Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
File: YoO20dhhAunt8qvdqnyTR6rHF8c.mft (raw, json)
Hash identifier: 8+iBl9bq9zcvVuff8XpQXTjGNMS+KaV0cpiQWM7spQ4=
Subject key identifier: 5A:11:BC:30:00:AB:9C:E8:29:07:1C:CC:20:49:E3:26:0B:ED:65:40
Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
Certificate issuer: /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Certificate serial: 0199228C5920F8573A846B28632F7FA7B9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:00:47 +0000
Manifest this update: Sun 07 Sep 2025 05:00:47 +0000
Manifest next update: Mon 08 Sep 2025 05:00:47 +0000
Files and hashes: 1: FKwES05QXgv7GDIVYOX1rJUnQN0.roa (hash: q8y+Z4GqNRIr+efHEWQCbzvWoFlZ2bwXtIGJIqiojdY=)
2: IqcwUeOGcAnS-tBgjkUM-XNO3is.roa (hash: wn0T7F5N0/+0KEuMUe6YilItigsuYUK7JvlaTh+yZLw=)
3: YoO20dhhAunt8qvdqnyTR6rHF8c.crl (hash: ocNnLEYfu07OGgXaKXrdLT34tVhBkW9Cd+2WWT/yekk=)
4: h-kICo84mpPHXctcS-vW02QdJxQ.roa (hash: YChUhS+6HZvQd+Isg9GWQNzRMqXToTsR0vsksCA2uaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:59:20:f8:57:3a:84:6b:28:63:2f:7f:a7:b9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Validity
Not Before: Sep 7 05:00:47 2025 GMT
Not After : Sep 8 05:00:47 2025 GMT
Subject: CN=5a11bc3000ab9ce829071ccc2049e3260bed6540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:02:ff:4b:be:a0:33:3f:70:ef:7f:c8:ce:
7c:41:91:44:83:df:50:46:9c:0f:53:63:d9:5a:b3:
41:1a:a0:a0:a6:42:dc:62:b6:fe:2b:12:52:f1:f8:
2e:45:97:80:d0:93:49:a6:2c:99:70:eb:71:b1:8f:
6f:a6:6a:45:82:f1:8d:d2:de:60:37:ed:a8:d2:6c:
e7:00:a5:85:7e:a7:fd:a6:c7:63:f2:43:5f:3b:87:
4d:fc:84:06:29:b6:73:7a:5e:8c:9f:83:d2:8f:e0:
25:9f:97:cb:69:a0:c1:ad:ea:3a:d0:12:45:60:cc:
26:c7:9c:a4:3f:8f:1d:64:99:90:dd:4d:47:78:33:
be:3b:31:25:24:49:92:5e:bf:c5:bc:54:53:cb:5c:
f5:bb:20:0a:75:54:2c:94:5b:df:ff:26:ac:57:0f:
81:b2:90:5e:cf:36:78:32:59:39:5c:cb:48:91:0f:
4d:fc:10:4c:ef:d2:7e:73:68:ad:74:d1:28:26:ba:
e5:a2:de:d3:f8:b0:84:e7:e3:8f:cd:48:40:2b:9f:
43:3a:af:b1:b1:12:00:16:65:d9:d3:5e:9d:bd:5b:
09:e0:d8:97:54:6b:41:8a:e3:d8:08:b4:f1:ea:5e:
a4:15:a4:d6:4d:dd:55:7b:ae:2e:16:d4:af:7a:5a:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:11:BC:30:00:AB:9C:E8:29:07:1C:CC:20:49:E3:26:0B:ED:65:40
X509v3 Authority Key Identifier:
keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9b:9c:7c:7e:91:59:80:f4:f2:a3:20:f8:01:d9:3a:8c:9a:
d7:b7:ab:ae:d3:36:a0:76:d7:8b:d9:a1:a3:c7:6b:94:7b:bf:
f1:f3:21:6a:55:39:fd:1c:89:32:bd:23:2d:e1:17:77:b0:7d:
11:8e:7a:3c:48:79:ad:00:5a:52:5e:51:37:6f:97:84:f2:c7:
0e:f9:4d:ac:92:a1:5c:c0:c1:d7:1e:c3:78:4c:a4:df:66:57:
5f:1c:95:c0:d1:bd:1a:3e:bb:79:39:71:ff:da:1a:a7:59:be:
1a:66:9d:ba:5d:a0:f8:9c:02:bc:49:ae:80:59:52:46:86:0a:
ca:a9:af:da:99:a6:04:cc:18:69:62:1d:d2:3d:b3:ed:82:f7:
95:6c:1a:1a:80:ea:fd:70:14:7d:82:a0:a4:78:d4:ff:2b:2e:
1f:88:14:0b:08:d7:2c:86:74:92:82:88:87:e7:d4:29:28:17:
1b:ef:c0:06:0f:23:e7:6a:02:53:de:ae:83:60:6a:71:0f:3d:
fc:9a:09:78:a9:c5:60:95:fd:fc:7b:87:1b:fe:6e:c1:85:8e:
3d:61:d2:71:be:bf:7a:c8:0c:4f:79:94:c6:d0:a6:55:33:90:
98:b1:07:d9:4e:a7:f6:ca:a5:b5:44:61:a1:ae:bd:2c:61:63:
82:49:94:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijFkg+Fc6hGsoYy9/p7nHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyODNiNmQxZDg2MTAyZTllZGYyYWJkZGFhN2M5MzQ3YWFj
NzE3YzcwHhcNMjUwOTA3MDUwMDQ3WhcNMjUwOTA4MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg1YTExYmMzMDAwYWI5Y2U4MjkwNzFjY2MyMDQ5ZTMyNjBiZWQ2NTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC4C/0u+oDM/cO9/yM58QZFEg99Q
RpwPU2PZWrNBGqCgpkLcYrb+KxJS8fguRZeA0JNJpiyZcOtxsY9vpmpFgvGN0t5g
N+2o0mznAKWFfqf9psdj8kNfO4dN/IQGKbZzel6Mn4PSj+Aln5fLaaDBreo60BJF
YMwmx5ykP48dZJmQ3U1HeDO+OzElJEmSXr/FvFRTy1z1uyAKdVQslFvf/yasVw+B
spBezzZ4Mlk5XMtIkQ9N/BBM79J+c2itdNEoJrrlot7T+LCE5+OPzUhAK59DOq+x
sRIAFmXZ016dvVsJ4NiXVGtBiuPYCLTx6l6kFaTWTd1Ve64uFtSvelqBHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoRvDAAq5zoKQcczCBJ4yYL7WVAMB8GA1UdIwQY
MBaAFGKDttHYYQLp7fKr3ap8k0eqxxfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQt
OTE0ZTQ4ODFlZWE4LzEvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQtOTE0ZTQ4ODFlZWE4
LzEvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5ucfH6R
WYD08qMg+AHZOoya17errtM2oHbXi9mho8drlHu/8fMhalU5/RyJMr0jLeEXd7B9
EY56PEh5rQBaUl5RN2+XhPLHDvlNrJKhXMDB1x7DeEyk32ZXXxyVwNG9Gj67eTlx
/9oap1m+Gmadul2g+JwCvEmugFlSRoYKyqmv2pmmBMwYaWId0j2z7YL3lWwaGoDq
/XAUfYKgpHjU/ysuH4gUCwjXLIZ0koKIh+fUKSgXG+/ABg8j52oCU96ug2BqcQ89
/JoJeKnFYJX9/HuHG/5uwYWOPWHScb6/esgMT3mUxtCmVTOQmLEH2U6n9sqltURh
oa69LGFjgkmUZQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:35 2025 by rpki-client