Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File: RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier: 2ZlVeaDgdz8KSLZfMY9R86nDfir2GzBab0yhJUfrXEw=
Subject key identifier: F2:C9:BE:BE:C1:A2:88:D5:8D:7D:10:E5:C9:F8:8D:B9:FB:25:00:68
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 0197B7453D3CD1E0781C77E630BD0D5B70A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number: 15C1
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: BFq1km9XkHnmoDoXJVc27vizfZA.roa (hash: cHrkhcCjIdFy9DEItV+YoEGVfmLA0+VuuQv0zsT4f+Q=)
2: QVRWqhYUwIkNvJnwNn5ilovQsG0.roa (hash: ECIpmtTYGjYR3kRGmh6WnnV42XGn8NJAMdwXjOT27zA=)
3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: +5UYeSgtE4HsX+Deb+v8jfpNEVNldKVrsG+J/E4vO/U=)
4: Y9K3JlofK8POwOywRHQ-b7Rojd0.roa (hash: abVW39/CWooNu9JnN4E4q2eaNvJVrXWE5ieZckwkUSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3d:3c:d1:e0:78:1c:77:e6:30:bd:0d:5b:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=f2c9bebec1a288d58d7d10e5c9f88db9fb250068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:83:21:e6:4e:bc:16:5b:38:f1:68:d8:be:
8b:ba:1c:99:b0:f5:35:d2:72:03:db:7d:15:30:c5:
38:9e:2f:29:f6:8f:fc:ea:9a:ad:ac:d7:c6:54:35:
69:e3:59:a2:f9:b5:12:ed:1b:48:ec:b3:13:73:5a:
ed:98:e2:3b:7e:97:5f:35:e6:44:00:c8:35:18:68:
1a:af:01:1d:0c:62:45:eb:cc:0f:69:c1:79:4e:9b:
4c:46:65:00:c3:72:f1:e5:b7:05:32:0a:af:f5:4e:
29:cd:d2:44:71:39:3e:4f:ca:80:b6:0e:ad:a9:19:
4f:2d:ad:af:57:58:9d:30:28:5f:4a:6f:9d:71:d5:
1e:91:8a:aa:56:b9:dc:2e:87:02:38:08:da:49:68:
c8:f0:bf:55:5d:a6:64:c8:ed:7f:10:fa:41:9b:f5:
d7:9b:79:60:f4:33:f7:41:fd:0e:9d:d9:cf:e7:d6:
b9:a5:85:be:3f:5f:7c:f4:c3:ae:13:5a:b9:d4:75:
45:78:8a:ec:f3:17:e2:e0:48:6f:85:11:2c:99:65:
fa:82:4f:80:a4:3e:35:18:07:e7:7a:6d:17:03:ff:
48:04:5d:a7:2d:7b:91:8d:48:a5:3b:d5:28:3c:cd:
a7:24:f8:f5:33:eb:35:fc:6e:4e:eb:c4:4f:99:62:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C9:BE:BE:C1:A2:88:D5:8D:7D:10:E5:C9:F8:8D:B9:FB:25:00:68
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fc:1b:8a:31:c1:1c:cb:7b:15:1c:f6:03:87:2a:00:c9:92:
e6:bb:61:af:44:19:cb:57:15:b2:23:d5:6e:c7:6f:40:d9:d8:
8c:d6:13:83:5f:91:1d:b2:4e:fc:f8:5e:ff:c3:3a:e2:06:e3:
5f:1c:59:a1:75:a2:1a:a4:62:9a:42:35:6d:75:ba:56:2b:e2:
05:b5:c4:8d:a1:4d:ba:2b:f5:d1:ba:6b:d9:c5:ce:91:39:22:
70:06:ce:9e:6e:c8:af:0f:dc:96:b7:3b:8a:1c:93:05:90:c7:
e0:1c:ec:37:3d:f9:13:93:2a:6c:dd:fa:67:f9:e3:97:e5:df:
42:af:63:3b:a0:f7:5a:94:03:73:0f:a8:df:b2:61:d5:2c:c7:
5f:72:8e:0c:bc:31:2d:ff:00:97:a0:8f:63:a5:84:00:6c:28:
0a:29:ad:44:72:50:f8:a4:c7:af:82:06:88:a0:16:44:f9:c9:
6c:60:e2:43:10:20:d3:28:43:73:6e:ba:24:c6:29:8e:9d:f9:
e9:f7:ca:9a:91:00:eb:a3:53:9b:82:48:51:73:cc:83:1f:34:
f5:fa:3c:1b:be:55:34:3e:0f:fd:23:00:1d:a3:80:f0:11:49:
2d:8a:04:2d:6b:65:8a:f1:a4:28:10:bd:38:d0:51:55:c6:0f:
2b:b5:15:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RT080eB4HHfmML0NW3CmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjJhZWEwZWY0YzA2NjdkYjgxOWY1ZDVhM2RhZWE2Mzk5
ZjAzOGMwHhcNMjUwNjI4MTYwMDU3WhcNMjUwNjI5MTYwMDU3WjAzMTEwLwYDVQQD
EyhmMmM5YmViZWMxYTI4OGQ1OGQ3ZDEwZTVjOWY4OGRiOWZiMjUwMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFCDIeZOvBZbOPFo2L6LuhyZsPU1
0nID230VMMU4ni8p9o/86pqtrNfGVDVp41mi+bUS7RtI7LMTc1rtmOI7fpdfNeZE
AMg1GGgarwEdDGJF68wPacF5TptMRmUAw3Lx5bcFMgqv9U4pzdJEcTk+T8qAtg6t
qRlPLa2vV1idMChfSm+dcdUekYqqVrncLocCOAjaSWjI8L9VXaZkyO1/EPpBm/XX
m3lg9DP3Qf0OndnP59a5pYW+P1989MOuE1q51HVFeIrs8xfi4EhvhREsmWX6gk+A
pD41GAfnem0XA/9IBF2nLXuRjUilO9UoPM2nJPj1M+s1/G5O68RPmWK1awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLJvr7BoojVjX0Q5cn4jbn7JQBoMB8GA1UdIwQY
MBaAFEcirqDvTAZn24GfXVo9rqY5nwOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYt
NmUzMDc0YzZjNjYzLzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYtNmUzMDc0YzZjNjYz
LzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfwbijHB
HMt7FRz2A4cqAMmS5rthr0QZy1cVsiPVbsdvQNnYjNYTg1+RHbJO/Phe/8M64gbj
XxxZoXWiGqRimkI1bXW6ViviBbXEjaFNuiv10bpr2cXOkTkicAbOnm7Irw/clrc7
ihyTBZDH4BzsNz35E5MqbN36Z/njl+XfQq9jO6D3WpQDcw+o37Jh1SzHX3KODLwx
Lf8Al6CPY6WEAGwoCimtRHJQ+KTHr4IGiKAWRPnJbGDiQxAg0yhDc266JMYpjp35
6ffKmpEA66NTm4JIUXPMgx809fo8G75VND4P/SMAHaOA8BFJLYoELWtlivGkKBC9
ONBRVcYPK7UVWA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:48 2025 by rpki-client