Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: UVmgUmQnRxxVZHNdt/Qj5JGG26EiRZWv2rYspc1m5bU=
Subject key identifier: 9B:EC:38:A0:B7:DB:9C:96:73:9C:6D:CC:53:3B:86:EA:0E:C6:E6:12
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 0197CB0354E135B6AEE0915B9512CE94BD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0CA6
Signing time: Wed 02 Jul 2025 12:01:22 +0000
Manifest this update: Wed 02 Jul 2025 12:01:22 +0000
Manifest next update: Thu 03 Jul 2025 12:01:22 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: mbR20EzudRIcLoItyLKK6olIjezBopxlMkHW8DNhKKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:03:54:e1:35:b6:ae:e0:91:5b:95:12:ce:94:bd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jul 2 12:01:22 2025 GMT
Not After : Jul 3 12:01:22 2025 GMT
Subject: CN=9bec38a0b7db9c96739c6dcc533b86ea0ec6e612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:ad:52:f4:14:7d:2a:e8:c4:5b:1e:c3:6a:
34:a0:9e:a3:c6:ef:c6:5f:71:eb:15:ff:38:45:95:
aa:a9:ca:15:1f:7e:6a:07:3b:cc:f1:f0:0b:6b:52:
74:71:c8:46:a0:b7:73:ae:0a:d8:e8:46:03:57:c3:
1c:ae:05:81:e2:c9:3f:e2:66:b8:a9:e4:12:77:02:
89:bb:7a:e3:52:65:08:c7:05:83:38:dd:f2:f8:fb:
60:2a:c1:d0:db:38:65:ed:dd:c2:54:3e:79:1d:18:
1e:73:8a:a1:db:b7:b9:2f:59:db:73:c4:e5:91:84:
6d:49:05:3e:a2:10:ba:0d:4b:1e:e3:c5:5d:35:a9:
e5:d3:f7:0f:08:01:44:cb:ee:a3:16:2a:82:41:89:
1e:98:b6:5b:ce:a5:2d:9b:f2:24:fa:6e:f4:5f:a3:
f3:cf:94:a7:27:ef:d7:ec:c2:16:70:17:15:e4:10:
e8:31:5c:a4:12:51:26:33:4c:96:dd:98:7e:03:c6:
d2:12:8f:e5:0f:34:33:57:04:ac:70:0c:ce:2c:31:
3b:cb:65:48:cf:cd:09:ef:04:ee:9e:df:ee:d2:93:
2b:14:60:1c:97:43:db:f7:83:8a:1d:9d:fd:e7:ba:
4a:c8:e9:9f:5b:63:99:4f:6b:b6:33:d1:a9:b4:ee:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EC:38:A0:B7:DB:9C:96:73:9C:6D:CC:53:3B:86:EA:0E:C6:E6:12
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3c:f1:9b:f2:4d:64:b7:45:86:93:ca:14:ba:2a:e2:b3:73:
0a:ed:af:2d:46:ef:b0:bb:96:26:ff:18:ec:2b:a3:97:47:e5:
84:f7:c7:82:e7:93:8a:d8:df:fe:9a:3d:8b:42:f9:f2:94:a2:
b6:d4:81:53:7b:88:e3:80:7d:0d:2c:f3:22:51:78:7b:3c:47:
5f:cd:54:3e:ad:f5:cb:d8:85:2d:77:94:fd:7d:b0:6d:33:ed:
f1:8c:e5:df:f5:23:10:d3:19:82:af:6e:7d:65:15:37:e5:ca:
86:10:26:10:52:f4:6f:46:50:58:1f:36:b1:0b:bd:86:b0:b2:
1d:2c:12:1f:ca:8e:5b:32:a6:5e:1f:fe:78:51:26:fa:05:a3:
49:15:47:21:9a:06:3c:bc:64:a9:a1:78:51:46:ce:63:54:88:
65:50:71:b4:8d:e8:a3:0c:e5:e4:ca:96:6c:91:15:b0:3f:76:
78:56:f5:a0:58:a8:5c:0a:e4:cc:9d:e1:79:04:f2:f1:58:16:
e1:ce:f0:4d:7e:b2:ac:9c:c3:d8:87:17:f8:8f:d5:c1:67:0d:
c3:56:33:3f:ca:62:cf:61:14:91:e5:68:d2:c9:27:8f:cf:a7:
a6:aa:c0:f3:81:7f:39:de:9d:4e:3d:7d:ce:98:91:9d:54:86:
cd:17:bb:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLA1ThNbau4JFblRLOlL0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1
M2Y4MzgwHhcNMjUwNzAyMTIwMTIyWhcNMjUwNzAzMTIwMTIyWjAzMTEwLwYDVQQD
Eyg5YmVjMzhhMGI3ZGI5Yzk2NzM5YzZkY2M1MzNiODZlYTBlYzZlNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z2tUvQUfSroxFsew2o0oJ6jxu/G
X3HrFf84RZWqqcoVH35qBzvM8fALa1J0cchGoLdzrgrY6EYDV8McrgWB4sk/4ma4
qeQSdwKJu3rjUmUIxwWDON3y+PtgKsHQ2zhl7d3CVD55HRgec4qh27e5L1nbc8Tl
kYRtSQU+ohC6DUse48VdNanl0/cPCAFEy+6jFiqCQYkemLZbzqUtm/Ik+m70X6Pz
z5SnJ+/X7MIWcBcV5BDoMVykElEmM0yW3Zh+A8bSEo/lDzQzVwSscAzOLDE7y2VI
z80J7wTunt/u0pMrFGAcl0Pb94OKHZ3957pKyOmfW2OZT2u2M9GptO4yFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvsOKC325yWc5xtzFM7huoOxuYSMB8GA1UdIwQY
MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt
MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5
LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTzxm/JN
ZLdFhpPKFLoq4rNzCu2vLUbvsLuWJv8Y7Cujl0flhPfHgueTitjf/po9i0L58pSi
ttSBU3uI44B9DSzzIlF4ezxHX81UPq31y9iFLXeU/X2wbTPt8Yzl3/UjENMZgq9u
fWUVN+XKhhAmEFL0b0ZQWB82sQu9hrCyHSwSH8qOWzKmXh/+eFEm+gWjSRVHIZoG
PLxkqaF4UUbOY1SIZVBxtI3oowzl5MqWbJEVsD92eFb1oFioXArkzJ3heQTy8VgW
4c7wTX6yrJzD2IcX+I/VwWcNw1YzP8piz2EUkeVo0sknj8+npqrA84F/Od6dTj19
zpiRnVSGzRe77Q==
-----END CERTIFICATE-----
Generated at Wed Jul 2 14:59:40 2025 by rpki-client