZqInoQWZaJapMS5xlfCkzyoAH
V0WhKYT0Sg7Hgw==
-----END CERTIFICATE-----
Generated at Thu Sep 4 02:05:16 2025 by rpki-client