Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: 3LzpyBKokTNPn2EfNs0KCE2eZsNyYJ1SHugwL0VWoNM=
Subject key identifier: 46:49:ED:F2:49:CE:2E:94:D7:FA:11:93:23:61:C4:8A:4D:E7:AB:A5
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 0197C50157ACB20312327FEBA4AF9E3D2D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0A0A
Signing time: Tue 01 Jul 2025 08:01:28 +0000
Manifest this update: Tue 01 Jul 2025 08:01:28 +0000
Manifest next update: Wed 02 Jul 2025 08:01:28 +0000
Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: xZrKokk0e+LVsVLdCYg40Y6Bzu1c9yFKC8tuFMn7di4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:57:ac:b2:03:12:32:7f:eb:a4:af:9e:3d:2d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Jul 1 08:01:28 2025 GMT
Not After : Jul 2 08:01:28 2025 GMT
Subject: CN=4649edf249ce2e94d7fa11932361c48a4de7aba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:37:e8:44:61:eb:23:de:1b:2f:27:52:0a:
8d:69:bc:da:fd:97:ee:8d:09:55:2c:e4:89:e4:33:
43:6f:dc:d7:4f:77:f7:4b:ad:2e:b3:33:03:41:24:
a3:e7:87:f1:2a:09:8e:c1:d0:e6:b3:5e:41:02:89:
e3:9f:d7:c2:08:5c:24:17:0d:5f:59:4f:68:42:43:
ff:5a:1b:64:f9:06:d7:63:1a:7d:e5:09:cb:e7:0a:
5c:39:33:8c:a4:7d:6c:8d:ee:58:ac:a7:da:63:82:
68:62:3a:da:18:4d:33:55:88:2f:1b:06:f8:a0:10:
b5:3f:09:02:70:8f:41:0c:f1:e3:fc:81:ba:da:92:
4a:91:ef:a1:5d:c6:17:9f:c3:c6:02:e3:2a:55:97:
0a:46:03:e6:d4:ec:8f:85:b2:16:84:de:0b:30:7f:
e1:e3:29:94:1f:5e:9b:e4:28:66:e4:b5:8d:ff:96:
52:b2:e1:1a:e6:3b:a0:0c:99:b0:24:0a:8f:3f:b3:
68:39:00:13:b3:ef:8b:7f:f6:37:ca:73:e9:83:bf:
2e:34:7f:65:d8:27:db:ac:d5:f3:ee:49:29:7f:fa:
83:c1:11:43:de:66:30:cd:4a:7f:5e:ea:1a:df:45:
ef:10:07:4e:5d:d4:d7:f7:83:74:ba:53:92:5e:e1:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:49:ED:F2:49:CE:2E:94:D7:FA:11:93:23:61:C4:8A:4D:E7:AB:A5
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:80:07:94:62:d1:93:15:a6:e6:04:da:c4:af:1c:d6:ed:a3:
23:e8:0b:a9:69:05:aa:2a:ac:5c:d4:36:22:16:67:3b:b2:88:
37:ec:ee:0c:77:f9:51:87:da:05:d8:ba:03:11:5b:94:5f:92:
0b:29:37:ac:4d:14:e7:f5:6c:15:07:69:e0:65:2a:97:5c:c2:
96:7c:5d:ea:fe:74:a3:b2:f6:89:e5:f3:e3:5a:2a:e8:e2:50:
90:53:27:28:04:b4:e4:af:62:7a:57:22:cb:2c:ed:42:bc:44:
eb:d7:9c:2f:eb:e7:60:c0:02:10:19:14:c4:ce:87:2d:9e:d8:
11:a3:ba:0a:56:99:a7:7d:6a:27:38:39:14:a5:3e:66:dd:41:
ed:a7:f9:ff:d6:cd:35:e9:bd:fa:9d:11:d0:72:cb:da:3a:0d:
a9:82:aa:ca:21:0f:e5:43:ce:b7:43:29:4f:46:63:c4:62:62:
32:fe:67:b6:99:61:da:9f:ff:4f:35:ee:31:ee:bc:aa:cb:ed:
c2:f6:45:d1:c0:41:ec:dd:29:c9:1e:a9:e0:b5:55:f9:4c:20:
ff:74:e6:b7:be:68:73:c3:8d:b1:25:71:80:2c:7b:7d:12:04:
8e:eb:84:d9:fa:f6:c1:9b:ff:49:c4:fb:28:65:1e:82:8a:21:
07:10:a3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFAVessgMSMn/rpK+ePS1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjE3ODAwZjE5NDNhZjFjNTE0Mjg0Y2MzYmU3ODBlOWMy
MWRkNzgwHhcNMjUwNzAxMDgwMTI4WhcNMjUwNzAyMDgwMTI4WjAzMTEwLwYDVQQD
Eyg0NjQ5ZWRmMjQ5Y2UyZTk0ZDdmYTExOTMyMzYxYzQ4YTRkZTdhYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zQ36ERh6yPeGy8nUgqNabza/Zfu
jQlVLOSJ5DNDb9zXT3f3S60uszMDQSSj54fxKgmOwdDms15BAonjn9fCCFwkFw1f
WU9oQkP/Whtk+QbXYxp95QnL5wpcOTOMpH1sje5YrKfaY4JoYjraGE0zVYgvGwb4
oBC1PwkCcI9BDPHj/IG62pJKke+hXcYXn8PGAuMqVZcKRgPm1OyPhbIWhN4LMH/h
4ymUH16b5Chm5LWN/5ZSsuEa5jugDJmwJAqPP7NoOQATs++Lf/Y3ynPpg78uNH9l
2CfbrNXz7kkpf/qDwRFD3mYwzUp/Xuoa30XvEAdOXdTX94N0ulOSXuG+wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZJ7fJJzi6U1/oRkyNhxIpN56ulMB8GA1UdIwQY
MBaAFMrxeADxlDrxxRQoTMO+eA6cId14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2Ut
ODA1OTdlYjQ0NDI2LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2UtODA1OTdlYjQ0NDI2
LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloAHlGLR
kxWm5gTaxK8c1u2jI+gLqWkFqiqsXNQ2IhZnO7KIN+zuDHf5UYfaBdi6AxFblF+S
Cyk3rE0U5/VsFQdp4GUql1zClnxd6v50o7L2ieXz41oq6OJQkFMnKAS05K9ielci
yyztQrxE69ecL+vnYMACEBkUxM6HLZ7YEaO6ClaZp31qJzg5FKU+Zt1B7af5/9bN
Nem9+p0R0HLL2joNqYKqyiEP5UPOt0MpT0ZjxGJiMv5ntplh2p//TzXuMe68qsvt
wvZF0cBB7N0pyR6p4LVV+Uwg/3Tmt75oc8ONsSVxgCx7fRIEjuuE2fr2wZv/ScT7
KGUegoohBxCjCQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:52:26 2025 by rpki-client