Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File: yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier: 7oUijzLcM32xzjqKI7Cgd49abLw2xCR+pcYSJsPnq9w=
Subject key identifier: A9:22:87:2D:40:8D:0C:FC:8D:DA:A0:D7:BD:C0:F7:4C:FE:58:95:04
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial: 0197B96A5E1861CEF453C84BD44E74C3BB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number: 05AC
Signing time: Sun 29 Jun 2025 02:00:45 +0000
Manifest this update: Sun 29 Jun 2025 02:00:45 +0000
Manifest next update: Mon 30 Jun 2025 02:00:45 +0000
Files and hashes: 1: xfu021S1jJtouexa28jA9KZojkw.roa (hash: ydYZd2IQ/M2DMWZopd0Btk/t60vr6MsiYiLHbkf4rwI=)
2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: vZprgJ4N77GFNgZvNXccwx955Y6KVrwqLGhlezmj8NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:5e:18:61:ce:f4:53:c8:4b:d4:4e:74:c3:bb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Validity
Not Before: Jun 29 02:00:45 2025 GMT
Not After : Jun 30 02:00:45 2025 GMT
Subject: CN=a922872d408d0cfc8ddaa0d7bdc0f74cfe589504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:31:cb:cd:2b:62:a5:a9:dd:23:a3:a7:69:
cd:80:ef:ee:db:9b:91:d3:7e:28:53:b3:a7:2e:25:
e6:19:2f:82:5f:2b:6e:c5:b3:b9:b9:33:00:b9:78:
f8:55:18:15:51:ca:c5:11:2b:8c:ed:32:37:c6:f7:
76:75:f3:1e:5a:df:e4:78:52:4f:1e:20:b5:dd:8c:
58:86:5b:0e:9b:e1:5a:fc:ab:33:e4:8b:30:9b:51:
52:d1:4a:48:6d:99:2a:cb:9f:4b:a4:ea:88:c2:ce:
78:08:6c:da:32:69:b5:f4:18:51:0b:2b:55:66:4c:
59:6d:75:92:57:2f:3f:d5:bf:69:fe:e5:13:f7:ac:
1e:19:38:48:f1:48:e9:50:a1:48:5c:59:1f:a3:ec:
05:9f:49:17:93:84:5a:4d:13:32:4f:d3:dc:76:e7:
64:55:3e:f6:17:22:8c:f1:9d:11:83:5d:71:84:09:
70:44:64:6d:e2:78:83:91:21:e0:95:84:24:00:44:
27:56:17:17:72:59:78:5b:18:62:e8:2f:3f:c2:e0:
37:71:87:29:ef:2a:a5:7d:d5:60:6e:5a:bf:8e:b0:
f1:c3:f3:e7:c4:d2:80:c9:74:85:81:ee:37:c6:1b:
b2:c6:97:18:d2:78:8d:a2:88:e3:3f:7b:8f:37:d7:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:87:2D:40:8D:0C:FC:8D:DA:A0:D7:BD:C0:F7:4C:FE:58:95:04
X509v3 Authority Key Identifier:
keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ad:58:63:78:14:65:83:8b:c8:5c:ec:2a:74:66:3c:89:4a:
1b:25:f4:49:0e:e0:a8:58:99:ac:0d:fa:a3:f3:fc:c1:ff:60:
f0:e7:23:c4:5e:c0:77:b2:e1:91:ff:05:2f:a3:04:7c:01:01:
c3:1c:61:c1:d6:ed:7c:30:6d:ce:44:6c:5c:e3:18:b9:93:6b:
85:a5:4e:d7:ba:40:55:52:8a:2d:d5:e6:14:cc:67:e2:94:de:
13:d9:a6:41:42:ca:e0:b0:1d:fc:67:73:7b:f7:99:b8:2b:ba:
a1:8a:76:a6:78:a9:a7:dd:17:b1:ad:f8:29:24:03:b6:69:de:
45:fc:2d:d4:86:b7:17:36:0e:f0:a8:3c:0c:0e:72:6f:86:89:
4d:98:c9:42:32:dc:ae:5f:bd:2f:19:c9:95:c6:2d:a1:60:e5:
78:d3:c2:86:3d:22:c7:28:b1:0d:22:40:15:1e:a8:21:44:03:
f3:af:af:08:0b:1b:d4:1e:05:e3:0b:4a:e8:f6:7a:be:aa:a3:
34:3b:47:99:8f:42:8e:9e:eb:77:55:06:37:83:26:eb:63:e9:
53:f6:5c:88:9d:49:a1:34:cb:84:2a:7a:83:87:93:7d:5e:d0:
c1:2b:81:65:47:d0:e7:06:a0:81:0b:3e:88:7a:e3:62:dd:4c:
bf:29:c5:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5al4YYc70U8hL1E50w7uPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzM0OGFiZjE3M2QyNzc0Yzg5NDIwMDhjYWRmNmQ2MDEy
YTNkNTIwHhcNMjUwNjI5MDIwMDQ1WhcNMjUwNjMwMDIwMDQ1WjAzMTEwLwYDVQQD
EyhhOTIyODcyZDQwOGQwY2ZjOGRkYWEwZDdiZGMwZjc0Y2ZlNTg5NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zoxy80rYqWp3SOjp2nNgO/u25uR
034oU7OnLiXmGS+CXytuxbO5uTMAuXj4VRgVUcrFESuM7TI3xvd2dfMeWt/keFJP
HiC13YxYhlsOm+Fa/Ksz5Iswm1FS0UpIbZkqy59LpOqIws54CGzaMmm19BhRCytV
ZkxZbXWSVy8/1b9p/uUT96weGThI8UjpUKFIXFkfo+wFn0kXk4RaTRMyT9Pcdudk
VT72FyKM8Z0Rg11xhAlwRGRt4niDkSHglYQkAEQnVhcXcll4Wxhi6C8/wuA3cYcp
7yqlfdVgblq/jrDxw/PnxNKAyXSFge43xhuyxpcY0niNoojjP3uPN9cwIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkihy1AjQz8jdqg173A90z+WJUEMB8GA1UdIwQY
MBaAFMozSKvxc9J3TIlCAIyt9tYBKj1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wMjY5MTQtMTYxMi00NWY0LWFjZGYt
MmFjYjlkMTdjMTFjLzEveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wMjY5MTQtMTYxMi00NWY0LWFjZGYtMmFjYjlkMTdjMTFj
LzEveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS61YY3gU
ZYOLyFzsKnRmPIlKGyX0SQ7gqFiZrA36o/P8wf9g8OcjxF7Ad7Lhkf8FL6MEfAEB
wxxhwdbtfDBtzkRsXOMYuZNrhaVO17pAVVKKLdXmFMxn4pTeE9mmQULK4LAd/Gdz
e/eZuCu6oYp2pnipp90Xsa34KSQDtmneRfwt1Ia3FzYO8Kg8DA5yb4aJTZjJQjLc
rl+9LxnJlcYtoWDleNPChj0ixyixDSJAFR6oIUQD86+vCAsb1B4F4wtK6PZ6vqqj
NDtHmY9Cjp7rd1UGN4Mm62PpU/ZciJ1JoTTLhCp6g4eTfV7QwSuBZUfQ5waggQs+
iHrjYt1MvynFpQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:20:23 2025 by rpki-client