Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: pUnuo7tcHR9GCLfO8FBSHuefRIuBS3aYvKpJrCbhal8=
Subject key identifier: E6:32:42:4D:F9:24:AF:A1:71:21:F6:59:40:E3:A7:E4:C2:23:76:C6
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 0197B8FD0320C35F36E500123E60A62269B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 00:01:18 +0000
Manifest this update: Sun 29 Jun 2025 00:01:18 +0000
Manifest next update: Mon 30 Jun 2025 00:01:18 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: d6ev5Lq_SgXWZaDiFmTX8HhBeK8.roa (hash: 7NMCb/zeY3TNsahsQ59GZgDuhRzC5SGnnyyZpSOipqs=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: gVJ+oGHr2u5GC/VywiKKf2xAdjv3MCsPG10qSiQdiso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:03:20:c3:5f:36:e5:00:12:3e:60:a6:22:69:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jun 29 00:01:18 2025 GMT
Not After : Jun 30 00:01:18 2025 GMT
Subject: CN=e632424df924afa17121f65940e3a7e4c22376c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:bf:75:79:fa:ff:7f:36:8d:a6:78:a0:0d:
55:1d:b3:cb:1b:e0:1c:83:71:65:d7:70:72:78:27:
c6:8b:55:ce:d0:b4:99:06:f7:ef:7f:9d:72:87:d0:
56:1a:46:cf:d2:57:95:27:e9:e6:a4:b1:e5:e8:45:
c9:3d:3c:88:7f:eb:59:b3:7e:1f:60:2d:80:65:64:
ff:69:59:0d:4b:3c:46:2e:37:24:33:02:8a:21:cf:
20:f4:6e:f8:23:0a:8f:6c:3d:06:cb:69:56:b9:42:
2f:96:4d:f9:76:d8:c8:43:d3:00:ae:8c:48:af:8d:
7d:44:4c:1b:b4:35:86:72:c2:56:67:90:74:87:4d:
64:97:0b:81:fc:92:4f:bb:7e:d2:aa:c7:66:0c:e3:
41:16:14:bd:c4:d0:29:51:cf:e4:53:86:91:10:03:
5f:4f:71:81:69:4a:55:af:14:15:3a:5d:4f:78:f7:
d1:7b:a3:74:db:40:4b:e5:77:c4:e2:e6:9a:b6:18:
d3:bd:ae:3a:ba:18:d1:a4:6a:07:4a:4c:da:bc:02:
e1:7a:7a:53:81:82:87:8d:01:83:a4:ed:b6:a7:74:
5e:60:b1:97:d7:ba:5b:b0:dc:af:0f:54:c2:74:be:
d7:2c:99:e4:1b:dc:1d:7f:fc:cc:78:3d:d1:82:fc:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:32:42:4D:F9:24:AF:A1:71:21:F6:59:40:E3:A7:E4:C2:23:76:C6
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8f:8e:77:dd:e0:75:c9:76:55:6a:2e:65:fb:29:e6:f2:9c:
b2:bb:94:d1:99:2a:67:10:0f:c9:ff:a9:b8:34:84:d3:0b:de:
46:5f:88:bc:b3:56:3a:1f:e7:b4:10:c1:24:4a:25:1d:e1:6e:
5d:e2:97:f2:90:11:52:f1:4d:b6:7f:4e:b3:6f:f7:63:7a:bd:
9d:7a:06:d0:c5:77:8b:c9:a1:f4:35:33:dd:3e:a3:cb:af:08:
1d:78:59:34:61:3c:e0:4e:4d:1e:67:b6:c4:82:ba:2b:3e:d4:
4b:63:19:e2:32:60:50:a6:9c:93:f0:2c:da:2c:25:13:12:22:
b8:ff:8d:df:16:c1:3d:a3:af:2e:39:4f:65:81:d5:2e:4e:f0:
00:92:f8:ed:b4:4d:11:02:50:c2:c5:71:04:57:a3:6d:1e:2c:
65:3d:87:e0:01:34:d5:99:a6:86:88:b4:70:50:dc:1d:62:93:
22:39:85:19:a0:95:1e:e8:10:42:e8:5b:1a:d4:f0:a6:02:48:
23:6c:21:66:d6:8c:0a:a3:99:4a:37:c7:15:01:41:26:bc:83:
d4:d0:eb:da:f7:57:37:bb:63:96:5e:82:13:04:6f:7a:0d:0d:
3a:7f:e4:a5:0d:ac:09:49:7c:ad:c0:ad:ec:fe:ab:5f:c7:82:
20:03:91:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/QMgw1825QASPmCmImmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy
NDlhMzMwHhcNMjUwNjI5MDAwMTE4WhcNMjUwNjMwMDAwMTE4WjAzMTEwLwYDVQQD
EyhlNjMyNDI0ZGY5MjRhZmExNzEyMWY2NTk0MGUzYTdlNGMyMjM3NmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzq/dXn6/382jaZ4oA1VHbPLG+Ac
g3Fl13ByeCfGi1XO0LSZBvfvf51yh9BWGkbP0leVJ+nmpLHl6EXJPTyIf+tZs34f
YC2AZWT/aVkNSzxGLjckMwKKIc8g9G74IwqPbD0Gy2lWuUIvlk35dtjIQ9MAroxI
r419REwbtDWGcsJWZ5B0h01klwuB/JJPu37SqsdmDONBFhS9xNApUc/kU4aREANf
T3GBaUpVrxQVOl1PePfRe6N020BL5XfE4uaathjTva46uhjRpGoHSkzavALhenpT
gYKHjQGDpO22p3ReYLGX17pbsNyvD1TCdL7XLJnkG9wdf/zMeD3RgvxyjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYyQk35JK+hcSH2WUDjp+TCI3bGMB8GA1UdIwQY
MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt
MzVlZDViNTNkYTA1LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1
LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABY+Od93g
dcl2VWouZfsp5vKcsruU0ZkqZxAPyf+puDSE0wveRl+IvLNWOh/ntBDBJEolHeFu
XeKX8pARUvFNtn9Os2/3Y3q9nXoG0MV3i8mh9DUz3T6jy68IHXhZNGE84E5NHme2
xIK6Kz7US2MZ4jJgUKack/As2iwlExIiuP+N3xbBPaOvLjlPZYHVLk7wAJL47bRN
EQJQwsVxBFejbR4sZT2H4AE01Zmmhoi0cFDcHWKTIjmFGaCVHugQQuhbGtTwpgJI
I2whZtaMCqOZSjfHFQFBJryD1NDr2vdXN7tjll6CEwRveg0NOn/kpQ2sCUl8rcCt
7P6rX8eCIAOR7Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:15:12 2025 by rpki-client