Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
File: y9lerW0qHa8u9oestMKedgdrKAk.mft (raw, json)
Hash identifier: /cnphndrr1fJB6redx4lpVFp46zYB/1q6Z0416CN1ww=
Subject key identifier: 32:81:38:DE:C9:24:6F:54:D3:05:D0:CA:D5:19:58:59:20:59:54:83
Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Certificate serial: 0197B7B37212DB8C1220AD22DB8EC184332D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
Manifest number: 0997
Signing time: Sat 28 Jun 2025 18:01:19 +0000
Manifest this update: Sat 28 Jun 2025 18:01:19 +0000
Manifest next update: Sun 29 Jun 2025 18:01:19 +0000
Files and hashes: 1: dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa (hash: R+7BGQyfLFShlywgi4Re33H2XJ0XnH/YSJRVXJB4EDE=)
2: y9lerW0qHa8u9oestMKedgdrKAk.crl (hash: IDOwTy8eU4ayT5cbTkOltCNulpzDFRG9tvLr5o8iVPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:72:12:db:8c:12:20:ad:22:db:8e:c1:84:33:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Validity
Not Before: Jun 28 18:01:19 2025 GMT
Not After : Jun 29 18:01:19 2025 GMT
Subject: CN=328138dec9246f54d305d0cad519585920595483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:40:8b:32:67:24:9a:22:90:8a:bf:3d:af:
6b:cf:71:40:e3:25:dc:73:00:03:56:ba:37:d2:96:
f8:57:15:d9:7a:d6:f3:3f:f8:16:b8:21:4e:0c:2a:
41:90:5c:c9:be:46:9e:9d:73:5a:9d:c4:73:e9:9b:
ab:3b:3a:be:2d:ff:6f:68:d6:2c:de:83:60:e0:2e:
fb:a8:88:0d:a0:54:e4:18:12:4d:c1:ce:3d:4d:3b:
6f:3f:a4:4c:2c:0f:e2:d9:e3:14:11:3f:1d:6d:c5:
fc:60:ec:59:12:fa:f5:fb:9d:14:13:b4:64:70:82:
6d:e7:75:4a:f0:4f:f6:94:46:f4:36:3a:b8:fd:cf:
24:9f:18:96:5e:56:33:1b:04:99:8f:15:07:99:dc:
c0:3b:fe:f4:76:cf:1f:cd:38:05:74:6c:4e:69:8c:
0a:cf:40:dd:fc:89:d7:ae:b3:5f:02:0f:1e:4f:27:
bb:7d:3f:d6:85:5f:1f:ff:9a:93:a5:88:d6:8f:80:
2d:fc:61:5e:c0:f0:65:99:c9:de:3c:e0:26:29:ec:
11:ee:78:91:25:64:01:88:c8:9a:48:7c:b8:ef:f8:
0f:27:9e:7b:d7:62:f8:9d:8b:11:58:d8:b9:ff:00:
cd:09:87:3f:a8:0e:c3:fe:02:7b:ff:b6:ac:7b:e1:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:38:DE:C9:24:6F:54:D3:05:D0:CA:D5:19:58:59:20:59:54:83
X509v3 Authority Key Identifier:
keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c5:23:11:f6:f2:29:b8:60:dd:14:fc:ec:8a:83:1e:3a:ad:
35:5c:4b:d8:1b:ba:db:e1:59:f6:fc:62:a5:c3:cd:84:90:fd:
07:0c:3b:26:fe:bc:c7:07:a6:6c:dd:2a:8c:7a:80:32:31:90:
b4:65:7d:5d:b9:4b:49:35:01:2b:39:ca:34:52:f0:39:9b:0b:
5c:82:3c:58:e1:d8:f8:76:84:a8:1c:ae:4a:d2:18:58:8f:39:
85:d1:70:74:20:02:4f:d8:93:6f:4d:30:4b:9c:b8:4f:1e:d5:
8b:38:8c:9e:d7:2d:ae:97:7e:be:81:b3:ea:46:e6:5f:e3:4c:
4f:5e:a6:d4:a0:f6:29:4a:d5:5f:2f:7e:f4:68:1c:fd:52:db:
98:85:1e:fa:e3:1d:ed:d6:e7:04:89:dd:7e:d4:da:38:5a:ce:
3c:f9:b3:57:e1:10:75:45:32:02:f4:cd:33:c7:26:3d:27:38:
55:c3:21:0e:ab:68:2d:1c:a8:e2:5e:d9:49:4f:34:d6:36:bb:
57:5e:fd:65:58:c2:60:c5:a5:91:51:04:6a:99:a5:ab:76:29:
6c:b4:b6:9d:1b:c7:29:06:b9:97:7c:12:11:30:5a:70:c6:0b:
87:9b:22:41:48:aa:7e:33:35:cf:92:47:22:e6:f4:ef:fc:6d:
ce:3b:53:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3IS24wSIK0i247BhDMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDk1ZWFkNmQyYTFkYWYyZWY2ODdhY2I0YzI5ZTc2MDc2
YjI4MDkwHhcNMjUwNjI4MTgwMTE5WhcNMjUwNjI5MTgwMTE5WjAzMTEwLwYDVQQD
EygzMjgxMzhkZWM5MjQ2ZjU0ZDMwNWQwY2FkNTE5NTg1OTIwNTk1NDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE9AizJnJJoikIq/Pa9rz3FA4yXc
cwADVro30pb4VxXZetbzP/gWuCFODCpBkFzJvkaenXNancRz6ZurOzq+Lf9vaNYs
3oNg4C77qIgNoFTkGBJNwc49TTtvP6RMLA/i2eMUET8dbcX8YOxZEvr1+50UE7Rk
cIJt53VK8E/2lEb0Njq4/c8knxiWXlYzGwSZjxUHmdzAO/70ds8fzTgFdGxOaYwK
z0Dd/InXrrNfAg8eTye7fT/WhV8f/5qTpYjWj4At/GFewPBlmcnePOAmKewR7niR
JWQBiMiaSHy47/gPJ55712L4nYsRWNi5/wDNCYc/qA7D/gJ7/7ase+FncQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKBON7JJG9U0wXQytUZWFkgWVSDMB8GA1UdIwQY
MBaAFMvZXq1tKh2vLvaHrLTCnnYHaygJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlsZXJXMHFIYTh1OW9lc3RNS2VkZ2RyS0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kMTY0NjMtODliZS00ZjViLWIyZjIt
YWNjNDFjYWNmN2UxLzEveTlsZXJXMHFIYTh1OW9lc3RNS2VkZ2RyS0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kMTY0NjMtODliZS00ZjViLWIyZjItYWNjNDFjYWNmN2Ux
LzEveTlsZXJXMHFIYTh1OW9lc3RNS2VkZ2RyS0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsUjEfby
Kbhg3RT87IqDHjqtNVxL2Bu62+FZ9vxipcPNhJD9Bww7Jv68xwembN0qjHqAMjGQ
tGV9XblLSTUBKznKNFLwOZsLXII8WOHY+HaEqByuStIYWI85hdFwdCACT9iTb00w
S5y4Tx7ViziMntctrpd+voGz6kbmX+NMT16m1KD2KUrVXy9+9Ggc/VLbmIUe+uMd
7dbnBIndftTaOFrOPPmzV+EQdUUyAvTNM8cmPSc4VcMhDqtoLRyo4l7ZSU801ja7
V179ZVjCYMWlkVEEapmlq3YpbLS2nRvHKQa5l3wSETBacMYLh5siQUiqfjM1z5JH
Iub07/xtzjtTMA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:19 2025 by rpki-client