Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json)
Hash identifier: 9dPauibC228PPygwPKpCcpe/leHov3MzSdfcHViaW+k=
Subject key identifier: C3:9D:D4:F2:1C:FA:0C:07:B3:15:39:F3:95:4A:64:F7:55:A1:BC:49
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 0197B88FFA3475CA399FB8D70D520D06D40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 22:02:12 +0000
Manifest this update: Sat 28 Jun 2025 22:02:12 +0000
Manifest next update: Sun 29 Jun 2025 22:02:12 +0000
Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: DChVb7/NfRZWjxr5i7o7uDZtSm8A9vrSl4o0EsYe/Kc=)
2: doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa (hash: +MKv/V0IfbD2z8rIVhSAM4id+TCFCy9eVNZqs6dovHs=)
3: t9q3JQRIfHPbUTHA-7F2iigGH4c.roa (hash: s2L1muHfCT4EhX7O1DIS6+l6imOYfyQC+qFGEKmez7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:fa:34:75:ca:39:9f:b8:d7:0d:52:0d:06:d4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Jun 28 22:02:12 2025 GMT
Not After : Jun 29 22:02:12 2025 GMT
Subject: CN=c39dd4f21cfa0c07b31539f3954a64f755a1bc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:24:77:5d:8a:37:64:4f:50:c4:20:50:94:
44:6a:87:41:5d:c0:c7:a7:ff:fb:85:05:21:2f:81:
a4:db:22:2d:55:86:5f:54:9c:ce:6f:b7:57:7e:70:
f9:19:4e:7e:fc:4b:41:a6:8f:f6:63:0d:ab:48:5b:
1f:81:2a:27:b8:70:8c:92:c3:dc:c5:7b:cd:58:5a:
8e:ad:6b:5e:ee:c5:97:36:6d:a3:bd:0f:8f:55:48:
2a:0f:d9:2e:c7:d4:0f:f5:21:51:61:eb:52:6e:28:
33:f1:3e:37:a5:27:0f:4f:5b:fc:b5:ce:ca:8f:f9:
f0:fb:12:ab:9d:01:4e:3a:e2:96:ff:3e:d1:81:79:
d7:07:23:a2:4d:cc:f9:96:1b:64:39:b0:c9:b1:ee:
5b:2d:86:41:33:da:a2:51:1a:2b:4e:6e:fe:69:88:
8a:8e:3b:20:67:51:6f:25:40:2d:b6:79:fa:cc:2c:
d3:02:d8:77:e9:5e:d8:d6:a7:82:6a:33:b7:fe:5d:
84:71:0a:0b:76:46:d8:93:8e:07:e0:27:5f:f1:61:
11:26:95:00:27:b6:af:75:34:1a:79:d4:5c:cd:0b:
cb:df:e6:80:d7:ab:ba:a7:3c:e1:ab:b9:86:f6:7c:
f0:7e:af:9f:5d:64:77:3c:b1:4b:b5:13:ed:a3:f7:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9D:D4:F2:1C:FA:0C:07:B3:15:39:F3:95:4A:64:F7:55:A1:BC:49
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bb:84:27:83:21:5a:4c:6d:84:ff:7c:63:96:80:39:fe:07:
ba:a3:00:8f:78:a5:b1:ec:79:56:92:7c:15:d9:1f:79:e9:a5:
d4:13:2f:b6:4b:8d:61:71:cf:7b:f5:64:b3:49:ee:75:fe:f2:
1b:bf:22:84:ee:42:ef:23:05:d6:5e:13:fb:a2:86:e6:e8:73:
3c:d8:70:0c:b2:bc:fa:b9:53:d6:e1:86:cb:a4:a6:b1:f1:ac:
ba:0f:79:90:7b:fd:62:00:ff:ab:95:20:0d:7c:82:65:a8:3e:
9e:a0:f7:a6:9c:3e:6f:f2:50:02:df:8b:16:64:e6:36:3b:7c:
35:86:25:05:f8:be:80:d1:fd:bc:ab:5b:7a:e2:90:76:9b:56:
3e:b2:ce:36:ec:2f:79:9e:85:28:c1:a6:3d:b1:b6:46:52:b5:
9e:c1:b6:7d:e8:83:70:31:12:19:25:f2:e1:85:52:2e:bd:34:
bf:4e:4d:a4:de:f8:1e:44:b4:3e:fd:84:5f:23:d0:77:dc:01:
56:2b:8e:23:3d:9f:b1:c5:57:0f:22:b9:6a:45:b5:85:e9:d0:
ee:94:2f:bb:ba:33:11:4c:e7:c3:57:84:a4:03:9b:1e:79:99:
6f:32:cb:23:da:b8:de:43:0c:47:22:8f:f5:7a:61:45:72:43:
ff:ad:e9:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j/o0dco5n7jXDVINBtQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNzI1MmViYmIzMzQ4NGFkY2VjNzQwNWFkZWE0ZGUwOGEw
YWZiMDQwHhcNMjUwNjI4MjIwMjEyWhcNMjUwNjI5MjIwMjEyWjAzMTEwLwYDVQQD
EyhjMzlkZDRmMjFjZmEwYzA3YjMxNTM5ZjM5NTRhNjRmNzU1YTFiYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2wkd12KN2RPUMQgUJREaodBXcDH
p//7hQUhL4Gk2yItVYZfVJzOb7dXfnD5GU5+/EtBpo/2Yw2rSFsfgSonuHCMksPc
xXvNWFqOrWte7sWXNm2jvQ+PVUgqD9kux9QP9SFRYetSbigz8T43pScPT1v8tc7K
j/nw+xKrnQFOOuKW/z7RgXnXByOiTcz5lhtkObDJse5bLYZBM9qiURorTm7+aYiK
jjsgZ1FvJUAttnn6zCzTAth36V7Y1qeCajO3/l2EcQoLdkbYk44H4Cdf8WERJpUA
J7avdTQaedRczQvL3+aA16u6pzzhq7mG9nzwfq+fXWR3PLFLtRPto/dO1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOd1PIc+gwHsxU585VKZPdVobxJMB8GA1UdIwQY
MBaAFGFyUuu7M0hK3Ox0Ba3qTeCKCvsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMt
NjYzNWRlYmMzOTVjLzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMtNjYzNWRlYmMzOTVj
LzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7uEJ4Mh
WkxthP98Y5aAOf4HuqMAj3ilsex5VpJ8Fdkfeeml1BMvtkuNYXHPe/Vks0nudf7y
G78ihO5C7yMF1l4T+6KG5uhzPNhwDLK8+rlT1uGGy6SmsfGsug95kHv9YgD/q5Ug
DXyCZag+nqD3ppw+b/JQAt+LFmTmNjt8NYYlBfi+gNH9vKtbeuKQdptWPrLONuwv
eZ6FKMGmPbG2RlK1nsG2feiDcDESGSXy4YVSLr00v05NpN74HkS0Pv2EXyPQd9wB
ViuOIz2fscVXDyK5akW1henQ7pQvu7ozEUznw1eEpAObHnmZbzLLI9q43kMMRyKP
9XphRXJD/63p0w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:12:50 2025 by rpki-client