Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: jjBNqg47GDMI+h4UMmgwp3TPNhJ00gS5Y5csTcEC79Y=
Subject key identifier: CA:26:96:52:DE:14:DE:A9:E1:68:02:27:E7:5A:CE:5F:0A:87:A3:AF
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 01974A43C1CA535C5EDB30D47B4F61D1A266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 11F0
Signing time: Sat 07 Jun 2025 12:00:43 +0000
Manifest this update: Sat 07 Jun 2025 12:00:43 +0000
Manifest next update: Sun 08 Jun 2025 12:00:43 +0000
Files and hashes: 1: APe792PPzgn2UcG2RsKnM9NZvXY.roa (hash: P5YJH0mHT12JV4knVxcd215g8BRGbGqkMZPdkHPu8r8=)
2: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
3: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: U+eSZA7/Wy7uKU1uGrzguhF4OQsp/Dn4B1ufiER2Fbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:c1:ca:53:5c:5e:db:30:d4:7b:4f:61:d1:a2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Jun 7 12:00:43 2025 GMT
Not After : Jun 8 12:00:43 2025 GMT
Subject: CN=ca269652de14dea9e1680227e75ace5f0a87a3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:1e:c8:87:7c:f2:d1:fa:e0:a0:60:c0:c0:
b6:ab:b4:7b:f6:24:4f:0d:99:52:58:77:68:46:31:
f3:75:b2:f3:9c:fe:3b:46:ad:de:ea:48:7f:ea:24:
78:19:af:b5:e5:ae:64:1c:49:b7:f9:3b:e6:7f:55:
1a:ad:ca:30:ec:aa:1e:8a:5b:35:e2:0f:59:9a:69:
91:99:b8:75:f9:c7:fc:4a:92:bb:37:b1:c0:cb:28:
b3:03:8c:57:95:b5:65:fa:2a:ce:c2:50:f5:86:ae:
ae:60:62:d1:47:50:e6:49:52:5c:32:f5:4c:21:9a:
7a:d7:46:3f:28:b3:dc:b6:19:73:91:96:58:aa:b4:
6e:c8:0a:5b:91:37:a9:b6:4e:a6:18:07:70:57:c1:
3a:11:78:f9:11:c9:a6:90:bd:42:45:1d:2b:86:3a:
09:d3:4d:52:a8:f0:e8:e6:f0:14:9e:d0:dc:65:cd:
4b:d4:a7:a8:b4:d9:c0:10:bd:49:82:50:1f:06:73:
44:14:98:35:9e:a1:ca:23:62:e5:bf:4e:e3:77:eb:
00:aa:48:5f:0c:5a:f6:23:63:5b:09:31:a1:3e:64:
7c:36:15:38:a8:e2:b3:7d:91:cf:2d:f4:db:e9:00:
a7:77:b8:9b:da:1a:4e:85:42:75:b5:f8:e7:3d:e9:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:26:96:52:DE:14:DE:A9:E1:68:02:27:E7:5A:CE:5F:0A:87:A3:AF
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cc:10:a3:41:16:7b:9d:b9:d0:ae:13:91:bb:16:61:48:cc:
47:e3:cc:4f:0b:2c:22:36:72:58:81:13:3c:3e:7c:6f:87:ac:
9b:49:51:67:23:57:44:f3:f7:7f:4d:f1:df:8b:93:bc:ef:87:
01:1a:22:d7:f6:f1:81:9e:24:2a:0f:c7:81:2c:a5:92:e0:1d:
24:11:9a:7c:e6:da:63:e9:cb:d1:e9:98:a6:dc:35:1a:2b:d7:
6b:32:0c:86:e8:db:07:15:03:b3:89:59:42:53:86:e8:e0:0f:
5b:d2:77:6a:7b:b9:56:90:92:25:c9:05:3d:0a:42:f6:b0:e4:
1d:36:61:22:ba:b6:11:c5:5b:dd:bd:c7:b2:14:ea:d9:f8:58:
89:83:04:04:ee:ef:9e:ae:d8:59:bc:8b:73:8e:c6:e7:d2:b9:
72:b2:97:81:86:23:40:6e:ef:71:d2:66:59:1d:bd:91:a0:99:
a9:40:62:7e:b7:de:c2:21:0d:71:76:17:59:49:82:fd:e8:75:
b8:ef:9d:a4:21:71:c5:ac:12:e9:e3:8d:4f:50:ed:0c:ed:bc:
ac:4d:92:4f:72:09:5f:22:76:54:85:ac:84:bc:4e:99:1a:06:
5f:a2:fb:60:13:99:d6:92:4d:5c:37:a0:3f:ee:6b:12:47:21:
4c:ea:79:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ8HKU1xe2zDUe09h0aJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh
NGNjOTQwHhcNMjUwNjA3MTIwMDQzWhcNMjUwNjA4MTIwMDQzWjAzMTEwLwYDVQQD
EyhjYTI2OTY1MmRlMTRkZWE5ZTE2ODAyMjdlNzVhY2U1ZjBhODdhM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHQeyId88tH64KBgwMC2q7R79iRP
DZlSWHdoRjHzdbLznP47Rq3e6kh/6iR4Ga+15a5kHEm3+Tvmf1Uarcow7Koeils1
4g9ZmmmRmbh1+cf8SpK7N7HAyyizA4xXlbVl+irOwlD1hq6uYGLRR1DmSVJcMvVM
IZp610Y/KLPcthlzkZZYqrRuyApbkTeptk6mGAdwV8E6EXj5EcmmkL1CRR0rhjoJ
001SqPDo5vAUntDcZc1L1KeotNnAEL1JglAfBnNEFJg1nqHKI2Llv07jd+sAqkhf
DFr2I2NbCTGhPmR8NhU4qOKzfZHPLfTb6QCnd7ib2hpOhUJ1tfjnPekxTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMomllLeFN6p4WgCJ+dazl8Kh6OvMB8GA1UdIwQY
MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt
YzZhODgyMWFkZWE5LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5
LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8wQo0EW
e5250K4TkbsWYUjMR+PMTwssIjZyWIETPD58b4esm0lRZyNXRPP3f03x34uTvO+H
ARoi1/bxgZ4kKg/HgSylkuAdJBGafObaY+nL0emYptw1GivXazIMhujbBxUDs4lZ
QlOG6OAPW9J3anu5VpCSJckFPQpC9rDkHTZhIrq2EcVb3b3HshTq2fhYiYMEBO7v
nq7YWbyLc47G59K5crKXgYYjQG7vcdJmWR29kaCZqUBifrfewiENcXYXWUmC/eh1
uO+dpCFxxawS6eONT1DtDO28rE2ST3IJXyJ2VIWshLxOmRoGX6L7YBOZ1pJNXDeg
P+5rEkchTOp5Tw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:39 2025 by rpki-client