Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
File: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft (raw, json)
Hash identifier: 8I6pgGuqjz49P8MamMX2kWiod7Sj26hGoneMZuAf9A0=
Subject key identifier: 25:35:A7:50:3C:33:80:06:22:67:28:27:93:07:24:F6:4B:8D:61:C7
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial: 0197B6A1D1D3360D2356F7203D40E3BF1EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:27 +0000
Manifest this update: Sat 28 Jun 2025 13:02:27 +0000
Manifest next update: Sun 29 Jun 2025 13:02:27 +0000
Files and hashes: 1: 3yYGs7gC6Yt8xSj2vfENPhVXFvE.roa (hash: BuidZ1GvGdKg7gwYd2Ptl6PuYSRGUATkT25l43mgSwk=)
2: MTEEbTxLhwcmIFVyPc3_83L2SWM.roa (hash: pPAVTHjE82w53qTWAl4KRukHgVB0WjzGZSXqRTGTWY4=)
3: gIOaHcti7t355LnXTtGCztKWtS0.roa (hash: Cn1RCEjcCDtykL3i8BWxXer7cpYHt86vURgQOr3lUzo=)
4: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl (hash: Ptp1qvOa/XY1nUBUiqFNZqSsaj9R1t7JGfW7qvFZKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d1:d3:36:0d:23:56:f7:20:3d:40:e3:bf:1e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Validity
Not Before: Jun 28 13:02:27 2025 GMT
Not After : Jun 29 13:02:27 2025 GMT
Subject: CN=2535a7503c33800622672827930724f64b8d61c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:dc:04:7f:0c:90:db:4a:b0:5c:e8:4b:fe:
07:a7:76:e2:17:b7:8d:fe:7b:44:f6:cc:e3:b9:85:
2b:3b:12:b8:62:cd:0f:af:ba:b9:c4:aa:45:e1:37:
43:68:7d:5e:d8:39:24:82:19:35:14:0e:34:80:f7:
81:0e:48:56:55:c7:2b:bf:ce:4b:3f:ff:fe:6b:4e:
1f:e0:5c:a7:d6:6c:d2:c3:f6:c4:f5:9a:f8:b4:a1:
4b:07:21:d0:1e:a9:69:dc:27:44:00:fa:b7:ca:0d:
e7:e1:63:7a:2c:55:b0:0b:cc:d3:ef:7e:43:68:7d:
20:ed:e8:d4:81:7b:cf:fd:cf:be:b6:33:74:df:a7:
8a:61:0c:bc:7b:fc:fb:f0:b0:cf:54:c4:dc:b5:c0:
eb:0a:5a:7c:94:4d:ac:39:4f:e2:54:49:3b:75:4c:
9b:76:1e:51:e7:7d:17:8a:e3:96:95:9d:6d:5f:05:
a3:27:67:41:64:24:75:e2:b7:9d:42:61:48:1a:aa:
8f:e6:61:ce:b4:cc:e7:72:78:78:b5:a0:1e:7b:98:
8f:a2:dd:29:e2:f1:b5:45:1a:ba:20:41:33:d5:c1:
90:3a:f9:ad:ba:00:d9:08:91:c0:58:b9:86:da:c4:
bb:f6:16:64:36:7b:49:0b:4f:e0:a2:e2:62:e4:31:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:35:A7:50:3C:33:80:06:22:67:28:27:93:07:24:F6:4B:8D:61:C7
X509v3 Authority Key Identifier:
keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:96:7e:20:bb:2e:cc:ad:af:70:eb:4c:1e:7d:e8:24:d5:1c:
06:74:6f:02:ff:ce:2e:05:3a:38:f7:64:c9:a5:91:39:1b:16:
d2:c7:0e:76:c9:4a:01:49:4d:9f:d6:d7:74:dd:34:2d:52:28:
f7:6a:55:71:2e:c7:02:e4:6f:67:54:ef:bd:14:24:b7:23:25:
96:23:d2:1a:5c:53:82:cf:f8:e9:fd:31:99:1f:09:1e:f7:88:
9c:e2:c4:05:01:fe:82:6e:8f:e6:59:b6:be:a5:a6:03:61:9a:
ec:d2:17:a4:9f:bf:61:54:bd:0a:ea:96:d6:14:44:bd:ae:ad:
6d:dd:21:07:63:26:f0:75:83:43:a5:0f:7f:d4:d8:b3:95:ec:
42:05:de:fc:72:19:1b:50:a8:1f:08:2b:4d:c8:ff:30:dc:74:
b7:3a:62:4b:d0:b8:34:1a:8f:f1:ff:e8:92:2e:74:fa:58:86:
0e:64:96:c6:ee:b1:e0:e4:12:10:31:27:68:16:c8:70:7a:49:
f3:8c:90:0e:30:88:fe:12:8f:97:2d:20:47:cc:67:a3:6a:48:
58:96:78:1e:c8:f8:e4:34:6c:b0:e4:ef:98:48:b1:a8:2c:a9:
46:f9:bb:d1:f6:f6:9e:2f:59:36:b2:4b:87:60:4d:2e:f3:c2:
26:f4:94:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2odHTNg0jVvcgPUDjvx7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMmU4MDc4ZWE0MjBhZmMxYTc4YmY5MjJhOWEyZjI3NDY3
OWM4YTgwHhcNMjUwNjI4MTMwMjI3WhcNMjUwNjI5MTMwMjI3WjAzMTEwLwYDVQQD
EygyNTM1YTc1MDNjMzM4MDA2MjI2NzI4Mjc5MzA3MjRmNjRiOGQ2MWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9DcBH8MkNtKsFzoS/4Hp3biF7eN
/ntE9szjuYUrOxK4Ys0Pr7q5xKpF4TdDaH1e2Dkkghk1FA40gPeBDkhWVccrv85L
P//+a04f4Fyn1mzSw/bE9Zr4tKFLByHQHqlp3CdEAPq3yg3n4WN6LFWwC8zT735D
aH0g7ejUgXvP/c++tjN036eKYQy8e/z78LDPVMTctcDrClp8lE2sOU/iVEk7dUyb
dh5R530XiuOWlZ1tXwWjJ2dBZCR14redQmFIGqqP5mHOtMzncnh4taAee5iPot0p
4vG1RRq6IEEz1cGQOvmtugDZCJHAWLmG2sS79hZkNntJC0/gouJi5DGKSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU1p1A8M4AGImcoJ5MHJPZLjWHHMB8GA1UdIwQY
MBaAFJMugHjqQgr8Gni/kiqaLydGecioMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODkt
MzRiYTA3MzhhMzQxLzEva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODktMzRiYTA3MzhhMzQx
LzEva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJZ+ILsu
zK2vcOtMHn3oJNUcBnRvAv/OLgU6OPdkyaWRORsW0scOdslKAUlNn9bXdN00LVIo
92pVcS7HAuRvZ1TvvRQktyMlliPSGlxTgs/46f0xmR8JHveInOLEBQH+gm6P5lm2
vqWmA2Ga7NIXpJ+/YVS9CuqW1hREva6tbd0hB2Mm8HWDQ6UPf9TYs5XsQgXe/HIZ
G1CoHwgrTcj/MNx0tzpiS9C4NBqP8f/oki50+liGDmSWxu6x4OQSEDEnaBbIcHpJ
84yQDjCI/hKPly0gR8xno2pIWJZ4Hsj45DRssOTvmEixqCypRvm70fb2ni9ZNrJL
h2BNLvPCJvSUkw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:53 2025 by rpki-client