Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: ZE5YkU4T+gld5gjMm8azcFDnYykX8vW8pLMprWMDKN4=
Subject key identifier: D8:80:3B:3F:F4:26:A7:64:14:85:C2:30:CA:D2:58:86:52:1F:D2:03
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 0197BA0F9228E2D6370FE7FA7EA6562E913E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 05:01:11 +0000
Manifest this update: Sun 29 Jun 2025 05:01:11 +0000
Manifest next update: Mon 30 Jun 2025 05:01:11 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: Rd+UA6MQGJUAe3HHx53AwP2xETRPSLM75Xev9JVUMPc=)
2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:92:28:e2:d6:37:0f:e7:fa:7e:a6:56:2e:91:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Jun 29 05:01:11 2025 GMT
Not After : Jun 30 05:01:11 2025 GMT
Subject: CN=d8803b3ff426a7641485c230cad25886521fd203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:08:b5:69:e7:f7:fb:1c:70:ed:5a:92:36:
a7:7d:0b:7e:ef:23:b2:8e:72:70:53:50:18:4c:94:
d2:0f:7f:e9:f4:cd:60:57:5f:cf:b9:23:cd:1c:49:
f4:4e:56:0b:00:54:6d:b4:e8:48:c0:c9:34:24:3b:
68:6a:8b:16:6b:fa:e5:8d:63:1e:44:c8:68:77:f5:
70:db:a1:77:3d:a9:f8:a6:23:35:49:9d:da:7e:4e:
1f:70:60:04:61:e6:4a:f2:11:72:ec:3f:d3:b3:49:
df:dc:c8:58:84:3c:59:1d:f4:2b:26:79:80:ad:54:
09:35:55:41:8d:e7:52:55:9c:36:10:05:d0:d5:7a:
c8:a5:4a:67:17:98:f3:1f:b6:a5:cb:ae:44:9c:68:
c8:42:27:dd:aa:80:6f:50:8a:17:f9:75:63:fb:46:
9a:38:74:3b:2a:de:65:f4:ac:b3:f8:50:f6:27:1f:
56:87:70:35:9a:b5:46:21:d3:1d:60:0c:d3:9a:10:
a6:a3:93:2e:11:6f:55:a2:d2:1b:1d:6c:67:03:ad:
26:55:fa:9b:88:eb:cb:da:41:c1:31:8e:8f:a2:33:
a4:ab:df:f6:3d:44:ca:29:a0:63:a3:dc:6b:6f:1c:
67:b3:c2:a3:d9:42:f2:a6:e2:55:33:3b:ae:b6:a0:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:80:3B:3F:F4:26:A7:64:14:85:C2:30:CA:D2:58:86:52:1F:D2:03
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:b1:bc:00:ef:f7:b3:ac:e0:e1:a6:aa:5d:8f:4e:d1:9c:
41:c8:04:a5:85:c3:cd:a9:64:12:8d:c3:c4:b8:f9:56:19:5f:
70:92:5e:13:e7:1e:86:4d:24:27:31:c8:83:ca:0a:56:eb:a5:
39:86:ab:c9:87:21:12:ec:4b:7e:a9:c0:ff:dc:31:27:b0:8f:
b7:07:73:67:c2:fb:46:5c:ee:ef:f3:d4:18:16:0e:d6:06:f5:
b4:e7:29:bb:b0:87:e1:2e:cc:35:a9:5d:a4:16:f3:f1:91:e9:
5f:1e:96:64:0b:bf:de:78:6b:47:06:26:db:7b:97:43:82:0e:
5a:41:b0:02:d4:a0:8d:b4:ad:b8:72:18:9f:b3:d8:38:99:10:
fd:a9:05:4b:8a:b1:cc:71:08:a9:d5:0e:34:d5:3e:8c:7b:7b:
e6:b6:e6:8a:34:1f:35:f4:07:ed:bb:72:41:52:8f:f4:e9:ca:
a6:5d:78:66:79:72:ca:e1:b0:9a:0c:0c:74:75:00:3a:e1:c1:
e1:25:4b:b6:05:3a:33:62:c7:dd:59:e4:bc:5d:c5:2e:73:22:
c3:c9:5b:16:5d:a0:d1:c9:cf:eb:fe:0d:e5:64:34:36:0b:b4:
d2:1a:c1:57:77:cb:38:bb:01:b4:26:2f:23:2f:b3:93:19:9e:
4b:24:d2:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6D5Io4tY3D+f6fqZWLpE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODhkYjE3NjY2ZmE5NTE1YWYzMWRiYTA5NWQwZjI1MGY4
NGJkZjcwHhcNMjUwNjI5MDUwMTExWhcNMjUwNjMwMDUwMTExWjAzMTEwLwYDVQQD
EyhkODgwM2IzZmY0MjZhNzY0MTQ4NWMyMzBjYWQyNTg4NjUyMWZkMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst8ItWnn9/sccO1akjanfQt+7yOy
jnJwU1AYTJTSD3/p9M1gV1/PuSPNHEn0TlYLAFRttOhIwMk0JDtoaosWa/rljWMe
RMhod/Vw26F3Pan4piM1SZ3afk4fcGAEYeZK8hFy7D/Ts0nf3MhYhDxZHfQrJnmA
rVQJNVVBjedSVZw2EAXQ1XrIpUpnF5jzH7aly65EnGjIQifdqoBvUIoX+XVj+0aa
OHQ7Kt5l9Kyz+FD2Jx9Wh3A1mrVGIdMdYAzTmhCmo5MuEW9VotIbHWxnA60mVfqb
iOvL2kHBMY6PojOkq9/2PUTKKaBjo9xrbxxns8Kj2ULypuJVMzuutqDXKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiAOz/0JqdkFIXCMMrSWIZSH9IDMB8GA1UdIwQY
MBaAFNWI2xdmb6lRWvMdugldDyUPhL33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODIt
MzE4OGU5ZDFmNWEwLzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODItMzE4OGU5ZDFmNWEw
LzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVSxvADv
97Os4OGmql2PTtGcQcgEpYXDzalkEo3DxLj5VhlfcJJeE+cehk0kJzHIg8oKVuul
OYaryYchEuxLfqnA/9wxJ7CPtwdzZ8L7Rlzu7/PUGBYO1gb1tOcpu7CH4S7MNald
pBbz8ZHpXx6WZAu/3nhrRwYm23uXQ4IOWkGwAtSgjbStuHIYn7PYOJkQ/akFS4qx
zHEIqdUONNU+jHt75rbmijQfNfQH7btyQVKP9OnKpl14ZnlyyuGwmgwMdHUAOuHB
4SVLtgU6M2LH3VnkvF3FLnMiw8lbFl2g0cnP6/4N5WQ0Ngu00hrBV3fLOLsBtCYv
Iy+zkxmeSyTSYQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:42 2025 by rpki-client