Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: d3ZTpXAD+X8vSu+fqCQP3wIxlDASkDYm5MTxUqw5T+c=
Subject key identifier: EC:ED:2C:DF:53:DE:AD:94:88:4A:F6:BE:77:94:1B:90:22:18:B6:EC
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 0197BAB42724F6B57B5AE8D4519E1D1AFBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 08:00:57 +0000
Manifest this update: Sun 29 Jun 2025 08:00:57 +0000
Manifest next update: Mon 30 Jun 2025 08:00:57 +0000
Files and hashes: 1: JDEgNxAB09AUh6owQNZeZtBtGuM.roa (hash: mbF3wS/KwnnaSKoNDphyfrKVcXZhcSZyXmhtgyyil/4=)
2: h9QHPHPgriAH9IrwluwQdT3LGdE.roa (hash: Tqsnz0XXMc5csYtxxzDh5cjERR+4yLVbUs/Q+m4fJwI=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: FhQZY35bfdvz9kr8WWouq3mwIMjuv6qsrpEuBjZImxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:27:24:f6:b5:7b:5a:e8:d4:51:9e:1d:1a:fb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jun 29 08:00:57 2025 GMT
Not After : Jun 30 08:00:57 2025 GMT
Subject: CN=eced2cdf53dead94884af6be77941b902218b6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:3a:4d:2e:0f:76:28:44:18:03:2c:dd:80:
52:32:f9:ac:b9:7b:bc:0d:42:dd:37:b7:39:77:4a:
72:66:02:f3:f1:83:f0:4d:21:53:f4:46:9e:04:0f:
31:02:2b:00:81:b8:12:83:4e:f2:de:2a:e1:28:c0:
c9:5c:c6:c2:2b:d5:4c:8c:ae:16:77:04:b6:3c:46:
2a:c9:a2:40:67:9a:6b:1d:03:6d:ed:72:6b:7d:48:
62:07:2e:6b:53:35:32:47:86:c1:8c:e2:4e:0a:89:
60:30:93:23:12:b8:db:f2:c2:16:64:34:10:1a:6c:
03:7b:ea:21:76:ec:3a:83:5b:13:86:c5:da:24:a7:
f8:48:be:77:91:80:fa:ed:24:57:b5:2c:bb:37:73:
99:5a:ae:7b:18:7a:26:d8:f7:b6:6a:13:2e:a8:fc:
64:33:f5:44:27:f8:f7:77:77:d1:f4:aa:71:6a:dc:
d9:a2:64:4f:b3:ea:27:1a:2d:7c:b6:13:8e:3c:27:
87:5a:37:91:a9:4f:f9:f1:08:71:35:20:a5:a6:bb:
36:55:b7:db:3b:e6:35:3f:62:5b:75:81:c8:b2:2f:
da:3c:07:06:57:82:b7:e7:30:9b:ec:39:b1:79:ca:
58:57:f7:52:5b:60:9d:70:8e:53:59:18:b7:a8:11:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:ED:2C:DF:53:DE:AD:94:88:4A:F6:BE:77:94:1B:90:22:18:B6:EC
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3e:ff:32:ef:9f:84:af:be:11:63:40:a0:77:0a:93:3c:75:
02:9b:2e:94:4b:6b:12:f0:0e:0f:2c:a6:c0:e1:68:23:8c:ae:
09:7d:84:ab:21:59:e0:a9:a0:b1:aa:a4:56:03:60:0f:95:d6:
dc:c4:d8:0a:a1:24:8a:a6:7a:04:0e:8b:1f:e4:7b:30:b8:52:
88:7c:b8:7c:a2:8a:08:1b:a2:25:80:d1:5d:27:4e:68:8b:2c:
4b:20:89:f4:31:4c:01:48:0f:25:6a:a2:b5:93:7e:6a:81:50:
4d:27:ec:09:fe:86:b8:49:e0:b7:cc:90:f6:77:dd:93:76:38:
de:39:c2:83:97:84:2b:66:f9:8c:48:b8:f6:53:2e:bf:04:98:
d7:f4:fa:8b:88:43:4a:58:7c:4f:62:64:a6:ff:b9:94:f8:e7:
84:a0:f5:f2:9d:28:57:4c:38:ce:09:74:4d:e6:ae:8c:f1:4b:
e5:eb:dd:9e:ea:62:b1:05:8f:e4:ba:cd:76:26:46:0d:60:ff:
ff:62:08:22:a0:2d:5a:f3:43:d2:05:5d:75:98:81:04:47:a3:
d6:ed:87:f7:cb:20:0e:ad:3d:9c:ce:49:b0:9f:a3:15:ab:58:
07:60:11:f7:08:53:94:63:f1:3f:1a:66:a2:ea:ce:0a:44:ac:
af:c8:5d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6tCck9rV7WujUUZ4dGvv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQ3NGNlYjg1YWYzMTEyMmVkZTU4NmQ0ZDY1YjBmNWI0
ZDk3ZjAwHhcNMjUwNjI5MDgwMDU3WhcNMjUwNjMwMDgwMDU3WjAzMTEwLwYDVQQD
EyhlY2VkMmNkZjUzZGVhZDk0ODg0YWY2YmU3Nzk0MWI5MDIyMThiNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf46TS4PdihEGAMs3YBSMvmsuXu8
DULdN7c5d0pyZgLz8YPwTSFT9EaeBA8xAisAgbgSg07y3irhKMDJXMbCK9VMjK4W
dwS2PEYqyaJAZ5prHQNt7XJrfUhiBy5rUzUyR4bBjOJOColgMJMjErjb8sIWZDQQ
GmwDe+ohduw6g1sThsXaJKf4SL53kYD67SRXtSy7N3OZWq57GHom2Pe2ahMuqPxk
M/VEJ/j3d3fR9KpxatzZomRPs+onGi18thOOPCeHWjeRqU/58QhxNSClprs2Vbfb
O+Y1P2JbdYHIsi/aPAcGV4K35zCb7DmxecpYV/dSW2CdcI5TWRi3qBFcMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOztLN9T3q2UiEr2vneUG5AiGLbsMB8GA1UdIwQY
MBaAFMh0dM64WvMRIu3lhtTWWw9bTZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYt
MDM1ODY1MjNiMTMzLzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYtMDM1ODY1MjNiMTMz
LzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATT7/Mu+f
hK++EWNAoHcKkzx1ApsulEtrEvAODyymwOFoI4yuCX2EqyFZ4KmgsaqkVgNgD5XW
3MTYCqEkiqZ6BA6LH+R7MLhSiHy4fKKKCBuiJYDRXSdOaIssSyCJ9DFMAUgPJWqi
tZN+aoFQTSfsCf6GuEngt8yQ9nfdk3Y43jnCg5eEK2b5jEi49lMuvwSY1/T6i4hD
Slh8T2Jkpv+5lPjnhKD18p0oV0w4zgl0TeaujPFL5evdnupisQWP5LrNdiZGDWD/
/2IIIqAtWvND0gVddZiBBEej1u2H98sgDq09nM5JsJ+jFatYB2AR9whTlGPxPxpm
ourOCkSsr8hdgw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:21:39 2025 by rpki-client