Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: vVRip2em57WzpW6FdgzwO6zsXqV0+RoHOhUE0oaGuKQ=
Subject key identifier: 39:FB:EA:B6:FE:7F:DC:B7:B6:C2:8E:C0:36:5E:AD:E8:D9:58:86:58
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 0197CEDFCE9EEFD5EBF453D4FA9DB110F519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 0E1D
Signing time: Thu 03 Jul 2025 06:01:03 +0000
Manifest this update: Thu 03 Jul 2025 06:01:03 +0000
Manifest next update: Fri 04 Jul 2025 06:01:03 +0000
Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: XQt5Prw8aiCXX3lOdJXNGgJ4w2Dj6CTLNl4nWiiaM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:df:ce:9e:ef:d5:eb:f4:53:d4:fa:9d:b1:10:f5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Jul 3 06:01:03 2025 GMT
Not After : Jul 4 06:01:03 2025 GMT
Subject: CN=39fbeab6fe7fdcb7b6c28ec0365eade8d9588658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:07:80:ed:d3:34:9b:46:7a:68:47:e2:6b:7f:
9f:3b:0b:be:60:d6:8e:df:44:8b:90:15:80:4f:17:
1e:c9:82:d1:cd:29:b6:a2:2d:ad:39:44:bd:d0:69:
82:64:74:37:80:2a:b9:70:e8:fa:fd:d0:1e:16:34:
e6:8d:a8:8e:06:87:1c:26:17:46:3e:21:98:32:d4:
90:8f:85:e9:00:3d:60:9e:04:31:2a:5b:0a:56:31:
4e:55:c8:41:d6:71:c1:5c:50:93:98:58:c7:e1:f7:
0e:68:7d:9f:14:56:f9:35:c9:4c:10:cb:54:b6:c9:
cb:c7:d1:ef:d0:91:13:a0:44:8b:5b:88:e3:38:82:
b3:1b:b7:cf:60:31:09:89:fe:f4:f0:3b:32:54:53:
dd:61:73:f0:c4:ee:12:a4:1a:65:4d:62:96:df:8d:
49:9a:cc:3d:1c:79:f3:9c:cd:0b:af:54:f1:a9:c0:
93:96:96:35:e3:56:ce:43:57:b5:d2:f6:90:63:3c:
34:5e:cb:2a:b3:ca:4d:ac:04:02:0e:d5:da:ed:30:
71:8b:26:4b:19:07:ee:f3:8e:8e:c6:9b:92:b7:d0:
94:13:92:05:d3:71:ca:7f:78:85:19:f5:3c:62:f7:
a8:49:ab:e9:02:93:2f:fe:eb:fc:ff:32:b4:21:e0:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:EA:B6:FE:7F:DC:B7:B6:C2:8E:C0:36:5E:AD:E8:D9:58:86:58
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ef:83:ba:fa:62:f8:be:62:d9:4d:9a:3f:46:8d:6b:a8:a1:
02:13:4a:89:9e:05:12:18:c7:0a:09:c5:6b:99:c3:33:5a:eb:
d7:13:e7:f5:f7:cb:64:fa:08:d9:d3:6d:7d:01:9f:c7:8f:14:
3f:eb:b8:45:1a:7c:6a:5d:09:6c:0a:42:49:1f:aa:69:4b:e0:
14:d1:60:02:1f:15:35:3f:54:d9:bf:8f:bd:48:ca:0c:44:13:
49:60:99:29:6f:27:d2:51:55:df:ac:e8:47:3e:7d:35:4e:cd:
86:39:90:8f:42:c2:c9:b3:e7:26:e8:0c:c0:4e:91:c1:c3:08:
45:5c:5c:8e:84:78:36:34:c4:81:ea:56:63:b0:45:5a:32:55:
aa:b3:d9:66:8c:60:c5:16:91:55:11:e6:b3:23:cc:c8:de:11:
ee:ee:8b:1f:ab:c3:f4:79:6b:4e:70:8d:c1:d5:49:62:f4:da:
57:e4:85:56:83:ce:40:c2:47:20:7d:59:84:33:d7:50:5e:63:
50:c6:e6:17:40:9f:ca:31:fa:f9:99:04:01:8d:4f:91:79:64:
e4:7f:b6:57:f9:b2:b4:c5:5b:26:8a:98:21:d6:55:5b:a5:68:
2c:66:42:d5:f9:9a:0c:49:48:0d:7b:54:e1:a8:d0:41:71:c1:
fb:71:b0:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfO386e79Xr9FPU+p2xEPUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWUyMGQxMDM0YjQ0ZWY3NWU5NWZkZjdlYjg4ODE1YjZm
N2QyZjgwHhcNMjUwNzAzMDYwMTAzWhcNMjUwNzA0MDYwMTAzWjAzMTEwLwYDVQQD
EygzOWZiZWFiNmZlN2ZkY2I3YjZjMjhlYzAzNjVlYWRlOGQ5NTg4NjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QeA7dM0m0Z6aEfia3+fOwu+YNaO
30SLkBWATxceyYLRzSm2oi2tOUS90GmCZHQ3gCq5cOj6/dAeFjTmjaiOBoccJhdG
PiGYMtSQj4XpAD1gngQxKlsKVjFOVchB1nHBXFCTmFjH4fcOaH2fFFb5NclMEMtU
tsnLx9Hv0JEToESLW4jjOIKzG7fPYDEJif708DsyVFPdYXPwxO4SpBplTWKW341J
msw9HHnznM0Lr1TxqcCTlpY141bOQ1e10vaQYzw0Xssqs8pNrAQCDtXa7TBxiyZL
GQfu846OxpuSt9CUE5IF03HKf3iFGfU8YveoSavpApMv/uv8/zK0IeBeaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn76rb+f9y3tsKOwDZerejZWIZYMB8GA1UdIwQY
MBaAFMqeINEDS0Tvdelf3364iBW299L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYt
MTI3MDFhYjUxYWNmLzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYtMTI3MDFhYjUxYWNm
LzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX++Duvpi
+L5i2U2aP0aNa6ihAhNKiZ4FEhjHCgnFa5nDM1rr1xPn9ffLZPoI2dNtfQGfx48U
P+u4RRp8al0JbApCSR+qaUvgFNFgAh8VNT9U2b+PvUjKDEQTSWCZKW8n0lFV36zo
Rz59NU7NhjmQj0LCybPnJugMwE6RwcMIRVxcjoR4NjTEgepWY7BFWjJVqrPZZoxg
xRaRVRHmsyPMyN4R7u6LH6vD9HlrTnCNwdVJYvTaV+SFVoPOQMJHIH1ZhDPXUF5j
UMbmF0CfyjH6+ZkEAY1PkXlk5H+2V/mytMVbJoqYIdZVW6VoLGZC1fmaDElIDXtU
4ajQQXHB+3GwSw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:22:16 2025 by rpki-client