Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: GyMSwhTrEZ11XCtiwQac4Xk07pCloCWwNFhTAnnKQIw=
Subject key identifier: 9E:CF:A9:F8:C2:18:60:44:B4:17:31:E4:52:F0:2F:7D:B3:04:39:62
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 01984AE6082036D91EB780D70CB9769CD423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 1067
Signing time: Sun 27 Jul 2025 08:00:45 +0000
Manifest this update: Sun 27 Jul 2025 08:00:45 +0000
Manifest next update: Mon 28 Jul 2025 08:00:45 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: NKkeAkp64L/mF7v8pQpPYgNKEaeSEaPEAQo+bBv98Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:08:20:36:d9:1e:b7:80:d7:0c:b9:76:9c:d4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Jul 27 08:00:45 2025 GMT
Not After : Jul 28 08:00:45 2025 GMT
Subject: CN=9ecfa9f8c2186044b41731e452f02f7db3043962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:49:f1:7b:c5:97:a8:04:0b:6f:cc:d5:5c:
34:32:0a:e9:f5:97:ae:63:cb:fd:00:9c:93:31:c8:
03:eb:e1:b7:89:cb:b9:16:73:91:74:ff:5f:61:b0:
1c:32:22:e6:25:46:f1:ae:fc:b6:ba:4d:c5:5c:87:
a8:08:93:db:3e:d0:f0:c0:67:b2:35:dd:2b:a0:ac:
39:99:22:2a:61:e1:4a:46:80:52:7d:13:ed:44:25:
d8:d1:2c:a6:64:30:6c:24:d4:f0:6a:d4:78:23:b8:
db:86:1f:2d:b1:2d:3c:b4:6b:1d:90:5d:a5:ad:49:
9a:1f:cf:de:00:2a:57:07:60:aa:45:24:19:34:02:
1f:93:e2:47:e2:c8:39:11:20:bf:57:31:c1:c5:93:
81:77:56:20:58:8f:85:98:a5:ab:7d:d6:68:54:a4:
5d:f2:e9:62:4d:f8:9e:d8:96:df:28:44:bb:22:12:
26:00:c1:b3:49:29:0e:82:ad:30:5e:6f:00:25:3d:
cf:41:8c:82:34:db:62:9d:e7:8e:22:8d:b4:80:8e:
55:5f:b1:6b:ed:29:11:7d:0b:13:c0:b0:33:01:d4:
5d:31:f2:40:dc:55:41:c2:c2:db:64:6e:99:4e:8d:
50:3b:a1:f5:3d:16:74:a1:02:d6:61:6e:56:e3:f8:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:A9:F8:C2:18:60:44:B4:17:31:E4:52:F0:2F:7D:B3:04:39:62
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b4:6f:d3:62:2d:6f:a7:63:05:bb:f6:90:3c:40:19:c3:75:
bd:6b:42:50:aa:54:11:38:15:a0:65:2b:cc:c7:2b:30:d0:bd:
f9:be:6f:be:ed:51:7d:7c:db:8f:c0:5a:20:b8:66:07:1b:e6:
64:f3:e7:c6:32:45:99:c3:25:c8:a6:e8:cc:ca:c5:69:d3:f5:
91:fa:2c:ea:3a:46:c2:59:2f:ae:3a:e7:fc:af:28:49:5f:92:
0d:1f:83:2e:b0:4a:3e:61:a4:19:1b:c0:00:38:78:c4:c6:c3:
c9:8e:c4:bd:11:e2:d2:fb:b8:fe:af:53:e3:2f:09:05:bb:5f:
4c:40:01:0a:77:83:e3:a0:2d:49:40:08:02:5a:b0:96:6a:65:
7f:11:1c:02:b1:c8:45:79:5a:57:64:c1:1f:25:ec:f8:f3:52:
75:95:30:52:6a:ef:92:8e:db:0b:74:37:a0:5f:08:c0:3f:01:
1a:c4:b2:6a:1d:54:40:d1:99:ea:ec:dc:01:09:b2:9a:21:f6:
08:b5:16:ac:c0:ae:af:72:9c:a6:57:03:50:2f:30:51:62:ff:
83:8b:8b:c4:80:65:db:40:20:0d:d5:da:67:79:58:ae:5f:3f:
07:1c:39:ed:c6:55:9d:af:e3:0c:98:e3:89:8f:1c:c6:77:c0:
54:95:d9:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5gggNtket4DXDLl2nNQjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYmUwOGRhMWFiMzFlM2Y5OGY1NTRmYTAxMzczZjk0Y2M5
MDExZWQwHhcNMjUwNzI3MDgwMDQ1WhcNMjUwNzI4MDgwMDQ1WjAzMTEwLwYDVQQD
Eyg5ZWNmYTlmOGMyMTg2MDQ0YjQxNzMxZTQ1MmYwMmY3ZGIzMDQzOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYhJ8XvFl6gEC2/M1Vw0Mgrp9Zeu
Y8v9AJyTMcgD6+G3icu5FnORdP9fYbAcMiLmJUbxrvy2uk3FXIeoCJPbPtDwwGey
Nd0roKw5mSIqYeFKRoBSfRPtRCXY0SymZDBsJNTwatR4I7jbhh8tsS08tGsdkF2l
rUmaH8/eACpXB2CqRSQZNAIfk+JH4sg5ESC/VzHBxZOBd1YgWI+FmKWrfdZoVKRd
8uliTfie2JbfKES7IhImAMGzSSkOgq0wXm8AJT3PQYyCNNtineeOIo20gI5VX7Fr
7SkRfQsTwLAzAdRdMfJA3FVBwsLbZG6ZTo1QO6H1PRZ0oQLWYW5W4/geqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7PqfjCGGBEtBcx5FLwL32zBDliMB8GA1UdIwQY
MBaAFGO+CNoasx4/mPVU+gE3P5TMkBHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1Nzct
Y2M4MDU0YTUxZDY2LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1NzctY2M4MDU0YTUxZDY2
LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLRv02It
b6djBbv2kDxAGcN1vWtCUKpUETgVoGUrzMcrMNC9+b5vvu1RfXzbj8BaILhmBxvm
ZPPnxjJFmcMlyKbozMrFadP1kfos6jpGwlkvrjrn/K8oSV+SDR+DLrBKPmGkGRvA
ADh4xMbDyY7EvRHi0vu4/q9T4y8JBbtfTEABCneD46AtSUAIAlqwlmplfxEcArHI
RXlaV2TBHyXs+PNSdZUwUmrvko7bC3Q3oF8IwD8BGsSyah1UQNGZ6uzcAQmymiH2
CLUWrMCur3KcplcDUC8wUWL/g4uLxIBl20AgDdXaZ3lYrl8/Bxw57cZVna/jDJjj
iY8cxnfAVJXZ5w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:45:09 2025 by rpki-client