Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: 8LvOPx62lp9brTaooPZKmxlBCbyaqhwzyxZTJS4KOnE=
Subject key identifier: 29:2C:92:EE:1C:70:E0:A9:AA:6A:33:83:AD:B4:0C:B4:8C:AE:FF:FC
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 0197B9338B90254AB8375477F097119CEBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 159F
Signing time: Sun 29 Jun 2025 01:00:52 +0000
Manifest this update: Sun 29 Jun 2025 01:00:52 +0000
Manifest next update: Mon 30 Jun 2025 01:00:52 +0000
Files and hashes: 1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: WwxT8oNsGINv4iilKesYxz/IR+EFH1opsFFUlYPWW7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:8b:90:25:4a:b8:37:54:77:f0:97:11:9c:eb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Jun 29 01:00:52 2025 GMT
Not After : Jun 30 01:00:52 2025 GMT
Subject: CN=292c92ee1c70e0a9aa6a3383adb40cb48caefffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:85:ec:8c:99:21:91:a3:ca:47:0e:30:9d:
9a:3e:46:fe:c6:cc:8f:0c:79:7f:d8:25:d9:f4:00:
bc:a1:6e:25:c0:17:e9:65:7e:ea:89:8b:35:02:d3:
f0:92:b1:c9:13:2f:96:b8:44:d0:f2:0a:10:4a:ac:
27:68:18:dc:27:36:b8:0c:ad:be:9c:f1:0b:9a:b2:
58:3a:c0:e1:51:85:82:37:e7:66:c3:6c:33:cc:ae:
e0:c1:aa:68:ba:d5:4d:86:89:1e:3f:34:9a:a4:36:
9c:ff:80:19:20:cc:49:1c:06:b1:2f:fa:5a:13:ff:
02:26:c1:05:2a:65:27:9a:c2:e0:e3:dc:cc:7c:62:
60:f5:bd:e2:69:06:9b:95:68:49:bc:e9:ea:49:bb:
53:c5:85:45:49:33:8f:9b:b4:07:24:16:66:50:75:
67:28:73:aa:24:ff:1d:fd:0b:15:7f:47:2e:ed:f7:
53:cb:f9:cf:74:21:30:c1:61:e1:c6:86:5e:e8:8e:
ce:40:c7:25:dd:e7:7b:03:88:be:5d:17:a5:2c:b0:
95:fd:bb:36:7e:e3:ca:2d:18:40:64:d6:17:b7:da:
77:1d:91:92:c1:ad:c4:26:50:86:ca:0f:1e:6c:7f:
91:f5:f2:b1:a2:fd:31:c0:e9:68:81:9c:78:5b:ba:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:92:EE:1C:70:E0:A9:AA:6A:33:83:AD:B4:0C:B4:8C:AE:FF:FC
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:8a:0e:27:27:11:a4:dd:c4:79:17:65:24:98:48:f4:b2:1a:
f8:4c:56:71:50:44:cc:0b:0d:e2:a4:cd:59:e3:9c:a4:fc:d5:
55:6b:33:c1:78:de:47:45:19:8c:89:a9:ff:71:a3:63:44:63:
dc:b4:d0:73:03:8b:16:a0:4a:17:54:3f:60:f0:81:03:2c:c0:
a6:6e:9a:bd:f2:ea:a1:12:4f:cb:23:96:7d:dc:b6:8f:34:b0:
cb:0e:8b:68:aa:8f:5b:3f:2c:fd:85:10:23:84:4f:1e:69:88:
36:3e:4b:ae:23:56:d3:90:ee:e4:22:75:39:fc:a2:63:1d:ed:
ea:ef:7f:c0:f7:c8:82:e4:0b:14:b7:b3:43:20:f3:71:9a:57:
dd:2d:f8:79:4d:4e:67:07:72:a4:01:fe:c5:f7:fe:ae:75:b9:
7f:23:e9:ea:45:09:55:af:fe:a9:86:a2:bd:92:0c:74:f1:f1:
16:7e:02:de:d1:3f:fc:3a:c9:d1:f2:a5:b6:ce:e8:0a:60:48:
71:77:bd:de:92:db:5b:4f:66:9b:7d:39:91:fc:31:5f:ea:70:
8e:d2:54:e8:4f:9c:eb:86:13:bc:cb:52:c0:cf:56:e4:ea:76:
29:73:c3:1b:66:87:23:03:b1:14:42:14:14:d0:b9:9e:fa:f9:
19:31:1c:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M4uQJUq4N1R38JcRnOu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OGM1M2I0NzdjM2JmYTcwYjYxZjQyN2I0Nzk5NGMyZDE3
ODM0NTgwHhcNMjUwNjI5MDEwMDUyWhcNMjUwNjMwMDEwMDUyWjAzMTEwLwYDVQQD
EygyOTJjOTJlZTFjNzBlMGE5YWE2YTMzODNhZGI0MGNiNDhjYWVmZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf6F7IyZIZGjykcOMJ2aPkb+xsyP
DHl/2CXZ9AC8oW4lwBfpZX7qiYs1AtPwkrHJEy+WuETQ8goQSqwnaBjcJza4DK2+
nPELmrJYOsDhUYWCN+dmw2wzzK7gwapoutVNhokePzSapDac/4AZIMxJHAaxL/pa
E/8CJsEFKmUnmsLg49zMfGJg9b3iaQablWhJvOnqSbtTxYVFSTOPm7QHJBZmUHVn
KHOqJP8d/QsVf0cu7fdTy/nPdCEwwWHhxoZe6I7OQMcl3ed7A4i+XRelLLCV/bs2
fuPKLRhAZNYXt9p3HZGSwa3EJlCGyg8ebH+R9fKxov0xwOlogZx4W7rbwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCksku4ccOCpqmozg620DLSMrv/8MB8GA1UdIwQY
MBaAFMiMU7R3w7+nC2H0J7R5lMLReDRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYt
YjA2NDY2MGY3MDRmLzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYtYjA2NDY2MGY3MDRm
LzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA24oOJycR
pN3EeRdlJJhI9LIa+ExWcVBEzAsN4qTNWeOcpPzVVWszwXjeR0UZjImp/3GjY0Rj
3LTQcwOLFqBKF1Q/YPCBAyzApm6avfLqoRJPyyOWfdy2jzSwyw6LaKqPWz8s/YUQ
I4RPHmmINj5LriNW05Du5CJ1OfyiYx3t6u9/wPfIguQLFLezQyDzcZpX3S34eU1O
ZwdypAH+xff+rnW5fyPp6kUJVa/+qYaivZIMdPHxFn4C3tE//DrJ0fKlts7oCmBI
cXe93pLbW09mm305kfwxX+pwjtJU6E+c64YTvMtSwM9W5Op2KXPDG2aHIwOxFEIU
FNC5nvr5GTEcQQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:14 2025 by rpki-client