Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: lf33YGTlnQmdg/vyIbNB5HYTbz44r/6Ietz37S6m85c=
Subject key identifier: 43:8F:BE:02:1F:61:6A:74:DA:F7:45:84:77:53:A3:76:3D:A6:25:71
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 0197B6A14AEA68ABEA8E703BB4BA7B109A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 0D0C
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: iAE/aSH3qSvD8/eAACd+9fHEFGaMDAEmAtqQ1aQPH10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4a:ea:68:ab:ea:8e:70:3b:b4:ba:7b:10:9a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=438fbe021f616a74daf745847753a3763da62571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:34:43:08:f8:de:35:2b:a7:91:36:49:26:
db:dd:09:c8:85:09:ea:88:01:77:65:82:13:7a:be:
81:c2:7f:ba:0f:c4:e9:ab:2a:df:81:0f:d7:89:c0:
69:82:e1:8a:01:17:4e:8b:cc:d6:ea:3e:00:62:c0:
c3:39:cc:22:3a:6c:eb:88:d0:10:3e:ca:08:12:98:
d8:6f:5c:97:8e:f1:eb:b5:00:56:8e:71:8b:5d:65:
c5:c1:f2:60:fc:e7:83:5d:61:41:7d:8a:e5:f8:85:
0a:ff:fc:34:86:60:7e:49:89:00:fe:97:a0:15:40:
d7:0b:b3:e8:80:21:c1:e3:83:49:4a:08:20:08:b7:
52:2d:ca:c9:8c:fe:d8:59:0c:67:16:97:77:67:63:
ba:37:72:56:a8:b4:d4:40:6d:b3:b0:aa:93:11:30:
3d:2a:f3:bf:c8:3c:2f:0c:32:c4:00:df:12:9a:a1:
cd:97:dd:42:c6:e6:2b:12:fe:91:d5:da:05:e7:77:
53:fd:28:7e:06:e3:94:de:08:f7:52:a3:62:6d:45:
e8:d2:fa:6d:b6:b7:5d:2a:a7:32:cb:e5:07:d7:c1:
43:0d:c6:52:c5:aa:32:61:f0:d5:9f:17:2d:bc:02:
41:61:66:b2:54:ba:3a:13:0b:b5:74:74:49:3c:c2:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8F:BE:02:1F:61:6A:74:DA:F7:45:84:77:53:A3:76:3D:A6:25:71
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1a:e3:c8:4a:bb:4e:09:71:2c:32:af:41:85:39:b6:c3:b2:
32:a4:69:7a:90:3c:23:31:74:4e:d2:50:30:1d:3a:a2:b3:d2:
b9:c2:54:6f:44:9c:25:80:85:4e:11:9f:7d:ac:4e:aa:89:69:
7b:b6:9e:03:99:04:c4:09:9c:a9:75:ef:20:c3:21:33:e6:9f:
33:f0:4f:85:a6:f9:95:4d:d2:a4:65:72:f3:10:03:96:d6:e1:
45:50:27:f6:53:c2:ce:d2:51:7d:97:6a:78:40:34:74:12:b9:
34:7c:f3:75:f9:d2:a5:cb:f6:30:d3:85:32:56:16:20:07:36:
5c:12:0c:51:ca:19:25:e7:6a:e6:d9:ac:bc:a4:fc:24:45:75:
29:68:b9:df:f0:f7:e1:b7:2f:44:67:47:90:99:ab:33:f1:88:
da:fa:ee:91:c4:c3:6e:49:e2:13:0e:9b:ca:83:de:3f:0a:b6:
ee:26:9f:fb:30:59:69:20:66:c8:d1:69:49:13:b1:d7:88:8b:
71:61:0e:0c:3a:24:61:1a:d8:6c:ef:ae:dd:e3:b2:df:8a:ce:
00:3d:62:0a:50:c5:92:07:41:87:f6:ac:c5:d7:75:14:b8:54:
52:a3:d1:c9:b8:e9:75:62:58:5b:7c:85:ce:35:8b:79:19:3d:
ca:23:cb:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUrqaKvqjnA7tLp7EJp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNzdjNTgwOTI2NTk5ZTgzYWI3MzViYTJlMDRmYzEwODc3
OGM0NDEwHhcNMjUwNjI4MTMwMTUzWhcNMjUwNjI5MTMwMTUzWjAzMTEwLwYDVQQD
Eyg0MzhmYmUwMjFmNjE2YTc0ZGFmNzQ1ODQ3NzUzYTM3NjNkYTYyNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHo0Qwj43jUrp5E2SSbb3QnIhQnq
iAF3ZYITer6Bwn+6D8TpqyrfgQ/XicBpguGKARdOi8zW6j4AYsDDOcwiOmzriNAQ
PsoIEpjYb1yXjvHrtQBWjnGLXWXFwfJg/OeDXWFBfYrl+IUK//w0hmB+SYkA/peg
FUDXC7PogCHB44NJSgggCLdSLcrJjP7YWQxnFpd3Z2O6N3JWqLTUQG2zsKqTETA9
KvO/yDwvDDLEAN8SmqHNl91CxuYrEv6R1doF53dT/Sh+BuOU3gj3UqNibUXo0vpt
trddKqcyy+UH18FDDcZSxaoyYfDVnxctvAJBYWayVLo6Ewu1dHRJPMIx1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOPvgIfYWp02vdFhHdTo3Y9piVxMB8GA1UdIwQY
MBaAFGF3xYCSZZnoOrc1ui4E/BCHeMRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWJmN2ItNDc0NS00NDIzLWE4ZmEt
YTMyZTJlZDBjZmQzLzEvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yOWJmN2ItNDc0NS00NDIzLWE4ZmEtYTMyZTJlZDBjZmQz
LzEvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohrjyEq7
TglxLDKvQYU5tsOyMqRpepA8IzF0TtJQMB06orPSucJUb0ScJYCFThGffaxOqolp
e7aeA5kExAmcqXXvIMMhM+afM/BPhab5lU3SpGVy8xADltbhRVAn9lPCztJRfZdq
eEA0dBK5NHzzdfnSpcv2MNOFMlYWIAc2XBIMUcoZJedq5tmsvKT8JEV1KWi53/D3
4bcvRGdHkJmrM/GI2vrukcTDbkniEw6byoPePwq27iaf+zBZaSBmyNFpSROx14iL
cWEODDokYRrYbO+u3eOy34rOAD1iClDFkgdBh/asxdd1FLhUUqPRybjpdWJYW3yF
zjWLeRk9yiPL9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:20 2025 by rpki-client