Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
File: YddkoENCcsEymumSiNCSvD7yIo8.mft (raw, json)
Hash identifier: yApTWMHuo2TxJaNDc/Au8xxTyTCpCK1aB6Od2bNR0d4=
Subject key identifier: 35:23:3E:22:5B:21:A0:FC:AD:AD:27:F5:12:72:7A:E2:67:B3:55:90
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Certificate issuer: /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial: 0197B6D7A44053477BC98FEB3AD693047776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
Manifest number: 150D
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: REqtYQmRREKLJc9dQnOchbRCd38.roa (hash: CsFmG2TMLbA2Znbnw8r80UkQYTzgJ0VzpR3kBwBlHwY=)
2: YddkoENCcsEymumSiNCSvD7yIo8.crl (hash: 7njumg/Ckv/4augFdBtoMir2Tc8LTRayarcs236SwGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a4:40:53:47:7b:c9:8f:eb:3a:d6:93:04:77:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=35233e225b21a0fcadad27f512727ae267b35590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:a1:67:bc:2a:26:d5:36:69:a5:18:e7:a7:
cc:2a:88:bd:26:e8:ce:e6:74:a3:52:e4:cb:44:49:
7e:5a:f8:23:f1:03:41:12:f2:4a:4d:68:4f:90:4d:
c7:f4:eb:fe:4e:6c:6d:1a:80:9d:6f:2e:f6:34:19:
1c:29:28:9c:9d:98:8b:24:7f:22:3c:c6:b9:2d:83:
ad:fe:d6:4f:4e:f9:88:52:8a:9c:07:96:8a:4d:27:
0f:04:e9:6f:fa:f2:b5:eb:c8:34:cb:29:3d:62:d6:
2f:8f:8c:c3:58:dd:6e:2b:f2:44:c8:13:be:9b:a7:
22:65:d1:20:54:89:f1:06:96:0e:fb:65:1c:e6:22:
12:f6:5d:fa:a6:2d:ff:80:72:04:13:be:e4:3f:4d:
a0:b9:f9:ba:e9:f5:00:76:9f:d3:a9:e4:da:55:15:
d2:4d:b8:bf:e4:3e:11:7f:15:6b:02:45:f6:9a:58:
d9:0b:71:62:04:2f:3e:83:52:66:ce:59:9c:4f:b0:
3d:8e:48:69:0f:d5:80:8a:88:8a:fe:c6:46:26:22:
ec:c6:45:ef:82:39:05:36:d3:bf:18:ea:90:6c:16:
e7:b8:56:3c:e9:c8:c7:42:b0:b9:e0:fb:7b:9c:78:
d8:78:3a:38:f5:93:57:66:03:b6:95:a8:24:ae:44:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:3E:22:5B:21:A0:FC:AD:AD:27:F5:12:72:7A:E2:67:B3:55:90
X509v3 Authority Key Identifier:
keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:c8:bd:a6:46:f1:4c:1f:58:45:4d:2c:c0:b3:7c:ff:ec:36:
b4:82:dd:bb:8c:dd:b4:b3:8f:cd:79:09:55:cc:6f:30:3a:d1:
fb:fd:24:18:c2:32:c6:d1:f4:61:60:57:23:09:03:eb:85:58:
f5:a7:48:52:a9:87:6c:0e:60:04:56:db:eb:cc:37:18:28:f8:
b9:61:a8:bf:e5:13:c6:1c:96:5a:0f:ad:e4:8b:66:a7:60:69:
e4:ed:82:9f:08:bb:c3:71:b3:a3:02:ce:f4:7a:24:c7:f2:06:
c1:62:7f:00:a1:5a:77:b8:42:ac:54:09:f3:e8:0d:a8:ce:15:
75:07:a5:d6:d0:53:2d:d2:84:f4:4b:34:6c:79:53:60:41:17:
f1:fb:e5:b9:74:a2:39:4b:46:96:27:74:24:76:f5:e5:e8:db:
76:9e:ec:ae:23:f4:1f:9b:c3:f6:a3:d7:13:e9:1d:72:60:71:
84:57:5f:6f:a6:d1:01:bd:18:03:15:91:0f:cd:01:ee:01:e0:
13:79:80:42:15:76:e2:94:7e:6d:ab:f3:ef:96:70:e3:a6:67:
48:a6:9c:44:c5:3b:bb:ad:05:8d:7a:6c:56:8a:c6:46:fb:13:
9f:1f:8c:12:15:34:a8:7d:d9:7b:a5:da:e7:3e:81:9a:45:56:
2a:86:e0:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216RAU0d7yY/rOtaTBHd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDc2NGEwNDM0MjcyYzEzMjlhZTk5Mjg4ZDA5MmJjM2Vm
MjIyOGYwHhcNMjUwNjI4MTQwMTE0WhcNMjUwNjI5MTQwMTE0WjAzMTEwLwYDVQQD
EygzNTIzM2UyMjViMjFhMGZjYWRhZDI3ZjUxMjcyN2FlMjY3YjM1NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pShZ7wqJtU2aaUY56fMKoi9JujO
5nSjUuTLREl+Wvgj8QNBEvJKTWhPkE3H9Ov+TmxtGoCdby72NBkcKSicnZiLJH8i
PMa5LYOt/tZPTvmIUoqcB5aKTScPBOlv+vK168g0yyk9YtYvj4zDWN1uK/JEyBO+
m6ciZdEgVInxBpYO+2Uc5iIS9l36pi3/gHIEE77kP02gufm66fUAdp/TqeTaVRXS
Tbi/5D4RfxVrAkX2mljZC3FiBC8+g1JmzlmcT7A9jkhpD9WAioiK/sZGJiLsxkXv
gjkFNtO/GOqQbBbnuFY86cjHQrC54Pt7nHjYeDo49ZNXZgO2lagkrkSHOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUjPiJbIaD8ra0n9RJyeuJns1WQMB8GA1UdIwQY
MBaAFGHXZKBDQnLBMprpkojQkrw+8iKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYt
MmM3ZWY5ZmYwM2Y1LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYtMmM3ZWY5ZmYwM2Y1
LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7Mi9pkbx
TB9YRU0swLN8/+w2tILdu4zdtLOPzXkJVcxvMDrR+/0kGMIyxtH0YWBXIwkD64VY
9adIUqmHbA5gBFbb68w3GCj4uWGov+UTxhyWWg+t5Itmp2Bp5O2Cnwi7w3GzowLO
9Hokx/IGwWJ/AKFad7hCrFQJ8+gNqM4VdQel1tBTLdKE9Es0bHlTYEEX8fvluXSi
OUtGlid0JHb15ejbdp7sriP0H5vD9qPXE+kdcmBxhFdfb6bRAb0YAxWRD80B7gHg
E3mAQhV24pR+bavz75Zw46ZnSKacRMU7u60FjXpsVorGRvsTnx+MEhU0qH3Ze6Xa
5z6BmkVWKobgtQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:08 2025 by rpki-client