Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: XUffZxV36e/lNTZlRgLkMTmEbmhrdUdBGorOytudsFU=
Subject key identifier: B2:63:D3:70:69:C1:2D:49:40:F1:AD:97:FB:AF:2D:D8:FB:98:3D:8F
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 0197B632EF0509A2FA31AC25B7C766280B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 101A
Signing time: Sat 28 Jun 2025 11:01:20 +0000
Manifest this update: Sat 28 Jun 2025 11:01:20 +0000
Manifest next update: Sun 29 Jun 2025 11:01:20 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: tPsyktKGnl2xNWCryxD0FOEmaHs+IWS78M6sWrQWlT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ef:05:09:a2:fa:31:ac:25:b7:c7:66:28:0b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Jun 28 11:01:20 2025 GMT
Not After : Jun 29 11:01:20 2025 GMT
Subject: CN=b263d37069c12d4940f1ad97fbaf2dd8fb983d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:3e:21:ac:3b:1b:5e:9a:da:14:f8:4c:15:
37:5a:7b:3b:bc:67:8b:ae:c0:30:8e:4c:df:e8:7f:
5a:94:70:15:73:77:40:5b:27:21:75:1d:07:14:01:
c0:12:21:ca:d1:5b:14:ca:8e:42:69:91:1d:56:d2:
50:0c:2a:60:9d:5a:a4:d9:9d:96:33:d9:41:6f:9b:
a0:43:39:f3:2e:e9:f3:55:6a:ed:15:59:cc:2a:5b:
0b:d1:ba:80:88:83:ba:c7:ca:d5:e5:2f:bc:ea:49:
e2:ee:6f:34:cb:1b:b4:a0:84:1e:5e:dc:96:2c:2e:
b1:12:5c:8f:07:41:22:85:3c:84:8e:35:46:3a:f0:
1d:c2:a9:2c:dd:9f:06:0b:b0:f5:e4:9d:d6:44:6a:
95:5e:6d:c9:33:62:0d:bf:24:bc:75:7d:d4:42:d0:
f4:55:f0:5b:94:5c:4f:ba:4c:58:08:50:b2:9e:79:
8a:b2:1b:82:2d:db:11:c9:81:aa:a6:b8:7e:4c:5c:
0e:7f:bb:b3:88:4a:da:20:21:66:dd:aa:6b:93:0c:
35:c9:ee:87:84:44:87:7f:48:b6:71:d0:46:a6:da:
40:70:b8:a7:d2:6e:03:96:58:2a:10:51:a0:ca:a2:
70:ef:cd:54:ed:0c:5d:ce:96:95:0c:88:f1:b0:54:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:63:D3:70:69:C1:2D:49:40:F1:AD:97:FB:AF:2D:D8:FB:98:3D:8F
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:59:f0:b5:76:dc:92:a9:de:b5:d0:db:d6:d0:33:cf:11:0f:
66:31:a1:ba:92:40:be:35:59:83:a1:14:94:25:1f:45:6a:a5:
e0:ba:42:73:14:a9:c0:d5:04:e7:64:b3:51:d1:df:38:9e:ef:
a5:9c:39:80:67:1f:4d:22:4d:ec:78:eb:c6:ca:32:cc:5a:a0:
a6:db:bc:1a:62:d6:e3:e9:d4:89:4e:5b:28:3f:b2:86:36:94:
3e:a9:ad:b3:94:5e:f6:2e:f7:92:71:99:0a:12:fb:ee:2d:bb:
68:33:c0:7f:fd:6a:cb:5f:6b:3c:1a:1b:e1:83:92:6b:fd:62:
a3:2f:f5:ee:c1:d9:21:09:58:57:37:c2:60:14:74:a4:bb:9b:
74:35:60:6d:38:b1:16:50:21:24:d4:91:86:1e:c3:ac:3d:65:
38:9d:fb:6d:2c:7f:6a:83:ac:5b:7a:02:dd:5c:9b:e8:61:66:
24:ce:e5:dc:49:86:b9:b4:25:98:ae:2b:73:f6:b7:f9:ee:ab:
9d:b8:20:72:3c:bc:41:ec:66:e1:21:df:17:3d:71:e6:85:7b:
c3:67:31:41:f1:19:83:ec:bf:eb:7d:fc:2c:47:b4:36:50:c6:
a3:3a:44:bd:0c:1b:12:aa:c9:e7:d7:82:a0:40:36:05:7c:b9:
cd:07:8a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Mu8FCaL6Mawlt8dmKAshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYmUwOGRhMWFiMzFlM2Y5OGY1NTRmYTAxMzczZjk0Y2M5
MDExZWQwHhcNMjUwNjI4MTEwMTIwWhcNMjUwNjI5MTEwMTIwWjAzMTEwLwYDVQQD
EyhiMjYzZDM3MDY5YzEyZDQ5NDBmMWFkOTdmYmFmMmRkOGZiOTgzZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqic+Iaw7G16a2hT4TBU3Wns7vGeL
rsAwjkzf6H9alHAVc3dAWychdR0HFAHAEiHK0VsUyo5CaZEdVtJQDCpgnVqk2Z2W
M9lBb5ugQznzLunzVWrtFVnMKlsL0bqAiIO6x8rV5S+86kni7m80yxu0oIQeXtyW
LC6xElyPB0EihTyEjjVGOvAdwqks3Z8GC7D15J3WRGqVXm3JM2INvyS8dX3UQtD0
VfBblFxPukxYCFCynnmKshuCLdsRyYGqprh+TFwOf7uziEraICFm3aprkww1ye6H
hESHf0i2cdBGptpAcLin0m4DllgqEFGgyqJw781U7QxdzpaVDIjxsFRf5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJj03BpwS1JQPGtl/uvLdj7mD2PMB8GA1UdIwQY
MBaAFGO+CNoasx4/mPVU+gE3P5TMkBHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1Nzct
Y2M4MDU0YTUxZDY2LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1NzctY2M4MDU0YTUxZDY2
LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVnwtXbc
kqnetdDb1tAzzxEPZjGhupJAvjVZg6EUlCUfRWql4LpCcxSpwNUE52SzUdHfOJ7v
pZw5gGcfTSJN7HjrxsoyzFqgptu8GmLW4+nUiU5bKD+yhjaUPqmts5Re9i73knGZ
ChL77i27aDPAf/1qy19rPBob4YOSa/1ioy/17sHZIQlYVzfCYBR0pLubdDVgbTix
FlAhJNSRhh7DrD1lOJ37bSx/aoOsW3oC3Vyb6GFmJM7l3EmGubQlmK4rc/a3+e6r
nbggcjy8Qexm4SHfFz1x5oV7w2cxQfEZg+y/6338LEe0NlDGozpEvQwbEqrJ59eC
oEA2BXy5zQeKag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:35 2025 by rpki-client