Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: a+/KHdLNnQFZiriLIz6djCypxeNNWCJNAkaffGL+9/k=
Subject key identifier: 88:9F:87:59:BC:6C:EE:B7:B8:7C:C4:FC:51:9A:0F:D9:8E:65:50:64
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 0197B5C4FE07F220E99D48063FE3C7C89BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 09:01:15 +0000
Manifest this update: Sat 28 Jun 2025 09:01:15 +0000
Manifest next update: Sun 29 Jun 2025 09:01:15 +0000
Files and hashes: 1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: ejWbUVjvyD/avz7pS1ZXI+zzbdpDKGAoR2ImTHq3Gzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:fe:07:f2:20:e9:9d:48:06:3f:e3:c7:c8:9b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Jun 28 09:01:15 2025 GMT
Not After : Jun 29 09:01:15 2025 GMT
Subject: CN=889f8759bc6ceeb7b87cc4fc519a0fd98e655064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:6e:74:da:9a:31:d0:34:e8:c1:b4:88:92:
0e:a7:1a:8e:73:be:d1:c1:7a:66:d9:10:27:6e:f3:
00:87:40:ff:d7:55:b0:29:a9:3a:b6:61:82:21:bf:
14:75:93:65:da:9a:f1:68:96:98:8c:65:1d:3b:ba:
1f:3d:5e:c4:ae:69:04:6c:98:97:77:e1:7c:bc:64:
eb:5d:50:df:bd:35:8b:f8:ca:c1:b4:a7:69:ad:95:
ed:65:ce:fb:5b:17:bf:eb:3a:c8:b4:ed:ad:e9:4f:
97:74:03:e2:c4:12:3e:a3:61:3d:7b:84:2e:d0:88:
01:75:ea:2a:28:d2:af:1a:79:c5:a9:a9:83:16:01:
b9:d5:8e:f1:41:d7:4c:74:bd:aa:02:9f:95:38:61:
e6:82:84:3f:b3:f4:31:41:06:c9:41:da:4f:54:a2:
91:1c:08:82:ca:2d:66:04:bb:97:83:2b:37:46:6b:
ea:4f:cd:a4:3a:bb:4e:45:34:dc:62:21:6b:f9:42:
85:6f:f7:9d:bd:2a:22:46:ce:ce:47:f8:6f:b1:5e:
ca:49:c3:78:77:79:54:24:a5:fa:36:86:f2:2e:42:
ad:b2:a8:06:03:42:82:cf:6f:04:c1:59:71:57:2a:
1f:32:8b:20:67:c5:ea:a1:7d:f2:bc:fa:1c:8a:01:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9F:87:59:BC:6C:EE:B7:B8:7C:C4:FC:51:9A:0F:D9:8E:65:50:64
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1c:8b:c8:2e:6f:e5:42:95:71:5d:3f:7b:6b:8a:3d:5d:e1:
e1:1f:64:98:db:7a:71:d2:08:a9:e2:30:19:a3:5f:72:27:72:
50:d6:f0:01:5b:71:dc:dc:ce:59:a7:d4:fd:10:28:f0:b9:31:
90:b3:10:be:d3:e5:5b:ed:86:7e:66:33:49:02:c8:7d:78:19:
1e:2c:73:76:1d:56:11:53:90:6e:2d:80:cb:b0:f8:6e:c8:50:
c5:87:f1:5a:7c:01:44:c1:8e:93:80:91:db:bb:cc:85:82:dd:
c7:36:99:b1:a8:1d:28:d5:82:14:62:2e:83:1f:14:01:cb:bd:
da:67:12:19:f8:ef:35:34:0c:a4:32:3a:3e:08:17:29:7b:0b:
ea:af:2b:4c:d1:69:2c:01:84:6e:cc:8c:f3:41:21:01:f7:3f:
86:a1:e9:36:cd:98:0f:9f:90:5e:27:89:4e:9a:54:68:75:41:
d9:67:e3:fc:e9:dd:54:6a:e5:0b:ac:68:8f:9c:fb:a3:61:fc:
66:68:ce:65:25:2d:49:84:cd:22:f6:66:bd:5d:5f:84:d0:17:
f8:65:97:e0:4f:5d:a1:1f:10:b4:45:34:36:9c:0b:5e:21:26:
00:bd:c2:1f:86:6c:2c:90:76:17:de:8b:a2:ca:bd:25:6b:07:
a7:ba:e8:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xP4H8iDpnUgGP+PHyJvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyODRjZmE3ODQ0MzQwMjM3ZmU1OWEzODI1YjU0ZjNmNzdl
ZDg1MzIwHhcNMjUwNjI4MDkwMTE1WhcNMjUwNjI5MDkwMTE1WjAzMTEwLwYDVQQD
Eyg4ODlmODc1OWJjNmNlZWI3Yjg3Y2M0ZmM1MTlhMGZkOThlNjU1MDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD1udNqaMdA06MG0iJIOpxqOc77R
wXpm2RAnbvMAh0D/11WwKak6tmGCIb8UdZNl2prxaJaYjGUdO7ofPV7ErmkEbJiX
d+F8vGTrXVDfvTWL+MrBtKdprZXtZc77Wxe/6zrItO2t6U+XdAPixBI+o2E9e4Qu
0IgBdeoqKNKvGnnFqamDFgG51Y7xQddMdL2qAp+VOGHmgoQ/s/QxQQbJQdpPVKKR
HAiCyi1mBLuXgys3RmvqT82kOrtORTTcYiFr+UKFb/edvSoiRs7OR/hvsV7KScN4
d3lUJKX6NobyLkKtsqgGA0KCz28EwVlxVyofMosgZ8XqoX3yvPocigGSEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIifh1m8bO63uHzE/FGaD9mOZVBkMB8GA1UdIwQY
MBaAFGKEz6eEQ0Ajf+WaOCW1Tz937YUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mYzFlMzItMGJhNy00ZjhkLWE1YWEt
ZjM4ZjhmZTc5NGQ0LzEvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mYzFlMzItMGJhNy00ZjhkLWE1YWEtZjM4ZjhmZTc5NGQ0
LzEvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGByLyC5v
5UKVcV0/e2uKPV3h4R9kmNt6cdIIqeIwGaNfcidyUNbwAVtx3NzOWafU/RAo8Lkx
kLMQvtPlW+2GfmYzSQLIfXgZHixzdh1WEVOQbi2Ay7D4bshQxYfxWnwBRMGOk4CR
27vMhYLdxzaZsagdKNWCFGIugx8UAcu92mcSGfjvNTQMpDI6PggXKXsL6q8rTNFp
LAGEbsyM80EhAfc/hqHpNs2YD5+QXieJTppUaHVB2Wfj/OndVGrlC6xoj5z7o2H8
ZmjOZSUtSYTNIvZmvV1fhNAX+GWX4E9doR8QtEU0NpwLXiEmAL3CH4ZsLJB2F96L
osq9JWsHp7ro2w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:34 2025 by rpki-client