Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File: YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier: 7bHsWQkUb+VukbETpUBvuqCO9RuGz57LGSGdXcv0mY0=
Subject key identifier: 23:AA:8A:96:07:F9:45:31:AC:04:6F:C2:4F:7F:73:93:F1:85:FF:FE
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial: 0197B7EA3D22CDF6C24A9A4452274FBF0969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: 28tlQOScTYbuODS8bt-3134oQ2Y.roa (hash: ApQAF8/smS+nlVeOZQ4fBnuRp2Hs4aD0ZCJCSWvoUVo=)
2: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: VR3d/yW40synwXKGUG5ZqRGWOKtpkFbsqmqiYu4Ip08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3d:22:cd:f6:c2:4a:9a:44:52:27:4f:bf:09:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=23aa8a9607f94531ac046fc24f7f7393f185fffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:f0:65:69:3d:7d:75:cb:f7:47:60:d9:a5:
a9:92:14:27:c7:5b:49:49:86:73:47:55:8c:e6:b5:
b7:b8:73:78:76:dc:3e:22:36:f8:cb:d5:5a:92:0b:
ab:51:35:90:f8:93:d3:9c:71:12:02:e8:7a:c8:48:
00:0c:50:a1:18:cd:20:34:a3:30:10:c9:88:58:0b:
86:94:e9:b2:d8:49:88:8e:a3:6d:d8:3e:db:32:41:
25:bc:8b:3e:84:19:f6:c8:f2:a8:87:3d:7b:41:38:
c4:83:00:f0:ad:c8:5e:03:21:e3:98:99:f7:cd:9d:
de:ab:5c:b1:76:d7:79:63:dc:3a:a0:9f:c6:4b:d2:
84:01:f3:93:7c:1d:e4:89:a8:bd:1b:01:91:d1:a7:
d1:3e:b7:93:7b:69:8b:c3:1d:70:98:f9:4a:53:6c:
af:79:62:e5:3a:4d:26:a8:bb:4d:85:db:95:cc:63:
1c:78:03:9f:32:86:65:f6:41:b2:92:85:2e:5c:9f:
62:14:b6:d8:fd:97:56:85:3a:16:fa:ea:57:0d:de:
90:83:f1:dc:15:4f:65:bf:af:f4:33:67:78:da:02:
2a:9c:bf:ce:72:a3:79:ba:e5:da:d3:00:7d:1d:ed:
b4:49:c8:aa:38:12:ca:67:07:7e:bd:da:e1:a5:45:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:8A:96:07:F9:45:31:AC:04:6F:C2:4F:7F:73:93:F1:85:FF:FE
X509v3 Authority Key Identifier:
keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:68:89:4e:10:f4:e3:0b:a0:ac:17:e8:7c:82:f0:0a:2a:ca:
0d:89:31:4e:18:6c:ec:82:de:5a:f3:e6:66:6f:f5:1f:3d:8e:
ba:78:d8:f4:2a:2f:c5:e1:89:a6:50:3d:71:6f:c8:37:dd:97:
1c:4c:d6:dc:f0:6c:82:df:6c:27:37:c8:e5:9a:d5:5c:a6:65:
f2:47:f4:e4:e0:3f:8f:89:16:c8:1e:7f:89:15:55:6d:55:84:
8c:fe:81:17:df:2a:86:d5:a9:5e:b2:54:60:e2:d8:c0:6c:a2:
00:48:23:d4:65:84:03:c7:aa:95:3c:07:47:ae:fa:2b:c7:f3:
95:7b:6b:5b:15:29:40:eb:05:68:c0:0a:d4:61:93:77:17:f2:
f0:25:9e:e0:9c:95:3f:b3:7d:27:46:dc:f6:7f:22:77:41:c8:
14:c3:e2:76:1b:6d:a4:71:78:14:b5:4a:f2:42:ba:f7:e3:4e:
f7:44:0c:92:a7:01:df:3a:75:5a:f4:39:f8:d2:b0:5d:64:2f:
61:f6:0e:48:bf:05:f4:77:59:30:26:99:f1:fa:41:47:05:3c:
7c:39:51:41:03:38:15:16:2b:48:8a:8f:38:b6:aa:76:a2:78:
8b:6c:c9:4c:93:d9:a0:be:1c:03:6a:6d:78:d2:90:e1:09:e3:
12:66:4a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36j0izfbCSppEUidPvwlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGI3MGZmOWMyMmZmZTBiNzdmNDNmNDFjMDgwNzRkZTZm
MzZlMWIwHhcNMjUwNjI4MTkwMTEwWhcNMjUwNjI5MTkwMTEwWjAzMTEwLwYDVQQD
EygyM2FhOGE5NjA3Zjk0NTMxYWMwNDZmYzI0ZjdmNzM5M2YxODVmZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriTwZWk9fXXL90dg2aWpkhQnx1tJ
SYZzR1WM5rW3uHN4dtw+Ijb4y9VakgurUTWQ+JPTnHESAuh6yEgADFChGM0gNKMw
EMmIWAuGlOmy2EmIjqNt2D7bMkElvIs+hBn2yPKohz17QTjEgwDwrcheAyHjmJn3
zZ3eq1yxdtd5Y9w6oJ/GS9KEAfOTfB3kiai9GwGR0afRPreTe2mLwx1wmPlKU2yv
eWLlOk0mqLtNhduVzGMceAOfMoZl9kGykoUuXJ9iFLbY/ZdWhToW+upXDd6Qg/Hc
FU9lv6/0M2d42gIqnL/OcqN5uuXa0wB9He20SciqOBLKZwd+vdrhpUVdswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOqipYH+UUxrARvwk9/c5Pxhf/+MB8GA1UdIwQY
MBaAFGFLcP+cIv/gt39D9BwIB03m824bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NzFmMTctMGJmOC00YmExLWI3Njgt
NTVmZWMxMjUyYWIwLzEvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NzFmMTctMGJmOC00YmExLWI3NjgtNTVmZWMxMjUyYWIw
LzEvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmiJThD0
4wugrBfofILwCirKDYkxThhs7ILeWvPmZm/1Hz2OunjY9CovxeGJplA9cW/IN92X
HEzW3PBsgt9sJzfI5ZrVXKZl8kf05OA/j4kWyB5/iRVVbVWEjP6BF98qhtWpXrJU
YOLYwGyiAEgj1GWEA8eqlTwHR676K8fzlXtrWxUpQOsFaMAK1GGTdxfy8CWe4JyV
P7N9J0bc9n8id0HIFMPidhttpHF4FLVK8kK69+NO90QMkqcB3zp1WvQ5+NKwXWQv
YfYOSL8F9HdZMCaZ8fpBRwU8fDlRQQM4FRYrSIqPOLaqdqJ4i2zJTJPZoL4cA2pt
eNKQ4QnjEmZKkQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:56 2025 by rpki-client