Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: g5qJSbXMB1mOJWU1lg8Y16SrdLtVY4Tp7Q5LKalliGc=
Subject key identifier: 8B:1C:25:F4:9F:DA:CA:A7:B8:29:E6:BC:C5:79:3E:44:21:99:35:62
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 0197BBC793FBE7D06A9560AD47B70ADA6211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 038B
Signing time: Sun 29 Jun 2025 13:01:48 +0000
Manifest this update: Sun 29 Jun 2025 13:01:48 +0000
Manifest next update: Mon 30 Jun 2025 13:01:48 +0000
Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: OxDFADQyMLvzCa9tz7vkU37MqYItb1ptPWuVPeFsmnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c7:93:fb:e7:d0:6a:95:60:ad:47:b7:0a:da:62:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Jun 29 13:01:48 2025 GMT
Not After : Jun 30 13:01:48 2025 GMT
Subject: CN=8b1c25f49fdacaa7b829e6bcc5793e4421993562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:fd:da:0e:08:91:e6:d5:3f:b2:0d:f3:00:
ea:df:ef:65:db:81:be:b1:5e:95:64:70:c5:f6:c1:
3b:e2:dc:61:eb:41:d5:ff:f1:57:4f:5e:39:79:20:
b1:e0:75:ab:19:be:b0:81:db:64:47:0b:b7:ae:e5:
16:a4:ad:59:8a:72:33:ba:d5:fe:a2:aa:0a:cc:d5:
17:a4:39:eb:df:f2:4b:ec:28:8a:a0:61:5e:8e:a5:
f9:09:2a:49:9d:60:24:04:9a:21:7e:87:4d:a9:5b:
a9:7e:f6:37:2c:c9:45:0a:57:6f:ef:a7:de:54:3e:
05:69:bb:db:87:f2:26:79:d6:9d:a6:d0:42:21:12:
ba:37:5b:0e:e3:37:79:f6:4f:ce:d6:54:7c:78:94:
ce:24:bd:8c:f3:65:a4:ea:2b:0e:8a:b0:9e:64:d2:
22:43:57:f5:80:f0:85:0e:fc:3b:71:19:23:5a:17:
50:ea:c8:f9:41:bc:b0:6d:51:e2:bf:8b:01:dd:a6:
29:65:7d:3b:12:f2:7a:00:7f:62:b1:37:65:5b:15:
4b:5f:48:d4:6a:40:2a:1a:c5:68:1a:8a:a4:ac:a5:
3d:0b:aa:dc:62:af:5f:34:03:e1:c2:d4:a2:28:0c:
a1:28:db:98:f6:de:f9:eb:30:66:1d:65:59:be:41:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1C:25:F4:9F:DA:CA:A7:B8:29:E6:BC:C5:79:3E:44:21:99:35:62
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:67:74:85:f7:22:f9:0d:51:2e:1b:c8:ad:5d:f1:0f:f4:
72:1b:3f:bc:b9:0a:28:27:c8:ea:a5:e4:33:24:c9:1b:53:bd:
d5:97:d4:ee:ca:34:16:91:60:ac:91:4e:77:51:cd:07:e1:ad:
57:69:49:27:93:c8:d6:57:c4:f8:de:14:c8:73:53:cd:ae:cf:
d1:78:dc:1c:f9:e8:e1:33:35:21:5c:7e:1b:48:b0:b9:b7:6d:
48:94:16:f2:1c:28:62:62:73:3a:59:05:9a:71:25:6e:40:88:
47:85:97:ac:59:b3:bb:67:cc:d7:ba:0a:31:2f:3c:ce:c8:90:
42:2d:48:4f:e7:0b:75:24:ce:96:0f:52:54:2c:66:11:ad:92:
47:77:03:36:fe:69:64:ea:ab:95:09:8a:f3:05:3f:70:68:96:
df:0a:0e:5c:b3:84:9d:96:da:6a:ec:2f:a9:13:6f:15:8d:b7:
06:93:89:f2:3e:2b:27:8c:17:63:10:28:00:8e:ac:7c:ee:c5:
0c:96:fb:39:9e:c8:28:94:e1:b3:b3:8f:2d:4e:4e:74:42:cc:
e9:ce:2d:21:bc:a3:dd:4b:88:48:f4:b2:32:b3:2c:f4:d0:c8:
a4:47:d0:cd:dd:b9:c9:ce:53:91:6e:a7:7d:58:15:3f:0d:26:
13:0e:4a:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7x5P759BqlWCtR7cK2mIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTk3Y2QxNGYzYTZiYzM0NGEyYzkzOGVlMGZkZWI1NGQy
MjEyNDAwHhcNMjUwNjI5MTMwMTQ4WhcNMjUwNjMwMTMwMTQ4WjAzMTEwLwYDVQQD
Eyg4YjFjMjVmNDlmZGFjYWE3YjgyOWU2YmNjNTc5M2U0NDIxOTkzNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOP92g4IkebVP7IN8wDq3+9l24G+
sV6VZHDF9sE74txh60HV//FXT145eSCx4HWrGb6wgdtkRwu3ruUWpK1ZinIzutX+
oqoKzNUXpDnr3/JL7CiKoGFejqX5CSpJnWAkBJohfodNqVupfvY3LMlFCldv76fe
VD4Fabvbh/ImedadptBCIRK6N1sO4zd59k/O1lR8eJTOJL2M82Wk6isOirCeZNIi
Q1f1gPCFDvw7cRkjWhdQ6sj5QbywbVHiv4sB3aYpZX07EvJ6AH9isTdlWxVLX0jU
akAqGsVoGoqkrKU9C6rcYq9fNAPhwtSiKAyhKNuY9t756zBmHWVZvkE0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIscJfSf2sqnuCnmvMV5PkQhmTViMB8GA1UdIwQY
MBaAFMuZfNFPOmvDRKLJOO4P3rVNIhJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQt
MTZlOGZlM2M1MDZmLzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQtMTZlOGZlM2M1MDZm
LzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZhndIX3
IvkNUS4byK1d8Q/0chs/vLkKKCfI6qXkMyTJG1O91ZfU7so0FpFgrJFOd1HNB+Gt
V2lJJ5PI1lfE+N4UyHNTza7P0XjcHPno4TM1IVx+G0iwubdtSJQW8hwoYmJzOlkF
mnElbkCIR4WXrFmzu2fM17oKMS88zsiQQi1IT+cLdSTOlg9SVCxmEa2SR3cDNv5p
ZOqrlQmK8wU/cGiW3woOXLOEnZbaauwvqRNvFY23BpOJ8j4rJ4wXYxAoAI6sfO7F
DJb7OZ7IKJThs7OPLU5OdELM6c4tIbyj3UuISPSyMrMs9NDIpEfQzd25yc5TkW6n
fVgVPw0mEw5KwA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 21:09:24 2025 by rpki-client