Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: MdAFmmwb42XE/grUKlgAOXBKOOscQdcxBPr2fhh6zF8=
Subject key identifier: 24:C9:75:A4:72:BF:A3:52:87:3D:59:A9:9B:74:3B:14:29:A6:45:07
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 0197BA0F28C2C81D46185AB642C5312D01D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 05:00:44 +0000
Manifest this update: Sun 29 Jun 2025 05:00:44 +0000
Manifest next update: Mon 30 Jun 2025 05:00:44 +0000
Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: jfdkVBHdH3cDpAGaYdPtTQxBFdNIx26iShGxA/RegY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:28:c2:c8:1d:46:18:5a:b6:42:c5:31:2d:01:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Jun 29 05:00:44 2025 GMT
Not After : Jun 30 05:00:44 2025 GMT
Subject: CN=24c975a472bfa352873d59a99b743b1429a64507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:ce:9e:fa:ba:11:d7:d2:32:f4:b5:61:ac:
ac:47:54:37:81:e5:dc:04:09:3e:79:0f:d0:ad:86:
3b:ec:23:ef:53:b0:e1:eb:c8:07:59:1e:9e:ca:ff:
94:f3:8c:eb:f8:bf:2f:10:16:5a:cc:a1:ec:69:c2:
5a:c9:d3:78:95:b8:a2:7f:45:cb:80:38:86:bb:87:
9d:dc:e5:54:fe:56:bd:cb:31:48:5c:96:9c:1e:7a:
46:54:c9:ae:19:cb:18:6d:a3:d2:ed:47:68:a9:39:
ee:1c:0b:07:45:21:a8:30:c8:20:f9:1d:a3:f5:62:
35:5d:af:dd:e8:b7:a7:0b:8a:c3:da:02:cb:cf:87:
b0:1c:db:43:05:60:6a:1d:86:f7:d9:56:8b:fa:18:
5a:c5:86:8c:52:66:8a:60:1d:43:4e:a7:97:ca:94:
f3:33:04:34:95:30:0c:ce:12:1f:83:95:f8:05:09:
41:a3:03:56:8b:0f:81:0d:8a:5c:56:c2:b3:e0:c5:
62:22:ae:b2:29:5e:3b:23:70:d9:e7:8b:49:c6:8d:
7c:0c:33:f3:cb:b2:08:a1:9d:1b:fb:7c:ab:72:20:
71:84:65:e8:1c:be:03:1a:e6:4c:6b:e8:82:28:0e:
e9:b3:63:d1:d2:01:59:90:15:1b:b5:f0:d6:dd:be:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:75:A4:72:BF:A3:52:87:3D:59:A9:9B:74:3B:14:29:A6:45:07
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ac:36:c4:91:3c:cd:d9:b6:9a:fa:77:27:3d:f9:70:59:d4:
94:53:67:0b:50:fa:62:53:3e:5e:33:f1:ed:87:3b:dc:ad:df:
6e:b7:05:69:e6:e7:8d:3e:66:33:db:ef:e7:75:c3:88:fb:44:
65:e8:24:5c:2f:5e:ef:13:1d:59:29:e1:e0:fb:35:ad:b3:f5:
95:fc:97:e6:a2:3d:e8:1f:33:20:d6:f3:ec:a5:db:3e:68:20:
f9:49:69:39:e2:32:59:23:77:9b:2b:56:24:9b:0e:22:f2:38:
ff:8b:3b:93:b5:2d:e0:bf:81:e5:c6:5d:78:e0:ba:78:68:92:
22:fe:b3:e2:e5:e8:6a:68:ef:7f:33:ed:14:74:d1:a2:d3:e2:
8d:db:0e:96:e9:8b:d3:f4:33:f4:bc:3f:61:25:8d:4a:ea:4d:
b9:e6:de:1c:c2:bb:bf:42:43:93:cb:17:82:d1:db:43:50:70:
dc:6d:86:3c:3e:86:5f:96:93:9c:75:54:38:3b:78:4e:78:cf:
16:7d:07:15:56:81:32:4f:0e:26:83:87:34:34:2d:24:ca:5b:
46:ad:c6:42:e2:3c:c1:af:7c:96:b1:6c:68:18:94:36:08:7b:
38:9e:30:41:ca:1f:09:30:b5:25:70:f3:25:af:db:ba:d2:70:
ca:b4:69:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6DyjCyB1GGFq2QsUxLQHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ODdiYzEyZWIyZGUyOWExMDI2YjhmNTZiZThkNDY5ZjJm
NThjZjMwHhcNMjUwNjI5MDUwMDQ0WhcNMjUwNjMwMDUwMDQ0WjAzMTEwLwYDVQQD
EygyNGM5NzVhNDcyYmZhMzUyODczZDU5YTk5Yjc0M2IxNDI5YTY0NTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndbOnvq6EdfSMvS1YaysR1Q3geXc
BAk+eQ/QrYY77CPvU7Dh68gHWR6eyv+U84zr+L8vEBZazKHsacJaydN4lbiif0XL
gDiGu4ed3OVU/la9yzFIXJacHnpGVMmuGcsYbaPS7UdoqTnuHAsHRSGoMMgg+R2j
9WI1Xa/d6LenC4rD2gLLz4ewHNtDBWBqHYb32VaL+hhaxYaMUmaKYB1DTqeXypTz
MwQ0lTAMzhIfg5X4BQlBowNWiw+BDYpcVsKz4MViIq6yKV47I3DZ54tJxo18DDPz
y7IIoZ0b+3yrciBxhGXoHL4DGuZMa+iCKA7ps2PR0gFZkBUbtfDW3b70bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTJdaRyv6NShz1ZqZt0OxQppkUHMB8GA1UdIwQY
MBaAFLWHvBLrLeKaECa49Wvo1Gny9YzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80YzNlMTktYTQ4OS00ZTNhLWEzYTIt
N2U1MmU3NDljM2FkLzEvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80YzNlMTktYTQ4OS00ZTNhLWEzYTItN2U1MmU3NDljM2Fk
LzEvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKw2xJE8
zdm2mvp3Jz35cFnUlFNnC1D6YlM+XjPx7Yc73K3fbrcFaebnjT5mM9vv53XDiPtE
ZegkXC9e7xMdWSnh4Ps1rbP1lfyX5qI96B8zINbz7KXbPmgg+UlpOeIyWSN3mytW
JJsOIvI4/4s7k7Ut4L+B5cZdeOC6eGiSIv6z4uXoamjvfzPtFHTRotPijdsOlumL
0/Qz9Lw/YSWNSupNuebeHMK7v0JDk8sXgtHbQ1Bw3G2GPD6GX5aTnHVUODt4TnjP
Fn0HFVaBMk8OJoOHNDQtJMpbRq3GQuI8wa98lrFsaBiUNgh7OJ4wQcofCTC1JXDz
Ja/butJwyrRpyA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 12:24:57 2025 by rpki-client