Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File: YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier: FBls9WlRaHDcpIAMjLLv+jm/g1bleg5GGIVnKpB4tLc=
Subject key identifier: 10:42:A0:2D:9A:25:D7:B2:2F:9C:A1:AB:EE:4A:2D:96:4C:E1:1F:80
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 0197B6A0B24587263467955A7315643F68B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 13:01:13 +0000
Manifest this update: Sat 28 Jun 2025 13:01:13 +0000
Manifest next update: Sun 29 Jun 2025 13:01:13 +0000
Files and hashes: 1: 5fuh3MDvvFTdM9YPWplIlmW8ZkA.roa (hash: Wdi/0+eUolZTOBljIE3hewam0WUu332lXIc8cs32Fgk=)
2: 925S4SchOi83vL3V68Y_AUuJSD8.roa (hash: 6EULq2ShinRvQFwY+uALe+ivLl2vWfr/F3fyELn3cug=)
3: PGmGsgYp4SpOgDQPzfkm2Kp84ms.roa (hash: QvQzg0nCw1e7QpH5gXcvQpoprtCI6UOH6zwCxDuFkv0=)
4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: U2w17018cijTIltM2uMKvuMSYJvwnAxIOTvlSceruhk=)
5: z3s2kSvc4H2ywLCnLljgXCeMKHc.roa (hash: pgMrP+tE9sQxVvQRywnzdq3UOn28MH01XXGUWXVHask=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b2:45:87:26:34:67:95:5a:73:15:64:3f:68:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Jun 28 13:01:13 2025 GMT
Not After : Jun 29 13:01:13 2025 GMT
Subject: CN=1042a02d9a25d7b22f9ca1abee4a2d964ce11f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:5f:64:9a:43:34:7d:26:92:09:08:eb:69:
55:c5:2f:80:36:98:78:26:2d:65:35:1f:f5:4e:33:
ec:19:32:e8:d1:02:04:ae:33:92:0f:39:0c:30:a2:
64:42:f4:52:32:88:2e:f4:c9:1e:df:08:ec:ff:c3:
a1:b6:ac:fa:74:6e:a1:4a:29:50:55:bc:ff:7a:b2:
35:9e:02:8e:e9:c8:ea:d6:ee:d2:22:f0:5b:23:3e:
62:d2:7d:cc:3d:cd:9b:83:08:2f:38:28:4f:b7:0f:
8e:18:ff:15:ab:eb:19:76:cc:46:bc:0c:ff:f1:2d:
1f:42:cb:fe:c0:6b:8c:e8:93:78:67:08:38:36:da:
0d:8c:cd:34:3d:25:3d:35:f6:bd:6f:f5:c9:39:38:
31:dc:36:d3:13:29:e5:31:0b:6e:cc:77:89:07:53:
00:1a:95:dc:3b:3c:6c:9a:c6:e2:d1:cb:ba:e7:0d:
18:a3:22:fe:36:b1:26:4e:5e:84:5c:34:24:20:47:
9e:dd:7d:f5:44:50:d4:80:56:d8:34:c8:7f:c7:08:
3a:87:13:cc:69:e5:4e:96:c2:86:69:e0:a7:ae:61:
e5:cc:46:9d:54:e6:03:21:70:50:a2:62:07:c2:75:
76:8d:37:2e:4e:da:a7:e5:6b:be:11:c7:d1:1c:29:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:A0:2D:9A:25:D7:B2:2F:9C:A1:AB:EE:4A:2D:96:4C:E1:1F:80
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d5:95:b5:2d:7f:96:92:13:45:3b:7d:67:04:94:e8:f3:30:
19:41:c9:96:e0:58:0a:6c:e3:d2:59:d4:bc:1c:15:bd:db:3c:
4f:2d:2b:df:85:6d:e7:6b:13:b4:bb:c2:af:ed:5c:98:cf:00:
5e:65:b9:e7:6f:aa:da:e5:04:a4:f2:f3:a3:d6:a3:c9:0a:34:
9f:d8:31:a5:8f:95:05:0c:8c:cf:a8:a0:46:8b:a0:24:34:d1:
67:95:b3:e2:f2:fc:66:d8:37:43:b6:04:e9:9a:4e:25:fe:cb:
eb:06:55:3c:99:74:b7:dd:34:b4:b7:72:c9:1f:25:11:6d:b8:
0d:97:56:02:69:29:47:11:41:27:0e:5a:0f:72:ef:7a:71:98:
c9:f8:21:ca:cb:eb:10:8e:5c:3b:39:36:a4:4c:ff:39:34:2f:
40:d8:55:5c:e9:66:e8:20:ce:df:af:c5:ab:75:a7:ab:ee:94:
b0:0c:03:ca:87:4b:a9:ae:23:d3:f8:e2:46:63:28:9e:8d:02:
d7:9e:6f:10:9e:06:e6:71:b9:49:4f:d6:c8:59:45:49:3c:e6:
72:cc:a8:58:29:91:a7:fc:66:49:86:7a:11:be:49:f8:08:87:
be:84:10:f1:83:c2:7a:ef:f9:d4:8f:f8:4c:0a:77:ed:9f:f1:
d2:ed:01:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLJFhyY0Z5VacxVkP2iwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTVkMjE3NzU5ZTg2MTY5NmZjNzdlZDlhYTYzYjk0ZWRi
M2JlN2QwHhcNMjUwNjI4MTMwMTEzWhcNMjUwNjI5MTMwMTEzWjAzMTEwLwYDVQQD
EygxMDQyYTAyZDlhMjVkN2IyMmY5Y2ExYWJlZTRhMmQ5NjRjZTExZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhtfZJpDNH0mkgkI62lVxS+ANph4
Ji1lNR/1TjPsGTLo0QIErjOSDzkMMKJkQvRSMogu9Mke3wjs/8Ohtqz6dG6hSilQ
Vbz/erI1ngKO6cjq1u7SIvBbIz5i0n3MPc2bgwgvOChPtw+OGP8Vq+sZdsxGvAz/
8S0fQsv+wGuM6JN4Zwg4NtoNjM00PSU9Nfa9b/XJOTgx3DbTEynlMQtuzHeJB1MA
GpXcOzxsmsbi0cu65w0YoyL+NrEmTl6EXDQkIEee3X31RFDUgFbYNMh/xwg6hxPM
aeVOlsKGaeCnrmHlzEadVOYDIXBQomIHwnV2jTcuTtqn5Wu+EcfRHClzAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBCoC2aJdeyL5yhq+5KLZZM4R+AMB8GA1UdIwQY
MBaAFGGl0hd1noYWlvx37ZqmO5Tts759MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEt
NWE2NGE1ZmM4YTY0LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEtNWE2NGE1ZmM4YTY0
LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdWVtS1/
lpITRTt9ZwSU6PMwGUHJluBYCmzj0lnUvBwVvds8Ty0r34Vt52sTtLvCr+1cmM8A
XmW552+q2uUEpPLzo9ajyQo0n9gxpY+VBQyMz6igRougJDTRZ5Wz4vL8Ztg3Q7YE
6ZpOJf7L6wZVPJl0t900tLdyyR8lEW24DZdWAmkpRxFBJw5aD3LvenGYyfghysvr
EI5cOzk2pEz/OTQvQNhVXOlm6CDO36/Fq3Wnq+6UsAwDyodLqa4j0/jiRmMono0C
155vEJ4G5nG5SU/WyFlFSTzmcsyoWCmRp/xmSYZ6Eb5J+AiHvoQQ8YPCeu/51I/4
TAp37Z/x0u0BIA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:49 2025 by rpki-client