Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: zbZyD31JaRIToLzV/ygklcR8wjxDb9zTl0XTerK1p5Y=
Subject key identifier: 1C:34:F3:6B:4E:02:76:13:21:89:C5:E1:D6:F0:A3:F8:92:2A:14:F4
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 0197B70E7CA47869D11663E16CBEBFB91F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: ljfQLlKx1wexLzktnHJuMUU8VOGpv62FizNFvjctvg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7c:a4:78:69:d1:16:63:e1:6c:be:bf:b9:1f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=1c34f36b4e0276132189c5e1d6f0a3f8922a14f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:2f:ef:eb:22:2b:67:e6:e3:c6:87:48:2f:
89:19:e5:53:dd:18:ef:6e:ed:67:bf:35:da:98:48:
ca:ee:a2:d3:9f:c9:c7:10:90:a0:05:f6:0a:23:0d:
ea:c2:16:01:05:e8:97:d1:49:ef:7d:a8:d1:05:01:
b7:c4:19:eb:a5:3c:22:35:91:eb:0e:1f:f9:8c:42:
d6:c5:8c:73:7e:41:01:f8:ae:ba:50:c2:b3:2e:0e:
a9:22:17:34:48:0a:62:3b:07:6b:20:ee:6d:57:7d:
54:06:77:84:45:15:82:09:22:63:38:e6:4e:ac:53:
18:a3:92:00:d4:fd:0b:99:d0:af:1e:37:2c:b1:75:
57:7c:97:8c:31:e8:82:ec:69:8b:6c:e1:4b:f5:dd:
0a:c2:2c:2c:b9:f6:1f:6b:50:bc:10:e0:c5:72:43:
0f:9b:64:98:7a:02:74:6a:a2:03:dd:a6:b6:0b:f0:
45:2d:2c:e9:88:25:04:2f:14:44:a7:0f:de:94:84:
11:dd:88:c8:2a:8b:07:be:14:13:c7:dd:f6:5d:80:
2c:da:cd:29:1b:dd:86:a5:88:91:c4:c5:8f:ea:d5:
77:40:d3:5d:90:ac:45:5d:ff:f2:9b:d6:ce:c6:b9:
ee:9b:93:e4:5f:df:24:fb:9e:94:d1:c8:27:9c:9e:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:F3:6B:4E:02:76:13:21:89:C5:E1:D6:F0:A3:F8:92:2A:14:F4
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5e:0b:7d:72:5a:50:8a:f5:dc:2d:cb:4e:20:9e:2f:6f:7f:
2f:7e:89:a7:47:93:8c:77:4b:d3:41:84:db:6d:c7:7e:55:d9:
68:0b:34:1e:f5:ef:ab:99:ca:03:ae:8e:7c:85:ba:52:be:94:
fe:2d:ae:bc:a0:3d:4c:b7:ce:21:6c:1b:63:13:70:a7:1e:11:
02:72:33:7e:fe:bc:08:06:23:78:74:cc:8d:a5:2b:1c:fe:2f:
1f:eb:e7:32:cc:a5:60:43:17:03:2a:dc:cd:78:0d:b2:f4:fa:
bc:0d:ae:84:ff:06:42:e3:2f:ff:ec:bf:ab:d8:aa:91:cb:d4:
2e:79:0c:a8:47:21:72:96:b3:2b:a8:6d:93:b1:aa:13:cf:b8:
02:ba:c7:7e:0e:71:6b:d1:66:e2:f0:79:25:db:1f:bd:7b:16:
f9:f9:1f:ae:25:08:af:cb:ed:71:b8:e6:01:af:f1:1c:8c:c1:
fc:f0:4c:a6:54:0e:03:c5:ab:80:dd:08:7f:19:d9:a1:cb:41:
c1:9d:07:d3:62:53:20:3f:1d:ed:81:9e:51:87:66:96:dc:d0:
74:51:15:d6:37:d2:1a:0d:a4:b0:8f:e0:15:40:b1:fd:43:01:
ca:1a:06:4c:31:69:69:be:e5:e9:f8:be:66:c3:2b:9b:b7:81:
b2:56:0d:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DnykeGnRFmPhbL6/uR9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMGMyZGFjYWZkZmE1Mzk5N2VkM2IwYTcwZGZiYzI3MGE5
MzNiZjQwHhcNMjUwNjI4MTUwMTA5WhcNMjUwNjI5MTUwMTA5WjAzMTEwLwYDVQQD
EygxYzM0ZjM2YjRlMDI3NjEzMjE4OWM1ZTFkNmYwYTNmODkyMmExNGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Tsv7+siK2fm48aHSC+JGeVT3Rjv
bu1nvzXamEjK7qLTn8nHEJCgBfYKIw3qwhYBBeiX0UnvfajRBQG3xBnrpTwiNZHr
Dh/5jELWxYxzfkEB+K66UMKzLg6pIhc0SApiOwdrIO5tV31UBneERRWCCSJjOOZO
rFMYo5IA1P0LmdCvHjcssXVXfJeMMeiC7GmLbOFL9d0KwiwsufYfa1C8EODFckMP
m2SYegJ0aqID3aa2C/BFLSzpiCUELxREpw/elIQR3YjIKosHvhQTx932XYAs2s0p
G92GpYiRxMWP6tV3QNNdkKxFXf/ym9bOxrnum5PkX98k+56U0cgnnJ5b0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw082tOAnYTIYnF4dbwo/iSKhT0MB8GA1UdIwQY
MBaAFMoMLayv36U5l+07CnDfvCcKkzv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUt
OTllYzg4YzQ3NzYwLzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUtOTllYzg4YzQ3NzYw
LzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ14LfXJa
UIr13C3LTiCeL29/L36Jp0eTjHdL00GE223HflXZaAs0HvXvq5nKA66OfIW6Ur6U
/i2uvKA9TLfOIWwbYxNwpx4RAnIzfv68CAYjeHTMjaUrHP4vH+vnMsylYEMXAyrc
zXgNsvT6vA2uhP8GQuMv/+y/q9iqkcvULnkMqEchcpazK6htk7GqE8+4ArrHfg5x
a9Fm4vB5JdsfvXsW+fkfriUIr8vtcbjmAa/xHIzB/PBMplQOA8WrgN0IfxnZoctB
wZ0H02JTID8d7YGeUYdmltzQdFEV1jfSGg2ksI/gFUCx/UMByhoGTDFpab7l6fi+
ZsMrm7eBslYNfA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:22 2025 by rpki-client