Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier: R3n5XBmokX0SNujcvpcKND5cM/c/PFRDBC73dDOhl+8=
Subject key identifier: 81:8A:00:D3:E0:58:CA:DD:87:DA:05:80:53:AD:BC:31:51:1D:FF:2B
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 0197B77C29F6AD1D1BD0C69957A45ACF26C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number: 09DE
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: 9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa (hash: FAkZUvlkFTeURhyGPk/Cqy2vo8UntR2/HehcNI9EJVU=)
2: Fw_kxU9y2ZFFUFhTyjj3cOM8HE0.roa (hash: RbilBDizHS14qZ4Da7c1uCTbplJrxj3lujK+7Ie1xww=)
3: OmRK258WRmdVFaT1b4UKAJEmXF8.roa (hash: S9zpMDpc5tR1fodrfsOibu5FLjUO5h2bsiNgqTRPaIQ=)
4: _6UZkqieR9kIkKZwwfKfkm35fd4.roa (hash: TAVIhSh9eMt1b6339NxSWJ46JPMbHN7C8v9n3qx3ibk=)
5: gqWeYouP3tCgtjbkj-l_gQg8hIo.roa (hash: /JDKYsMSdFrnBptTFdWQqSfzinHaa7LMqQq1Q4agYW8=)
6: iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa (hash: qX/Ce2Cu2rGWIQEWtxm8FeM0QBiPxiljZdApDi//miE=)
7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: neH9pJRqSD1kRkxHi1RWku9nACGjFa2ULaXRt1JyRsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:29:f6:ad:1d:1b:d0:c6:99:57:a4:5a:cf:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=818a00d3e058cadd87da058053adbc31511dff2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:b9:7a:8a:02:08:9f:9d:38:db:9c:8b:5b:
56:bf:a3:00:40:98:a4:d7:2e:9c:2e:ca:b6:b1:94:
82:07:f6:1e:cb:7f:92:9b:77:5c:fc:bc:2f:7f:0d:
cd:80:78:70:c7:c8:1b:9d:8f:18:d7:30:d8:4b:ce:
5f:3d:bb:5f:f2:4c:78:cb:0f:89:94:09:a1:40:bd:
11:1e:77:e5:bf:b2:dc:82:c0:ab:5b:73:6a:8b:b8:
ad:42:95:9a:36:d0:cd:bb:42:03:31:f0:cb:7e:ac:
25:c4:5f:d6:d8:47:98:20:6e:5f:92:c8:92:30:9b:
7e:3a:20:36:fc:4d:48:eb:24:bd:9a:56:f8:ae:51:
1d:96:79:5e:10:e2:95:04:8f:1b:a4:6c:93:11:4e:
6c:92:4a:73:5c:5e:3c:ea:ba:d2:d4:49:96:74:db:
d8:b8:0b:7f:20:8e:a7:ee:3f:83:86:13:08:f3:73:
4c:1d:4b:5e:75:71:db:85:7c:ea:bd:cd:96:fb:f4:
bd:de:e8:d3:a0:b3:61:bd:6e:4f:b6:b6:a4:54:f2:
35:98:f8:b7:60:c2:9e:04:d6:b6:bf:3c:32:db:e2:
2d:12:54:7b:05:2c:9d:43:79:91:b6:ad:0f:23:a1:
c4:5e:25:54:dc:46:86:8c:d8:d4:fc:35:9f:0c:7d:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8A:00:D3:E0:58:CA:DD:87:DA:05:80:53:AD:BC:31:51:1D:FF:2B
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3f:53:32:4a:84:aa:44:51:b0:df:7c:6f:ac:1d:6f:f0:e4:
2b:ff:17:87:04:6c:77:06:07:9f:0a:95:a5:11:c4:26:95:c8:
ac:a7:3c:a4:64:3a:45:98:0b:18:5d:b4:4b:e8:f7:fd:a8:33:
2c:26:29:e4:a6:5c:98:52:61:de:6d:45:13:b2:76:5c:16:26:
1c:cf:95:4b:6a:3f:86:df:4d:a1:7d:75:b6:50:f1:a7:f6:36:
c7:ef:c0:f2:96:d5:47:21:86:41:4b:a3:27:aa:64:2a:29:9d:
3b:07:48:08:b6:63:06:cc:b3:fe:19:e7:14:24:aa:84:1c:49:
fb:ca:2f:bb:c8:00:26:68:68:31:c6:c9:92:19:27:7f:0c:10:
d2:10:e1:ee:fb:18:84:89:fb:7f:e7:d8:30:23:78:37:c9:4c:
14:41:70:83:1f:c9:62:b4:f2:3a:11:be:b8:7e:eb:9f:15:68:
71:1e:b7:4c:25:fe:b4:b2:48:9f:8b:21:08:73:17:92:90:62:
7f:d4:cd:fb:f8:9f:d2:14:99:db:50:4a:0c:93:f0:8a:61:00:
60:51:ee:19:79:b7:28:41:96:57:17:92:1f:13:b5:fc:0d:64:
1b:3c:8a:03:43:37:cf:f5:4a:21:42:d4:9d:2c:b2:67:15:94:
44:cf:05:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fCn2rR0b0MaZV6RazybHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMjkwZGIyZjcyOTA1ZjBkYjYyNmIwMDViYWNmMDg4Nzhk
MTdiYWMwHhcNMjUwNjI4MTcwMDU2WhcNMjUwNjI5MTcwMDU2WjAzMTEwLwYDVQQD
Eyg4MThhMDBkM2UwNThjYWRkODdkYTA1ODA1M2FkYmMzMTUxMWRmZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaK5eooCCJ+dONuci1tWv6MAQJik
1y6cLsq2sZSCB/Yey3+Sm3dc/Lwvfw3NgHhwx8gbnY8Y1zDYS85fPbtf8kx4yw+J
lAmhQL0RHnflv7LcgsCrW3Nqi7itQpWaNtDNu0IDMfDLfqwlxF/W2EeYIG5fksiS
MJt+OiA2/E1I6yS9mlb4rlEdlnleEOKVBI8bpGyTEU5skkpzXF486rrS1EmWdNvY
uAt/II6n7j+DhhMI83NMHUtedXHbhXzqvc2W+/S93ujToLNhvW5PtrakVPI1mPi3
YMKeBNa2vzwy2+ItElR7BSydQ3mRtq0PI6HEXiVU3EaGjNjU/DWfDH3aDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGKANPgWMrdh9oFgFOtvDFRHf8rMB8GA1UdIwQY
MBaAFMopDbL3KQXw22JrAFus8Ih40XusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt
N2Y0MzViZjU1MDFjLzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj
LzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT9TMkqE
qkRRsN98b6wdb/DkK/8XhwRsdwYHnwqVpRHEJpXIrKc8pGQ6RZgLGF20S+j3/agz
LCYp5KZcmFJh3m1FE7J2XBYmHM+VS2o/ht9NoX11tlDxp/Y2x+/A8pbVRyGGQUuj
J6pkKimdOwdICLZjBsyz/hnnFCSqhBxJ+8ovu8gAJmhoMcbJkhknfwwQ0hDh7vsY
hIn7f+fYMCN4N8lMFEFwgx/JYrTyOhG+uH7rnxVocR63TCX+tLJIn4shCHMXkpBi
f9TN+/if0hSZ21BKDJPwimEAYFHuGXm3KEGWVxeSHxO1/A1kGzyKA0M3z/VKIULU
nSyyZxWURM8FKA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:38 2025 by rpki-client