Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: wuWhcAU69FY5hrN9fUwB934DLe11QtEfD+ih0VqIyVc=
Subject key identifier: 0B:F3:E7:3F:09:D6:8B:D1:95:C2:0A:7E:27:EF:EC:92:C9:F0:06:2E
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 0197B70E879E929AE61E68AF3983F57801AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 147E
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: Ke/GvLapg2fQQ1RfF0la/4NP05Exuo35J4pfH2RAXuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:87:9e:92:9a:e6:1e:68:af:39:83:f5:78:01:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=0bf3e73f09d68bd195c20a7e27efec92c9f0062e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:89:c1:f4:96:f9:bd:31:ad:ed:7f:30:e3:
83:e7:f8:65:6c:38:c6:f1:b9:03:3a:3f:5c:bc:f0:
2e:6d:07:15:68:14:6d:d6:5f:08:22:8a:4d:4b:fd:
c0:6b:66:0b:78:b6:84:5e:40:ad:62:6b:a9:ac:74:
37:2f:df:bf:4a:d8:7b:8a:bb:a8:c8:f8:69:00:3f:
8f:f0:07:47:9c:d0:6d:66:30:f5:ec:28:8d:53:eb:
80:d7:c1:24:52:8e:e3:3b:08:76:3d:1e:af:85:aa:
c2:83:e9:d3:02:f0:43:90:0a:ac:6e:fb:89:15:3d:
fe:3d:64:da:c7:0f:1a:83:9c:ee:d2:f0:58:d3:7e:
4d:61:92:ea:f9:a4:37:d6:64:3c:13:a9:42:a9:e1:
39:e9:47:f4:e4:de:75:b4:93:13:76:fe:fa:18:a6:
fc:a2:71:17:f8:50:fe:a8:48:9f:90:ad:5e:d3:1f:
3c:3d:b0:d0:b3:85:e5:20:b1:8d:a7:dc:78:c3:a2:
90:b4:a3:82:82:6d:fe:37:63:ea:93:f8:0e:18:41:
e7:71:bb:fb:81:12:35:2f:67:db:ff:0b:f0:98:77:
02:10:6e:81:eb:57:8d:71:78:c8:e7:9b:eb:f0:69:
b7:2d:7e:55:6d:49:3a:3a:d4:bf:a6:2b:ed:4e:ca:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:E7:3F:09:D6:8B:D1:95:C2:0A:7E:27:EF:EC:92:C9:F0:06:2E
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4e:58:1a:2f:b9:f9:cd:b8:e4:e6:82:fd:7b:3c:a7:1d:2a:
70:42:bc:b9:4e:fb:02:1f:8a:cf:ea:c9:d9:f1:28:58:63:56:
23:7e:98:be:3a:01:87:d2:19:62:35:9a:e2:7e:b0:f3:48:13:
87:06:28:4f:1c:f7:57:34:36:c0:eb:35:84:64:66:0a:50:f2:
9d:76:60:83:ec:0d:31:de:41:e5:ae:f6:00:8d:3b:c7:eb:e3:
8f:b7:49:20:3d:9d:92:71:6a:dd:cc:2d:08:15:37:9d:71:c0:
27:d3:12:c9:5d:e8:a0:6c:95:18:c1:d1:09:a8:25:3c:bf:a1:
48:67:18:52:5d:1a:14:f5:7d:dc:1d:1b:bb:d7:33:d3:44:0f:
cd:a2:0c:c1:31:a4:47:74:3b:e2:a4:82:73:2b:2c:f1:90:bc:
51:64:af:11:5b:ce:22:5a:f7:ac:63:c5:9b:47:37:1f:c6:cd:
7c:4c:7f:88:d1:4d:e5:d1:9f:b9:51:04:d1:9e:72:20:7d:73:
8d:0e:1f:61:60:77:1e:85:c6:d9:d8:c5:dd:56:3c:8f:77:9e:
29:6b:7b:8c:a9:f0:83:dc:46:f7:c1:f0:35:c5:f9:c5:6e:0b:
23:94:89:7c:80:cf:6c:86:02:b0:c6:c6:9b:5f:1e:e7:70:c7:
b0:5b:04:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DoeekprmHmivOYP1eAGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwY2VlYjI1Mzg0NWM2ZGNhMTkwZDM2MTZkYmEyM2YzN2Q4
YjYzOTcwHhcNMjUwNjI4MTUwMTEyWhcNMjUwNjI5MTUwMTEyWjAzMTEwLwYDVQQD
EygwYmYzZTczZjA5ZDY4YmQxOTVjMjBhN2UyN2VmZWM5MmM5ZjAwNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQuJwfSW+b0xre1/MOOD5/hlbDjG
8bkDOj9cvPAubQcVaBRt1l8IIopNS/3Aa2YLeLaEXkCtYmuprHQ3L9+/Sth7iruo
yPhpAD+P8AdHnNBtZjD17CiNU+uA18EkUo7jOwh2PR6vharCg+nTAvBDkAqsbvuJ
FT3+PWTaxw8ag5zu0vBY035NYZLq+aQ31mQ8E6lCqeE56Uf05N51tJMTdv76GKb8
onEX+FD+qEifkK1e0x88PbDQs4XlILGNp9x4w6KQtKOCgm3+N2Pqk/gOGEHncbv7
gRI1L2fb/wvwmHcCEG6B61eNcXjI55vr8Gm3LX5VbUk6OtS/pivtTsrYQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvz5z8J1ovRlcIKfifv7JLJ8AYuMB8GA1UdIwQY
MBaAFGDO6yU4RcbcoZDTYW26I/N9i2OXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUt
OWY5MzIyZDY3MzJiLzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUtOWY5MzIyZDY3MzJi
LzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArU5YGi+5
+c245OaC/Xs8px0qcEK8uU77Ah+Kz+rJ2fEoWGNWI36YvjoBh9IZYjWa4n6w80gT
hwYoTxz3VzQ2wOs1hGRmClDynXZgg+wNMd5B5a72AI07x+vjj7dJID2dknFq3cwt
CBU3nXHAJ9MSyV3ooGyVGMHRCaglPL+hSGcYUl0aFPV93B0bu9cz00QPzaIMwTGk
R3Q74qSCcyss8ZC8UWSvEVvOIlr3rGPFm0c3H8bNfEx/iNFN5dGfuVEE0Z5yIH1z
jQ4fYWB3HoXG2djF3VY8j3eeKWt7jKnwg9xG98HwNcX5xW4LI5SJfIDPbIYCsMbG
m18e53DHsFsEsw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:52 2025 by rpki-client