Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: 96fF72hGGUPI5CW6TXUPA7MZIGe7WcWhV6J8HwmkAm8=
Subject key identifier: EA:62:2C:6C:F3:1D:76:21:6F:60:D5:7E:28:AF:F0:8C:41:12:12:FD
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 0197B77C04201745FEF6FF0395B9DBB8CC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: NAGOw44uDKMdietMrEvvd2ov6fZNYVvj8gtzVdyj+F8=)
2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:04:20:17:45:fe:f6:ff:03:95:b9:db:b8:cc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=ea622c6cf31d76216f60d57e28aff08c411212fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:de:77:6d:31:26:1b:0a:1d:f8:33:35:67:
de:a5:bf:a8:e6:66:1b:04:a4:a8:2a:06:73:0a:1f:
34:c3:b9:af:f8:f6:e7:ed:6c:0b:93:77:8b:38:c4:
73:a5:43:0e:e7:03:6d:54:74:b5:a9:5d:3b:c7:3d:
ff:eb:07:a1:78:ee:9d:2a:05:39:73:2d:3d:f8:e8:
8f:9d:0e:f2:df:d1:62:75:b7:b9:38:f1:d7:bc:fd:
d1:2a:cb:5b:06:29:f9:4f:8f:37:da:ab:fa:f0:9a:
90:a4:30:59:dd:69:fe:f2:c6:d6:86:c1:ac:3e:af:
f4:cb:cf:a2:0e:f9:63:74:13:cc:c5:0a:76:79:45:
7c:d6:65:e2:aa:ea:e4:3b:bf:75:00:af:5b:a7:c4:
91:7d:68:bd:5d:5c:77:0f:4e:54:06:ea:57:70:e4:
18:3f:a5:12:94:31:79:53:62:ea:f8:91:16:0d:96:
d0:41:f3:72:45:98:41:7a:46:49:d4:55:85:0c:4e:
d6:34:12:88:a4:9c:c5:21:30:95:b8:35:8a:5e:62:
67:83:5e:db:94:68:bc:df:ef:c5:1c:af:39:f9:62:
be:0c:fb:d4:a7:c8:06:1d:fd:30:de:42:bb:c6:13:
83:ff:3f:1a:cb:b9:f2:a8:54:da:da:1f:0c:57:57:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:2C:6C:F3:1D:76:21:6F:60:D5:7E:28:AF:F0:8C:41:12:12:FD
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8c:c4:14:30:09:b7:5b:08:b7:3c:b3:d9:1c:19:92:64:f1:
80:50:71:aa:42:71:4a:a8:49:ca:0e:f9:d4:1c:36:f1:4a:e4:
46:76:32:d3:7e:b8:cf:aa:04:04:85:6b:65:85:69:69:2f:bf:
18:78:03:12:2c:f4:76:fb:25:a8:d9:32:1a:19:62:ad:d0:4f:
25:be:34:d5:de:18:07:21:08:67:72:58:12:1f:aa:07:13:4f:
d3:1e:f6:8d:d6:cd:c8:e8:97:72:5e:83:38:69:39:1f:21:d2:
54:25:dd:80:6d:6b:bf:e9:23:05:6d:c5:ef:e4:2e:4e:f5:46:
7c:a6:1a:39:ad:a8:0a:a9:6a:2c:40:2c:09:ec:20:98:6f:4f:
da:4e:1a:d9:3f:11:65:fe:83:a9:6d:96:4b:c0:69:89:d5:5e:
ee:07:3e:45:9e:e2:bb:5b:e4:52:18:ec:6e:a0:6d:71:e7:99:
8a:12:49:6e:1c:53:0e:d5:1d:e9:2d:24:f3:df:4a:21:63:2a:
db:7b:63:c5:e9:9c:b3:46:de:2c:23:5b:d1:b5:1d:7a:11:31:
c8:52:b3:6b:f7:7c:52:43:8a:24:7b:d6:20:fe:53:0a:b7:4e:
19:c1:5b:44:ca:7b:07:85:f3:bf:cf:1b:87:8d:26:64:15:ab:
21:ab:92:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fAQgF0X+9v8DlbnbuMwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjg0MjI1NGJiZDZiZjMzZTA5ZDA1YTQ1OGYwMGEwNDg0
Y2YxNmYwHhcNMjUwNjI4MTcwMDQ3WhcNMjUwNjI5MTcwMDQ3WjAzMTEwLwYDVQQD
EyhlYTYyMmM2Y2YzMWQ3NjIxNmY2MGQ1N2UyOGFmZjA4YzQxMTIxMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f3ed20xJhsKHfgzNWfepb+o5mYb
BKSoKgZzCh80w7mv+Pbn7WwLk3eLOMRzpUMO5wNtVHS1qV07xz3/6weheO6dKgU5
cy09+OiPnQ7y39Fidbe5OPHXvP3RKstbBin5T4832qv68JqQpDBZ3Wn+8sbWhsGs
Pq/0y8+iDvljdBPMxQp2eUV81mXiqurkO791AK9bp8SRfWi9XVx3D05UBupXcOQY
P6USlDF5U2Lq+JEWDZbQQfNyRZhBekZJ1FWFDE7WNBKIpJzFITCVuDWKXmJng17b
lGi83+/FHK85+WK+DPvUp8gGHf0w3kK7xhOD/z8ay7nyqFTa2h8MV1dB1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpiLGzzHXYhb2DVfiiv8IxBEhL9MB8GA1UdIwQY
MBaAFGO4QiVLvWvzPgnQWkWPAKBITPFvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTkt
ZjE1N2MzMjk0ZDQwLzEvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTktZjE1N2MzMjk0ZDQw
LzEvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfozEFDAJ
t1sItzyz2RwZkmTxgFBxqkJxSqhJyg751Bw28UrkRnYy0364z6oEBIVrZYVpaS+/
GHgDEiz0dvslqNkyGhlirdBPJb401d4YByEIZ3JYEh+qBxNP0x72jdbNyOiXcl6D
OGk5HyHSVCXdgG1rv+kjBW3F7+QuTvVGfKYaOa2oCqlqLEAsCewgmG9P2k4a2T8R
Zf6DqW2WS8BpidVe7gc+RZ7iu1vkUhjsbqBtceeZihJJbhxTDtUd6S0k899KIWMq
23tjxemcs0beLCNb0bUdehExyFKza/d8UkOKJHvWIP5TCrdOGcFbRMp7B4Xzv88b
h40mZBWrIauS2w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:39 2025 by rpki-client