Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier: TKRwvCEM6HCAUlVST044iSvCQsz5mizgSF3l0x9Gu2Y=
Subject key identifier: CD:3F:33:DC:CD:9A:B4:5C:11:87:A9:2B:ED:D4:46:72:DE:03:01:A7
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0197B5FBAF48C05DD0DEB9163A627993A5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number: 15FA
Signing time: Sat 28 Jun 2025 10:00:59 +0000
Manifest this update: Sat 28 Jun 2025 10:00:59 +0000
Manifest next update: Sun 29 Jun 2025 10:00:59 +0000
Files and hashes: 1: Afw8k-7ncsa2Xr6eHQUxW82TyDo.roa (hash: EG08mEX9S88L7epmy8vIiLDLM11rmLvUgD3s4SkixfU=)
2: TpmLWFSbZb2dQ8K2GqBwrSHlhMw.roa (hash: xdJre5WYs0QeN/1xP/iEZblWiapiREglW6GQPHWgPiI=)
3: VfzEwRQVZtV5XJdR5BQm0Mx_06w.roa (hash: J4RpGCk/pFMPyatYJ7oSnAdqs8qESqmsUK/cBo3w5Mk=)
4: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: XzzZwwgiJU//Kfzktn5P0waYCJTUJOTxEVj51ryQi3w=)
5: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=)
6: kNG8doC8aOlVcpdzC4H8wIke8-4.roa (hash: RhzxZTrYI5RS5OoyTDGpnX6oHuBHa87akNaFgCcYhjo=)
7: qaon0_VUrQ1CtM8ujS3h5z-HyYE.roa (hash: QjdBf8u7Dl0e5x76/XhPz/FbSF5qqjpq22dycf6FL9w=)
8: zya-nVnvYDRCe-NCa3yWVbEp98k.roa (hash: YAuOnGIJzSzoCT2LI34mrWSk3/Q4ZvQVKTNwjixKRhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:af:48:c0:5d:d0:de:b9:16:3a:62:79:93:a5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 28 10:00:59 2025 GMT
Not After : Jun 29 10:00:59 2025 GMT
Subject: CN=cd3f33dccd9ab45c1187a92bedd44672de0301a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:94:4d:5b:9b:a6:c1:1d:d2:9f:c3:5c:46:
90:1c:9e:91:37:fd:df:58:4a:7d:56:e8:87:e9:1f:
8e:b8:70:9e:33:8f:ba:32:c9:77:55:ad:fe:5d:68:
e2:43:5c:0a:07:5b:24:9d:de:38:d0:d7:76:ec:17:
b8:3f:b3:5c:d4:0e:5b:d8:37:ec:8e:98:9b:63:02:
d0:76:3c:25:a8:68:2d:ed:45:16:ce:1c:93:4d:f1:
1b:ea:f8:82:3c:43:1d:de:8c:85:3b:26:f0:5d:65:
fa:93:6a:1b:3b:9c:44:7f:0d:01:98:bf:e8:0b:94:
4b:d1:05:0d:0d:db:7f:bf:e9:d6:77:fb:d2:40:51:
b6:0e:5a:b9:50:f5:2e:9f:32:e0:09:9a:96:63:72:
c2:9e:d4:c2:64:f3:46:c8:32:a0:30:0f:ba:fc:8f:
fb:17:53:3e:26:28:e1:fc:28:90:5b:73:f6:4e:e6:
7d:64:f6:3b:0e:7e:73:62:2d:90:5d:06:94:b2:a3:
10:89:91:a9:79:67:d9:5c:b2:7c:5b:4f:2d:9f:8c:
d3:93:0b:33:5a:6d:c7:d7:ab:88:0b:c9:a4:0b:26:
a9:09:84:f7:91:a0:8f:ff:0f:ae:d9:7f:b8:40:a6:
dc:72:d1:94:ed:95:29:e9:e0:f4:f7:4a:51:90:5d:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3F:33:DC:CD:9A:B4:5C:11:87:A9:2B:ED:D4:46:72:DE:03:01:A7
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:42:a4:cd:e3:0d:bc:5f:26:af:bf:1f:6f:d4:6d:11:c0:40:
03:05:ac:2a:cc:c5:6e:bb:50:b7:a8:30:2d:2e:ba:40:41:c2:
8d:ae:23:98:49:0e:7e:10:cb:e5:7a:5d:b3:d5:08:75:f2:8d:
23:96:ff:99:ee:dd:7a:2d:a0:43:a3:ba:01:b4:03:94:5f:43:
d0:ac:11:e2:82:1a:79:ad:f8:83:89:e0:9a:2a:61:2d:84:11:
68:5e:84:2b:9a:88:b4:8e:cb:b9:d6:ee:b2:23:d2:7a:e3:02:
02:5e:48:22:58:f2:e3:63:1f:12:14:ba:19:e7:23:72:ad:5d:
89:37:b4:60:f5:ad:be:7b:a4:d5:1e:03:aa:15:42:2d:bd:ce:
a5:06:71:59:e3:a6:e5:1b:a1:4c:45:e9:06:26:33:59:d5:37:
af:ed:0a:c4:53:77:5b:b0:88:18:4a:96:9d:38:14:c6:4c:d0:
4c:e2:63:5b:00:a5:43:6a:28:41:3b:3c:9e:f7:ac:47:e7:2d:
4d:e9:68:52:c8:1a:41:64:76:aa:f7:52:b6:e9:e7:92:a2:35:
d8:55:93:b4:9c:d8:2c:32:60:f2:68:d3:53:fc:b8:6c:b6:fb:
ae:d5:9d:26:9c:a6:48:96:74:45:9e:f1:24:76:e8:5b:f1:87:
d3:e0:78:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+69IwF3Q3rkWOmJ5k6XdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh
ZmU0NGUwHhcNMjUwNjI4MTAwMDU5WhcNMjUwNjI5MTAwMDU5WjAzMTEwLwYDVQQD
EyhjZDNmMzNkY2NkOWFiNDVjMTE4N2E5MmJlZGQ0NDY3MmRlMDMwMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA592UTVubpsEd0p/DXEaQHJ6RN/3f
WEp9VuiH6R+OuHCeM4+6Msl3Va3+XWjiQ1wKB1sknd440Nd27Be4P7Nc1A5b2Dfs
jpibYwLQdjwlqGgt7UUWzhyTTfEb6viCPEMd3oyFOybwXWX6k2obO5xEfw0BmL/o
C5RL0QUNDdt/v+nWd/vSQFG2Dlq5UPUunzLgCZqWY3LCntTCZPNGyDKgMA+6/I/7
F1M+Jijh/CiQW3P2TuZ9ZPY7Dn5zYi2QXQaUsqMQiZGpeWfZXLJ8W08tn4zTkwsz
Wm3H16uIC8mkCyapCYT3kaCP/w+u2X+4QKbcctGU7ZUp6eD090pRkF3kbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0/M9zNmrRcEYepK+3URnLeAwGnMB8GA1UdIwQY
MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct
ZmI1OTQ5ODA4ZGRjLzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj
LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0KkzeMN
vF8mr78fb9RtEcBAAwWsKszFbrtQt6gwLS66QEHCja4jmEkOfhDL5Xpds9UIdfKN
I5b/me7dei2gQ6O6AbQDlF9D0KwR4oIaea34g4ngmiphLYQRaF6EK5qItI7Ludbu
siPSeuMCAl5IIljy42MfEhS6Gecjcq1diTe0YPWtvnuk1R4DqhVCLb3OpQZxWeOm
5RuhTEXpBiYzWdU3r+0KxFN3W7CIGEqWnTgUxkzQTOJjWwClQ2ooQTs8nvesR+ct
TeloUsgaQWR2qvdStunnkqI12FWTtJzYLDJg8mjTU/y4bLb7rtWdJpymSJZ0RZ7x
JHboW/GH0+B4sA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:42 2025 by rpki-client