Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: GqM5w3fR6q8pPNb1hSwgJDBC4mt8wKVC6dVNN5xHHHw=
Subject key identifier: 75:75:2F:A7:12:05:C8:9D:5B:33:7D:AF:24:0E:9F:C1:CD:F3:67:6F
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 0197B7EACFAA73A68E4D4F21F65749A6929F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 19:01:48 +0000
Manifest this update: Sat 28 Jun 2025 19:01:48 +0000
Manifest next update: Sun 29 Jun 2025 19:01:48 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: MSvmxDAAczrvXoVTMj+TDpQx8gKOMBw9WuRXTpG1A1A=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:cf:aa:73:a6:8e:4d:4f:21:f6:57:49:a6:92:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Jun 28 19:01:48 2025 GMT
Not After : Jun 29 19:01:48 2025 GMT
Subject: CN=75752fa71205c89d5b337daf240e9fc1cdf3676f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:7b:e3:d6:22:9b:ad:41:b4:65:92:fa:e8:
4d:a9:b6:3f:2f:67:3d:0a:53:fd:46:de:d8:f5:20:
c0:3e:33:54:5e:53:74:e0:ee:02:22:e2:91:d2:16:
5b:c3:87:89:de:fa:53:58:de:30:2f:e6:0b:61:79:
68:d0:f0:8c:0c:64:b5:35:dd:db:19:e0:8e:c6:52:
f7:1e:14:60:75:c7:c6:5c:53:11:1a:80:ef:55:1f:
a5:f0:d9:23:b9:55:ab:8f:6e:a9:e9:4d:a0:77:82:
1a:36:2d:e6:4b:fb:8f:cf:7b:5f:e3:40:02:e8:5d:
5e:a4:5b:8c:0d:ef:53:3d:4a:53:71:ff:70:4b:dd:
83:44:1c:d3:05:51:20:e3:cb:bc:e5:6e:61:45:38:
b3:bc:42:f3:63:f9:ab:fb:54:eb:95:6d:96:3e:f2:
99:30:9b:69:95:08:8d:a5:ce:cb:48:41:08:6d:61:
4f:6b:06:54:01:22:88:48:b6:56:b5:0f:39:73:db:
ba:2d:3f:6e:54:7a:55:fb:de:19:3b:20:61:58:92:
7e:ca:08:26:80:89:25:23:ad:63:f6:cc:ac:6c:1b:
c0:44:d1:8f:ca:63:5d:86:b5:ad:f8:8f:a4:21:a5:
ad:ee:86:f5:1e:88:11:de:56:05:c5:22:ae:f2:3b:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:75:2F:A7:12:05:C8:9D:5B:33:7D:AF:24:0E:9F:C1:CD:F3:67:6F
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:43:bd:2e:36:0f:d2:af:93:fa:9a:f5:29:e1:03:db:b5:85:
4c:f2:90:c9:8f:3a:dc:91:70:6a:20:fc:29:dc:57:e4:f0:57:
08:c8:36:5f:e9:3c:e8:bc:5f:28:24:7c:f5:89:6a:a3:01:b6:
10:85:b7:0c:4d:54:59:54:20:16:7b:dd:eb:6e:b2:06:b2:3e:
e4:e5:2b:85:37:14:1d:75:a2:37:fc:58:3c:53:02:d3:68:f9:
6f:28:c3:5b:d4:3e:15:01:e1:6b:10:39:b6:ab:0d:08:90:20:
ec:c3:81:eb:6a:b3:fc:0d:99:3c:26:f5:64:e7:ab:85:a9:22:
9a:f4:4e:06:ad:cd:d1:f4:7c:d9:17:d2:3a:a3:9f:67:86:c3:
97:f2:fb:72:ab:81:69:20:ee:c6:f2:f4:c3:51:07:d5:93:ed:
31:ce:36:f4:62:6c:45:bf:51:84:5e:9d:49:11:af:ae:56:fc:
07:53:b3:32:8e:36:a0:34:54:bf:7c:7f:3d:90:01:f4:59:fc:
e1:25:26:9e:dd:2c:3d:cb:24:33:80:83:d1:3a:d7:2d:99:97:
e6:ec:40:33:a3:ea:61:4e:34:ee:82:8c:d2:48:4d:71:a9:74:
1d:7e:08:a7:48:0a:92:16:70:15:45:9b:58:5c:64:cb:3f:1c:
96:68:6a:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36s+qc6aOTU8h9ldJppKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk
ZDE2ZWIwHhcNMjUwNjI4MTkwMTQ4WhcNMjUwNjI5MTkwMTQ4WjAzMTEwLwYDVQQD
Eyg3NTc1MmZhNzEyMDVjODlkNWIzMzdkYWYyNDBlOWZjMWNkZjM2NzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn65749Yim61BtGWS+uhNqbY/L2c9
ClP9Rt7Y9SDAPjNUXlN04O4CIuKR0hZbw4eJ3vpTWN4wL+YLYXlo0PCMDGS1Nd3b
GeCOxlL3HhRgdcfGXFMRGoDvVR+l8NkjuVWrj26p6U2gd4IaNi3mS/uPz3tf40AC
6F1epFuMDe9TPUpTcf9wS92DRBzTBVEg48u85W5hRTizvELzY/mr+1TrlW2WPvKZ
MJtplQiNpc7LSEEIbWFPawZUASKISLZWtQ85c9u6LT9uVHpV+94ZOyBhWJJ+yggm
gIklI61j9sysbBvARNGPymNdhrWt+I+kIaWt7ob1HogR3lYFxSKu8jsfVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHV1L6cSBcidWzN9ryQOn8HN82dvMB8GA1UdIwQY
MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt
YzdhYzI2YmNjMmRhLzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh
LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUO9LjYP
0q+T+pr1KeED27WFTPKQyY863JFwaiD8KdxX5PBXCMg2X+k86LxfKCR89YlqowG2
EIW3DE1UWVQgFnvd626yBrI+5OUrhTcUHXWiN/xYPFMC02j5byjDW9Q+FQHhaxA5
tqsNCJAg7MOB62qz/A2ZPCb1ZOerhakimvROBq3N0fR82RfSOqOfZ4bDl/L7cquB
aSDuxvL0w1EH1ZPtMc429GJsRb9RhF6dSRGvrlb8B1OzMo42oDRUv3x/PZAB9Fn8
4SUmnt0sPcskM4CD0TrXLZmX5uxAM6PqYU407oKM0khNcal0HX4Ip0gKkhZwFUWb
WFxkyz8clmhqtA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:04:01 2025 by rpki-client