Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: J8hDMrbPHNEWFfVwURkyU/wtgx/01Oq1kqMzn8Jknb4=
Subject key identifier: AA:14:B4:25:56:7F:1A:86:6E:F8:E5:1D:AF:20:C9:23:0E:33:44:DB
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 0197B70E6CECEFD37DB62A4E6D08CA4EF967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: Nmxgbe8WXjfZ9IqrD6baLJ4HAAq6BFIdo9pIYIrt5os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6c:ec:ef:d3:7d:b6:2a:4e:6d:08:ca:4e:f9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=aa14b425567f1a866ef8e51daf20c9230e3344db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:e4:38:0b:3f:e8:d4:57:6a:42:26:56:ca:
15:df:8c:be:53:71:05:80:63:2f:2d:d7:dc:87:08:
df:f8:60:91:91:66:f6:2a:65:2f:50:aa:a9:1f:3a:
f3:8f:f3:5f:d1:85:93:4e:4b:f4:e7:19:9f:a5:97:
b4:5a:ad:1a:e4:1c:5b:0a:3a:a9:a9:d9:1d:64:68:
fb:da:97:15:75:60:cf:bd:d9:c6:d0:9e:2d:52:6a:
f9:50:53:8e:2f:db:c4:d2:80:e3:03:a3:df:98:eb:
11:a7:ab:bd:e4:35:a4:d0:f5:4a:34:c3:0e:7b:2e:
5e:b7:13:43:b0:62:a2:b5:5c:39:b5:69:51:1a:78:
fc:cf:d3:91:85:1c:4f:c9:30:ff:d4:ad:3d:2a:88:
e3:cf:b6:ce:3e:5b:c9:1f:25:6d:76:dc:e9:d4:c9:
1e:d0:17:00:92:98:3f:b9:d1:2e:e3:9a:ad:c0:84:
96:95:62:e4:05:8f:bb:83:7f:70:1c:51:62:01:29:
00:a0:26:d2:d6:b5:4b:bd:92:aa:8f:ff:8a:76:75:
c6:5b:33:67:0f:04:4f:91:b7:4e:4e:75:b7:22:5b:
c9:62:be:1c:b1:1c:96:b2:91:9e:9e:56:44:25:d8:
86:ab:1d:e3:3b:71:1e:39:70:25:63:04:f6:50:93:
ec:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:B4:25:56:7F:1A:86:6E:F8:E5:1D:AF:20:C9:23:0E:33:44:DB
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:a9:32:9c:06:b7:71:93:60:f1:e5:af:29:ad:6f:bc:e2:4d:
90:a0:0e:6f:5d:f8:fb:b0:df:2d:1d:1d:cd:7b:be:de:20:ad:
d6:f1:25:58:73:3a:1d:9c:d4:26:fc:fc:4c:4a:78:3c:ab:b7:
c1:24:fe:b4:ed:60:91:92:65:49:7b:ee:fd:f9:d8:d6:88:47:
68:07:b7:95:c2:d3:7a:62:61:f6:66:db:6b:68:5d:98:43:0d:
12:c3:bf:37:32:3f:e2:ce:6a:ce:ac:67:90:a3:fd:47:c1:f4:
49:75:e6:06:7e:8d:2e:10:67:fd:5f:93:58:40:27:90:ad:b1:
94:5f:7c:2c:a9:61:f3:4f:a6:49:1b:6a:46:72:74:67:28:0a:
11:25:8a:c6:41:77:c4:1c:af:7d:74:43:da:cc:52:fc:fe:2e:
a3:03:a9:5b:6f:e6:ec:74:4b:ed:2e:ad:05:6f:27:9d:fc:ed:
22:10:6d:e2:50:e2:5f:0e:d5:6b:79:0b:b5:6c:c4:ff:f7:ed:
48:2a:2c:14:6c:00:99:a3:69:43:b9:d1:17:ca:f1:92:45:23:
9d:f0:85:ae:13:2a:08:9a:14:c8:72:f6:d1:12:8e:5b:1f:bb:
a5:59:75:dc:7f:90:db:0b:db:9b:6a:22:99:e4:a5:5e:4f:36:
89:97:b3:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dmzs79N9tipObQjKTvlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGZiYTA5MTkwYjc2ODQ5ZmZmM2QyNmQ1ODA3OTBlNTRm
YWMyZTMwHhcNMjUwNjI4MTUwMTA1WhcNMjUwNjI5MTUwMTA1WjAzMTEwLwYDVQQD
EyhhYTE0YjQyNTU2N2YxYTg2NmVmOGU1MWRhZjIwYzkyMzBlMzM0NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwLkOAs/6NRXakImVsoV34y+U3EF
gGMvLdfchwjf+GCRkWb2KmUvUKqpHzrzj/Nf0YWTTkv05xmfpZe0Wq0a5BxbCjqp
qdkdZGj72pcVdWDPvdnG0J4tUmr5UFOOL9vE0oDjA6PfmOsRp6u95DWk0PVKNMMO
ey5etxNDsGKitVw5tWlRGnj8z9ORhRxPyTD/1K09Kojjz7bOPlvJHyVtdtzp1Mke
0BcAkpg/udEu45qtwISWlWLkBY+7g39wHFFiASkAoCbS1rVLvZKqj/+KdnXGWzNn
DwRPkbdOTnW3IlvJYr4csRyWspGenlZEJdiGqx3jO3EeOXAlYwT2UJPsHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoUtCVWfxqGbvjlHa8gySMOM0TbMB8GA1UdIwQY
MBaAFMtPugkZC3aEn/89JtWAeQ5U+sLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1Yjct
Zjg1Y2M1NzQ3ZmJmLzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1YjctZjg1Y2M1NzQ3ZmJm
LzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA06kynAa3
cZNg8eWvKa1vvOJNkKAOb134+7DfLR0dzXu+3iCt1vElWHM6HZzUJvz8TEp4PKu3
wST+tO1gkZJlSXvu/fnY1ohHaAe3lcLTemJh9mbba2hdmEMNEsO/NzI/4s5qzqxn
kKP9R8H0SXXmBn6NLhBn/V+TWEAnkK2xlF98LKlh80+mSRtqRnJ0ZygKESWKxkF3
xByvfXRD2sxS/P4uowOpW2/m7HRL7S6tBW8nnfztIhBt4lDiXw7Va3kLtWzE//ft
SCosFGwAmaNpQ7nRF8rxkkUjnfCFrhMqCJoUyHL20RKOWx+7pVl13H+Q2wvbm2oi
meSlXk82iZez9w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:00 2025 by rpki-client