Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: 486sSDsIMveP6lDuu0gsPtufz+WnNsuPzFzgILaWXC4=
Subject key identifier: 2D:90:FF:EA:79:23:0E:95:32:8C:0E:23:C2:BA:56:40:62:06:67:8F
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 0197BA7D84D82954FEDB2C644B36F39C652C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 036A
Signing time: Sun 29 Jun 2025 07:01:17 +0000
Manifest this update: Sun 29 Jun 2025 07:01:17 +0000
Manifest next update: Mon 30 Jun 2025 07:01:17 +0000
Files and hashes: 1: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=)
2: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: OJhQZJmTb4flAAfg+TMinXS1Zz1bBi8Bz4cK8bwKv5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:84:d8:29:54:fe:db:2c:64:4b:36:f3:9c:65:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Jun 29 07:01:17 2025 GMT
Not After : Jun 30 07:01:17 2025 GMT
Subject: CN=2d90ffea79230e95328c0e23c2ba56406206678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:dc:0d:db:28:5e:49:ff:19:88:c0:5e:62:
52:df:b1:aa:62:3c:a8:f0:8e:a9:75:94:e2:c8:c5:
95:6a:d3:a5:7a:51:2b:6b:fe:a2:83:ff:4d:f2:c1:
17:ae:43:60:a4:11:d6:9a:64:7f:e5:3a:51:bf:df:
10:4c:f5:18:39:90:33:db:40:f0:8b:87:c0:fb:04:
76:d8:9f:12:81:a7:0b:75:96:30:f4:a0:1a:63:b2:
6f:4b:72:10:55:27:17:19:e8:ef:3f:05:d3:2e:59:
21:ab:d3:1e:98:7f:19:10:2e:8d:28:3f:3b:73:85:
29:1d:56:16:6c:41:d3:d9:37:e3:39:33:79:6c:a8:
4a:9a:2c:87:34:0e:b9:e8:2f:cd:fd:35:d3:6c:47:
b3:ae:c2:90:b1:de:79:18:7a:93:a1:13:b8:72:54:
76:67:89:24:fc:9e:05:1a:83:38:a2:19:32:00:73:
90:ec:b2:7e:12:64:61:9a:8d:13:f1:7e:76:dc:90:
ac:34:0a:06:d6:f1:ec:bf:24:65:5a:f2:0f:1d:f6:
4e:21:2f:b2:63:12:cd:c0:63:90:a2:fa:70:07:64:
2e:76:f4:30:75:21:60:77:18:38:30:83:be:23:f4:
ef:17:d0:8e:dc:1d:b0:9d:f4:71:3e:72:93:5d:32:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:90:FF:EA:79:23:0E:95:32:8C:0E:23:C2:BA:56:40:62:06:67:8F
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:f3:44:c5:83:85:5c:19:0d:d7:1c:cc:21:b2:ea:fb:2b:
dd:2d:91:8c:fc:8a:15:ad:6a:0c:b2:6e:04:14:9f:b9:19:f7:
a9:b0:13:7d:fc:4e:b8:88:38:87:d6:84:21:92:48:fa:7b:2b:
ef:2a:49:7a:6d:13:de:ce:66:fd:1c:9a:12:8e:a7:2b:38:23:
f8:93:e1:79:62:62:c0:44:0d:25:d9:b6:ac:c4:75:61:ee:b2:
a2:0d:03:8b:3a:65:bc:c4:1c:54:c9:08:95:af:23:13:e0:da:
97:0e:84:15:82:e1:7c:f2:45:5f:64:e3:d9:6d:76:c2:e4:b5:
05:11:a8:68:42:03:22:59:ae:00:b3:16:58:b2:bb:78:01:7e:
fb:87:76:24:7f:72:78:22:fb:bc:b0:96:0d:a0:ce:e4:f6:94:
ef:10:7e:20:11:fc:1e:73:fb:19:ad:ac:42:5b:6e:0c:ea:2c:
46:35:a9:e8:96:da:2e:06:38:fe:e3:a2:2e:d3:1b:f7:51:b3:
e2:5f:aa:15:f3:5e:7c:ef:97:a7:5d:b3:21:54:3b:7a:99:d2:
40:14:eb:40:cc:5b:df:5d:cb:04:8c:2a:d5:47:ec:d6:85:4f:
44:4a:44:c2:43:c4:a5:8a:82:8a:7f:6b:0c:64:3e:cf:c1:4c:
01:b6:67:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fYTYKVT+2yxkSzbznGUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhODg2ZDU1ODdlYzg1ZjcxMjQyY2Q1N2NlZDQwOTU0NDUy
ODE2OGQwHhcNMjUwNjI5MDcwMTE3WhcNMjUwNjMwMDcwMTE3WjAzMTEwLwYDVQQD
EygyZDkwZmZlYTc5MjMwZTk1MzI4YzBlMjNjMmJhNTY0MDYyMDY2NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GzcDdsoXkn/GYjAXmJS37GqYjyo
8I6pdZTiyMWVatOlelEra/6ig/9N8sEXrkNgpBHWmmR/5TpRv98QTPUYOZAz20Dw
i4fA+wR22J8SgacLdZYw9KAaY7JvS3IQVScXGejvPwXTLlkhq9MemH8ZEC6NKD87
c4UpHVYWbEHT2TfjOTN5bKhKmiyHNA656C/N/TXTbEezrsKQsd55GHqToRO4clR2
Z4kk/J4FGoM4ohkyAHOQ7LJ+EmRhmo0T8X523JCsNAoG1vHsvyRlWvIPHfZOIS+y
YxLNwGOQovpwB2QudvQwdSFgdxg4MIO+I/TvF9CO3B2wnfRxPnKTXTLDZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2Q/+p5Iw6VMowOI8K6VkBiBmePMB8GA1UdIwQY
MBaAFMqIbVWH7IX3EkLNV87UCVRFKBaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjIt
YzdlMjUyMGM0Y2VhLzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjItYzdlMjUyMGM0Y2Vh
LzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5bzRMWD
hVwZDdcczCGy6vsr3S2RjPyKFa1qDLJuBBSfuRn3qbATffxOuIg4h9aEIZJI+nsr
7ypJem0T3s5m/RyaEo6nKzgj+JPheWJiwEQNJdm2rMR1Ye6yog0DizplvMQcVMkI
la8jE+Dalw6EFYLhfPJFX2Tj2W12wuS1BRGoaEIDIlmuALMWWLK7eAF++4d2JH9y
eCL7vLCWDaDO5PaU7xB+IBH8HnP7Ga2sQltuDOosRjWp6JbaLgY4/uOiLtMb91Gz
4l+qFfNefO+Xp12zIVQ7epnSQBTrQMxb313LBIwq1Ufs1oVPREpEwkPEpYqCin9r
DGQ+z8FMAbZn1A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:30:05 2025 by rpki-client