Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: WMW6DWjV5OI2fxng1Yp/I5ZPX5DG9YX+insYb6c5TWE=
Subject key identifier: 94:DC:2E:F8:65:19:66:2A:3E:84:51:AB:48:E6:6D:FF:52:92:8B:44
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 0197B8FD70EB2C15AE59522352D78BE5F4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 148B
Signing time: Sun 29 Jun 2025 00:01:46 +0000
Manifest this update: Sun 29 Jun 2025 00:01:46 +0000
Manifest next update: Mon 30 Jun 2025 00:01:46 +0000
Files and hashes: 1: 0TtFz6wVP0jqaQNw01V55drmS3k.roa (hash: TMVD5m2P0IJi74IF8JJhCFdWfhDxP8MQCO9QQGNNZr4=)
2: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: 7NyfZ4nCytOrT/7PnYieDlH6dJCxDqheswvpqmquOtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:70:eb:2c:15:ae:59:52:23:52:d7:8b:e5:f4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Jun 29 00:01:46 2025 GMT
Not After : Jun 30 00:01:46 2025 GMT
Subject: CN=94dc2ef86519662a3e8451ab48e66dff52928b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:07:f7:93:2e:a4:75:14:79:09:c0:e9:41:
41:f6:4d:01:18:e2:07:cb:2a:2d:1e:fa:20:84:a5:
b4:17:ed:9d:89:72:cc:90:25:91:ea:9e:36:11:33:
7c:30:5b:fb:77:69:9a:0b:4f:77:f6:43:06:d8:63:
a5:da:5d:34:90:65:a4:57:41:48:dc:c7:d5:cf:dc:
f1:2d:0e:db:89:e9:34:ca:88:b2:5f:12:f2:46:55:
b5:e6:9c:64:f2:f5:e1:4f:ab:f0:35:69:6d:dd:a3:
87:e9:0e:6f:9b:a9:13:c5:1e:26:01:73:0c:f7:bc:
d7:3c:37:37:56:92:e9:5a:d8:a0:67:bf:3d:26:fe:
24:3b:43:a0:df:fb:b8:7f:9d:d0:de:6f:4c:a2:c8:
46:37:a9:94:c6:a7:74:c4:93:16:27:29:90:0c:26:
48:1c:80:d5:5e:fd:55:9e:9e:2b:e6:d2:88:f3:6d:
c7:c5:b2:7d:5d:7e:11:71:fe:c0:1c:29:b7:ed:58:
f8:b6:02:46:87:59:03:1f:34:c4:64:41:45:9a:8d:
ef:e9:ec:44:d5:49:7b:f4:3d:36:af:d9:57:38:d0:
bb:78:06:4a:ae:3c:ba:ae:8f:59:50:d6:8e:17:48:
96:c6:53:fa:4b:91:80:cf:f3:96:9c:c7:fc:74:4a:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DC:2E:F8:65:19:66:2A:3E:84:51:AB:48:E6:6D:FF:52:92:8B:44
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:82:4a:31:8f:6f:88:af:4e:b6:c9:fd:98:44:1c:fe:8a:d8:
7c:7a:f0:60:9b:4a:bf:fa:9a:1e:e8:4e:e2:52:28:ec:43:25:
b9:38:b9:43:19:5c:13:70:e8:67:ce:3a:1f:b0:12:02:70:4f:
93:99:c2:3c:73:fb:09:6c:bc:cc:9f:c5:01:1b:03:d3:14:d9:
7f:5e:98:c5:45:72:26:2f:4a:28:0b:de:b7:12:c6:9e:2a:92:
3e:ed:25:4d:64:f3:43:a1:b0:1b:fd:89:a8:28:b8:31:90:e5:
31:05:c9:60:e5:1c:68:e5:24:45:49:53:7f:c8:25:90:85:1f:
2b:5e:58:f8:69:45:24:4b:d6:8a:ec:e8:de:e7:28:e5:08:9e:
00:5e:e0:ab:c7:83:20:44:16:26:d0:ed:73:0c:30:1c:6c:fd:
d5:73:20:5e:72:03:28:9e:c9:85:13:a1:32:ce:f4:7c:3d:28:
5e:85:f9:2d:49:48:df:cc:58:f3:b8:19:8f:be:10:05:f0:96:
d4:71:d9:95:2b:bd:43:dd:c3:25:b2:bd:6b:2a:91:6d:34:01:
9a:f3:a3:29:ee:4f:bb:aa:b4:fa:0d:4b:85:b6:25:15:5e:05:
86:00:2a:5b:bf:5d:dd:51:d0:21:27:c8:62:0d:2f:dd:d1:90:
3c:92:b7:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/XDrLBWuWVIjUteL5fTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMTA2ZDJkZmY3MTE2ZjM1YWI3ZmExMDI3NWE0NWUzODNi
Y2U1MjMwHhcNMjUwNjI5MDAwMTQ2WhcNMjUwNjMwMDAwMTQ2WjAzMTEwLwYDVQQD
Eyg5NGRjMmVmODY1MTk2NjJhM2U4NDUxYWI0OGU2NmRmZjUyOTI4YjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaAH95MupHUUeQnA6UFB9k0BGOIH
yyotHvoghKW0F+2diXLMkCWR6p42ETN8MFv7d2maC0939kMG2GOl2l00kGWkV0FI
3MfVz9zxLQ7biek0yoiyXxLyRlW15pxk8vXhT6vwNWlt3aOH6Q5vm6kTxR4mAXMM
97zXPDc3VpLpWtigZ789Jv4kO0Og3/u4f53Q3m9MoshGN6mUxqd0xJMWJymQDCZI
HIDVXv1Vnp4r5tKI823HxbJ9XX4Rcf7AHCm37Vj4tgJGh1kDHzTEZEFFmo3v6exE
1Ul79D02r9lXONC7eAZKrjy6ro9ZUNaOF0iWxlP6S5GAz/OWnMf8dEqofwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTcLvhlGWYqPoRRq0jmbf9SkotEMB8GA1UdIwQY
MBaAFGEQbS3/cRbzWrf6ECdaReODvOUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEt
YTQ5NDRlOTYyNWMwLzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEtYTQ5NDRlOTYyNWMw
LzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIJKMY9v
iK9Otsn9mEQc/orYfHrwYJtKv/qaHuhO4lIo7EMluTi5QxlcE3DoZ846H7ASAnBP
k5nCPHP7CWy8zJ/FARsD0xTZf16YxUVyJi9KKAvetxLGniqSPu0lTWTzQ6GwG/2J
qCi4MZDlMQXJYOUcaOUkRUlTf8glkIUfK15Y+GlFJEvWiuzo3uco5QieAF7gq8eD
IEQWJtDtcwwwHGz91XMgXnIDKJ7JhROhMs70fD0oXoX5LUlI38xY87gZj74QBfCW
1HHZlSu9Q93DJbK9ayqRbTQBmvOjKe5Pu6q0+g1LhbYlFV4FhgAqW79d3VHQISfI
Yg0v3dGQPJK3+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:08 2025 by rpki-client