Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: 7hqy9Zi6QbJk8A3WqOPNtnkReKeX6hIwK2ytjsCHXD0=
Subject key identifier: 9F:64:D7:4C:E6:8A:20:5B:FB:1F:36:55:7D:28:4B:6A:CC:42:94:91
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 0197B6A0802EF145254969499AAA01E7231E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: p/fhoclmilgDmV6fffNe9S4TNGtvmFw9Fn/6FKVCg1Y=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:80:2e:f1:45:25:49:69:49:9a:aa:01:e7:23:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=9f64d74ce68a205bfb1f36557d284b6acc429491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:96:ef:56:21:0b:10:f3:60:57:13:10:0b:
46:8e:a4:04:f4:54:8f:22:2a:d2:70:18:70:4f:b5:
51:72:50:40:49:6b:4b:11:fa:1d:ac:52:50:92:f2:
93:15:7d:7c:53:e5:2e:03:81:97:3c:a7:2c:df:b1:
05:44:d1:89:96:3a:e9:22:ac:30:90:9f:75:29:54:
34:e3:a0:9e:10:4e:ff:30:64:78:80:c6:9c:41:4f:
04:84:a8:32:4a:54:1b:ac:fe:ce:55:a8:02:9a:e2:
60:f8:5b:48:25:fe:a4:15:f4:c5:fc:89:fa:b3:cd:
81:02:29:70:b9:0f:26:ea:fc:90:10:ca:1f:3d:aa:
42:60:60:8b:ff:37:83:3b:c6:53:7a:3e:bf:a3:4d:
b0:f4:00:dd:8a:28:d4:fb:06:c6:bc:03:f5:46:fb:
cd:8b:64:9e:dc:97:e3:30:e9:25:75:d7:63:d1:42:
28:e4:8d:2c:60:be:60:8b:b4:03:90:47:a2:20:eb:
59:77:71:c1:62:45:4a:ed:0f:9e:45:00:b5:b1:e6:
ba:b5:e0:77:1d:a2:89:95:17:78:c1:1d:17:49:05:
cc:72:05:bc:7c:32:7e:41:3b:a5:df:c4:48:a1:6e:
bd:3d:fd:6d:0a:c7:19:e0:1a:62:0c:6f:0a:55:b7:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:64:D7:4C:E6:8A:20:5B:FB:1F:36:55:7D:28:4B:6A:CC:42:94:91
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:45:e0:f9:f5:5c:94:7f:0c:0b:fd:6d:07:79:7f:25:55:e2:
71:65:16:0b:69:25:ce:0a:ae:e3:c3:1d:d0:f9:80:c8:37:a9:
93:0a:ed:16:6d:bd:d9:35:55:de:03:ca:b1:af:eb:4e:af:bc:
9d:7e:97:ec:a9:20:6f:84:5a:a2:72:85:31:d9:41:35:d9:df:
b5:9f:1c:a2:df:a9:3a:56:c9:f7:47:71:4b:0a:de:e3:20:78:
ec:43:c1:72:88:12:39:9c:72:bf:ea:95:8c:c5:bc:54:14:c2:
db:20:ef:b7:d3:83:2e:1f:26:fb:f1:c1:a7:d3:dc:f6:24:49:
28:ef:40:f6:23:df:8f:7b:90:87:d9:aa:2e:4c:f1:b1:e6:c1:
49:2a:32:fd:56:db:cb:a2:f2:d7:f0:85:fb:49:ee:6c:d8:02:
10:8f:88:d0:14:92:6c:ea:66:a4:01:e6:80:91:48:5d:3d:58:
a3:97:22:9e:2d:d2:e7:80:c9:95:77:50:44:6d:28:58:e0:bd:
9e:46:00:82:a1:6f:f7:fe:84:b1:60:b8:01:31:22:59:0c:b4:
a0:2e:44:c4:e9:75:c6:e9:d7:3c:5b:e6:64:44:60:37:46:be:
d8:2e:3e:f3:bb:75:9d:55:c8:f8:e5:7e:98:9f:0a:1b:4b:29:
0b:36:04:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oIAu8UUlSWlJmqoB5yMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz
NzNlMmEwHhcNMjUwNjI4MTMwMTAxWhcNMjUwNjI5MTMwMTAxWjAzMTEwLwYDVQQD
Eyg5ZjY0ZDc0Y2U2OGEyMDViZmIxZjM2NTU3ZDI4NGI2YWNjNDI5NDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXWW71YhCxDzYFcTEAtGjqQE9FSP
IirScBhwT7VRclBASWtLEfodrFJQkvKTFX18U+UuA4GXPKcs37EFRNGJljrpIqww
kJ91KVQ046CeEE7/MGR4gMacQU8EhKgySlQbrP7OVagCmuJg+FtIJf6kFfTF/In6
s82BAilwuQ8m6vyQEMofPapCYGCL/zeDO8ZTej6/o02w9ADdiijU+wbGvAP1RvvN
i2Se3JfjMOkldddj0UIo5I0sYL5gi7QDkEeiIOtZd3HBYkVK7Q+eRQC1sea6teB3
HaKJlRd4wR0XSQXMcgW8fDJ+QTul38RIoW69Pf1tCscZ4BpiDG8KVbe96wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9k10zmiiBb+x82VX0oS2rMQpSRMB8GA1UdIwQY
MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct
NjJkODgxYWE5MDZmLzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm
LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakXg+fVc
lH8MC/1tB3l/JVXicWUWC2klzgqu48Md0PmAyDepkwrtFm292TVV3gPKsa/rTq+8
nX6X7Kkgb4RaonKFMdlBNdnftZ8cot+pOlbJ90dxSwre4yB47EPBcogSOZxyv+qV
jMW8VBTC2yDvt9ODLh8m+/HBp9Pc9iRJKO9A9iPfj3uQh9mqLkzxsebBSSoy/Vbb
y6Ly1/CF+0nubNgCEI+I0BSSbOpmpAHmgJFIXT1Yo5cini3S54DJlXdQRG0oWOC9
nkYAgqFv9/6EsWC4ATEiWQy0oC5ExOl1xunXPFvmZERgN0a+2C4+87t1nVXI+OV+
mJ8KG0spCzYELQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:08:46 2025 by rpki-client