Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File: y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier: 5+8cnanCf5ExmLU1pWqY2RD0X2XFsHFdW8TFcyoLyDA=
Subject key identifier: CD:27:8C:C8:A8:A5:97:55:D4:F0:8C:78:1C:F5:D4:B8:D6:7F:FA:3C
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 019938708132C196B2E369E9E2E0D2FE5403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 11:02:01 +0000
Manifest this update: Thu 11 Sep 2025 11:02:01 +0000
Manifest next update: Fri 12 Sep 2025 11:02:01 +0000
Files and hashes: 1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: jVO6R2se4o9EW1rEDUPLwXtt/UWAhnCN9p1j7/wSTCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:81:32:c1:96:b2:e3:69:e9:e2:e0:d2:fe:54:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Sep 11 11:02:01 2025 GMT
Not After : Sep 12 11:02:01 2025 GMT
Subject: CN=cd278cc8a8a59755d4f08c781cf5d4b8d67ffa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:4f:d1:a8:75:0a:d8:5c:2e:fe:91:9a:b6:
f7:1a:dc:b1:40:bb:50:86:db:cb:d6:05:64:ab:a6:
86:d6:fc:4a:f2:7a:53:ff:34:fb:6e:62:5a:26:56:
e6:97:d6:f4:c7:bb:75:c5:1e:82:ca:60:5f:cb:a5:
5e:19:2f:d1:8d:cc:07:b2:94:79:2d:9d:cf:6d:89:
4b:7f:54:a6:f6:1c:2a:4e:c1:8c:74:10:95:eb:f6:
2e:a1:12:dc:7e:c5:03:dc:47:fc:ad:af:3e:8e:df:
aa:99:d2:05:28:56:79:c4:d8:bc:50:ff:72:a8:a6:
6e:81:52:c6:74:76:bb:51:98:ba:82:08:d1:1a:d4:
06:76:0f:c3:51:c9:92:a6:d7:47:6a:de:9c:aa:5a:
10:9b:b4:37:75:f6:a8:cd:6d:b7:8e:5c:9b:2f:33:
d9:12:98:a4:11:e6:e3:bd:42:a7:60:63:d8:89:d1:
f1:e2:3e:72:6a:b9:74:a4:30:dd:d7:65:70:d3:d1:
28:61:f2:b3:d5:ec:af:da:49:40:06:1d:ba:a1:ec:
c5:79:30:c8:77:aa:a3:77:fd:18:cc:72:6e:e4:0d:
2b:bb:c3:b5:ef:af:4d:f9:cf:20:da:2e:8c:4b:a0:
1c:19:2d:fc:97:7a:04:95:9d:d5:dc:d2:93:26:3d:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:8C:C8:A8:A5:97:55:D4:F0:8C:78:1C:F5:D4:B8:D6:7F:FA:3C
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:65:05:f7:cb:58:57:68:89:dc:29:16:34:81:62:b1:ae:a0:
1a:16:b3:92:8d:4a:d7:1c:97:8a:b9:6f:7f:46:52:ba:c7:94:
97:0f:6d:c9:e6:31:0d:45:d3:c6:e6:e0:f7:0e:84:d1:f4:10:
d7:e5:6e:f5:84:08:2d:84:43:19:cc:32:6b:7f:0e:1e:1f:5e:
d7:ae:1d:24:7c:ba:e6:82:95:ca:0e:67:46:58:41:62:d3:0d:
62:63:37:6b:ae:56:85:27:85:8d:01:80:2d:21:46:80:55:c7:
cd:11:dd:fd:33:9f:30:9a:e0:d2:ed:f8:45:e8:5b:36:a7:15:
10:d8:50:68:32:b5:6f:83:e6:34:33:eb:2d:4e:ee:75:ce:bf:
08:69:6c:60:79:b1:db:94:79:c3:1c:19:87:0a:a1:c0:6d:ab:
b0:8b:4e:0a:7e:63:f3:bf:77:5d:d5:b6:e5:5c:4f:6e:bd:4c:
d4:82:12:e4:55:d5:0d:6a:65:03:10:1b:84:4e:39:93:02:e7:
c6:a5:4c:5e:c8:d6:1b:a5:ce:05:6f:85:71:e5:f8:a3:1f:86:
25:40:b1:91:a6:4f:42:7c:e1:70:be:75:93:08:b9:e6:1b:23:
86:29:91:82:28:96:6b:5a:b7:17:94:44:02:cc:2b:5a:f2:63:
49:b3:d6:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4cIEywZay42np4uDS/lQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmYyMDQwZDk0Yzk5NWIwNDYxZGM1MTE0YTRjMDg3MzUx
ZTk5ZjIwHhcNMjUwOTExMTEwMjAxWhcNMjUwOTEyMTEwMjAxWjAzMTEwLwYDVQQD
EyhjZDI3OGNjOGE4YTU5NzU1ZDRmMDhjNzgxY2Y1ZDRiOGQ2N2ZmYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7xP0ah1CthcLv6Rmrb3GtyxQLtQ
htvL1gVkq6aG1vxK8npT/zT7bmJaJlbml9b0x7t1xR6CymBfy6VeGS/RjcwHspR5
LZ3PbYlLf1Sm9hwqTsGMdBCV6/YuoRLcfsUD3Ef8ra8+jt+qmdIFKFZ5xNi8UP9y
qKZugVLGdHa7UZi6ggjRGtQGdg/DUcmSptdHat6cqloQm7Q3dfaozW23jlybLzPZ
EpikEebjvUKnYGPYidHx4j5yarl0pDDd12Vw09EoYfKz1eyv2klABh26oezFeTDI
d6qjd/0YzHJu5A0ru8O1769N+c8g2i6MS6AcGS38l3oElZ3V3NKTJj2SyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0njMiopZdV1PCMeBz11LjWf/o8MB8GA1UdIwQY
MBaAFMtvIEDZTJlbBGHcURSkwIc1HpnyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81MTRhYTUtYzUxZC00OGIxLWFlMDYt
MTk4MDhiZjQ0NDcxLzEveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81MTRhYTUtYzUxZC00OGIxLWFlMDYtMTk4MDhiZjQ0NDcx
LzEveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGUF98tY
V2iJ3CkWNIFisa6gGhazko1K1xyXirlvf0ZSuseUlw9tyeYxDUXTxubg9w6E0fQQ
1+Vu9YQILYRDGcwya38OHh9e164dJHy65oKVyg5nRlhBYtMNYmM3a65WhSeFjQGA
LSFGgFXHzRHd/TOfMJrg0u34RehbNqcVENhQaDK1b4PmNDPrLU7udc6/CGlsYHmx
25R5wxwZhwqhwG2rsItOCn5j8793XdW25VxPbr1M1IIS5FXVDWplAxAbhE45kwLn
xqVMXsjWG6XOBW+FceX4ox+GJUCxkaZPQnzhcL51kwi55hsjhimRgiiWa1q3F5RE
AswrWvJjSbPW7Q==
-----END CERTIFICATE-----
Generated at Thu Sep 11 14:01:17 2025 by rpki-client