Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
File: yniqfjFrIfhDz7lYEMaAzdv6bm8.mft (raw, json)
Hash identifier: jqb5p5PUwWO5en55ZfYm/kqZJS65yn/GAfUE6ZQARHM=
Subject key identifier: E1:7A:5D:58:48:05:CF:29:E4:FB:B4:99:4B:9B:CD:B4:7D:88:0F:BF
Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
Certificate issuer: /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Certificate serial: 0197B745BC48B0520C9BCDCED5BD0B289D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
Manifest number: 0306
Signing time: Sat 28 Jun 2025 16:01:29 +0000
Manifest this update: Sat 28 Jun 2025 16:01:29 +0000
Manifest next update: Sun 29 Jun 2025 16:01:29 +0000
Files and hashes: 1: KmT0zBeAxHbx64CqcJ4Kw-HSMGw.roa (hash: g294VQOsqRVKkLhlE8NKqam6KvGQ9H8e4fukJsFTk1Y=)
2: yniqfjFrIfhDz7lYEMaAzdv6bm8.crl (hash: VB5ItIAJZ1vPV1q/iN0cqQMfZhxjYXps0H+IHn2glqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:bc:48:b0:52:0c:9b:cd:ce:d5:bd:0b:28:9d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Validity
Not Before: Jun 28 16:01:29 2025 GMT
Not After : Jun 29 16:01:29 2025 GMT
Subject: CN=e17a5d584805cf29e4fbb4994b9bcdb47d880fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:9f:16:77:c0:b6:c2:dc:13:76:c7:84:61:
4a:4f:d4:8d:e0:3a:1a:b1:47:04:6d:0b:73:6a:37:
0c:73:c6:bf:a4:82:ad:89:d5:94:1d:70:21:2d:6a:
a2:80:98:87:cf:a3:49:b5:0c:55:b5:a8:8c:57:76:
d8:3d:e9:9b:20:54:02:45:05:1f:c8:27:86:77:d4:
90:41:2d:9e:52:37:99:4c:77:fe:a5:01:d5:dd:66:
db:31:8c:ea:47:bc:eb:bc:af:f2:ca:69:c8:b4:82:
23:46:0d:4e:0d:50:1e:ca:ee:d0:9f:73:9a:fb:5c:
bc:e0:8a:d8:41:6d:0b:92:94:9f:bd:c9:27:93:55:
17:6a:18:2d:8b:2b:41:21:e0:1b:6a:05:8f:bc:4f:
e4:b7:ec:24:71:69:3a:95:dc:17:ad:e2:ec:0e:f8:
3f:59:cd:38:3f:a4:f8:b6:77:20:8e:93:9e:95:f3:
9c:2e:ca:fb:b7:9c:37:61:68:57:9d:d3:d5:e9:1c:
d6:6a:da:ea:73:2f:8d:3a:1a:3c:f0:77:06:b7:1c:
8d:6c:5a:35:9b:e4:6f:0c:57:aa:fc:83:8d:c5:cb:
74:c9:29:13:9b:10:f6:ed:e2:06:e4:f9:78:82:82:
f0:5f:d6:78:88:04:dc:4e:c6:f2:fb:de:c3:93:cb:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:5D:58:48:05:CF:29:E4:FB:B4:99:4B:9B:CD:B4:7D:88:0F:BF
X509v3 Authority Key Identifier:
keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f7:99:63:22:38:e4:d1:73:ca:ce:20:de:96:b6:0a:c6:9a:
ec:a5:bd:c7:09:84:37:f5:3d:fc:2b:79:cb:03:07:a8:e5:14:
7b:55:a3:ad:78:82:0a:78:99:b2:17:0f:0f:39:83:cf:1f:a6:
ae:62:d6:de:f1:80:16:8c:b5:52:7b:91:e3:66:b9:b3:23:7e:
2b:87:54:b8:a0:9b:eb:4a:05:82:e2:ba:d3:1d:c8:2e:bd:44:
d0:1a:b7:03:e4:85:46:3f:0d:17:9a:94:f7:d5:0c:c5:0a:f1:
0e:93:c1:12:1f:50:9d:d1:dd:d9:fb:3e:ce:e4:ff:ff:a1:ec:
ab:da:cd:ff:b5:cb:cd:d4:6c:28:7a:46:4e:3c:a2:a7:2c:d9:
6f:72:9a:e3:3e:7f:07:32:90:39:c5:05:15:1b:a2:a1:74:5c:
bb:2f:4c:a7:f1:a0:ff:99:b3:5a:43:21:60:04:2a:0f:c5:70:
7b:18:f5:b9:1f:b1:72:45:be:e5:7f:0b:46:5b:c9:f2:19:93:
9b:82:db:41:e8:32:de:ce:f0:3f:db:57:9c:c3:4b:99:38:0c:
5a:c1:67:f3:39:46:43:28:dc:ed:fb:65:03:cb:91:cd:7a:c7:
9c:7e:1a:55:b5:b5:f7:47:97:07:f3:8c:68:e1:d5:01:22:a7:
5a:7e:11:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RbxIsFIMm83O1b0LKJ2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzhhYTdlMzE2YjIxZjg0M2NmYjk1ODEwYzY4MGNkZGJm
YTZlNmYwHhcNMjUwNjI4MTYwMTI5WhcNMjUwNjI5MTYwMTI5WjAzMTEwLwYDVQQD
EyhlMTdhNWQ1ODQ4MDVjZjI5ZTRmYmI0OTk0YjliY2RiNDdkODgwZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs2fFnfAtsLcE3bHhGFKT9SN4Doa
sUcEbQtzajcMc8a/pIKtidWUHXAhLWqigJiHz6NJtQxVtaiMV3bYPembIFQCRQUf
yCeGd9SQQS2eUjeZTHf+pQHV3WbbMYzqR7zrvK/yymnItIIjRg1ODVAeyu7Qn3Oa
+1y84IrYQW0LkpSfvcknk1UXahgtiytBIeAbagWPvE/kt+wkcWk6ldwXreLsDvg/
Wc04P6T4tncgjpOelfOcLsr7t5w3YWhXndPV6RzWatrqcy+NOho88HcGtxyNbFo1
m+RvDFeq/IONxct0ySkTmxD27eIG5Pl4goLwX9Z4iATcTsby+97Dk8tsXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF6XVhIBc8p5Pu0mUubzbR9iA+/MB8GA1UdIwQY
MBaAFMp4qn4xayH4Q8+5WBDGgM3b+m5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83ZGEzNGMtMzk4NC00NDQyLWI2NDYt
ZTMxMzhmZjFlODk5LzEveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83ZGEzNGMtMzk4NC00NDQyLWI2NDYtZTMxMzhmZjFlODk5
LzEveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/eZYyI4
5NFzys4g3pa2Csaa7KW9xwmEN/U9/Ct5ywMHqOUUe1WjrXiCCniZshcPDzmDzx+m
rmLW3vGAFoy1UnuR42a5syN+K4dUuKCb60oFguK60x3ILr1E0Bq3A+SFRj8NF5qU
99UMxQrxDpPBEh9QndHd2fs+zuT//6Hsq9rN/7XLzdRsKHpGTjyipyzZb3Ka4z5/
BzKQOcUFFRuioXRcuy9Mp/Gg/5mzWkMhYAQqD8Vwexj1uR+xckW+5X8LRlvJ8hmT
m4LbQegy3s7wP9tXnMNLmTgMWsFn8zlGQyjc7ftlA8uRzXrHnH4aVbW190eXB/OM
aOHVASKnWn4RCg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:25 2025 by rpki-client