Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: SsVMyF+ZFf13Po3fjwh/oNuGEPy0ftfaqB/N2U5Qmcw=
Subject key identifier: A7:2E:34:44:FC:08:B4:E1:83:19:BA:F5:96:54:79:62:C8:4D:9F:A1
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 0197B7454DE27102D522FD0891651FEDB31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:01 +0000
Manifest this update: Sat 28 Jun 2025 16:01:01 +0000
Manifest next update: Sun 29 Jun 2025 16:01:01 +0000
Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: 7OPy/7SOIfLoVFzIHwdB7U9EKz/CvyMKes8Ra71MU8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4d:e2:71:02:d5:22:fd:08:91:65:1f:ed:b3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Jun 28 16:01:01 2025 GMT
Not After : Jun 29 16:01:01 2025 GMT
Subject: CN=a72e3444fc08b4e18319baf596547962c84d9fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:c4:cc:a2:0b:7d:a1:0d:67:72:79:55:66:
bb:01:bc:3e:07:0c:79:22:f7:cb:99:9c:c2:be:1d:
5f:6a:5e:f1:e2:7e:8c:2c:78:13:dc:96:eb:f9:4c:
ac:3e:4f:bc:52:6d:50:c1:94:4b:ca:61:81:77:7a:
24:da:51:8f:18:9b:56:45:0f:17:66:bc:37:32:d9:
65:06:78:ff:ff:20:56:cb:60:36:1b:6d:f1:02:f3:
38:7b:bb:2d:26:c4:6c:c2:db:a8:a9:be:71:06:f2:
ef:6a:58:66:dd:db:b5:15:f9:55:f3:39:69:f8:be:
5c:ba:5e:d3:a1:76:81:bd:e4:32:22:c4:2a:c6:5d:
2f:1f:81:3b:78:ba:05:be:00:eb:1f:8c:87:14:99:
77:01:6d:6c:40:b1:16:72:f6:f6:67:52:7a:2f:2a:
8a:8e:b3:91:66:b5:e6:34:34:db:ec:99:35:89:13:
53:81:bf:56:8a:bd:19:8d:b0:09:af:39:34:ac:8e:
01:ff:6f:2f:8d:10:d0:87:c8:5b:b3:04:40:82:fa:
f6:99:01:d8:ee:49:77:10:3e:87:d1:f2:e3:c3:6c:
1e:f7:29:a3:ac:66:34:06:af:c5:fd:92:56:7e:c7:
12:2d:0d:21:30:f7:a7:00:4a:c6:69:14:5c:05:d7:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2E:34:44:FC:08:B4:E1:83:19:BA:F5:96:54:79:62:C8:4D:9F:A1
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:42:c2:e9:b1:d1:23:fe:0a:d1:1c:bd:53:42:8a:d6:56:ba:
52:d3:0c:00:2a:f7:14:e5:6e:bd:a6:07:19:ac:35:91:ae:ca:
94:cb:a8:09:03:2c:d9:fb:23:a1:15:03:ac:63:9c:84:83:23:
9e:4c:17:c8:fa:c8:d9:b9:78:d6:84:be:46:23:e0:e0:f1:9c:
ef:90:33:16:86:1a:01:07:76:a7:b3:60:c6:be:82:94:c8:b0:
2e:4c:50:4f:b0:40:6c:f4:a7:3d:33:ba:e4:69:2b:0b:52:42:
54:90:4c:a3:0d:99:94:90:d4:a6:79:7c:d8:de:43:47:5a:63:
31:13:59:19:89:9d:6c:6b:08:cc:55:79:6f:d6:50:49:52:a8:
60:af:bf:f2:d6:3a:02:59:8a:e4:99:22:f9:a7:17:7b:8d:66:
1d:4f:a2:79:bc:33:73:10:e4:08:f4:e7:fd:40:41:91:c7:a6:
ed:50:d7:a3:18:67:e2:22:86:93:e1:af:dd:c7:b0:c3:62:89:
5e:66:e5:20:c1:ee:91:33:f7:02:26:d7:8f:58:d3:e7:12:3b:
9a:5e:d5:d7:3d:48:a4:b5:ae:a0:45:b7:5f:ed:38:9d:1d:c3:
25:30:9e:e5:75:31:ad:bd:c3:b9:23:62:36:b2:5d:1d:e9:53:
de:60:8a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RU3icQLVIv0IkWUf7bMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5M2IwNjNmYzYzZThhMWFiYTFmNDMwYjJkMDc0ZGJlMjcw
YmUzOTUwHhcNMjUwNjI4MTYwMTAxWhcNMjUwNjI5MTYwMTAxWjAzMTEwLwYDVQQD
EyhhNzJlMzQ0NGZjMDhiNGUxODMxOWJhZjU5NjU0Nzk2MmM4NGQ5ZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsLEzKILfaENZ3J5VWa7Abw+Bwx5
IvfLmZzCvh1fal7x4n6MLHgT3Jbr+UysPk+8Um1QwZRLymGBd3ok2lGPGJtWRQ8X
Zrw3MtllBnj//yBWy2A2G23xAvM4e7stJsRswtuoqb5xBvLvalhm3du1FflV8zlp
+L5cul7ToXaBveQyIsQqxl0vH4E7eLoFvgDrH4yHFJl3AW1sQLEWcvb2Z1J6LyqK
jrORZrXmNDTb7Jk1iRNTgb9Wir0ZjbAJrzk0rI4B/28vjRDQh8hbswRAgvr2mQHY
7kl3ED6H0fLjw2we9ymjrGY0Bq/F/ZJWfscSLQ0hMPenAErGaRRcBdfG9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcuNET8CLThgxm69ZZUeWLITZ+hMB8GA1UdIwQY
MBaAFMk7Bj/GPooauh9DCy0HTb4nC+OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMt
OTQwYmM4MTkxNjU5LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMtOTQwYmM4MTkxNjU5
LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckLC6bHR
I/4K0Ry9U0KK1la6UtMMACr3FOVuvaYHGaw1ka7KlMuoCQMs2fsjoRUDrGOchIMj
nkwXyPrI2bl41oS+RiPg4PGc75AzFoYaAQd2p7Ngxr6ClMiwLkxQT7BAbPSnPTO6
5GkrC1JCVJBMow2ZlJDUpnl82N5DR1pjMRNZGYmdbGsIzFV5b9ZQSVKoYK+/8tY6
AlmK5Jki+acXe41mHU+iebwzcxDkCPTn/UBBkcem7VDXoxhn4iKGk+Gv3ceww2KJ
XmblIMHukTP3AibXj1jT5xI7ml7V1z1IpLWuoEW3X+04nR3DJTCe5XUxrb3DuSNi
NrJdHelT3mCKbA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:38 2025 by rpki-client