Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
File: yXKq7Icz1F96AANRAYC0ri1Lvo4.mft (raw, json)
Hash identifier: MvhLO4rnIrbbfj3I+7qut3z/cThPvt++3ZyiBBhuofk=
Subject key identifier: 57:1A:7A:8E:01:3B:99:F3:45:5F:53:93:AD:92:22:0D:10:8A:83:A7
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Certificate issuer: /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial: 0197B6D763B88780A028AE5859DBE26FA110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: iEYRoHL_x--Q-PC_QmRkLatna0w.roa (hash: 5s1E+tOqSuT9Il26pYgrASE0LBQS+wYadwRdpb6ASa8=)
2: yXKq7Icz1F96AANRAYC0ri1Lvo4.crl (hash: sfkfkU2qKf+zT9UgeW33sezMfbcMI2va506HjPh7qAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:63:b8:87:80:a0:28:ae:58:59:db:e2:6f:a1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=571a7a8e013b99f3455f5393ad92220d108a83a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:65:38:de:a2:77:73:b9:2d:69:fc:9e:f7:
81:dc:97:cd:23:4d:16:c5:79:f0:5b:84:a7:63:d9:
78:04:b1:1f:f2:27:aa:e7:78:0b:17:b3:ee:d9:79:
73:3a:a1:de:6e:34:da:bb:98:9f:d1:c8:c4:79:17:
fb:ab:d4:5f:51:d9:f7:43:9e:0f:66:59:52:ea:c8:
1d:49:4a:5a:c7:76:a3:88:b4:2a:d6:27:05:18:02:
3e:38:66:f0:cc:ea:b7:88:b3:1f:bb:15:7b:33:a5:
dd:c6:4c:81:bf:41:09:5a:8b:27:c9:dd:f3:ac:8b:
c6:f4:02:fa:56:84:f8:fe:1b:9a:9f:b9:90:09:05:
45:7a:73:90:42:bb:d3:8a:70:7c:17:88:ce:31:b1:
f8:71:22:c3:e4:c0:7b:dd:e3:62:d1:c6:03:d0:03:
d1:08:06:f9:17:7a:e6:9b:aa:25:67:c4:a8:82:97:
4e:01:f8:f7:21:a4:51:cb:fe:9e:76:dd:8a:4d:6f:
c8:a3:e8:2b:45:a2:1f:73:c2:8f:ed:80:4a:eb:63:
56:b4:82:bc:6e:62:4d:0f:e1:42:9f:4e:23:0c:1f:
43:0a:d4:b9:7e:0c:8f:51:c9:b9:df:e3:f6:7a:67:
04:8f:3f:73:d0:61:e7:7a:ce:90:08:c1:23:1c:7f:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1A:7A:8E:01:3B:99:F3:45:5F:53:93:AD:92:22:0D:10:8A:83:A7
X509v3 Authority Key Identifier:
keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bc:78:5a:d7:47:74:0a:ed:6f:7a:52:d5:ca:85:aa:f0:13:
83:36:43:1c:4d:a7:f1:bd:fe:5f:ac:b7:d5:20:b2:40:d1:55:
69:6f:8d:df:a7:15:08:23:8a:80:f7:18:d2:4a:99:a1:61:08:
6f:25:a9:ed:f7:63:32:ed:dc:fe:96:f6:40:20:42:72:44:00:
d9:a7:38:31:27:37:fa:74:8b:21:e1:3c:ed:0d:d4:8b:f7:6c:
6a:dd:e8:8c:b2:d9:6d:7f:fa:ec:da:fa:cb:aa:c6:8e:79:d3:
02:f3:94:71:4b:38:47:0c:7f:59:37:2b:92:e1:49:01:df:9f:
af:e2:a9:cf:b0:77:c4:25:16:43:c6:00:fd:e0:3a:c6:d0:98:
c7:cc:2a:40:81:5d:0d:b8:8e:40:47:18:60:fb:1e:67:2e:6d:
85:40:02:08:56:d0:e7:39:f6:a7:ea:5b:77:21:1b:fd:de:41:
d1:73:09:64:8a:60:02:aa:7c:35:1c:65:37:17:0f:34:58:f6:
4e:d1:6b:75:65:4c:dd:f5:f6:26:d1:c3:bb:d1:39:82:87:3b:
ff:bb:c2:e1:00:c7:c9:34:ce:02:c9:3f:16:af:4e:58:01:05:
2c:69:3b:41:bd:05:64:69:89:7d:b0:94:2e:02:d2:0d:3b:ca:
6b:05:78:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe212O4h4CgKK5YWdvib6EQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NzJhYWVjODczM2Q0NWY3YTAwMDM1MTAxODBiNGFlMmQ0
YmJlOGUwHhcNMjUwNjI4MTQwMDU4WhcNMjUwNjI5MTQwMDU4WjAzMTEwLwYDVQQD
Eyg1NzFhN2E4ZTAxM2I5OWYzNDU1ZjUzOTNhZDkyMjIwZDEwOGE4M2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzBlON6id3O5LWn8nveB3JfNI00W
xXnwW4SnY9l4BLEf8ieq53gLF7Pu2XlzOqHebjTau5if0cjEeRf7q9RfUdn3Q54P
ZllS6sgdSUpax3ajiLQq1icFGAI+OGbwzOq3iLMfuxV7M6XdxkyBv0EJWosnyd3z
rIvG9AL6VoT4/huan7mQCQVFenOQQrvTinB8F4jOMbH4cSLD5MB73eNi0cYD0APR
CAb5F3rmm6olZ8SogpdOAfj3IaRRy/6edt2KTW/Io+grRaIfc8KP7YBK62NWtIK8
bmJND+FCn04jDB9DCtS5fgyPUcm53+P2emcEjz9z0GHnes6QCMEjHH/sFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcaeo4BO5nzRV9Tk62SIg0QioOnMB8GA1UdIwQY
MBaAFMlyquyHM9RfegADUQGAtK4tS76OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVhLcTdJY3oxRjk2QUFOUkFZQzByaTFMdm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kNmVhZmItYjMyOS00ZTEyLTgyNWMt
ZWI1YjlhN2RhODZiLzEveVhLcTdJY3oxRjk2QUFOUkFZQzByaTFMdm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kNmVhZmItYjMyOS00ZTEyLTgyNWMtZWI1YjlhN2RhODZi
LzEveVhLcTdJY3oxRjk2QUFOUkFZQzByaTFMdm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7x4WtdH
dArtb3pS1cqFqvATgzZDHE2n8b3+X6y31SCyQNFVaW+N36cVCCOKgPcY0kqZoWEI
byWp7fdjMu3c/pb2QCBCckQA2ac4MSc3+nSLIeE87Q3Ui/dsat3ojLLZbX/67Nr6
y6rGjnnTAvOUcUs4Rwx/WTcrkuFJAd+fr+Kpz7B3xCUWQ8YA/eA6xtCYx8wqQIFd
DbiOQEcYYPseZy5thUACCFbQ5zn2p+pbdyEb/d5B0XMJZIpgAqp8NRxlNxcPNFj2
TtFrdWVM3fX2JtHDu9E5goc7/7vC4QDHyTTOAsk/Fq9OWAEFLGk7Qb0FZGmJfbCU
LgLSDTvKawV4OQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:30 2025 by rpki-client