Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: zEXYaYFdZack75uxJsY+k40ThLHOcl2xB6K0Mf8swsQ=
Subject key identifier: 38:70:56:D5:E0:8E:8B:9B:9D:C2:3D:ED:82:D2:A8:62:27:F4:17:1F
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 0197481E1B2BC250B558091C951361BBA3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0A81
Signing time: Sat 07 Jun 2025 02:00:21 +0000
Manifest this update: Sat 07 Jun 2025 02:00:21 +0000
Manifest next update: Sun 08 Jun 2025 02:00:21 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: hydJWDnLd2DH2JqnrJzvk8dSYr4gjP+PAFrfZgz994g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:1b:2b:c2:50:b5:58:09:1c:95:13:61:bb:a3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Jun 7 02:00:21 2025 GMT
Not After : Jun 8 02:00:21 2025 GMT
Subject: CN=387056d5e08e8b9b9dc23ded82d2a86227f4171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:99:aa:67:3f:2d:b0:3c:b6:87:8a:95:67:
f4:6d:97:ab:88:01:e0:25:b0:0f:85:d9:41:0a:44:
99:a1:3a:bf:b1:78:f9:5b:3d:43:27:a1:de:ce:26:
9d:5b:a0:20:79:d5:2c:17:02:c8:91:88:38:fd:2e:
58:c3:4d:5a:ae:f0:62:22:d5:49:d0:01:e5:3e:9a:
4e:f9:7d:23:54:42:f4:bd:ab:18:34:2a:64:79:4e:
46:b0:db:4e:2d:76:69:0a:6d:31:68:2a:eb:19:5a:
1c:b3:42:e1:ed:4b:b0:65:21:8d:46:07:d5:6f:ef:
e6:f7:9e:87:d1:40:ce:05:e3:27:cc:3e:64:cc:29:
21:d3:f0:1d:3e:c8:79:10:e7:8e:67:a2:9c:30:56:
19:d9:a2:d5:75:c4:7b:c4:71:ab:6b:4c:6f:dc:2b:
21:de:99:36:1f:66:e1:d0:bc:da:e0:e0:cc:e4:9e:
32:27:5e:05:3f:32:c5:45:f9:91:0b:87:01:23:ab:
d8:b3:41:bc:d1:de:fa:5f:3a:9e:6b:72:30:23:7e:
06:34:e7:ff:94:8d:72:a5:1c:d8:b9:1f:f8:09:45:
6e:41:3e:d3:42:b7:08:1d:00:fb:24:15:9c:1b:5d:
ab:72:1b:7e:ee:87:d9:92:20:c3:2c:a7:69:49:a7:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:56:D5:E0:8E:8B:9B:9D:C2:3D:ED:82:D2:A8:62:27:F4:17:1F
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ef:6a:c0:f6:ec:ea:04:44:86:f2:7b:be:ba:f2:94:76:77:
d9:18:34:7c:85:aa:0b:d5:2b:01:cd:de:6b:18:12:09:52:10:
c2:2b:2a:36:db:01:37:9b:50:f7:8f:23:00:1c:1f:87:88:87:
07:c9:00:e0:97:61:46:b6:87:c1:b7:2f:bf:31:a4:ea:80:12:
cc:c2:06:79:83:27:95:e6:eb:ef:98:40:12:aa:65:bf:19:4a:
a2:b1:1b:dc:d2:70:ee:71:9f:5e:d6:07:1c:b4:3d:04:a5:72:
20:af:2d:ec:de:4c:f0:4f:a6:8b:7b:83:2a:36:9e:89:02:21:
c4:d0:8f:fd:64:65:2b:23:dc:c3:e7:aa:17:ff:54:61:59:12:
e0:db:c9:b5:f4:6f:ac:f1:33:14:54:8c:62:ef:3f:b1:af:13:
1e:54:d2:01:15:fa:5f:1c:ae:b2:ae:da:b9:f2:5e:d6:be:35:
73:6b:a1:c0:b7:2e:19:df:f1:e0:62:6e:63:0c:6c:58:e3:9f:
2f:83:dc:19:dd:d4:6f:54:a0:c0:6a:25:84:e8:42:b5:0e:23:
3f:a2:bf:0d:a4:a0:e2:e8:b9:32:3f:19:ae:f0:47:e2:ca:97:
95:7d:34:b5:75:d4:7d:2b:27:99:8e:3a:a0:91:93:a9:8a:7a:
b8:16:4b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHhsrwlC1WAkclRNhu6OpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWVhNTE2NzgwN2I3MDg1YjUxMzEwY2E2MGRiZjJiOTE5
ODJmYzcwHhcNMjUwNjA3MDIwMDIxWhcNMjUwNjA4MDIwMDIxWjAzMTEwLwYDVQQD
EygzODcwNTZkNWUwOGU4YjliOWRjMjNkZWQ4MmQyYTg2MjI3ZjQxNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtiZqmc/LbA8toeKlWf0bZeriAHg
JbAPhdlBCkSZoTq/sXj5Wz1DJ6HeziadW6AgedUsFwLIkYg4/S5Yw01arvBiItVJ
0AHlPppO+X0jVEL0vasYNCpkeU5GsNtOLXZpCm0xaCrrGVocs0Lh7UuwZSGNRgfV
b+/m956H0UDOBeMnzD5kzCkh0/AdPsh5EOeOZ6KcMFYZ2aLVdcR7xHGra0xv3Csh
3pk2H2bh0Lza4ODM5J4yJ14FPzLFRfmRC4cBI6vYs0G80d76Xzqea3IwI34GNOf/
lI1ypRzYuR/4CUVuQT7TQrcIHQD7JBWcG12rcht+7ofZkiDDLKdpSafcDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhwVtXgjoubncI97YLSqGIn9BcfMB8GA1UdIwQY
MBaAFMqepRZ4B7cIW1ExDKYNvyuRmC/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZTI1NDAtNDhiYi00YzY2LThiMjQt
Mjc0MWIzNmI3NWRlLzEveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZTI1NDAtNDhiYi00YzY2LThiMjQtMjc0MWIzNmI3NWRl
LzEveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaO9qwPbs
6gREhvJ7vrrylHZ32Rg0fIWqC9UrAc3eaxgSCVIQwisqNtsBN5tQ948jABwfh4iH
B8kA4JdhRraHwbcvvzGk6oASzMIGeYMnlebr75hAEqplvxlKorEb3NJw7nGfXtYH
HLQ9BKVyIK8t7N5M8E+mi3uDKjaeiQIhxNCP/WRlKyPcw+eqF/9UYVkS4NvJtfRv
rPEzFFSMYu8/sa8THlTSARX6Xxyusq7aufJe1r41c2uhwLcuGd/x4GJuYwxsWOOf
L4PcGd3Ub1SgwGolhOhCtQ4jP6K/DaSg4ui5Mj8ZrvBH4sqXlX00tXXUfSsnmY46
oJGTqYp6uBZLgA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:09:59 2025 by rpki-client