Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: P+2npoPLH/p5ymJmJqjyvSE89w2wR0LxfykRg6W1CE8=
Subject key identifier: 67:6C:37:11:4F:D9:0F:EB:CA:9D:A8:D0:5F:03:6E:5C:42:3A:B6:7B
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 0197B7EA82090E74D42BEE15B0A51593AEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:28 +0000
Manifest this update: Sat 28 Jun 2025 19:01:28 +0000
Manifest next update: Sun 29 Jun 2025 19:01:28 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: 5MzULr3TptvBrWRZH6IIDU78awXamZ6Gs+MxuuLHSd8=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:82:09:0e:74:d4:2b:ee:15:b0:a5:15:93:ae:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jun 28 19:01:28 2025 GMT
Not After : Jun 29 19:01:28 2025 GMT
Subject: CN=676c37114fd90febca9da8d05f036e5c423ab67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:26:5d:d9:66:50:79:e4:7d:e2:81:ed:7e:
da:69:38:25:d9:a8:4b:c5:47:f0:6d:57:f9:8a:84:
e2:b3:2b:e9:a2:68:dc:92:e6:77:17:2d:eb:1a:3e:
7d:12:3e:7c:a2:a3:a5:db:b1:0f:e5:20:53:2f:90:
62:a1:0f:5b:d2:65:30:76:4a:38:46:61:f7:1e:e2:
6c:86:86:07:6d:7f:f3:9a:e0:ee:0a:47:82:37:5b:
37:90:30:a8:c3:c9:f6:c8:58:5c:11:ac:6d:a8:81:
eb:d0:a7:25:e3:c2:f9:30:35:32:10:9d:68:24:e8:
b1:36:82:8a:45:3e:cc:d9:a3:b7:07:e9:eb:c3:07:
d3:e1:60:f9:54:d9:83:80:4f:ff:df:22:1e:b0:d5:
e6:bb:6e:f6:9d:7e:ae:d9:67:52:a0:0f:ee:b5:2d:
26:40:84:7f:3c:f1:e2:c7:ef:1d:1b:d0:9a:7e:91:
9b:93:19:04:73:09:18:44:d6:8c:bb:ca:95:02:56:
19:56:0d:4d:ed:d7:f7:26:a4:b3:e6:c6:28:b8:9f:
69:03:72:ee:43:55:19:15:52:0a:3a:db:a1:62:62:
e8:df:15:4d:4c:ac:92:69:2a:47:4f:3b:f8:66:fe:
3c:6a:15:5a:94:41:82:65:d3:e8:01:7f:93:bb:f4:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6C:37:11:4F:D9:0F:EB:CA:9D:A8:D0:5F:03:6E:5C:42:3A:B6:7B
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:12:8f:64:57:79:c6:7f:9f:1b:6f:3a:e7:90:9a:63:56:08:
f4:c4:a1:99:b4:2c:4c:a7:24:41:e2:83:3f:70:bb:44:34:75:
07:b7:d4:0d:bb:e8:0b:da:ef:ad:d1:0e:f9:cb:96:a7:0c:7c:
e6:34:ac:d6:8e:64:80:01:fe:66:d2:dd:a8:6b:05:42:22:bd:
76:85:19:eb:49:55:8d:72:99:f7:31:ec:f5:e7:b4:49:7c:ad:
2e:6c:58:fe:9e:5d:71:33:c0:41:1a:39:f4:38:53:30:a9:ce:
e9:97:69:a3:5f:be:60:52:dc:58:9a:24:0a:5f:00:77:ab:18:
13:8f:b1:e7:bc:e1:aa:79:12:5f:8d:6e:e4:a9:93:d3:ac:2a:
8e:10:25:4c:21:16:1f:c9:0a:52:29:76:01:35:51:85:c4:3a:
60:e5:cb:77:b2:7a:96:66:b2:3f:37:7d:8a:3b:f6:a9:b7:e2:
fb:a3:d7:9d:c7:43:4c:b3:52:6a:af:f3:5a:ad:67:40:fc:a7:
b6:6c:95:8c:a9:ca:08:37:b6:c8:78:42:17:b7:15:60:04:00:
5a:a8:43:cb:e6:2c:6c:30:fd:1a:46:bc:a2:95:42:2c:f3:db:
fc:93:ab:e7:84:0c:5c:18:4c:25:cc:0b:20:26:ae:2e:69:41:
51:44:c7:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36oIJDnTUK+4VsKUVk67GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj
NTVhNGEwHhcNMjUwNjI4MTkwMTI4WhcNMjUwNjI5MTkwMTI4WjAzMTEwLwYDVQQD
Eyg2NzZjMzcxMTRmZDkwZmViY2E5ZGE4ZDA1ZjAzNmU1YzQyM2FiNjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2cmXdlmUHnkfeKB7X7aaTgl2ahL
xUfwbVf5ioTisyvpomjckuZ3Fy3rGj59Ej58oqOl27EP5SBTL5BioQ9b0mUwdko4
RmH3HuJshoYHbX/zmuDuCkeCN1s3kDCow8n2yFhcEaxtqIHr0Kcl48L5MDUyEJ1o
JOixNoKKRT7M2aO3B+nrwwfT4WD5VNmDgE//3yIesNXmu272nX6u2WdSoA/utS0m
QIR/PPHix+8dG9CafpGbkxkEcwkYRNaMu8qVAlYZVg1N7df3JqSz5sYouJ9pA3Lu
Q1UZFVIKOtuhYmLo3xVNTKySaSpHTzv4Zv48ahValEGCZdPoAX+Tu/ShkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdsNxFP2Q/ryp2o0F8DblxCOrZ7MB8GA1UdIwQY
MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt
YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj
LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxKPZFd5
xn+fG28655CaY1YI9MShmbQsTKckQeKDP3C7RDR1B7fUDbvoC9rvrdEO+cuWpwx8
5jSs1o5kgAH+ZtLdqGsFQiK9doUZ60lVjXKZ9zHs9ee0SXytLmxY/p5dcTPAQRo5
9DhTMKnO6Zdpo1++YFLcWJokCl8Ad6sYE4+x57zhqnkSX41u5KmT06wqjhAlTCEW
H8kKUil2ATVRhcQ6YOXLd7J6lmayPzd9ijv2qbfi+6PXncdDTLNSaq/zWq1nQPyn
tmyVjKnKCDe2yHhCF7cVYAQAWqhDy+YsbDD9Gka8opVCLPPb/JOr54QMXBhMJcwL
ICauLmlBUUTHMA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:15 2025 by rpki-client