Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
File: rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json)
Hash identifier: VGX+Sq+FGU4HpT2Oi4d10Djx9mvxnPXREryijUMYna0=
Subject key identifier: 9C:90:7B:EE:AF:F5:0C:D6:F8:FE:76:5E:AE:F8:45:B3:84:F4:F5:58
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial: 01974CD7564BAB9743871B6BF48524161E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
Manifest number: 1578
Signing time: Sun 08 Jun 2025 00:01:09 +0000
Manifest this update: Sun 08 Jun 2025 00:01:09 +0000
Manifest next update: Mon 09 Jun 2025 00:01:09 +0000
Files and hashes: 1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=)
2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: R+WWlNMxWYDJaxkKeHLe29qi3EYkixyxnpsbNjDDcho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:56:4b:ab:97:43:87:1b:6b:f4:85:24:16:1e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Validity
Not Before: Jun 8 00:01:09 2025 GMT
Not After : Jun 9 00:01:09 2025 GMT
Subject: CN=9c907beeaff50cd6f8fe765eaef845b384f4f558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:d7:54:33:8c:5d:cb:cd:63:b8:86:89:9c:
33:77:5e:28:ca:ae:8b:4d:97:38:e7:21:e7:bf:65:
f8:62:82:f8:95:80:be:1f:b5:57:1f:b1:83:0c:2e:
3c:72:9e:eb:32:83:3a:0d:cf:60:da:9c:76:2b:8f:
73:c1:bc:9f:d5:70:d8:c6:f9:1d:8a:33:95:99:df:
65:8f:e1:73:80:9c:33:10:c7:85:19:76:f3:93:20:
63:ae:72:c7:54:f4:69:0d:32:33:80:38:8a:cc:e2:
55:93:8d:60:ba:f2:73:13:31:cc:a4:72:9a:3c:fd:
f6:b5:da:e1:22:bd:9c:cc:2b:ee:a4:69:bc:d7:8d:
d7:84:29:90:eb:9d:91:49:92:40:55:67:67:18:8a:
22:32:da:e4:1b:64:9e:54:76:cd:98:c4:07:3e:87:
a0:e1:1a:8d:ec:49:be:7a:35:7d:ba:af:f1:c0:17:
41:ab:d4:92:1a:ae:0b:cf:97:b2:30:06:30:a7:fd:
f4:53:a1:40:d6:63:aa:54:0e:08:d7:d0:d3:05:56:
b8:0d:5b:6b:23:7c:a1:c8:53:fe:85:2f:20:2b:ca:
ad:7b:fa:c3:cf:c3:c5:9d:04:db:c1:21:5c:bc:ae:
28:77:83:2f:94:46:c5:92:11:51:e7:26:11:21:05:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:90:7B:EE:AF:F5:0C:D6:F8:FE:76:5E:AE:F8:45:B3:84:F4:F5:58
X509v3 Authority Key Identifier:
keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:28:fc:15:81:30:1f:5f:42:01:38:ab:aa:c1:94:e4:49:19:
e8:fb:b8:b3:af:91:f0:87:6c:a3:5c:9e:6e:14:e6:b2:e1:7e:
93:2e:d9:cd:4e:4d:23:b2:88:e3:11:b7:0d:82:77:a9:0b:79:
4b:b8:80:30:6f:94:38:12:43:cf:46:91:90:9e:4b:b9:09:9a:
8f:43:79:7f:33:12:01:76:65:10:dc:6f:66:d1:3b:55:6a:1e:
dc:05:d1:d6:3a:98:5a:72:b4:1b:c8:d3:96:9d:71:94:7a:f9:
9a:5f:99:68:1f:69:20:97:90:76:91:21:2b:42:4c:b3:50:94:
8c:05:f0:70:80:71:45:15:bc:23:50:44:bc:1b:db:8c:3e:96:
ee:da:72:55:f6:c9:de:08:b8:d1:44:f8:9c:e1:10:63:f5:a4:
b0:2c:2c:df:8b:5f:82:93:5e:e3:e9:4d:34:26:51:7a:48:03:
dc:41:59:50:ba:8f:3e:16:a3:60:63:74:c9:13:b5:bc:b8:f3:
d8:b3:fc:30:b7:4e:22:6f:a4:bc:19:5b:dc:f7:7d:05:1c:4c:
13:0f:11:4e:17:ce:98:1f:18:90:17:0c:50:21:ed:18:c1:5f:
b9:ba:12:e1:f7:ad:d6:79:83:cf:e5:90:82:4a:3b:48:3f:2b:
dc:e8:d9:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM11ZLq5dDhxtr9IUkFh6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGU4NTdmYzAwYmUxNGVkOTJiOWU3OGNjM2NhNjliOGFk
YzI0ODUwHhcNMjUwNjA4MDAwMTA5WhcNMjUwNjA5MDAwMTA5WjAzMTEwLwYDVQQD
Eyg5YzkwN2JlZWFmZjUwY2Q2ZjhmZTc2NWVhZWY4NDViMzg0ZjRmNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhnXVDOMXcvNY7iGiZwzd14oyq6L
TZc45yHnv2X4YoL4lYC+H7VXH7GDDC48cp7rMoM6Dc9g2px2K49zwbyf1XDYxvkd
ijOVmd9lj+FzgJwzEMeFGXbzkyBjrnLHVPRpDTIzgDiKzOJVk41guvJzEzHMpHKa
PP32tdrhIr2czCvupGm8143XhCmQ652RSZJAVWdnGIoiMtrkG2SeVHbNmMQHPoeg
4RqN7Em+ejV9uq/xwBdBq9SSGq4Lz5eyMAYwp/30U6FA1mOqVA4I19DTBVa4DVtr
I3yhyFP+hS8gK8qte/rDz8PFnQTbwSFcvK4od4MvlEbFkhFR5yYRIQVMWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyQe+6v9QzW+P52Xq74RbOE9PVYMB8GA1UdIwQY
MBaAFK2OhX/AC+FO2SueeMw8ppuK3CSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAt
ZGIwOTllNTg1ZTRiLzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAtZGIwOTllNTg1ZTRi
LzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSj8FYEw
H19CATirqsGU5EkZ6Pu4s6+R8Idso1yebhTmsuF+ky7ZzU5NI7KI4xG3DYJ3qQt5
S7iAMG+UOBJDz0aRkJ5LuQmaj0N5fzMSAXZlENxvZtE7VWoe3AXR1jqYWnK0G8jT
lp1xlHr5ml+ZaB9pIJeQdpEhK0JMs1CUjAXwcIBxRRW8I1BEvBvbjD6W7tpyVfbJ
3gi40UT4nOEQY/WksCws34tfgpNe4+lNNCZRekgD3EFZULqPPhajYGN0yRO1vLjz
2LP8MLdOIm+kvBlb3Pd9BRxMEw8RThfOmB8YkBcMUCHtGMFfuboS4fet1nmDz+WQ
gko7SD8r3OjZHA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:05:18 2025 by rpki-client