Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: 2hV7RZ1naGzRK3LYIHsM/fx4Gce8+ImgQZaub1/8qhs=
Subject key identifier: 63:15:D8:08:11:43:2E:A7:6E:1B:EC:14:C7:04:A3:52:3E:90:B8:75
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 0197B88F98015AF1C4750868C2818978B105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 11AA
Signing time: Sat 28 Jun 2025 22:01:47 +0000
Manifest this update: Sat 28 Jun 2025 22:01:47 +0000
Manifest next update: Sun 29 Jun 2025 22:01:47 +0000
Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=)
2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=)
3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: h44NUC+MQdz+I5ICKfpBz+AJMUxCcEfBSUKhJcrHhZ8=)
4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:98:01:5a:f1:c4:75:08:68:c2:81:89:78:b1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Jun 28 22:01:47 2025 GMT
Not After : Jun 29 22:01:47 2025 GMT
Subject: CN=6315d80811432ea76e1bec14c704a3523e90b875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:b8:f5:44:6f:d1:ba:a4:46:32:8a:fd:b6:
19:b3:83:c7:bb:8d:7e:77:1f:03:0e:eb:a5:48:ad:
71:77:4a:0e:dc:65:8a:74:88:ca:4a:56:83:ef:0b:
e4:8f:2c:e1:4a:ef:1f:02:ba:34:f0:c0:c9:6f:1c:
8b:2e:ae:c9:ca:bf:54:8f:f7:a2:fe:93:29:08:69:
46:f5:e8:05:06:60:2d:89:d4:58:4f:37:21:13:54:
e3:3e:13:c3:70:67:7d:5a:40:2c:20:58:a5:d4:92:
20:d5:cf:26:62:ed:e9:e7:a4:9d:97:64:c8:2a:37:
06:37:45:6c:01:f9:96:c8:35:3e:00:52:d3:75:ae:
29:9b:00:1d:82:86:a7:a3:e7:e1:f7:4e:bc:2b:fd:
75:25:8d:fa:df:cf:c3:44:e1:95:52:f9:be:58:8d:
d1:6d:f9:f3:eb:fd:53:3b:6a:75:23:2b:2e:ca:4d:
00:68:1c:d6:c7:2e:67:f3:d2:c3:55:f6:0a:e0:6f:
0b:a8:09:dd:1b:ee:e6:67:51:56:92:8f:4e:5e:fd:
1d:d2:67:35:95:95:b0:93:32:ad:c6:3e:59:9b:f3:
bd:db:83:40:1f:70:51:e7:3b:60:86:f6:e6:18:30:
63:5b:5e:02:87:d4:b3:f6:28:fc:c8:60:c9:0c:f1:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:15:D8:08:11:43:2E:A7:6E:1B:EC:14:C7:04:A3:52:3E:90:B8:75
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:cb:6d:42:10:b4:1e:51:f4:d7:49:1d:23:bf:1f:74:19:9c:
9d:ac:22:3d:31:5d:e0:a1:af:6a:05:f8:64:19:d6:05:76:d6:
ae:e6:3a:d9:af:92:cc:5f:dd:16:13:fa:d4:2f:17:e2:71:a0:
7d:de:99:f9:46:7b:1e:05:7f:d1:71:0e:cc:b5:d9:e9:6a:d2:
95:b8:cf:85:de:46:e0:bc:de:a1:eb:e3:55:56:e0:0e:c0:9a:
46:9c:6a:c3:4b:6c:ad:69:e7:80:45:d2:74:f8:03:ef:dc:7a:
cc:e8:15:e9:67:85:30:c3:ac:2f:5a:28:b8:60:f1:f2:a7:de:
72:df:ed:91:e5:26:73:86:ec:a6:20:2d:65:b2:f3:90:d3:85:
87:6e:34:97:7a:b0:22:68:29:f3:08:90:fc:cf:cc:e6:f6:ef:
04:51:bd:7b:29:c1:2f:14:40:1f:26:0a:a6:03:db:0c:ea:19:
a4:5a:ac:05:e4:ea:65:0a:51:00:2a:a5:91:ad:16:9c:ca:9c:
fb:a3:6b:8e:70:42:58:03:96:ff:da:7a:7e:92:19:a4:63:d5:
81:36:95:6f:eb:53:9a:ab:1c:89:b0:a3:a8:15:b9:75:41:2a:
0d:d8:f9:df:ab:ce:b6:c8:a0:34:22:91:c8:1c:f3:23:d5:3a:
03:57:53:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j5gBWvHEdQhowoGJeLEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxM2QyM2YyMTIxMzI3ZDkxN2Q3MDhkOGZlMTUzMzgyNDU1
OTU5YTgwHhcNMjUwNjI4MjIwMTQ3WhcNMjUwNjI5MjIwMTQ3WjAzMTEwLwYDVQQD
Eyg2MzE1ZDgwODExNDMyZWE3NmUxYmVjMTRjNzA0YTM1MjNlOTBiODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobC49URv0bqkRjKK/bYZs4PHu41+
dx8DDuulSK1xd0oO3GWKdIjKSlaD7wvkjyzhSu8fAro08MDJbxyLLq7Jyr9Uj/ei
/pMpCGlG9egFBmAtidRYTzchE1TjPhPDcGd9WkAsIFil1JIg1c8mYu3p56Sdl2TI
KjcGN0VsAfmWyDU+AFLTda4pmwAdgoano+fh9068K/11JY3638/DROGVUvm+WI3R
bfnz6/1TO2p1Iysuyk0AaBzWxy5n89LDVfYK4G8LqAndG+7mZ1FWko9OXv0d0mc1
lZWwkzKtxj5Zm/O924NAH3BR5ztghvbmGDBjW14Ch9Sz9ij8yGDJDPHT/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMV2AgRQy6nbhvsFMcEo1I+kLh1MB8GA1UdIwQY
MBaAFGE9I/ISEyfZF9cI2P4VM4JFWVmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQt
N2E2MDViYTQwYzFlLzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQtN2E2MDViYTQwYzFl
LzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtcttQhC0
HlH010kdI78fdBmcnawiPTFd4KGvagX4ZBnWBXbWruY62a+SzF/dFhP61C8X4nGg
fd6Z+UZ7HgV/0XEOzLXZ6WrSlbjPhd5G4LzeoevjVVbgDsCaRpxqw0tsrWnngEXS
dPgD79x6zOgV6WeFMMOsL1oouGDx8qfect/tkeUmc4bspiAtZbLzkNOFh240l3qw
Imgp8wiQ/M/M5vbvBFG9eynBLxRAHyYKpgPbDOoZpFqsBeTqZQpRACqlka0WnMqc
+6NrjnBCWAOW/9p6fpIZpGPVgTaVb+tTmqscibCjqBW5dUEqDdj536vOtsigNCKR
yBzzI9U6A1dTiQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:42 2025 by rpki-client