Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier: 1znKM58Lg5pJ67cvWzNQGcpPnBWlIL8kGvFZ56ZNXGI=
Subject key identifier: B1:35:24:3A:37:B5:6D:E2:69:21:78:56:83:EE:31:A6:F1:7D:6E:B8
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 0197C94B85675B72E9EBCA015E2F47FC88E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number: 041C
Signing time: Wed 02 Jul 2025 04:00:59 +0000
Manifest this update: Wed 02 Jul 2025 04:00:59 +0000
Manifest next update: Thu 03 Jul 2025 04:00:59 +0000
Files and hashes: 1: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (hash: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=)
2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: SMgJOd/1xt+4jShAPbS2YFnbcZ+jJ9K0dMcKUZpHos8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:85:67:5b:72:e9:eb:ca:01:5e:2f:47:fc:88:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: Jul 2 04:00:59 2025 GMT
Not After : Jul 3 04:00:59 2025 GMT
Subject: CN=b135243a37b56de26921785683ee31a6f17d6eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:9f:1e:cb:d5:77:d7:3f:4e:69:74:47:4f:
17:47:88:45:e5:34:7b:a9:ac:4a:85:4b:46:30:a6:
6a:71:24:b1:62:8e:f8:42:68:92:a9:90:eb:c6:db:
56:a9:4e:3b:c1:0d:8f:6a:72:85:34:ca:5e:1f:ce:
3c:d6:b8:bc:93:17:db:82:71:41:b5:11:09:16:40:
9e:e7:d0:12:e3:04:49:31:ce:17:ee:4f:21:29:10:
29:bf:08:4b:19:a4:8b:57:e5:e2:84:4a:4f:92:1f:
dd:23:bb:60:f2:df:c6:8e:ce:84:b0:1a:6e:2c:37:
b0:3f:b9:ae:b8:6d:89:9d:de:97:35:bb:32:b9:d0:
4a:33:bd:17:51:98:60:40:35:4c:78:2f:a8:65:6a:
ca:31:79:24:01:df:43:42:58:f2:38:cd:06:25:87:
a0:c5:a7:a9:c1:ab:67:c1:c6:9f:89:28:64:7c:d9:
ef:4e:eb:ab:54:da:9a:54:aa:79:ea:b6:e4:5b:a2:
35:f7:f1:3f:b3:e8:37:61:65:6f:23:18:24:b1:b1:
60:de:8a:6a:82:06:23:c7:d9:11:ec:46:7f:26:20:
01:57:e5:85:c7:e8:52:08:d2:d5:66:c9:f1:ef:04:
0e:c9:ea:25:64:a8:7a:2a:c6:3e:77:08:74:14:f0:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:35:24:3A:37:B5:6D:E2:69:21:78:56:83:EE:31:A6:F1:7D:6E:B8
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9b:5d:07:b7:5b:1d:2b:00:dd:ff:ac:9c:60:c3:3c:79:97:
94:cb:72:5b:c3:74:22:ef:4e:58:79:f6:fb:ce:6a:fd:e3:62:
fe:7c:4d:a3:44:2f:3e:9a:89:cc:b1:17:25:64:b1:66:04:cf:
1a:9e:c1:5a:84:51:17:10:1a:12:06:73:f3:69:14:80:ac:71:
6b:69:86:e1:41:0c:93:07:ea:d0:df:c9:21:04:0d:90:f6:1d:
b7:ce:e6:92:0f:4b:1b:28:c1:f9:53:24:b6:19:69:dc:d7:18:
aa:02:72:d5:80:cc:c3:df:f0:1b:7d:e8:94:7e:61:31:0d:a9:
ba:06:6a:16:62:58:8d:fc:f9:52:b1:63:3d:59:39:2f:bb:40:
88:cf:3a:82:d2:65:83:7f:71:9a:d8:02:07:3b:1b:d9:9f:6c:
db:36:63:7e:dc:ee:5e:4b:53:2a:e5:99:92:5e:cd:04:cf:01:
ef:63:08:0e:cd:d2:d2:0b:bd:42:13:40:7d:f9:b4:44:58:0c:
c0:dc:3f:c0:47:93:d8:83:0c:4d:76:ec:d6:15:23:f9:28:5c:
76:d7:ef:be:c6:8a:4c:3b:0e:09:ae:f6:56:32:89:68:ba:d1:
53:50:90:09:48:ac:f3:47:6e:a2:f5:38:52:e8:b0:1b:33:b8:
0b:aa:5b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJS4VnW3Lp68oBXi9H/IjpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MjhiNjM0MTdhMmU3ODg1ZTMzODgxYTkyNGFhYzlkNDBh
YWNhNjAwHhcNMjUwNzAyMDQwMDU5WhcNMjUwNzAzMDQwMDU5WjAzMTEwLwYDVQQD
EyhiMTM1MjQzYTM3YjU2ZGUyNjkyMTc4NTY4M2VlMzFhNmYxN2Q2ZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdqfHsvVd9c/Tml0R08XR4hF5TR7
qaxKhUtGMKZqcSSxYo74QmiSqZDrxttWqU47wQ2PanKFNMpeH8481ri8kxfbgnFB
tREJFkCe59AS4wRJMc4X7k8hKRApvwhLGaSLV+XihEpPkh/dI7tg8t/Gjs6EsBpu
LDewP7muuG2Jnd6XNbsyudBKM70XUZhgQDVMeC+oZWrKMXkkAd9DQljyOM0GJYeg
xaepwatnwcafiShkfNnvTuurVNqaVKp56rbkW6I19/E/s+g3YWVvIxgksbFg3opq
ggYjx9kR7EZ/JiABV+WFx+hSCNLVZsnx7wQOyeolZKh6KsY+dwh0FPAuHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLE1JDo3tW3iaSF4VoPuMabxfW64MB8GA1UdIwQY
MBaAFMkotjQXoueIXjOIGpJKrJ1AqspgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85ZDdlNmEtMGVhZS00MzRmLTlhMzUt
OGM5NzE2MWUwNjJmLzEveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi85ZDdlNmEtMGVhZS00MzRmLTlhMzUtOGM5NzE2MWUwNjJm
LzEveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZtdB7db
HSsA3f+snGDDPHmXlMtyW8N0Iu9OWHn2+85q/eNi/nxNo0QvPpqJzLEXJWSxZgTP
Gp7BWoRRFxAaEgZz82kUgKxxa2mG4UEMkwfq0N/JIQQNkPYdt87mkg9LGyjB+VMk
thlp3NcYqgJy1YDMw9/wG33olH5hMQ2pugZqFmJYjfz5UrFjPVk5L7tAiM86gtJl
g39xmtgCBzsb2Z9s2zZjftzuXktTKuWZkl7NBM8B72MIDs3S0gu9QhNAffm0RFgM
wNw/wEeT2IMMTXbs1hUj+ShcdtfvvsaKTDsOCa72VjKJaLrRU1CQCUis80duovU4
UuiwGzO4C6pb2Q==
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:17:41 2025 by rpki-client