Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json)
Hash identifier: 9E2Vmwhks3zeSaYOyifUFb6wk0SAPmtx0ze410baj4U=
Subject key identifier: ED:3C:1B:FA:12:1D:71:1C:29:34:E1:CA:DF:89:76:8F:8B:32:A4:FA
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 0197B6A17E22DE7637792771D5920E02C6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
Manifest number: 12FB
Signing time: Sat 28 Jun 2025 13:02:06 +0000
Manifest this update: Sat 28 Jun 2025 13:02:06 +0000
Manifest next update: Sun 29 Jun 2025 13:02:06 +0000
Files and hashes: 1: YyOogR6T7jG6zD-5lx-V8y_JBFA.roa (hash: jTd/5MNcv4fqMfKWtnfVXAAWAN6UzlPvaAV2hpZQQJw=)
2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: 8xlPjpuKRzpVha7MOdBJTrC0Znt9OIVVyi8TwEidMZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7e:22:de:76:37:79:27:71:d5:92:0e:02:c6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Jun 28 13:02:06 2025 GMT
Not After : Jun 29 13:02:06 2025 GMT
Subject: CN=ed3c1bfa121d711c2934e1cadf89768f8b32a4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:f8:d0:77:cb:4a:dc:c8:88:d1:60:29:d1:
3e:92:e2:a2:e4:2e:84:6b:aa:d9:37:bb:38:eb:a2:
32:fd:b1:ac:7a:93:4a:10:b6:99:ae:0c:63:c7:2f:
45:22:90:28:52:2b:75:17:29:e6:c4:9e:d7:0c:0a:
9b:75:f2:68:ad:3b:a6:04:61:82:f4:46:70:4c:4b:
75:6b:3b:f9:40:ad:54:d6:cb:43:30:e3:9e:ba:80:
db:c7:08:8f:59:53:41:f8:92:71:de:07:47:0e:a4:
84:ef:b9:d7:1c:84:82:36:b8:2a:e3:7e:f4:98:45:
f1:30:3a:97:6b:0d:ae:cb:a9:68:d8:88:3d:9f:25:
fd:99:23:ca:e5:ac:52:f8:15:41:26:36:ca:46:10:
b8:38:e1:c8:a3:3d:1c:d0:5e:80:53:1e:25:97:1d:
6d:01:97:5f:5a:c7:11:05:dc:a2:e3:d8:79:52:bb:
f2:25:a8:56:fd:0b:bb:2a:f2:6a:f0:49:93:0b:42:
ac:db:83:a1:f9:61:b9:28:18:50:99:00:4b:3e:0f:
5f:41:cc:c9:fb:07:04:9d:eb:db:95:72:fc:8e:ec:
15:b3:d0:b1:1c:49:8c:46:e1:51:c9:00:2a:a4:44:
b3:d4:98:92:e6:3a:42:34:56:47:c2:60:c5:ee:71:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:1B:FA:12:1D:71:1C:29:34:E1:CA:DF:89:76:8F:8B:32:A4:FA
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:78:8a:88:3b:31:46:c7:0c:18:e3:2e:ad:fa:d2:c5:4b:d3:
a6:25:87:4a:2d:64:e8:21:a8:77:b7:67:14:34:0c:fd:a4:46:
4b:f9:f7:ea:b9:3e:21:81:4e:6e:51:ed:14:85:77:ae:d6:4b:
1e:f9:de:fd:52:a4:a2:7e:c9:8c:64:14:61:35:76:86:b3:bb:
05:47:15:75:a3:90:64:85:d9:96:ac:68:7d:de:ca:8a:96:d3:
d7:e2:15:9f:4f:7a:b9:78:aa:18:4e:b0:37:cc:dc:91:2e:e8:
90:b0:9a:f6:82:d9:b8:bf:a6:eb:60:67:84:3e:ed:f2:3d:88:
f8:c7:4d:89:0e:81:55:a1:99:d1:d8:36:d5:40:58:3b:cb:ef:
29:d1:ae:c6:fe:71:f6:0b:b4:4d:13:2f:03:ba:1a:d7:7e:02:
05:12:45:a7:a1:ee:9a:bd:63:3e:98:98:d5:81:27:9d:c8:8c:
d8:05:89:a9:49:12:76:48:6d:18:75:b6:02:57:e3:2c:b0:20:
eb:40:d5:f2:76:c4:25:7b:69:3e:00:ee:7c:29:a3:1e:8a:3d:
e7:c0:a0:e5:c2:14:99:7a:ce:3b:59:2c:10:14:ba:2c:e1:25:
d6:af:ab:84:31:5e:62:6d:1a:26:05:4a:85:42:3e:e2:46:d9:
fc:63:c6:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oX4i3nY3eSdx1ZIOAsa0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNTU2NTZjNjlkNTUzZGE5MmI3ODM4NTBlMTViMTcwNGU4
NzZkOTMwHhcNMjUwNjI4MTMwMjA2WhcNMjUwNjI5MTMwMjA2WjAzMTEwLwYDVQQD
EyhlZDNjMWJmYTEyMWQ3MTFjMjkzNGUxY2FkZjg5NzY4ZjhiMzJhNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pH40HfLStzIiNFgKdE+kuKi5C6E
a6rZN7s466Iy/bGsepNKELaZrgxjxy9FIpAoUit1FynmxJ7XDAqbdfJorTumBGGC
9EZwTEt1azv5QK1U1stDMOOeuoDbxwiPWVNB+JJx3gdHDqSE77nXHISCNrgq4370
mEXxMDqXaw2uy6lo2Ig9nyX9mSPK5axS+BVBJjbKRhC4OOHIoz0c0F6AUx4llx1t
AZdfWscRBdyi49h5UrvyJahW/Qu7KvJq8EmTC0Ks24Oh+WG5KBhQmQBLPg9fQczJ
+wcEnevblXL8juwVs9CxHEmMRuFRyQAqpESz1JiS5jpCNFZHwmDF7nGa7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO08G/oSHXEcKTThyt+Jdo+LMqT6MB8GA1UdIwQY
MBaAFMtVZWxp1VPakreDhQ4VsXBOh22TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTFWbGJHblZVOXFTdDRPRkRoV3hjRTZIYlpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80ZTIxNTAtNjY5ZC00NTU0LWI3Nzkt
MmJiODg2MWEzZTRkLzEveTFWbGJHblZVOXFTdDRPRkRoV3hjRTZIYlpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy80ZTIxNTAtNjY5ZC00NTU0LWI3NzktMmJiODg2MWEzZTRk
LzEveTFWbGJHblZVOXFTdDRPRkRoV3hjRTZIYlpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgniKiDsx
RscMGOMurfrSxUvTpiWHSi1k6CGod7dnFDQM/aRGS/n36rk+IYFOblHtFIV3rtZL
Hvne/VKkon7JjGQUYTV2hrO7BUcVdaOQZIXZlqxofd7KipbT1+IVn096uXiqGE6w
N8zckS7okLCa9oLZuL+m62BnhD7t8j2I+MdNiQ6BVaGZ0dg21UBYO8vvKdGuxv5x
9gu0TRMvA7oa134CBRJFp6Humr1jPpiY1YEnnciM2AWJqUkSdkhtGHW2AlfjLLAg
60DV8nbEJXtpPgDufCmjHoo958Cg5cIUmXrOO1ksEBS6LOEl1q+rhDFeYm0aJgVK
hUI+4kbZ/GPGGg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:22 2025 by rpki-client