Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: rpdu6MvgafasLH1BsBUo0rpH7HigTvtgqGAbW05LboE=
Subject key identifier: 77:DC:81:31:53:8F:C9:3F:D0:13:9C:5B:CA:0D:7E:87:21:C6:83:A2
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 0197499F2F580E3815E0CD4B3DB5E9D9086D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:00:58 +0000
Manifest this update: Sat 07 Jun 2025 09:00:58 +0000
Manifest next update: Sun 08 Jun 2025 09:00:58 +0000
Files and hashes: 1: AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa (hash: 6Kj79eLeBWoibWni/+p7vdKVc5LjnECRVHDoIBU87h8=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: ponmMXqK4FyzwWaXXP+PU88THmy/ieyMtkNIwRWiDGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:2f:58:0e:38:15:e0:cd:4b:3d:b5:e9:d9:08:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Jun 7 09:00:58 2025 GMT
Not After : Jun 8 09:00:58 2025 GMT
Subject: CN=77dc8131538fc93fd0139c5bca0d7e8721c683a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:53:ab:b9:bf:d5:e4:39:07:39:a6:20:7b:
c6:b6:83:5e:66:bb:d7:c2:c1:a0:53:b7:1a:3a:73:
f7:4c:b1:3e:17:4d:a2:5b:c9:d7:6a:75:15:57:f8:
59:40:7e:44:c2:d3:e2:87:c7:b0:7a:66:22:7a:fe:
32:e8:a4:77:a1:1e:95:c9:4f:50:11:09:3b:e4:a9:
d3:fd:a9:89:b1:cb:69:46:78:ae:74:fa:79:d4:77:
b0:9b:a6:65:99:a2:8d:11:30:cc:d2:94:39:f6:d6:
57:0f:0c:29:3f:94:0b:5f:b2:cd:54:56:72:ab:3d:
7d:8a:91:2c:fb:73:aa:96:d8:a3:40:e0:26:61:07:
d3:13:95:65:cc:57:33:a5:9a:e9:33:69:cd:26:ab:
a2:17:61:45:7c:e1:14:f5:a0:03:3b:83:97:9a:50:
a7:73:e0:47:db:54:66:3b:3e:40:ff:c2:a7:9d:44:
10:0f:ef:b3:9c:6e:eb:8b:38:58:9a:1a:24:e2:22:
36:4f:66:8d:b2:38:da:fd:81:55:e6:0a:84:90:ac:
e4:66:b5:e8:12:1d:03:91:2c:96:09:2a:41:de:2a:
76:0c:84:82:ce:f7:d8:eb:5c:55:bd:3c:f2:1b:7a:
fd:1c:13:2d:a5:f6:0a:54:80:b6:b4:41:41:6e:35:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:81:31:53:8F:C9:3F:D0:13:9C:5B:CA:0D:7E:87:21:C6:83:A2
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:02:5a:6a:a2:60:ea:12:8c:1d:19:80:1c:97:8c:6d:1a:e6:
7c:d4:2b:02:53:47:a8:c4:b6:da:d4:18:e9:ec:f0:ed:ea:9b:
df:52:e5:d4:69:f4:3b:ee:8f:e6:35:af:f9:1f:65:9d:9d:51:
d4:46:bd:5b:eb:f6:f0:64:0d:39:44:9f:ac:0f:b2:b9:6f:d1:
19:d1:eb:09:d1:5f:9c:16:41:00:bf:09:64:a0:1b:c5:e3:92:
52:a8:04:03:ab:92:bd:4e:df:aa:4b:37:c2:7f:f3:e1:37:d6:
95:45:7d:e1:56:ae:ca:84:0f:e1:1e:82:01:f8:0c:1f:de:45:
40:2e:52:f9:99:b5:31:a8:49:a3:0d:55:ed:5b:d2:5c:94:ac:
54:74:50:7b:1e:7b:81:71:15:2c:2b:08:62:97:db:3d:f9:0c:
f5:e5:b2:cf:53:95:b2:a9:1e:67:09:16:42:43:cc:b4:6e:6c:
d4:b2:91:1a:e2:1c:7e:40:6e:c6:02:eb:3a:0f:9a:fe:98:dc:
90:ae:1a:98:e8:dc:f5:2c:43:43:52:50:42:4e:d6:5b:fd:39:
26:83:fe:33:ca:75:f8:fa:89:fb:42:b5:53:69:3d:8b:70:c5:
b2:18:71:ff:b3:4e:f8:57:cc:b6:dc:68:00:58:a0:d4:eb:38:
b9:47:a5:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJny9YDjgV4M1LPbXp2QhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjI3NmRiOWQ5YjM0Y2RlYzI2MjBjNzI1N2RjNWFkNGFl
YjgzMmQwHhcNMjUwNjA3MDkwMDU4WhcNMjUwNjA4MDkwMDU4WjAzMTEwLwYDVQQD
Eyg3N2RjODEzMTUzOGZjOTNmZDAxMzljNWJjYTBkN2U4NzIxYzY4M2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7FTq7m/1eQ5BzmmIHvGtoNeZrvX
wsGgU7caOnP3TLE+F02iW8nXanUVV/hZQH5EwtPih8ewemYiev4y6KR3oR6VyU9Q
EQk75KnT/amJsctpRniudPp51Hewm6ZlmaKNETDM0pQ59tZXDwwpP5QLX7LNVFZy
qz19ipEs+3OqltijQOAmYQfTE5VlzFczpZrpM2nNJquiF2FFfOEU9aADO4OXmlCn
c+BH21RmOz5A/8KnnUQQD++znG7rizhYmhok4iI2T2aNsjja/YFV5gqEkKzkZrXo
Eh0DkSyWCSpB3ip2DISCzvfY61xVvTzyG3r9HBMtpfYKVIC2tEFBbjX8wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfcgTFTj8k/0BOcW8oNfochxoOiMB8GA1UdIwQY
MBaAFGIidtudmzTN7CYgxyV9xa1K64MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUt
ZTZlZTU4MzRjOTk1LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUtZTZlZTU4MzRjOTk1
LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwJaaqJg
6hKMHRmAHJeMbRrmfNQrAlNHqMS22tQY6ezw7eqb31Ll1Gn0O+6P5jWv+R9lnZ1R
1Ea9W+v28GQNOUSfrA+yuW/RGdHrCdFfnBZBAL8JZKAbxeOSUqgEA6uSvU7fqks3
wn/z4TfWlUV94VauyoQP4R6CAfgMH95FQC5S+Zm1MahJow1V7VvSXJSsVHRQex57
gXEVLCsIYpfbPfkM9eWyz1OVsqkeZwkWQkPMtG5s1LKRGuIcfkBuxgLrOg+a/pjc
kK4amOjc9SxDQ1JQQk7WW/05JoP+M8p1+PqJ+0K1U2k9i3DFshhx/7NO+FfMttxo
AFig1Os4uUeljA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:43:33 2025 by rpki-client