Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
File: rYY6WJMusYMjlBahz2ao_8POchU.mft (raw, json)
Hash identifier: BNwdvKFGSly3b9KosuQF5KpGd9urnvdtwj+00/8F0gA=
Subject key identifier: 9F:45:95:EE:C8:71:62:F7:AB:17:B6:C2:F3:E1:D2:78:9F:4C:9D:52
Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
Certificate issuer: /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Certificate serial: 0197B77C5B30ABA931466C056AA925157641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
Manifest number: 0CA7
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: NsCamS0MlFkmbAx5_LAOWrtBals.roa (hash: LDrv3G809jHIGwEDwg2A1Kbn0Oo37yQBk0cRSClCqYU=)
2: rYY6WJMusYMjlBahz2ao_8POchU.crl (hash: i8tkpRATPs00kGgq4gDrsXOMtWO/5f+B4gqYo5lpcHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5b:30:ab:a9:31:46:6c:05:6a:a9:25:15:76:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=9f4595eec87162f7ab17b6c2f3e1d2789f4c9d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:b7:24:09:02:a9:05:57:a9:7b:69:93:3e:
07:d4:10:fb:a6:f3:48:8e:f6:87:30:4e:a3:0b:bc:
d3:5a:85:1d:0e:e6:cb:b3:b6:14:91:60:c5:e0:99:
5a:9f:71:f6:30:dd:5e:f5:03:33:de:a1:dd:20:e7:
7b:6b:b5:40:25:bd:c8:ec:99:64:4e:aa:32:fa:4c:
42:69:2e:95:5a:54:4e:18:45:32:ee:c7:10:72:7c:
44:18:6d:92:54:22:09:d4:04:bc:3d:dc:08:1f:c1:
a5:5e:1c:6e:f4:bc:6c:fe:eb:4f:62:05:c7:8d:aa:
88:fc:af:df:0e:c8:4c:67:a3:7a:15:5b:20:a7:45:
b8:fe:72:a2:3d:4c:20:ff:4f:86:21:bd:f1:7f:f7:
50:f2:22:fb:f3:ce:a7:9f:c2:60:57:ab:c1:46:3c:
85:e6:ae:49:5a:ac:2e:81:ab:d1:07:2c:31:3f:c2:
39:7a:b0:f0:26:aa:9b:f0:b0:27:8f:d5:bd:93:1c:
d4:46:45:7e:7a:eb:e0:6f:f8:8b:f4:7d:35:1c:05:
c2:e5:e8:2e:23:a3:ff:42:df:51:95:71:df:7c:68:
bb:ba:1e:3a:34:05:1e:99:61:02:3a:00:3e:dc:a6:
b6:42:1b:4f:dc:df:d3:5a:b5:b9:3b:c2:3f:41:0d:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:95:EE:C8:71:62:F7:AB:17:B6:C2:F3:E1:D2:78:9F:4C:9D:52
X509v3 Authority Key Identifier:
keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:92:70:1e:e7:2c:95:8c:48:49:b3:35:c3:f5:5f:59:bc:da:
cf:b5:70:6a:60:f0:e6:a3:c2:b1:f6:32:47:e6:04:56:8b:a2:
84:2b:72:ca:b9:d9:2b:0a:63:4c:7f:45:3c:fa:e0:0f:3e:2b:
81:7a:cd:0f:0a:54:8f:96:04:23:b2:94:56:2c:a8:b2:10:fc:
e0:e8:0e:6f:f3:6b:99:94:eb:a3:1e:c8:53:f2:cd:cd:d5:38:
75:2f:ac:97:b5:8b:a7:07:8d:c2:35:91:97:57:f7:e2:f8:7c:
b4:72:92:41:b7:be:34:32:b0:4a:41:07:4e:60:cc:e1:dd:3f:
ef:4c:3b:cc:7a:12:a1:60:04:3f:ae:18:ed:9b:b9:88:f3:34:
cb:cb:ef:8d:f6:05:d5:5b:2d:e9:fe:e8:67:5b:8a:3a:ae:2c:
84:d4:b5:43:60:34:2b:77:92:c9:86:1e:c2:8c:28:45:9f:ae:
0b:66:cc:59:fe:9d:4d:65:62:b3:5d:7b:e7:8a:91:2c:72:c4:
18:fa:0b:a1:04:80:40:74:5c:8d:3b:f3:36:5e:06:7b:03:26:
76:68:2f:bb:77:7c:b5:a0:36:6d:98:a0:94:e6:59:37:55:32:
40:41:99:6e:52:22:f2:f9:da:34:7e:08:ec:17:45:dc:18:4b:
3b:26:a9:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fFswq6kxRmwFaqklFXZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODYzYTU4OTMyZWIxODMyMzk0MTZhMWNmNjZhOGZmYzNj
ZTcyMTUwHhcNMjUwNjI4MTcwMTA5WhcNMjUwNjI5MTcwMTA5WjAzMTEwLwYDVQQD
Eyg5ZjQ1OTVlZWM4NzE2MmY3YWIxN2I2YzJmM2UxZDI3ODlmNGM5ZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEW3JAkCqQVXqXtpkz4H1BD7pvNI
jvaHME6jC7zTWoUdDubLs7YUkWDF4Jlan3H2MN1e9QMz3qHdIOd7a7VAJb3I7Jlk
Tqoy+kxCaS6VWlROGEUy7scQcnxEGG2SVCIJ1AS8PdwIH8GlXhxu9Lxs/utPYgXH
jaqI/K/fDshMZ6N6FVsgp0W4/nKiPUwg/0+GIb3xf/dQ8iL7886nn8JgV6vBRjyF
5q5JWqwugavRBywxP8I5erDwJqqb8LAnj9W9kxzURkV+euvgb/iL9H01HAXC5egu
I6P/Qt9RlXHffGi7uh46NAUemWECOgA+3Ka2QhtP3N/TWrW5O8I/QQ0dXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9Fle7IcWL3qxe2wvPh0nifTJ1SMB8GA1UdIwQY
MBaAFK2GOliTLrGDI5QWoc9mqP/DznIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC82YWQ2NzUtYzQ5Yi00NzhhLWJhNjAt
M2I4ZTU2MWRjMjc2LzEvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC82YWQ2NzUtYzQ5Yi00NzhhLWJhNjAtM2I4ZTU2MWRjMjc2
LzEvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJJwHucs
lYxISbM1w/VfWbzaz7VwamDw5qPCsfYyR+YEVouihCtyyrnZKwpjTH9FPPrgDz4r
gXrNDwpUj5YEI7KUViyoshD84OgOb/NrmZTrox7IU/LNzdU4dS+sl7WLpweNwjWR
l1f34vh8tHKSQbe+NDKwSkEHTmDM4d0/70w7zHoSoWAEP64Y7Zu5iPM0y8vvjfYF
1Vst6f7oZ1uKOq4shNS1Q2A0K3eSyYYewowoRZ+uC2bMWf6dTWVis11754qRLHLE
GPoLoQSAQHRcjTvzNl4GewMmdmgvu3d8taA2bZiglOZZN1UyQEGZblIi8vnaNH4I
7BdF3BhLOyapNg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:23 2025 by rpki-client