Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: enbCQcIlwy7fIeSN04XQyhrH/frwQfSbi3Nli95FofI=
Subject key identifier: F4:91:FA:A9:4D:75:37:80:00:33:8D:64:9B:D8:79:61:04:09:7B:FB
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 0197469EC9D28C25F175DF58802252AB7404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 048C
Signing time: Fri 06 Jun 2025 19:01:40 +0000
Manifest this update: Fri 06 Jun 2025 19:01:40 +0000
Manifest next update: Sat 07 Jun 2025 19:01:40 +0000
Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=)
2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: nuY00fPKOjMyruXpxmXWkumarJ7vwCj/SMw6uIGdEOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:c9:d2:8c:25:f1:75:df:58:80:22:52:ab:74:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Jun 6 19:01:40 2025 GMT
Not After : Jun 7 19:01:40 2025 GMT
Subject: CN=f491faa94d75378000338d649bd8796104097bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:aa:2f:ae:0e:0e:0d:c2:0c:3b:18:f2:7d:
2b:8e:1c:c6:15:5f:09:11:8b:9a:7c:5f:67:7c:ca:
82:b5:32:c7:cf:e7:af:68:e0:5e:47:fa:72:e3:e0:
9d:55:f9:9f:65:35:46:1b:93:a2:a6:49:95:2a:68:
4f:15:44:ad:b5:6a:b9:e4:8a:53:be:15:a3:48:e3:
9d:96:01:1c:33:ff:67:e2:15:7b:27:08:86:57:a9:
23:0b:e9:c8:ab:1d:03:40:d9:b9:b2:f4:fb:d5:cd:
64:c8:99:4f:f8:11:98:df:76:a9:1e:1e:ae:39:e3:
0c:00:e4:42:4c:19:bf:49:ad:7b:fd:e5:59:bb:b6:
d7:00:d6:53:3d:81:43:b7:b2:fe:8e:f8:45:3e:6e:
79:55:e1:9e:5b:9e:21:3c:47:fd:b1:f4:c1:ed:8b:
9c:be:eb:aa:a4:99:13:4a:5f:e3:a4:11:1b:ea:2e:
f7:66:19:ff:9b:15:93:ee:31:4e:b2:06:35:48:68:
93:79:a3:6b:04:f1:51:3e:15:22:29:5f:21:c7:ee:
87:34:e3:c3:b2:ef:6d:cc:86:e1:5c:ab:78:45:3e:
03:3d:ac:22:3a:36:9f:40:5d:94:61:b2:0b:bc:c1:
b8:9b:49:f9:c2:6d:77:d5:5b:ea:4d:c3:8e:d5:10:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:91:FA:A9:4D:75:37:80:00:33:8D:64:9B:D8:79:61:04:09:7B:FB
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:79:a3:ab:c8:e7:99:4e:a4:78:c2:aa:04:08:27:11:7b:4f:
a6:52:a8:4c:b5:f0:2a:4e:43:9f:5f:7c:f7:2c:49:9b:c8:71:
45:c3:ae:f2:ce:27:ac:48:c1:8b:e9:3b:e3:1b:dc:e8:6d:ac:
81:51:f2:fb:1e:bb:26:2c:c1:e8:6b:81:5c:47:b4:9e:96:a4:
f3:38:d1:ea:dc:e1:e6:f4:d4:29:aa:71:01:0c:0f:ab:de:01:
f1:43:3e:6a:5b:8c:a0:85:23:19:06:b6:2c:8a:a4:c3:f5:97:
b3:9a:c2:bc:c4:47:18:d3:00:4e:d0:0c:19:13:0b:6c:78:ff:
06:43:33:34:cf:46:ae:83:a8:c7:26:84:c6:70:6f:c7:76:d2:
21:d9:ba:ac:e3:8b:26:37:a2:21:18:7e:07:6f:e5:2f:4b:d2:
8d:62:ab:4c:a8:21:0a:16:15:b4:cd:a5:a4:18:10:4e:19:99:
ef:c4:23:6c:c7:38:91:00:73:37:62:8c:65:25:86:ff:35:35:
58:d4:40:11:57:dd:ca:63:be:74:a2:76:26:a2:b6:e4:96:f5:
c7:b0:54:91:f4:68:77:52:70:77:c4:39:80:49:5d:c8:38:2c:
65:c5:c7:3b:57:09:7c:26:7d:8c:6b:15:c1:78:47:3e:02:a5:
e8:12:70:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnsnSjCXxdd9YgCJSq3QEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTEwMjk2ODZiMmM4MGE3ZjA0NjBiNmM2ZWYxYjkwODY3
MjgwOTcwHhcNMjUwNjA2MTkwMTQwWhcNMjUwNjA3MTkwMTQwWjAzMTEwLwYDVQQD
EyhmNDkxZmFhOTRkNzUzNzgwMDAzMzhkNjQ5YmQ4Nzk2MTA0MDk3YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPSqL64ODg3CDDsY8n0rjhzGFV8J
EYuafF9nfMqCtTLHz+evaOBeR/py4+CdVfmfZTVGG5OipkmVKmhPFUSttWq55IpT
vhWjSOOdlgEcM/9n4hV7JwiGV6kjC+nIqx0DQNm5svT71c1kyJlP+BGY33apHh6u
OeMMAORCTBm/Sa17/eVZu7bXANZTPYFDt7L+jvhFPm55VeGeW54hPEf9sfTB7Yuc
vuuqpJkTSl/jpBEb6i73Zhn/mxWT7jFOsgY1SGiTeaNrBPFRPhUiKV8hx+6HNOPD
su9tzIbhXKt4RT4DPawiOjafQF2UYbILvMG4m0n5wm131VvqTcOO1RAYvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSR+qlNdTeAADONZJvYeWEECXv7MB8GA1UdIwQY
MBaAFMgRApaGssgKfwRgtsbvG5CGcoCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTIt
NTBlMzMzMzg0NjY5LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTItNTBlMzMzMzg0NjY5
LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXmjq8jn
mU6keMKqBAgnEXtPplKoTLXwKk5Dn1989yxJm8hxRcOu8s4nrEjBi+k74xvc6G2s
gVHy+x67JizB6GuBXEe0npak8zjR6tzh5vTUKapxAQwPq94B8UM+aluMoIUjGQa2
LIqkw/WXs5rCvMRHGNMATtAMGRMLbHj/BkMzNM9GroOoxyaExnBvx3bSIdm6rOOL
JjeiIRh+B2/lL0vSjWKrTKghChYVtM2lpBgQThmZ78QjbMc4kQBzN2KMZSWG/zU1
WNRAEVfdymO+dKJ2JqK25Jb1x7BUkfRod1Jwd8Q5gEldyDgsZcXHO1cJfCZ9jGsV
wXhHPgKl6BJwEw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:40:15 2025 by rpki-client