Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: KGHh45PRHPwnxPe943DLe8wC9Jxj9JeC14VfZ4TcM80=
Subject key identifier: 54:55:B1:35:8A:1A:28:15:EA:08:D7:F2:76:99:6E:96:C3:89:42:4E
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 0197B82115F87434ABF119347577092DE561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 1558
Signing time: Sat 28 Jun 2025 20:01:05 +0000
Manifest this update: Sat 28 Jun 2025 20:01:05 +0000
Manifest next update: Sun 29 Jun 2025 20:01:05 +0000
Files and hashes: 1: Vm2xySa3TZzRcufAzxt4hRBLNss.roa (hash: O5+b4nw4CSapOt9ANvlpqmvnfoL7HE4era1klJG6PPo=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: qREk+GkQe0jHhzcxtI1/BSU42rw+aIrAvkmsXjbe4LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:15:f8:74:34:ab:f1:19:34:75:77:09:2d:e5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Jun 28 20:01:05 2025 GMT
Not After : Jun 29 20:01:05 2025 GMT
Subject: CN=5455b1358a1a2815ea08d7f276996e96c389424e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:43:94:b3:d2:82:db:74:11:17:04:cb:e2:
ec:17:f6:07:ae:53:13:c1:fc:dd:1d:22:a2:c4:57:
77:35:20:11:d1:f6:e6:14:e7:44:52:07:ae:5a:a0:
25:3c:33:9b:78:61:7e:1f:45:af:d3:d7:35:d4:c6:
4d:71:32:4d:d0:73:b6:98:6f:96:fb:68:25:11:df:
c9:f9:f0:93:7d:ed:55:f5:35:0b:7d:8a:b9:e8:77:
1b:b1:38:78:de:fd:bb:6a:cd:f9:52:cc:8d:37:ab:
5c:b0:58:14:8b:0e:f1:e3:09:07:09:82:a4:14:bb:
48:9c:e3:16:95:61:5e:51:cd:4a:45:ae:90:83:3e:
e7:00:8d:5a:d7:81:ab:93:b5:79:08:72:21:87:7c:
8a:70:c7:03:92:2a:ac:27:eb:cd:dc:e4:ad:c6:d6:
7c:06:67:56:a1:86:7d:b7:88:dd:6f:89:6f:54:57:
4f:3a:e4:f3:a1:2b:b9:fd:21:32:23:9a:4a:3a:62:
48:4f:86:89:6d:76:4b:08:0c:50:2d:1d:32:60:b6:
2f:ef:82:6a:a7:e7:7a:d7:b6:b8:1c:68:d0:79:19:
07:e0:dd:7a:2f:76:42:c3:ec:50:b6:8f:fb:f1:58:
73:e7:7f:3b:b0:12:0d:0d:61:d2:bc:95:8c:84:a9:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:55:B1:35:8A:1A:28:15:EA:08:D7:F2:76:99:6E:96:C3:89:42:4E
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:66:8a:cb:ff:eb:8d:24:b1:aa:5d:59:b3:0c:1f:a4:92:e2:
15:db:99:a8:4a:08:99:ef:2b:cc:e2:42:6c:0e:28:e2:6e:d4:
e3:71:4f:b9:4a:c0:5b:7c:c4:4e:e7:48:a6:e7:45:db:0e:11:
f8:af:6b:db:81:bc:58:89:d8:a2:a4:15:6a:6b:03:bd:c3:eb:
5f:14:ed:15:5c:71:ca:ad:a1:dd:57:46:5e:f8:f5:f3:f5:6f:
ec:f1:69:ed:c8:81:1a:76:dd:c1:8e:96:50:b9:11:e1:88:8c:
36:3d:d4:b3:8a:8a:b4:7b:fe:37:c5:1d:7f:e5:da:67:96:14:
a5:a6:bd:30:6f:42:aa:77:95:f4:bb:bd:05:5c:bb:e3:9d:48:
06:94:04:25:4f:2b:34:53:de:a1:4b:59:2b:6f:08:00:83:bb:
04:81:dd:99:b6:89:a8:f8:0b:0f:df:0c:7f:92:5b:7f:67:0d:
65:6c:77:34:7e:a7:16:9c:86:be:26:98:2f:68:df:13:38:f5:
b6:59:e9:94:6c:f1:68:22:29:76:ad:d5:18:82:0f:ea:63:82:
5e:73:40:7b:f1:95:24:7f:67:88:34:a1:80:99:a3:d7:1f:9c:
2b:cf:4d:a4:ec:d6:ed:6f:39:b2:c4:48:8b:55:19:18:ff:2b:
20:32:b2:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IRX4dDSr8Rk0dXcJLeVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNmRjZGFkOTkyOTA0NTZjNmQ3YzE4ZWIxYzA1OGQ5NDEw
ODg4MDEwHhcNMjUwNjI4MjAwMTA1WhcNMjUwNjI5MjAwMTA1WjAzMTEwLwYDVQQD
Eyg1NDU1YjEzNThhMWEyODE1ZWEwOGQ3ZjI3Njk5NmU5NmMzODk0MjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKpDlLPSgtt0ERcEy+LsF/YHrlMT
wfzdHSKixFd3NSAR0fbmFOdEUgeuWqAlPDObeGF+H0Wv09c11MZNcTJN0HO2mG+W
+2glEd/J+fCTfe1V9TULfYq56HcbsTh43v27as35UsyNN6tcsFgUiw7x4wkHCYKk
FLtInOMWlWFeUc1KRa6Qgz7nAI1a14Grk7V5CHIhh3yKcMcDkiqsJ+vN3OStxtZ8
BmdWoYZ9t4jdb4lvVFdPOuTzoSu5/SEyI5pKOmJIT4aJbXZLCAxQLR0yYLYv74Jq
p+d617a4HGjQeRkH4N16L3ZCw+xQto/78Vhz5387sBINDWHSvJWMhKkvGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRVsTWKGigV6gjX8naZbpbDiUJOMB8GA1UdIwQY
MBaAFMptza2ZKQRWxtfBjrHAWNlBCIgBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW0zTnJaa3BCRmJHMThHT3NjQlkyVUVJaUFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83Njc1OWUtMzk2NC00YzRmLTg3NmIt
YmM0NzVkMDA4ODY5LzEveW0zTnJaa3BCRmJHMThHT3NjQlkyVUVJaUFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi83Njc1OWUtMzk2NC00YzRmLTg3NmItYmM0NzVkMDA4ODY5
LzEveW0zTnJaa3BCRmJHMThHT3NjQlkyVUVJaUFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGaKy//r
jSSxql1ZswwfpJLiFduZqEoIme8rzOJCbA4o4m7U43FPuUrAW3zETudIpudF2w4R
+K9r24G8WInYoqQVamsDvcPrXxTtFVxxyq2h3VdGXvj18/Vv7PFp7ciBGnbdwY6W
ULkR4YiMNj3Us4qKtHv+N8Udf+XaZ5YUpaa9MG9CqneV9Lu9BVy7451IBpQEJU8r
NFPeoUtZK28IAIO7BIHdmbaJqPgLD98Mf5Jbf2cNZWx3NH6nFpyGviaYL2jfEzj1
tlnplGzxaCIpdq3VGIIP6mOCXnNAe/GVJH9niDShgJmj1x+cK89NpOzW7W85ssRI
i1UZGP8rIDKy+A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:50 2025 by rpki-client