Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier: DegFzW71zqapB6MeRWXHkq++VbUKWTIQ+EaZ8pyI018=
Subject key identifier: F2:AE:30:5A:CE:A1:D5:CB:F5:30:19:79:D6:FC:34:2B:6A:32:F5:BC
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 0197B6A0F5496E670C449DE1EDC292E9903C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number: 14E5
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: 20xXcXjlY0YDmKjKQ/ZcK0xpfVIMjC74yLfg1kwFgRM=)
2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f5:49:6e:67:0c:44:9d:e1:ed:c2:92:e9:90:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=f2ae305acea1d5cbf5301979d6fc342b6a32f5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:ae:8e:c3:f8:34:91:f2:c0:f6:f7:6e:27:
27:8e:0b:47:e6:d1:a9:90:85:36:56:43:a2:d9:fb:
21:ba:b9:64:c8:0d:b0:34:45:d5:49:46:ee:78:f1:
6e:58:f4:93:c8:2c:4e:6c:2e:fa:c2:b7:d2:f2:1c:
45:49:43:01:e8:9a:4b:0b:7d:b3:c6:60:55:8e:67:
7e:ce:fa:30:70:83:6e:69:c6:59:16:02:2c:64:9a:
29:49:b4:2b:83:a5:17:95:65:d2:39:0d:3d:a2:db:
1a:46:30:4b:f9:28:bb:0c:2f:97:a1:5c:d8:a3:82:
02:2b:29:b2:89:64:83:bd:7f:6f:80:fe:6b:12:4a:
e3:76:49:b3:cf:91:67:e1:f0:60:93:bb:62:fc:d8:
b9:cc:83:c3:f3:e0:d2:02:37:04:d9:9f:1c:e1:44:
2b:67:82:68:2b:44:13:b8:0b:2d:de:23:e8:e1:ea:
20:c9:84:47:bf:81:06:40:d1:5b:88:4f:ef:96:11:
09:93:d5:99:64:c4:52:f0:80:52:94:38:06:29:85:
20:42:4e:f1:58:f9:ad:6a:61:51:9a:f8:71:43:ac:
94:3d:ee:2d:5f:bc:e5:d0:9d:d9:25:59:d7:3e:0c:
e7:e0:35:83:93:fa:8a:16:c3:08:99:72:33:4f:c7:
db:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:30:5A:CE:A1:D5:CB:F5:30:19:79:D6:FC:34:2B:6A:32:F5:BC
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0c:bd:af:e2:08:d6:03:c6:a1:9a:dc:d5:13:bc:ad:7b:0b:
2e:e0:01:fb:e9:2d:52:63:96:f5:6b:44:d1:4c:66:af:9c:b3:
71:fc:e4:0a:47:36:10:c7:1f:11:64:b0:2a:e9:d3:d6:88:24:
5d:16:80:05:bf:9d:62:e1:28:fa:c9:20:d0:86:42:8b:30:9e:
7e:79:c0:fb:ce:25:9d:3e:b1:41:77:4a:06:d5:87:bc:19:f2:
94:e3:36:4e:42:67:b5:48:30:be:b6:3e:7d:ed:eb:d0:ee:49:
52:18:27:17:62:52:ea:c7:eb:17:1f:89:d2:51:5c:97:7d:ba:
b6:7b:a2:0a:52:98:db:49:7f:50:db:f1:68:ef:79:04:7e:12:
87:1d:d2:ea:dd:4c:1d:d3:03:54:81:40:4c:f6:62:77:ed:c9:
d0:97:34:ee:31:90:2f:22:b4:f3:3b:72:fe:6c:ab:fc:aa:43:
d1:19:38:32:f6:83:19:f3:51:9a:0c:70:54:65:e1:5b:19:71:
7c:5d:1a:8f:fe:f9:38:b1:ee:7f:eb:70:00:33:5b:d9:29:a3:
ae:60:1b:fe:8d:76:29:26:f8:28:d5:3a:2b:05:51:5e:bc:c2:
eb:3b:c8:31:e0:8c:eb:e0:b4:4b:6c:ab:d0:50:38:95:30:18:
d2:fb:83:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oPVJbmcMRJ3h7cKS6ZA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNGM1M2FiZDBkZGE2OGNhNjdmYzgwNjZiYzE2NWEyYjMy
ZGM4MmIwHhcNMjUwNjI4MTMwMTMxWhcNMjUwNjI5MTMwMTMxWjAzMTEwLwYDVQQD
EyhmMmFlMzA1YWNlYTFkNWNiZjUzMDE5NzlkNmZjMzQyYjZhMzJmNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqmujsP4NJHywPb3bicnjgtH5tGp
kIU2VkOi2fshurlkyA2wNEXVSUbuePFuWPSTyCxObC76wrfS8hxFSUMB6JpLC32z
xmBVjmd+zvowcINuacZZFgIsZJopSbQrg6UXlWXSOQ09otsaRjBL+Si7DC+XoVzY
o4ICKymyiWSDvX9vgP5rEkrjdkmzz5Fn4fBgk7ti/Ni5zIPD8+DSAjcE2Z8c4UQr
Z4JoK0QTuAst3iPo4eogyYRHv4EGQNFbiE/vlhEJk9WZZMRS8IBSlDgGKYUgQk7x
WPmtamFRmvhxQ6yUPe4tX7zl0J3ZJVnXPgzn4DWDk/qKFsMImXIzT8fb6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKuMFrOodXL9TAZedb8NCtqMvW8MB8GA1UdIwQY
MBaAFGNMU6vQ3aaMpn/IBmvBZaKzLcgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZTk2YTMtY2U4OS00NDJlLWJjNDgt
YWRkZWZhNjkxMWI5LzEvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZTk2YTMtY2U4OS00NDJlLWJjNDgtYWRkZWZhNjkxMWI5
LzEvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagy9r+II
1gPGoZrc1RO8rXsLLuAB++ktUmOW9WtE0Uxmr5yzcfzkCkc2EMcfEWSwKunT1ogk
XRaABb+dYuEo+skg0IZCizCefnnA+84lnT6xQXdKBtWHvBnylOM2TkJntUgwvrY+
fe3r0O5JUhgnF2JS6sfrFx+J0lFcl326tnuiClKY20l/UNvxaO95BH4Shx3S6t1M
HdMDVIFATPZid+3J0Jc07jGQLyK08zty/myr/KpD0Rk4MvaDGfNRmgxwVGXhWxlx
fF0aj/75OLHuf+twADNb2SmjrmAb/o12KSb4KNU6KwVRXrzC6zvIMeCM6+C0S2yr
0FA4lTAY0vuDUA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:22 2025 by rpki-client