Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: rB6LqOdKBSnSBTviPI4n6F/+peNS/kmY42chgKQ1ovU=
Subject key identifier: 28:D0:9F:8D:19:BC:CF:BE:91:99:09:28:B9:36:AD:73:FC:7A:8E:C7
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 0197B7EA34A4DA1C938BF3C1AD96F53C0212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: F9Tgdgq/xx5ndiLHYcZHB+pzRKGWWShrR4DiIwucNNU=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:34:a4:da:1c:93:8b:f3:c1:ad:96:f5:3c:02:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=28d09f8d19bccfbe91990928b936ad73fc7a8ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:15:ce:0f:17:e8:bc:92:8f:1d:97:a2:4c:
49:f8:af:23:4f:82:c0:07:f8:eb:52:ee:b9:d6:4d:
31:04:09:c0:c5:97:bc:75:92:85:ee:ec:fb:38:e2:
1f:ef:c7:fe:a7:e9:4e:ab:20:61:a0:09:cf:fb:69:
8c:52:36:b0:d0:9d:2d:83:dd:e2:69:66:a2:67:67:
3b:57:8d:fb:e5:3f:1a:7c:c0:4c:ac:e6:df:f7:fc:
94:7a:a8:5b:58:3a:e6:f9:4e:03:5b:ad:56:00:18:
6e:82:0c:a5:d4:2b:ad:ce:7a:9c:b2:c3:b3:c6:3f:
93:1b:2d:cc:cc:e3:04:7f:66:24:fb:02:e5:6a:12:
b8:21:d6:21:21:96:3b:ce:fc:81:49:a6:41:42:ee:
f4:79:af:b7:78:c6:d0:e7:d5:4d:4c:3b:a8:25:b8:
40:4a:8e:f7:11:d1:b6:76:6d:37:e4:14:f1:af:0d:
c8:31:f5:21:ff:1a:41:33:5f:cb:e5:0d:56:54:32:
89:8d:03:14:2a:b6:f3:ee:1b:11:e7:0f:95:23:b1:
a5:ad:e6:46:71:6c:67:c0:43:b2:7d:47:f6:14:c7:
b6:bf:0d:bd:55:59:cb:bb:3d:0c:5b:64:96:74:cf:
d3:02:3f:f6:01:d2:26:cd:d3:68:7f:87:2e:ac:6f:
75:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D0:9F:8D:19:BC:CF:BE:91:99:09:28:B9:36:AD:73:FC:7A:8E:C7
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b7:38:27:2a:c9:49:0e:3f:9f:26:a1:9e:7a:72:39:7f:e8:
36:5b:80:14:f7:01:54:50:25:6c:89:8c:54:c9:c6:2b:40:21:
a7:0e:df:a8:77:14:58:72:41:8f:97:8b:b8:99:16:29:51:52:
be:47:42:6b:ec:bc:54:7b:8c:cc:52:ee:61:e3:41:a2:27:37:
8e:be:b3:a2:43:ec:f2:30:b9:c0:17:ac:dc:56:d7:91:25:ff:
c5:0f:79:5f:71:96:07:c6:70:0e:92:f0:40:00:92:75:4a:8b:
58:4b:aa:a0:33:91:79:7a:e9:99:23:17:66:c9:ea:08:95:27:
21:73:b0:fc:cc:0e:ba:dd:38:3c:83:a6:67:c4:db:08:cf:ca:
47:ac:2c:fa:1b:f9:8f:71:4f:05:69:1e:8e:f1:c9:c3:0d:fa:
46:41:28:f1:dd:95:ad:c8:a1:de:69:36:bf:b7:b1:c3:84:ef:
a9:48:80:5b:8f:fa:e1:bb:c6:af:86:7f:ba:9d:96:8e:b4:b4:
ba:b4:a2:5b:4c:a1:b7:ab:0f:a0:6b:7d:83:cd:d2:c1:a4:4f:
56:7e:09:ff:a0:fa:e4:73:fb:3e:52:d0:2f:3f:1c:ec:d3:65:
20:e5:98:3d:81:65:39:a2:46:8f:8e:d5:0f:01:07:df:18:d7:
55:9e:18:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36jSk2hyTi/PBrZb1PAISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZTEwZGFjMWY3NzNjNTVhMjQ0NzUzMzQ2NzE5ZTg5OWY0
ZDQ0MzIwHhcNMjUwNjI4MTkwMTA4WhcNMjUwNjI5MTkwMTA4WjAzMTEwLwYDVQQD
EygyOGQwOWY4ZDE5YmNjZmJlOTE5OTA5MjhiOTM2YWQ3M2ZjN2E4ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXYVzg8X6LySjx2XokxJ+K8jT4LA
B/jrUu651k0xBAnAxZe8dZKF7uz7OOIf78f+p+lOqyBhoAnP+2mMUjaw0J0tg93i
aWaiZ2c7V4375T8afMBMrObf9/yUeqhbWDrm+U4DW61WABhuggyl1CutznqcssOz
xj+TGy3MzOMEf2Yk+wLlahK4IdYhIZY7zvyBSaZBQu70ea+3eMbQ59VNTDuoJbhA
So73EdG2dm035BTxrw3IMfUh/xpBM1/L5Q1WVDKJjQMUKrbz7hsR5w+VI7GlreZG
cWxnwEOyfUf2FMe2vw29VVnLuz0MW2SWdM/TAj/2AdImzdNof4curG91rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjQn40ZvM++kZkJKLk2rXP8eo7HMB8GA1UdIwQY
MBaAFGHhDawfdzxVokR1M0ZxnomfTUQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQt
NmRiM2NhZWY3M2Q5LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQtNmRiM2NhZWY3M2Q5
LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7c4JyrJ
SQ4/nyahnnpyOX/oNluAFPcBVFAlbImMVMnGK0Ahpw7fqHcUWHJBj5eLuJkWKVFS
vkdCa+y8VHuMzFLuYeNBoic3jr6zokPs8jC5wBes3FbXkSX/xQ95X3GWB8ZwDpLw
QACSdUqLWEuqoDOReXrpmSMXZsnqCJUnIXOw/MwOut04PIOmZ8TbCM/KR6ws+hv5
j3FPBWkejvHJww36RkEo8d2Vrcih3mk2v7exw4TvqUiAW4/64bvGr4Z/up2WjrS0
urSiW0yht6sPoGt9g83SwaRPVn4J/6D65HP7PlLQLz8c7NNlIOWYPYFlOaJGj47V
DwEH3xjXVZ4Ylg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:31 2025 by rpki-client