Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: TreCbqtsALS1OW8Vm2gBiMEu2e8YpogSjaM+djnV1w0=
Subject key identifier: A3:99:56:C5:6A:85:6E:BF:51:25:2C:90:5E:A5:E3:BC:4B:69:FF:49
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 0197B6D7AA70C9C0ECCE4424B8BF2E677295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0BF8
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: ZrKJn66VC13XHO+V1xfEUIusWaQvkEOBlRXXMIEFmBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:aa:70:c9:c0:ec:ce:44:24:b8:bf:2e:67:72:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=a39956c56a856ebf51252c905ea5e3bc4b69ff49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:40:cb:8c:43:6d:fc:05:b7:2e:04:70:ca:
b3:93:c6:e1:64:50:66:36:f4:93:e0:3b:46:41:d6:
d9:62:d8:73:53:bd:f6:d5:93:7f:96:05:d0:b2:8f:
3a:9c:ae:b7:60:20:5e:25:92:4e:63:d0:ee:13:00:
08:90:5a:cd:08:d7:fb:89:1d:b8:83:c7:d7:be:ab:
3e:1e:82:e3:f1:aa:26:51:9d:9d:90:46:14:c0:e9:
7b:0a:e6:9e:71:5a:89:09:ab:52:63:bd:e3:f0:65:
bf:13:c9:da:e5:4f:a6:cb:21:8f:82:7d:2b:b7:c2:
eb:39:09:fe:19:b5:f9:75:42:63:be:dd:72:3a:05:
d7:38:00:76:7a:d7:5a:58:15:dc:c5:c1:7c:ca:f1:
7c:71:75:32:be:99:dc:3e:dd:e1:9e:94:80:05:56:
66:2b:83:3b:df:5d:27:b0:17:65:2c:e9:22:38:60:
6d:48:07:cd:3f:c4:ba:c4:3e:09:01:f0:0c:91:86:
f7:48:1b:76:a4:6e:3d:79:97:46:19:f6:32:50:7d:
4e:cd:12:71:25:ca:ec:02:58:23:20:a2:a2:01:73:
ca:4c:9d:29:54:8a:22:69:60:53:5c:34:15:03:23:
04:61:d8:99:7d:e9:0d:a4:a1:9b:b5:99:be:89:fb:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:99:56:C5:6A:85:6E:BF:51:25:2C:90:5E:A5:E3:BC:4B:69:FF:49
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5c:8b:34:0a:ff:98:ae:d9:13:4b:a7:f3:42:4d:83:b6:fa:
d7:d3:27:bb:64:7d:48:7d:ad:38:62:d6:d2:d2:e1:77:53:3a:
72:46:82:d9:7f:91:b4:fe:0a:33:c2:82:19:7c:50:c9:73:24:
33:36:30:29:a4:bd:d1:be:f6:c5:81:b3:c2:88:8f:9d:9b:5f:
30:68:3a:9e:41:ba:b8:7b:7a:90:30:0e:8f:99:dc:6d:a6:18:
e2:5a:b2:6f:5c:24:12:65:d6:d7:dd:4d:0a:75:55:34:a4:71:
cf:a4:3b:57:3c:aa:70:69:51:55:42:2d:71:02:24:15:a6:0a:
29:ac:6c:5b:9f:f6:20:79:c7:23:70:a3:8e:75:ca:7c:09:bd:
62:73:89:f5:27:51:a7:68:9f:86:f8:41:12:94:cd:eb:48:85:
bf:b2:55:35:53:a1:77:21:33:95:38:db:41:27:11:4a:34:6b:
88:21:c7:c0:74:8a:58:55:f0:f4:1c:6d:f0:e5:c4:9a:ed:f4:
e0:ca:4f:fc:68:79:d9:9b:e0:85:44:38:6f:31:84:4e:07:85:
17:15:a8:2c:20:b1:9c:b3:5a:e5:61:20:1a:2c:47:f6:c8:d4:
87:65:0d:b8:f2:01:fc:ea:ad:51:21:0a:36:f2:6d:05:ca:be:
9e:b1:90:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216pwycDszkQkuL8uZ3KVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5N2VkY2VkZWMzMjU0YjM1N2IwOTYxNWEwMmIxNmUwNmVi
ZTYzZWIwHhcNMjUwNjI4MTQwMTE2WhcNMjUwNjI5MTQwMTE2WjAzMTEwLwYDVQQD
EyhhMzk5NTZjNTZhODU2ZWJmNTEyNTJjOTA1ZWE1ZTNiYzRiNjlmZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq5Ay4xDbfwFty4EcMqzk8bhZFBm
NvST4DtGQdbZYthzU7321ZN/lgXQso86nK63YCBeJZJOY9DuEwAIkFrNCNf7iR24
g8fXvqs+HoLj8aomUZ2dkEYUwOl7CuaecVqJCatSY73j8GW/E8na5U+myyGPgn0r
t8LrOQn+GbX5dUJjvt1yOgXXOAB2etdaWBXcxcF8yvF8cXUyvpncPt3hnpSABVZm
K4M7310nsBdlLOkiOGBtSAfNP8S6xD4JAfAMkYb3SBt2pG49eZdGGfYyUH1OzRJx
JcrsAlgjIKKiAXPKTJ0pVIoiaWBTXDQVAyMEYdiZfekNpKGbtZm+ifspwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOZVsVqhW6/USUskF6l47xLaf9JMB8GA1UdIwQY
MBaAFMl+3O3sMlSzV7CWFaArFuBuvmPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgt
MzIzOWE4MWM5ZmM4LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgtMzIzOWE4MWM5ZmM4
LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVyLNAr/
mK7ZE0un80JNg7b619Mnu2R9SH2tOGLW0tLhd1M6ckaC2X+RtP4KM8KCGXxQyXMk
MzYwKaS90b72xYGzwoiPnZtfMGg6nkG6uHt6kDAOj5ncbaYY4lqyb1wkEmXW191N
CnVVNKRxz6Q7VzyqcGlRVUItcQIkFaYKKaxsW5/2IHnHI3CjjnXKfAm9YnOJ9SdR
p2ifhvhBEpTN60iFv7JVNVOhdyEzlTjbQScRSjRriCHHwHSKWFXw9Bxt8OXEmu30
4MpP/Gh52ZvghUQ4bzGETgeFFxWoLCCxnLNa5WEgGixH9sjUh2UNuPIB/OqtUSEK
NvJtBcq+nrGQZg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:07 2025 by rpki-client