Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: WtbGZAgZUlZBbEMahWkO1Npy4RZVe5PTUdBwf+VSSk4=
Subject key identifier: 04:1C:D5:15:30:7C:E9:B6:CD:6C:68:70:85:07:50:4C:7B:19:89:1D
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 0197B6A11A5F2D39458ECF9F7AA208FF1937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 1450
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: U7+4vo2RslDGvxCYCdJhPClfadvcMLlIcsjxCv2gW10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1a:5f:2d:39:45:8e:cf:9f:7a:a2:08:ff:19:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=041cd515307ce9b6cd6c68708507504c7b19891d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:62:de:ee:0e:fd:48:07:cb:7a:37:34:01:
91:23:5b:ad:31:d5:ca:6d:97:0f:4a:fb:30:8e:ab:
b7:00:86:2d:f9:76:90:92:92:96:1f:59:37:02:38:
f2:04:ae:95:59:a8:1d:f9:9b:08:a4:af:5f:e6:2d:
f3:39:62:b5:7b:71:95:f4:19:de:9e:56:d9:c7:f7:
85:4b:2d:86:1e:a9:3e:a8:83:91:43:84:53:c7:65:
0f:a9:6d:f4:63:a1:03:8b:e5:51:aa:d8:25:ec:93:
bf:e6:75:22:cd:cd:5a:21:8c:97:10:67:c4:ea:1e:
f3:fd:d9:63:c5:c9:9f:7d:e6:bb:fe:09:83:ff:24:
27:cd:6a:a8:fc:68:d9:03:48:9d:ea:bb:98:5b:be:
6b:93:4b:46:78:37:47:14:bb:ac:7e:b0:12:6d:24:
0b:14:75:53:72:d5:12:1d:5f:04:ea:40:ac:06:57:
83:4c:25:33:dc:8d:52:bc:ff:da:9b:e8:68:be:96:
67:c9:fe:c6:cf:8e:49:7e:9e:b9:35:38:e0:2f:6b:
b5:a6:21:42:91:50:c8:bf:db:c1:5f:ea:a7:28:d3:
9c:6c:25:c4:f0:81:fa:06:17:3a:04:8d:8c:4d:5d:
17:d5:2b:e8:1b:53:92:8e:d5:ef:b1:8e:5a:8f:99:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:D5:15:30:7C:E9:B6:CD:6C:68:70:85:07:50:4C:7B:19:89:1D
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9d:74:c8:8b:62:26:95:77:2f:ea:d1:b8:3c:df:c0:5c:76:
a6:8a:5d:eb:c8:3a:9f:9b:46:fc:ee:1f:fa:ad:b7:b5:aa:1b:
3e:30:eb:50:dc:cb:c9:c9:ee:28:f3:79:12:06:c2:8d:5c:ad:
71:22:2f:65:36:5c:de:8e:da:9e:c1:99:a8:b8:37:28:08:82:
7c:de:5c:0c:12:c4:de:45:d1:e1:83:ec:2f:fb:6f:7b:47:3d:
9b:20:8e:b8:78:62:bb:b0:36:b1:53:34:d4:99:6a:fc:9d:3f:
42:8e:f1:d5:c6:03:e3:2d:50:63:86:c0:47:0f:83:05:c4:41:
e1:b2:3f:8f:76:c5:75:d9:ec:7c:b1:db:5b:c8:2a:aa:f5:a3:
43:e7:08:c4:6d:88:bf:74:95:77:3c:f1:ec:53:41:62:1b:e8:
13:57:6c:2b:4a:c8:ed:25:de:1f:55:22:c7:30:20:8d:f7:43:
9a:f1:ef:9e:1f:95:be:3b:27:7b:c4:a0:a9:81:a6:c1:06:c3:
5c:ce:03:9a:88:4a:2e:3a:7b:2c:20:5b:f3:32:ee:a9:9d:4c:
9d:2f:73:f7:3a:d0:58:30:f7:c1:1c:60:b8:86:a4:6b:c1:c4:
1b:df:ca:c6:66:23:b1:1f:1c:87:58:4c:99:c1:4a:14:38:ee:
87:0f:5d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRpfLTlFjs+feqII/xk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNDc5MjFlNDQzMDUyMWE3NzI3ODg4YzEzYmM3YjhlMTA0
Y2JkYmUwHhcNMjUwNjI4MTMwMTQwWhcNMjUwNjI5MTMwMTQwWjAzMTEwLwYDVQQD
EygwNDFjZDUxNTMwN2NlOWI2Y2Q2YzY4NzA4NTA3NTA0YzdiMTk4OTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L9i3u4O/UgHy3o3NAGRI1utMdXK
bZcPSvswjqu3AIYt+XaQkpKWH1k3AjjyBK6VWagd+ZsIpK9f5i3zOWK1e3GV9Bne
nlbZx/eFSy2GHqk+qIORQ4RTx2UPqW30Y6EDi+VRqtgl7JO/5nUizc1aIYyXEGfE
6h7z/dljxcmffea7/gmD/yQnzWqo/GjZA0id6ruYW75rk0tGeDdHFLusfrASbSQL
FHVTctUSHV8E6kCsBleDTCUz3I1SvP/am+hovpZnyf7Gz45Jfp65NTjgL2u1piFC
kVDIv9vBX+qnKNOcbCXE8IH6Bhc6BI2MTV0X1SvoG1OSjtXvsY5aj5kDuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQc1RUwfOm2zWxocIUHUEx7GYkdMB8GA1UdIwQY
MBaAFMpHkh5EMFIadyeIjBO8e44QTL2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2It
ODNlNTVjNWY2ZjdkLzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2ItODNlNTVjNWY2Zjdk
LzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAip10yIti
JpV3L+rRuDzfwFx2popd68g6n5tG/O4f+q23taobPjDrUNzLycnuKPN5EgbCjVyt
cSIvZTZc3o7ansGZqLg3KAiCfN5cDBLE3kXR4YPsL/tve0c9myCOuHhiu7A2sVM0
1Jlq/J0/Qo7x1cYD4y1QY4bARw+DBcRB4bI/j3bFddnsfLHbW8gqqvWjQ+cIxG2I
v3SVdzzx7FNBYhvoE1dsK0rI7SXeH1UixzAgjfdDmvHvnh+Vvjsne8SgqYGmwQbD
XM4DmohKLjp7LCBb8zLuqZ1MnS9z9zrQWDD3wRxguIaka8HEG9/KxmYjsR8ch1hM
mcFKFDjuhw9dnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:02 2025 by rpki-client