Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: wahOvTVwM9uPmCevyF4OAxFobvqN1misxH2ovY7Nj/c=
Subject key identifier: E6:5A:77:B0:D8:18:D7:04:AB:52:52:CF:4A:DB:90:76:BD:72:02:38
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 01984AE5F899130BD0822C24C21B07E731B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 08:00:41 +0000
Manifest this update: Sun 27 Jul 2025 08:00:41 +0000
Manifest next update: Mon 28 Jul 2025 08:00:41 +0000
Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
2: 8h-VrH2OLGuzooixz2EHGOzGj7c.roa (hash: j9xYGg1A7OFK4mnjxkQLlnHkLT4I6Te+j3atszApNdQ=)
3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: WACjprqH3Kl24p/raefkFGIBUSFE2ugRX3PoxcPAjXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:f8:99:13:0b:d0:82:2c:24:c2:1b:07:e7:31:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jul 27 08:00:41 2025 GMT
Not After : Jul 28 08:00:41 2025 GMT
Subject: CN=e65a77b0d818d704ab5252cf4adb9076bd720238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:aa:69:51:c6:ad:31:23:1c:fa:ab:f2:aa:
74:c3:1c:3f:6a:ff:3d:02:ff:c7:b2:bf:a2:39:d9:
43:70:f9:ef:a2:e5:35:10:dd:14:4e:5d:0a:1b:fd:
61:89:bf:df:c7:b1:87:91:fa:1e:4c:a8:9d:68:d8:
2c:7b:b3:b0:74:9a:c9:cb:9b:80:6f:23:9e:12:9d:
a1:0c:5b:be:fd:fe:a6:d2:58:7e:3c:88:c7:0f:03:
6f:2d:5f:f7:06:0e:6b:83:9e:ac:72:bc:d0:00:a5:
53:58:ab:67:a5:34:f9:2f:58:20:26:b8:07:f0:8c:
e2:28:17:17:ae:23:fd:b4:4e:7e:f5:f2:c0:bc:fa:
9e:cd:4a:3e:ee:c6:22:f9:b2:c9:15:b8:b6:07:44:
03:31:7e:2b:ce:2a:27:61:95:78:64:e8:db:4c:33:
43:92:c7:48:4b:d1:c0:9b:0e:54:81:09:ca:40:76:
de:2e:c3:77:ac:70:06:ae:81:bc:b3:de:eb:21:dc:
2f:ab:c2:fb:78:ea:df:36:3c:ab:21:65:a9:d3:e8:
3e:6a:f3:fe:df:51:f3:6e:74:5e:cb:4b:d0:bc:db:
a9:de:ff:8c:c6:be:16:c9:f9:69:03:17:aa:c2:23:
36:e9:24:bd:2d:e4:83:de:d3:db:1c:7b:bb:cd:f7:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5A:77:B0:D8:18:D7:04:AB:52:52:CF:4A:DB:90:76:BD:72:02:38
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:89:28:0b:32:20:0d:58:cd:4d:f8:e1:95:37:90:a9:0d:08:
ec:d9:3a:b9:e4:07:2d:4f:76:af:ef:27:85:88:f4:46:61:02:
d2:4f:b1:8b:4e:8c:e6:58:e6:30:58:0b:1a:a8:7b:9d:09:20:
b4:3d:9a:e1:6a:32:30:b5:19:86:d1:61:8e:ce:24:f4:d5:40:
b5:e6:57:f8:b9:d4:35:0f:da:62:1e:a6:0e:a7:72:63:73:2f:
44:2e:15:e3:2e:21:b1:cd:0e:40:b1:25:47:40:d9:1a:72:08:
38:e5:df:7d:db:09:74:bd:6a:8c:9a:54:13:db:22:f4:d3:ab:
95:b4:ce:55:93:5c:36:ac:9a:76:c0:24:86:73:11:e2:4d:52:
18:b2:66:1a:76:b8:12:b0:5e:c0:73:5e:7d:bc:ed:e0:64:c9:
5c:fb:c0:9b:fd:86:5c:4b:48:65:2b:ba:de:42:72:58:08:2b:
9e:9d:9a:eb:21:bb:93:73:ed:2b:12:97:2a:2c:c3:83:fb:7e:
87:f1:98:d6:b4:b7:b4:78:53:b1:ad:a5:b0:5a:48:cf:c9:cb:
ef:04:15:9b:86:48:69:d5:c9:51:c5:4e:3c:be:f4:7a:96:71:
f9:42:1f:e0:e0:c8:8e:5a:3b:ee:28:d6:02:15:aa:60:5c:df:
b1:4f:ee:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5fiZEwvQgiwkwhsH5zG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx
NjQwYjYwHhcNMjUwNzI3MDgwMDQxWhcNMjUwNzI4MDgwMDQxWjAzMTEwLwYDVQQD
EyhlNjVhNzdiMGQ4MThkNzA0YWI1MjUyY2Y0YWRiOTA3NmJkNzIwMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+OqaVHGrTEjHPqr8qp0wxw/av89
Av/Hsr+iOdlDcPnvouU1EN0UTl0KG/1hib/fx7GHkfoeTKidaNgse7OwdJrJy5uA
byOeEp2hDFu+/f6m0lh+PIjHDwNvLV/3Bg5rg56scrzQAKVTWKtnpTT5L1ggJrgH
8IziKBcXriP9tE5+9fLAvPqezUo+7sYi+bLJFbi2B0QDMX4rzionYZV4ZOjbTDND
ksdIS9HAmw5UgQnKQHbeLsN3rHAGroG8s97rIdwvq8L7eOrfNjyrIWWp0+g+avP+
31HzbnRey0vQvNup3v+Mxr4WyflpAxeqwiM26SS9LeSD3tPbHHu7zfdyZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZad7DYGNcEq1JSz0rbkHa9cgI4MB8GA1UdIwQY
MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt
OGFiZjVlZTZjNGFkLzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk
LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIkoCzIg
DVjNTfjhlTeQqQ0I7Nk6ueQHLU92r+8nhYj0RmEC0k+xi06M5ljmMFgLGqh7nQkg
tD2a4WoyMLUZhtFhjs4k9NVAteZX+LnUNQ/aYh6mDqdyY3MvRC4V4y4hsc0OQLEl
R0DZGnIIOOXffdsJdL1qjJpUE9si9NOrlbTOVZNcNqyadsAkhnMR4k1SGLJmGna4
ErBewHNefbzt4GTJXPvAm/2GXEtIZSu63kJyWAgrnp2a6yG7k3PtKxKXKizDg/t+
h/GY1rS3tHhTsa2lsFpIz8nL7wQVm4ZIadXJUcVOPL70epZx+UIf4ODIjlo77ijW
AhWqYFzfsU/ukg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:41:54 2025 by rpki-client