Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: 502SQTFPr0XHNUauN/8gfb6vX3pDiOktM4zu/aU/Ze8=
Subject key identifier: 0C:A1:A6:6F:C4:97:4A:9A:E1:49:25:B1:77:64:B0:30:BD:E5:02:1A
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 0197B77BF89529437AD71912244EA5FF04C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 14E1
Signing time: Sat 28 Jun 2025 17:00:44 +0000
Manifest this update: Sat 28 Jun 2025 17:00:44 +0000
Manifest next update: Sun 29 Jun 2025 17:00:44 +0000
Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: Dep7MlDKa51aw8OIZKtjgc8/a1L8LAn7ozUKPw5GSHY=)
3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f8:95:29:43:7a:d7:19:12:24:4e:a5:ff:04:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jun 28 17:00:44 2025 GMT
Not After : Jun 29 17:00:44 2025 GMT
Subject: CN=0ca1a66fc4974a9ae14925b17764b030bde5021a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:a6:b4:ab:3a:49:79:5d:7a:d3:ee:9b:e8:
ef:33:bb:7b:d3:d3:a9:b7:6f:0f:c4:db:95:41:c8:
11:00:12:e7:a7:ff:ed:dc:60:d1:6e:75:62:85:83:
70:d9:3c:8b:dc:d1:eb:0a:8c:48:d5:63:f3:32:61:
ca:db:d2:4e:ff:99:59:c9:f5:2b:29:e6:e7:a5:72:
a1:4c:0e:41:17:06:71:e4:ea:b0:4a:bd:44:d2:d3:
58:e5:1b:e5:12:f7:8c:d0:ae:16:74:3a:0b:da:20:
78:db:9e:9d:ca:0f:d6:86:e4:d8:d0:f5:bc:c9:46:
5a:42:20:16:cd:16:c5:02:77:be:24:a8:5a:4b:17:
58:0c:e9:f1:29:e0:59:7b:55:5f:5b:9e:52:f7:ab:
01:89:19:97:48:18:0b:2e:05:ce:7f:59:96:6a:8b:
0c:53:0f:c3:cc:c9:e1:13:b0:bb:05:1b:1c:bc:b7:
74:4a:5b:24:7c:1a:fc:b4:30:18:df:84:2e:e2:89:
95:b6:a3:96:de:80:e4:10:8c:6d:7e:f6:f2:4f:68:
1d:f8:fb:52:0c:96:b6:9f:ed:76:34:79:04:e0:45:
dd:21:4d:ed:58:49:94:1e:ae:d4:30:ec:34:89:c0:
7a:87:46:5f:89:cf:d7:e4:60:b9:3e:f5:2b:89:0c:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A1:A6:6F:C4:97:4A:9A:E1:49:25:B1:77:64:B0:30:BD:E5:02:1A
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6d:e4:f4:45:11:fa:62:c8:82:56:6b:ec:c0:0e:87:e7:d9:
02:e4:f8:b6:9f:19:e5:cd:46:0a:f0:5b:11:2b:ae:66:4b:c6:
1e:b0:96:ab:a0:85:24:24:2c:6a:f4:86:e7:0b:82:ce:1f:d9:
51:b2:6c:ae:3d:7c:46:ae:7b:5f:90:26:11:da:3a:d0:86:8d:
c3:34:06:64:58:d3:cb:1a:95:39:d1:0b:14:09:43:4e:1f:78:
c1:07:3d:1b:a2:4a:be:7c:03:ab:8b:2d:12:a2:9d:ca:a1:8b:
7f:f6:f6:bd:20:82:29:3c:f4:c2:33:3e:cd:7a:04:99:48:06:
19:52:9e:09:36:7c:2a:c6:d7:f9:2d:74:26:a3:3e:9e:17:96:
54:8b:ae:29:21:0c:b7:d7:37:3a:5d:15:6f:ab:fd:81:10:b1:
de:01:86:76:b8:b5:a7:2c:44:77:8f:86:ce:f7:17:ab:dc:af:
a5:79:08:ff:a9:28:0e:d2:1a:e6:93:39:98:eb:52:7c:b0:bd:
af:0e:44:2e:f7:ca:23:21:12:4a:10:5d:aa:5f:eb:1f:c2:de:
4c:18:ee:4d:3f:8a:ea:2e:11:e6:d0:70:1d:ee:1d:8b:64:7b:
0f:f7:00:46:5f:0b:25:d4:f6:d6:59:62:e7:89:0f:74:5a:f8:
86:1f:51:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3e/iVKUN61xkSJE6l/wTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw
MTEwOTQwHhcNMjUwNjI4MTcwMDQ0WhcNMjUwNjI5MTcwMDQ0WjAzMTEwLwYDVQQD
EygwY2ExYTY2ZmM0OTc0YTlhZTE0OTI1YjE3NzY0YjAzMGJkZTUwMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrGmtKs6SXldetPum+jvM7t709Op
t28PxNuVQcgRABLnp//t3GDRbnVihYNw2TyL3NHrCoxI1WPzMmHK29JO/5lZyfUr
KebnpXKhTA5BFwZx5OqwSr1E0tNY5RvlEveM0K4WdDoL2iB4256dyg/WhuTY0PW8
yUZaQiAWzRbFAne+JKhaSxdYDOnxKeBZe1VfW55S96sBiRmXSBgLLgXOf1mWaosM
Uw/DzMnhE7C7BRscvLd0SlskfBr8tDAY34Qu4omVtqOW3oDkEIxtfvbyT2gd+PtS
DJa2n+12NHkE4EXdIU3tWEmUHq7UMOw0icB6h0Zfic/X5GC5PvUriQzngwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyhpm/El0qa4UklsXdksDC95QIaMB8GA1UdIwQY
MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt
NmU0YWVjODZmZTFlLzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl
LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbW3k9EUR
+mLIglZr7MAOh+fZAuT4tp8Z5c1GCvBbESuuZkvGHrCWq6CFJCQsavSG5wuCzh/Z
UbJsrj18Rq57X5AmEdo60IaNwzQGZFjTyxqVOdELFAlDTh94wQc9G6JKvnwDq4st
EqKdyqGLf/b2vSCCKTz0wjM+zXoEmUgGGVKeCTZ8KsbX+S10JqM+nheWVIuuKSEM
t9c3Ol0Vb6v9gRCx3gGGdri1pyxEd4+GzvcXq9yvpXkI/6koDtIa5pM5mOtSfLC9
rw5ELvfKIyESShBdql/rH8LeTBjuTT+K6i4R5tBwHe4di2R7D/cARl8LJdT21lli
54kPdFr4hh9RWg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:11 2025 by rpki-client