Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: HwmGxNyJ6hk/3VAcj+1LLHqf3qNZn3LOT3pEfrBBTTo=
Subject key identifier: C5:54:62:B5:E9:83:97:E3:EC:94:73:F9:F1:F8:DD:48:56:A8:0F:A4
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 0197B96A9D8D4D86A4B951A5FA4B4F8144B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0BC5
Signing time: Sun 29 Jun 2025 02:01:01 +0000
Manifest this update: Sun 29 Jun 2025 02:01:01 +0000
Manifest next update: Mon 30 Jun 2025 02:01:01 +0000
Files and hashes: 1: YJQs11xqugWoEBWoZ3oCcK3sbS4.roa (hash: 9zEKu1Xz7UUzUVy1uRJShcboHyDK7OhgJL2RQwhgJQU=)
2: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: azL+XmazSaNOZ2XBTMAqJX4sLi2/6otQB/DMC+gBHVI=)
3: kVcJYJ6Q63B4lKtQ5vKu6QeoxFU.roa (hash: zBFFe6GTU3Rj12iW+TDrkgjiFgVWN+v43RC3XAW3nrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:9d:8d:4d:86:a4:b9:51:a5:fa:4b:4f:81:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jun 29 02:01:01 2025 GMT
Not After : Jun 30 02:01:01 2025 GMT
Subject: CN=c55462b5e98397e3ec9473f9f1f8dd4856a80fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:e2:18:99:90:b0:d5:21:dd:49:9f:b7:40:
bf:2e:07:77:ab:04:f1:13:d8:db:f7:7d:9e:75:42:
92:5a:c7:78:da:7d:c6:50:ea:92:f1:ab:a8:fc:11:
30:00:9d:94:cd:c3:a3:33:f2:c2:af:3f:f7:7d:ef:
5e:f7:c5:58:3f:18:b9:11:dc:9e:48:e3:b8:90:f2:
5d:a7:b6:bf:62:19:0a:52:19:4b:e7:7a:b9:05:37:
ea:dd:34:a5:69:87:69:14:9a:86:2a:10:d7:4b:8d:
1c:10:02:fa:7e:c6:89:e8:05:27:0d:06:64:d8:41:
d9:c9:c6:b7:8c:87:7b:4a:48:4b:dd:8d:ea:f9:5e:
76:e9:b1:ff:fc:a9:c2:19:64:b5:12:a0:26:a4:38:
0f:4c:b8:30:d6:9d:61:44:96:bb:fd:2f:1b:c5:8a:
ef:2d:1a:2a:73:3e:a4:77:f0:7f:c7:ea:6d:15:0b:
d0:28:62:5f:85:a5:d2:1c:5b:e8:70:cc:da:94:9c:
d3:de:0f:05:85:5e:d1:8a:41:b2:2b:da:df:92:e8:
ce:24:56:48:f4:53:5e:1f:d4:c4:3e:8a:99:46:15:
65:dd:a3:9d:cc:f2:80:0b:1d:5a:be:c3:70:3d:ed:
7a:31:00:56:b5:66:30:19:ca:84:81:35:02:f5:64:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:54:62:B5:E9:83:97:E3:EC:94:73:F9:F1:F8:DD:48:56:A8:0F:A4
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f5:19:59:47:44:d2:42:0d:ed:43:d7:40:f6:61:12:d2:f7:
14:af:20:ae:8d:6b:a7:5a:35:d3:21:8f:c5:7b:49:f9:bf:91:
f3:86:90:26:b1:fc:e0:1c:ff:ad:3b:ef:b6:d1:2b:a0:50:71:
ac:0d:1d:8a:c2:29:2a:fe:0b:04:7a:2c:4d:2a:ac:1f:59:84:
30:03:7b:9b:06:8d:2c:52:e0:eb:bc:e2:99:e1:37:c5:b7:e1:
72:32:01:cb:3f:8a:95:a9:38:ec:3b:3c:aa:c8:18:87:f1:68:
34:70:e1:e9:d5:fd:22:58:d2:58:92:4b:cb:37:c7:2a:2f:7d:
35:b3:1a:90:be:0f:23:09:70:1d:8d:f6:0e:74:69:39:1b:be:
c7:6a:b3:15:a6:57:a1:14:8e:a2:65:c9:ac:bd:da:da:6f:9f:
cd:88:d8:ed:c8:f1:14:2f:16:f8:d0:75:12:6d:1e:8d:70:f8:
4e:70:46:4d:3a:85:d5:b2:46:d0:f9:02:fc:b1:11:52:d5:cb:
ce:d7:d5:76:22:b1:67:b9:9f:d6:11:76:10:46:f3:c6:08:cd:
12:bd:9a:af:57:5e:92:88:00:30:aa:20:5f:5d:ea:2a:4c:b8:
5c:73:ac:60:1d:0c:cb:64:31:f0:4a:1e:03:9f:9a:a1:86:10:
04:c6:f9:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5ap2NTYakuVGl+ktPgUSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh
YWNhN2IwHhcNMjUwNjI5MDIwMTAxWhcNMjUwNjMwMDIwMTAxWjAzMTEwLwYDVQQD
EyhjNTU0NjJiNWU5ODM5N2UzZWM5NDczZjlmMWY4ZGQ0ODU2YTgwZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEviGJmQsNUh3Umft0C/Lgd3qwTx
E9jb932edUKSWsd42n3GUOqS8auo/BEwAJ2UzcOjM/LCrz/3fe9e98VYPxi5Edye
SOO4kPJdp7a/YhkKUhlL53q5BTfq3TSlaYdpFJqGKhDXS40cEAL6fsaJ6AUnDQZk
2EHZyca3jId7SkhL3Y3q+V526bH//KnCGWS1EqAmpDgPTLgw1p1hRJa7/S8bxYrv
LRoqcz6kd/B/x+ptFQvQKGJfhaXSHFvocMzalJzT3g8FhV7RikGyK9rfkujOJFZI
9FNeH9TEPoqZRhVl3aOdzPKACx1avsNwPe16MQBWtWYwGcqEgTUC9WQ3pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVUYrXpg5fj7JRz+fH43UhWqA+kMB8GA1UdIwQY
MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt
ODFjOGNlNzUwMTI0LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0
LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfUZWUdE
0kIN7UPXQPZhEtL3FK8gro1rp1o10yGPxXtJ+b+R84aQJrH84Bz/rTvvttEroFBx
rA0disIpKv4LBHosTSqsH1mEMAN7mwaNLFLg67zimeE3xbfhcjIByz+Klak47Ds8
qsgYh/FoNHDh6dX9IljSWJJLyzfHKi99NbMakL4PIwlwHY32DnRpORu+x2qzFaZX
oRSOomXJrL3a2m+fzYjY7cjxFC8W+NB1Em0ejXD4TnBGTTqF1bJG0PkC/LERUtXL
ztfVdiKxZ7mf1hF2EEbzxgjNEr2ar1dekogAMKogX13qKky4XHOsYB0My2Qx8Eoe
A5+aoYYQBMb5VQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:18:55 2025 by rpki-client