Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier: mVb3cfakuRK+hyVczL2vwhlwHxxLAOgNoQE3jARds8o=
Subject key identifier: D8:56:6C:6D:4F:16:7A:3B:8D:48:22:53:CD:5C:35:AC:5C:CA:78:20
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 0197B6A0D951703B810649EB8FE09BC71B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=)
2: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: WYeqaQ0LoNkv8c08d5gtk2Fal9SnZiy5S1JG0O4ByNU=)
3: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d9:51:70:3b:81:06:49:eb:8f:e0:9b:c7:1b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=d8566c6d4f167a3b8d482253cd5c35ac5cca7820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:d9:ce:5e:c9:dc:91:ab:56:c5:98:77:f2:
40:34:23:82:e9:49:af:ac:2b:6e:3b:67:c7:ca:2d:
a0:7d:ed:ac:8f:bc:55:0c:7a:a0:ed:36:c5:a7:31:
54:99:66:ab:2a:5d:11:41:ad:ff:ee:42:c9:00:55:
0d:c6:4d:e1:9e:1c:c6:ba:3e:48:91:d9:99:56:ab:
a5:38:3e:79:90:34:81:71:3f:ea:a0:22:db:27:3c:
27:3f:7d:5d:ca:5f:ce:30:3e:32:ef:f5:cb:cc:9f:
3d:f7:5c:a7:6b:76:16:f8:3d:c4:59:d8:bc:36:3a:
4d:18:14:dc:b8:55:c0:55:1a:2a:1f:cd:36:86:04:
85:81:1a:b9:16:4a:78:d1:7b:a8:b8:04:fc:a0:48:
ed:3a:0f:5b:5b:f7:52:7f:ab:5c:6b:78:f3:54:b4:
4e:91:68:ff:b5:3e:1f:65:7d:e0:74:b2:59:00:84:
63:f5:46:52:97:35:bf:62:fc:a1:17:76:9a:1c:e8:
c9:eb:d6:3e:1d:bf:97:08:7c:7d:bd:fa:8c:e7:4c:
92:18:75:d7:6e:85:79:22:da:89:19:de:e5:47:e9:
aa:12:04:08:8a:f3:99:34:32:12:47:1a:b5:14:19:
4e:53:23:28:8d:a4:42:15:fe:0c:8f:58:23:e4:de:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:6C:6D:4F:16:7A:3B:8D:48:22:53:CD:5C:35:AC:5C:CA:78:20
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2b:de:79:8e:7e:5d:f3:53:c4:82:20:b2:90:2f:bd:bd:32:
15:42:b7:de:5a:9f:90:d6:4b:48:e6:a9:65:fa:2d:ce:3d:59:
23:04:40:a7:76:ee:80:1b:07:7c:8a:4d:4c:db:80:01:fe:9e:
ff:fc:56:81:b6:81:fa:d3:2b:d3:06:51:7c:01:07:9e:b4:c5:
35:33:2d:26:7c:9f:60:49:89:7e:df:89:c4:c0:6c:b7:db:c3:
7c:e7:6c:bf:0d:1c:24:8c:ac:21:e9:b9:05:34:18:54:15:00:
76:e7:e6:aa:00:71:ab:34:ac:27:76:3b:29:e0:19:30:8c:fe:
37:65:e3:6c:8b:71:02:70:0f:2d:a1:aa:8d:02:32:47:f3:fd:
78:75:ff:e8:5e:5d:45:a4:ab:4a:a9:da:72:11:7f:4a:96:e4:
b5:08:5a:3c:fc:6b:1b:82:d2:43:0a:6b:30:36:80:f6:15:19:
68:06:2d:a0:ea:92:3a:0f:4e:ed:40:2c:0d:97:2d:57:67:c8:
e1:e7:da:4f:ac:cf:37:3b:ce:b8:08:90:ec:a2:82:8e:0c:53:
09:71:f4:1e:02:4d:9e:41:a4:a7:2f:35:fc:70:c2:e1:6f:de:
c1:dc:46:d6:2a:c6:37:44:ab:1c:dc:f1:d0:0f:69:22:7c:4c:
a8:d7:c0:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oNlRcDuBBknrj+Cbxxt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2
NDZjMmEwHhcNMjUwNjI4MTMwMTI0WhcNMjUwNjI5MTMwMTI0WjAzMTEwLwYDVQQD
EyhkODU2NmM2ZDRmMTY3YTNiOGQ0ODIyNTNjZDVjMzVhYzVjY2E3ODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunzZzl7J3JGrVsWYd/JANCOC6Umv
rCtuO2fHyi2gfe2sj7xVDHqg7TbFpzFUmWarKl0RQa3/7kLJAFUNxk3hnhzGuj5I
kdmZVqulOD55kDSBcT/qoCLbJzwnP31dyl/OMD4y7/XLzJ8991yna3YW+D3EWdi8
NjpNGBTcuFXAVRoqH802hgSFgRq5Fkp40XuouAT8oEjtOg9bW/dSf6tca3jzVLRO
kWj/tT4fZX3gdLJZAIRj9UZSlzW/YvyhF3aaHOjJ69Y+Hb+XCHx9vfqM50ySGHXX
boV5ItqJGd7lR+mqEgQIivOZNDISRxq1FBlOUyMojaRCFf4Mj1gj5N7LMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhWbG1PFno7jUgiU81cNaxcynggMB8GA1UdIwQY
MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt
NjAxNmQ1YzA1ZjMwLzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQtNjAxNmQ1YzA1ZjMw
LzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCveeY5+
XfNTxIIgspAvvb0yFUK33lqfkNZLSOapZfotzj1ZIwRAp3bugBsHfIpNTNuAAf6e
//xWgbaB+tMr0wZRfAEHnrTFNTMtJnyfYEmJft+JxMBst9vDfOdsvw0cJIysIem5
BTQYVBUAdufmqgBxqzSsJ3Y7KeAZMIz+N2XjbItxAnAPLaGqjQIyR/P9eHX/6F5d
RaSrSqnachF/SpbktQhaPPxrG4LSQwprMDaA9hUZaAYtoOqSOg9O7UAsDZctV2fI
4efaT6zPNzvOuAiQ7KKCjgxTCXH0HgJNnkGkpy81/HDC4W/ewdxG1irGN0SrHNzx
0A9pInxMqNfAnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:18 2025 by rpki-client