Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: tZbaumvKlHIQ+IpR6KneOnECGzrMLSinBBuJsW88o9A=
Subject key identifier: CA:32:F4:73:B7:64:84:70:A0:FB:47:12:E3:8B:A1:CC:3F:A7:93:7F
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019938E02F034744539C9B298F98C79CB51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 13:04:00 +0000
Manifest this update: Thu 11 Sep 2025 13:04:00 +0000
Manifest next update: Fri 12 Sep 2025 13:04:00 +0000
Files and hashes: 1: OiIBQ74SHEVkT-8PoCX8Cy-Yivo.roa (hash: W/4g1y46KUHpbD2tJe93lGZ8b+4RqJt+o9NgZvpLShw=)
2: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (hash: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: 9scI24IX1lciBhO0e2E/Ez+Rv1da30FDvPlCjH2IFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:e0:2f:03:47:44:53:9c:9b:29:8f:98:c7:9c:b5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Sep 11 13:04:00 2025 GMT
Not After : Sep 12 13:04:00 2025 GMT
Subject: CN=ca32f473b7648470a0fb4712e38ba1cc3fa7937f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:20:ff:29:54:6a:50:1f:4d:36:a6:1e:4c:91:
23:a3:f6:6f:e4:8f:a8:ce:08:f3:52:c3:13:03:52:
fc:70:fb:4b:c4:1f:28:cc:3c:b3:48:c6:60:f5:b1:
79:4f:dc:09:5c:18:f2:09:76:04:a4:e1:c8:52:c7:
38:22:bb:aa:dc:69:63:91:a2:eb:e7:70:2b:10:82:
b7:7e:bd:35:37:de:81:70:bd:15:33:a6:d7:55:f2:
2e:8b:f4:02:50:5b:65:b0:03:9b:df:3b:08:24:aa:
75:29:7c:8b:12:c6:62:10:f1:6e:33:0b:11:e6:82:
62:40:96:37:c6:73:84:06:fd:c2:5f:57:10:ac:5a:
39:e3:27:79:8c:a9:33:c0:2e:40:07:f0:e4:b8:14:
f9:89:45:dd:fe:7c:f8:3f:52:82:29:7c:eb:79:5c:
52:8c:84:b2:bc:a4:ce:1b:44:c9:d0:b0:1f:c1:db:
c6:57:4a:6c:cf:f1:39:d9:eb:87:4e:e2:67:97:fe:
c5:40:3c:70:56:e8:ec:3b:7c:fc:b4:75:fb:d6:85:
d7:bc:e5:7f:4f:73:dd:4a:08:d1:4f:27:e9:3f:fa:
fb:4c:9b:92:c1:74:40:6a:8d:a9:1a:34:64:5e:1b:
12:3c:1b:6a:3b:1a:b6:eb:01:70:e6:67:81:ce:d3:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:32:F4:73:B7:64:84:70:A0:FB:47:12:E3:8B:A1:CC:3F:A7:93:7F
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:36:5e:97:cf:7b:52:be:8d:4e:6d:ba:25:65:db:6d:f2:1a:
dc:3a:44:16:d6:f2:26:c4:e9:0e:cc:51:41:be:93:a5:dd:da:
d7:0f:a6:8b:1d:ca:07:d9:7e:45:c2:5f:be:2a:be:4b:67:7e:
df:ad:ff:b7:77:e9:36:3f:57:c1:b0:c2:ab:2d:ee:bf:e1:62:
08:41:a0:26:6b:60:7f:c7:5f:9f:b2:81:5d:86:1a:65:de:96:
48:b8:d1:3e:d6:ad:5a:a9:36:80:b4:fd:ba:8b:3b:e8:55:db:
6c:f7:1e:01:e4:e3:c7:d9:e6:1b:04:5a:6f:cd:16:d7:70:c9:
ae:93:17:d0:d3:69:c6:66:df:94:22:d9:74:4f:c4:be:c8:82:
16:1b:7d:04:fd:c3:27:4e:76:11:cd:4d:a5:6b:6a:5f:06:94:
8b:ee:91:92:0c:c8:43:10:85:a4:f1:69:28:e2:2b:47:67:c5:
d2:61:48:15:e8:89:52:49:b4:94:c5:45:ea:55:aa:eb:ce:06:
1c:70:61:ce:6b:71:97:95:2a:5d:c9:f5:79:13:d5:c6:98:8c:
3e:0f:4f:75:e8:d7:8f:50:08:d3:a1:37:21:cd:5d:3f:fd:0c:
65:28:36:62:d7:1b:1a:2e:06:2c:b1:72:50:5f:e5:5f:ba:62:
9b:d9:9c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk44C8DR0RTnJspj5jHnLUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5N2VjOWEyYTRkOWQzYTJjMWMwNWRhYmQ0MWE1ZjkyMTJl
MmQ2Y2YwHhcNMjUwOTExMTMwNDAwWhcNMjUwOTEyMTMwNDAwWjAzMTEwLwYDVQQD
EyhjYTMyZjQ3M2I3NjQ4NDcwYTBmYjQ3MTJlMzhiYTFjYzNmYTc5MzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiD/KVRqUB9NNqYeTJEjo/Zv5I+o
zgjzUsMTA1L8cPtLxB8ozDyzSMZg9bF5T9wJXBjyCXYEpOHIUsc4Iruq3GljkaLr
53ArEIK3fr01N96BcL0VM6bXVfIui/QCUFtlsAOb3zsIJKp1KXyLEsZiEPFuMwsR
5oJiQJY3xnOEBv3CX1cQrFo54yd5jKkzwC5AB/DkuBT5iUXd/nz4P1KCKXzreVxS
jISyvKTOG0TJ0LAfwdvGV0psz/E52euHTuJnl/7FQDxwVujsO3z8tHX71oXXvOV/
T3PdSgjRTyfpP/r7TJuSwXRAao2pGjRkXhsSPBtqOxq26wFw5meBztPWWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoy9HO3ZIRwoPtHEuOLocw/p5N/MB8GA1UdIwQY
MBaAFMl+yaKk2dOiwcBdq9QaX5IS4tbPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVg3Sm9xVFowNkxCd0YycjFCcGZraExpMXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yMTM0NjQtMWRkYi00YzYwLWI1N2Ut
OWM3MjRmN2QxMjY1LzEveVg3Sm9xVFowNkxCd0YycjFCcGZraExpMXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8yMTM0NjQtMWRkYi00YzYwLWI1N2UtOWM3MjRmN2QxMjY1
LzEveVg3Sm9xVFowNkxCd0YycjFCcGZraExpMXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDZel897
Ur6NTm26JWXbbfIa3DpEFtbyJsTpDsxRQb6Tpd3a1w+mix3KB9l+RcJfviq+S2d+
363/t3fpNj9XwbDCqy3uv+FiCEGgJmtgf8dfn7KBXYYaZd6WSLjRPtatWqk2gLT9
uos76FXbbPceAeTjx9nmGwRab80W13DJrpMX0NNpxmbflCLZdE/EvsiCFht9BP3D
J052Ec1NpWtqXwaUi+6RkgzIQxCFpPFpKOIrR2fF0mFIFeiJUkm0lMVF6lWq684G
HHBhzmtxl5UqXcn1eRPVxpiMPg9PdejXj1AI06E3Ic1dP/0MZSg2YtcbGi4GLLFy
UF/lX7pim9mcfQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 17:45:54 2025 by rpki-client