
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier: A3pqGhDhkz4MqQt176jDTRIv1whB0lkIGfls4fUT+WY=
Subject key identifier: A6:F4:0F:BF:C1:1F:D2:C5:F2:05:18:59:8E:08:C0:3D:29:C2:59:08
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 0197B7B359155A6A54BF87B619005DCCDC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number: 148E
Signing time: Sat 28 Jun 2025 18:01:13 +0000
Manifest this update: Sat 28 Jun 2025 18:01:13 +0000
Manifest next update: Sun 29 Jun 2025 18:01:13 +0000
Files and hashes: 1: HDxSohX-IDNPW8pjacRSI1H_PKk.roa (hash: LmMZXQdXNsqjvcfV+qIzu55UsIszcW5rLny8ykXmqHQ=)
2: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: SxzDLKgaGoaz/jb0Udzds0CbLEAhcztxsvfHMeqNAwM=)
3: ZTfX1eIYwu2teEKHLHrabIZkJWw.roa (hash: XbM05VStZazqLzFaHm9tyYba1eH2G3CcfziDsh45rsc=)
4: cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa (hash: GdluFLbgNrS7xoyapuqIK4cx1yZ3FPC1FpSx8lT9u+Y=)
5: jCdWeScDFXpWXYVASAbWW6Vizq0.roa (hash: 0snKT5LdHK0wV53UVPxEtQMU5HqJbqkJ3jy1nr8IbbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:59:15:5a:6a:54:bf:87:b6:19:00:5d:cc:dc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Jun 28 18:01:13 2025 GMT
Not After : Jun 29 18:01:13 2025 GMT
Subject: CN=a6f40fbfc11fd2c5f20518598e08c03d29c25908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e6:06:cf:5d:84:8e:11:50:d2:72:27:0c:da:
67:ce:f6:62:78:72:c6:61:f4:d2:02:1d:f1:87:1c:
a8:5c:60:b2:17:03:4d:38:44:9b:5c:8c:4c:3b:8d:
06:be:38:68:cc:50:d5:b3:0f:60:af:f9:95:63:38:
f9:90:f2:9b:1b:91:4c:e1:92:c7:af:70:5a:e5:30:
e8:83:2b:02:b7:4e:c1:59:7f:e8:0f:73:e9:48:78:
36:82:b1:8a:e1:97:13:c6:a0:1f:d2:64:63:fe:2c:
c3:78:35:96:02:2f:6f:13:1b:68:62:2a:79:78:73:
e7:c9:37:52:43:31:20:49:ef:66:20:18:56:66:35:
fa:83:50:30:5a:22:fe:9f:14:f0:af:6c:2a:3f:03:
87:ba:74:62:1c:7b:76:ff:6b:8b:26:97:e7:07:03:
14:c1:86:7c:4d:49:7d:9e:f1:38:85:3a:97:9d:0b:
97:f3:ba:3b:15:6a:94:bd:c4:c1:ff:a5:df:aa:73:
c7:8d:e3:7b:26:53:0d:e2:8b:eb:56:cb:c0:0c:3c:
16:e1:71:0d:d1:20:17:15:e5:81:ac:2e:59:d8:7c:
d8:da:d4:37:42:c9:f2:11:d8:47:97:88:d1:af:e2:
ae:d4:83:c3:27:d2:53:54:86:84:81:cd:b5:0f:3b:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:0F:BF:C1:1F:D2:C5:F2:05:18:59:8E:08:C0:3D:29:C2:59:08
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:92:b3:99:81:0b:9b:48:79:8b:35:9b:10:b0:e9:18:bf:c6:
d0:fa:00:7d:b7:64:e7:3c:28:05:17:43:41:57:56:c4:9f:30:
e5:ea:0f:26:b4:50:d9:5f:cb:0a:80:46:9d:55:2e:17:d1:58:
40:4b:cd:78:9e:f3:14:49:09:2c:7e:f0:bb:87:65:7b:97:f9:
ed:83:7c:00:28:c2:80:98:b9:7e:5a:68:e6:18:63:e6:21:d5:
dc:cb:06:da:2d:b5:ba:03:b0:ec:cd:17:eb:d6:2c:dc:1e:13:
42:96:f0:b5:96:51:07:d5:9f:45:2f:a4:10:08:8f:cc:82:ef:
fc:d2:fa:cc:46:b2:9b:20:5a:b3:3a:ec:f7:8a:f5:76:8b:64:
b3:bf:78:5a:78:ee:b2:9f:c7:4e:24:de:95:05:b4:a2:9b:64:
fb:cc:2c:37:f2:c9:95:4d:34:84:42:2b:44:e0:c5:7d:9a:8e:
15:9e:de:27:36:62:84:bd:93:8f:2c:c1:b1:51:88:22:e9:01:
64:2c:9a:b6:fb:d2:40:6b:91:a8:70:d5:28:3e:dc:74:ac:c6:
bb:ba:c3:34:74:d6:8e:6b:1c:8b:0b:b2:e2:ba:e3:da:54:55:
83:f7:79:f0:79:c2:1a:85:20:99:5e:e4:01:cf:d3:23:cd:e9:
45:68:a9:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1kVWmpUv4e2GQBdzNycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjY5NGQ4YTM5OWEzYTY2ZjQ0MmVjNzIyOTVjNzU0YWNi
YmFkNDEwHhcNMjUwNjI4MTgwMTEzWhcNMjUwNjI5MTgwMTEzWjAzMTEwLwYDVQQD
EyhhNmY0MGZiZmMxMWZkMmM1ZjIwNTE4NTk4ZTA4YzAzZDI5YzI1OTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+YGz12EjhFQ0nInDNpnzvZieHLG
YfTSAh3xhxyoXGCyFwNNOESbXIxMO40GvjhozFDVsw9gr/mVYzj5kPKbG5FM4ZLH
r3Ba5TDogysCt07BWX/oD3PpSHg2grGK4ZcTxqAf0mRj/izDeDWWAi9vExtoYip5
eHPnyTdSQzEgSe9mIBhWZjX6g1AwWiL+nxTwr2wqPwOHunRiHHt2/2uLJpfnBwMU
wYZ8TUl9nvE4hTqXnQuX87o7FWqUvcTB/6XfqnPHjeN7JlMN4ovrVsvADDwW4XEN
0SAXFeWBrC5Z2HzY2tQ3QsnyEdhHl4jRr+Ku1IPDJ9JTVIaEgc21Dzv7GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb0D7/BH9LF8gUYWY4IwD0pwlkIMB8GA1UdIwQY
MBaAFEcmlNijmaOmb0QuxyKVx1Ssu61BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEt
MDYzYTA4ODFhNmQyLzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEtMDYzYTA4ODFhNmQy
LzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5KzmYEL
m0h5izWbELDpGL/G0PoAfbdk5zwoBRdDQVdWxJ8w5eoPJrRQ2V/LCoBGnVUuF9FY
QEvNeJ7zFEkJLH7wu4dle5f57YN8ACjCgJi5flpo5hhj5iHV3MsG2i21ugOw7M0X
69Ys3B4TQpbwtZZRB9WfRS+kEAiPzILv/NL6zEaymyBaszrs94r1dotks794Wnju
sp/HTiTelQW0optk+8wsN/LJlU00hEIrRODFfZqOFZ7eJzZihL2TjyzBsVGIIukB
ZCyatvvSQGuRqHDVKD7cdKzGu7rDNHTWjmsciwuy4rrj2lRVg/d58HnCGoUgmV7k
Ac/TI83pRWip/A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:36 2025 by rpki-client