Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: MnHqTk4G+g5llxWYGMSuWt4u9va6ra0zgXgCYkCkh54=
Subject key identifier: 42:48:CA:E1:15:6D:A6:4C:F3:5F:46:D8:60:FE:01:A9:3D:28:E7:DE
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 019844761C1916A2B61A3CFD19EF714B690F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 02:00:47 +0000
Manifest this update: Sat 26 Jul 2025 02:00:47 +0000
Manifest next update: Sun 27 Jul 2025 02:00:47 +0000
Files and hashes: 1: HnblzgjRhv7ohFCku2dgX5Jr7vw.roa (hash: o9K0gGCxUA0R4sGgN9lj9M6IzHoNtSXBjdq46DJlaa4=)
2: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (hash: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: vST35jZQOaW5HLKI3YjKN7/6Ed7grMKuUdtqlh//TqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:1c:19:16:a2:b6:1a:3c:fd:19:ef:71:4b:69:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Jul 26 02:00:47 2025 GMT
Not After : Jul 27 02:00:47 2025 GMT
Subject: CN=4248cae1156da64cf35f46d860fe01a93d28e7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:f7:93:cb:2b:26:89:ce:18:2f:f5:4b:a4:
b0:55:37:87:33:13:6f:71:94:12:78:9d:9b:83:4c:
96:f7:82:e2:7a:a3:8d:fc:6e:45:a4:7c:36:df:87:
a7:fb:17:b8:57:f3:d4:23:47:97:0d:cc:b3:67:df:
91:d2:75:91:3b:8b:be:f9:64:81:e2:4f:ed:63:94:
32:ad:7e:14:92:35:b1:1d:77:9f:51:8d:90:39:47:
a8:aa:8b:13:46:c8:8f:e4:39:88:fd:28:a2:29:bf:
b9:af:52:5f:b2:70:33:ea:11:e7:62:ef:0d:1f:e2:
59:ce:d3:ee:2f:42:d9:fc:b4:c8:77:c8:a0:67:d3:
c3:fc:bf:92:ea:55:67:64:95:cd:9f:99:e6:aa:50:
21:fa:07:d9:8e:ea:1e:77:65:00:86:37:1b:f8:0e:
8e:8d:c5:2a:43:46:10:a5:75:65:eb:9c:cf:f3:6a:
5f:d0:c4:ef:be:39:e3:33:02:e8:42:a1:7e:30:82:
1f:6c:d0:45:fd:0c:01:27:6a:c0:32:92:09:3b:2e:
3d:aa:34:90:7e:93:4c:2c:36:89:3b:89:70:c3:01:
da:9d:dc:1d:81:4e:75:f5:c9:33:d7:a0:69:1b:05:
2d:dd:f4:35:73:6f:ef:70:03:0d:f6:3f:7a:18:4d:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:48:CA:E1:15:6D:A6:4C:F3:5F:46:D8:60:FE:01:A9:3D:28:E7:DE
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fd:c9:c9:52:ab:a6:5d:65:b0:af:35:eb:0b:bb:e5:08:b8:
20:49:71:b8:86:c4:f5:0a:c5:6b:74:03:ba:b9:e3:35:12:06:
b5:fd:57:99:2d:6b:b7:f3:9f:06:65:95:d9:f3:5d:f9:71:3a:
8e:a4:ab:6c:e3:e8:9d:94:7e:64:98:a0:39:9f:2b:7a:55:0f:
1d:94:a6:8b:94:5d:94:f9:9d:75:57:7e:d5:09:a7:84:cb:39:
f1:b1:a7:9c:93:19:05:43:67:6e:f5:89:f1:06:7d:43:bc:cd:
ee:c9:71:f0:4f:24:8f:72:60:89:dc:44:52:ce:52:d9:d0:9c:
1b:96:bf:0e:b2:ec:2a:a2:1b:a1:86:ed:d2:c5:4b:b5:d2:05:
8d:37:da:da:a5:fa:67:70:ce:48:82:41:d3:41:c1:cf:04:2c:
df:2c:c4:68:7c:d3:1d:ce:9d:06:8c:d7:37:0b:1a:25:b9:9e:
6b:d5:b4:e1:11:a3:36:45:fd:26:f8:80:b3:82:47:0f:85:a0:
c7:2c:21:a1:f1:ae:87:eb:76:68:ef:a2:82:39:0d:d4:50:e2:
c7:71:5d:43:f0:05:51:e8:13:3f:2c:cc:f6:94:92:25:6b:b3:
f1:eb:b4:5d:0b:7a:c9:1b:7a:b7:21:c4:4f:65:d9:31:8e:a1:
c6:4f:0c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEdhwZFqK2Gjz9Ge9xS2kPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTIyMGU1M2U0ZjgxY2EyNThjY2ZlYTE4NzI4MDI4MGY1
ZjYyMWEwHhcNMjUwNzI2MDIwMDQ3WhcNMjUwNzI3MDIwMDQ3WjAzMTEwLwYDVQQD
Eyg0MjQ4Y2FlMTE1NmRhNjRjZjM1ZjQ2ZDg2MGZlMDFhOTNkMjhlN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu/3k8srJonOGC/1S6SwVTeHMxNv
cZQSeJ2bg0yW94LieqON/G5FpHw234en+xe4V/PUI0eXDcyzZ9+R0nWRO4u++WSB
4k/tY5QyrX4UkjWxHXefUY2QOUeoqosTRsiP5DmI/SiiKb+5r1JfsnAz6hHnYu8N
H+JZztPuL0LZ/LTId8igZ9PD/L+S6lVnZJXNn5nmqlAh+gfZjuoed2UAhjcb+A6O
jcUqQ0YQpXVl65zP82pf0MTvvjnjMwLoQqF+MIIfbNBF/QwBJ2rAMpIJOy49qjSQ
fpNMLDaJO4lwwwHandwdgU519ckz16BpGwUt3fQ1c2/vcAMN9j96GE2j2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJIyuEVbaZM819G2GD+Aak9KOfeMB8GA1UdIwQY
MBaAFMpSIOU+T4HKJYzP6hhygCgPX2IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODkt
ZjIzYzVhNTMxODIzLzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODktZjIzYzVhNTMxODIz
LzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAv3JyVKr
pl1lsK816wu75Qi4IElxuIbE9QrFa3QDurnjNRIGtf1XmS1rt/OfBmWV2fNd+XE6
jqSrbOPonZR+ZJigOZ8relUPHZSmi5RdlPmddVd+1QmnhMs58bGnnJMZBUNnbvWJ
8QZ9Q7zN7slx8E8kj3JgidxEUs5S2dCcG5a/DrLsKqIboYbt0sVLtdIFjTfa2qX6
Z3DOSIJB00HBzwQs3yzEaHzTHc6dBozXNwsaJbmea9W04RGjNkX9JviAs4JHD4Wg
xywhofGuh+t2aO+igjkN1FDix3FdQ/AFUegTPyzM9pSSJWuz8eu0XQt6yRt6tyHE
T2XZMY6hxk8M2A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 08:21:05 2025 by rpki-client