Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
File: yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft (raw, json)
Hash identifier: vmpZbCrFJ0yIPJyw+vRQMwVwmhnwMfNq+0cgdDf6v7k=
Subject key identifier: F6:70:37:BC:44:9A:C1:11:29:4C:21:C1:8C:DA:DD:5D:05:BF:10:95
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Certificate issuer: /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial: 0199161A79FB0095C61D02C80A60B3515BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
Manifest number: 166C
Signing time: Thu 04 Sep 2025 19:00:57 +0000
Manifest this update: Thu 04 Sep 2025 19:00:57 +0000
Manifest next update: Fri 05 Sep 2025 19:00:57 +0000
Files and hashes: 1: fewPOq5Sy5alJvzpYZYieD6pmV8.roa (hash: nQVFjlDzgmj3SLHG29wBX3sEI4Pk0MW5juplwGFMB6g=)
2: yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl (hash: HLPhlJbD8cJXwSGevvRDMZB6aS/GP7x1Lww5Y71bF7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1a:79:fb:00:95:c6:1d:02:c8:0a:60:b3:51:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Validity
Not Before: Sep 4 19:00:57 2025 GMT
Not After : Sep 5 19:00:57 2025 GMT
Subject: CN=f67037bc449ac111294c21c18cdadd5d05bf1095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:6a:36:e9:c2:39:42:01:bf:64:7f:b2:2a:
29:5d:14:57:30:1e:83:5e:40:dd:38:fa:d4:48:0c:
1d:02:18:c7:20:7d:52:a0:d3:88:c6:0b:03:a3:bd:
69:94:56:56:95:84:0e:7d:5b:8a:9f:5b:2b:f7:71:
87:9d:07:71:e7:f6:a5:d9:93:e7:70:4d:60:9c:81:
ea:46:8d:39:d1:e5:fd:51:43:cc:f0:dc:fc:5f:ca:
07:56:75:75:61:4d:58:48:40:d3:63:ed:ae:ef:79:
8c:d8:65:5c:4c:75:8f:59:9d:aa:77:57:75:f8:11:
2e:42:9e:dd:bf:b2:01:d2:cc:a5:85:f7:08:9f:01:
04:32:9f:36:6a:e3:49:07:6e:51:6b:72:56:76:94:
40:41:34:fc:9a:65:a0:7d:47:71:e5:8b:af:15:9d:
98:8d:e8:3c:c8:ad:6c:e2:82:01:a9:a9:93:6d:51:
cb:dc:44:b8:aa:67:d9:8a:90:44:6f:12:2e:ec:74:
36:73:bf:c1:27:18:63:86:c2:be:26:28:56:3a:34:
df:db:3d:02:63:6e:93:5d:33:46:fc:0e:1e:3b:10:
eb:fc:28:c5:87:b1:55:5b:ef:c6:91:b5:e2:08:98:
4d:ee:5d:c2:1e:94:50:b3:11:1c:dd:fe:19:31:63:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:37:BC:44:9A:C1:11:29:4C:21:C1:8C:DA:DD:5D:05:BF:10:95
X509v3 Authority Key Identifier:
keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:26:03:e6:a6:ce:18:38:67:4c:21:9c:3b:13:e4:57:39:
c4:9b:c0:3a:27:a6:aa:62:bd:38:2a:d2:78:8b:f6:5c:94:33:
39:4c:9d:08:e8:e1:d3:81:e5:a6:2a:3e:10:d3:32:a6:49:ab:
86:01:5f:75:f7:d9:e4:23:ae:b3:57:27:56:ce:40:ab:e3:94:
51:af:0f:66:75:e7:c1:f3:fa:68:99:10:21:b6:8f:e2:c5:59:
b4:00:d3:cb:c5:fc:e9:de:00:63:9b:70:d3:65:34:0c:c1:63:
4c:f0:1f:a3:27:ca:aa:ef:96:58:04:53:42:e2:b9:ed:a7:88:
e7:95:a4:94:4f:1a:27:44:34:d7:0b:b5:5e:0f:30:df:6b:3b:
37:d2:26:be:65:2b:ab:d1:19:9a:7e:fe:13:ee:e0:05:3a:c5:
00:70:a1:f0:91:ce:ae:c9:f6:5e:1b:2e:e6:5b:fd:cd:88:e0:
76:bb:ba:c5:23:6e:5c:dc:c2:43:78:6f:89:a0:32:52:78:e2:
7d:92:d5:28:61:33:53:4b:cf:6f:a6:a9:a1:94:6d:2c:19:4f:
f2:48:83:23:6b:92:46:19:a3:be:ef:48:1f:cc:1e:2d:0e:80:
7e:e7:67:49:36:b7:70:79:48:a5:49:2e:6a:20:e1:14:20:e4:
bf:7d:7e:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWGnn7AJXGHQLICmCzUVupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NWY1MTBjNzJjZTBiNzljMjg5OWIzNTg0NWZmZTM2NzA2
OTNmMDUwHhcNMjUwOTA0MTkwMDU3WhcNMjUwOTA1MTkwMDU3WjAzMTEwLwYDVQQD
EyhmNjcwMzdiYzQ0OWFjMTExMjk0YzIxYzE4Y2RhZGQ1ZDA1YmYxMDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq01qNunCOUIBv2R/siopXRRXMB6D
XkDdOPrUSAwdAhjHIH1SoNOIxgsDo71plFZWlYQOfVuKn1sr93GHnQdx5/al2ZPn
cE1gnIHqRo050eX9UUPM8Nz8X8oHVnV1YU1YSEDTY+2u73mM2GVcTHWPWZ2qd1d1
+BEuQp7dv7IB0sylhfcInwEEMp82auNJB25Ra3JWdpRAQTT8mmWgfUdx5YuvFZ2Y
jeg8yK1s4oIBqamTbVHL3ES4qmfZipBEbxIu7HQ2c7/BJxhjhsK+JihWOjTf2z0C
Y26TXTNG/A4eOxDr/CjFh7FVW+/GkbXiCJhN7l3CHpRQsxEc3f4ZMWP2twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZwN7xEmsERKUwhwYza3V0FvxCVMB8GA1UdIwQY
MBaAFMhfUQxyzgt5wombNYRf/jZwaT8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hMmNmYjAtMGU2OC00ZTQ3LTg4ODEt
YjhjOWEyYTlkYTQ2LzEveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hMmNmYjAtMGU2OC00ZTQ3LTg4ODEtYjhjOWEyYTlkYTQ2
LzEveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoImA+am
zhg4Z0whnDsT5Fc5xJvAOiemqmK9OCrSeIv2XJQzOUydCOjh04Hlpio+ENMypkmr
hgFfdffZ5COus1cnVs5Aq+OUUa8PZnXnwfP6aJkQIbaP4sVZtADTy8X86d4AY5tw
02U0DMFjTPAfoyfKqu+WWARTQuK57aeI55WklE8aJ0Q01wu1Xg8w32s7N9ImvmUr
q9EZmn7+E+7gBTrFAHCh8JHOrsn2Xhsu5lv9zYjgdru6xSNuXNzCQ3hviaAyUnji
fZLVKGEzU0vPb6apoZRtLBlP8kiDI2uSRhmjvu9IH8weLQ6AfudnSTa3cHlIpUku
aiDhFCDkv31+6A==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:27 2025 by rpki-client