Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: MxPvKV260xJt8tXuot4+DacZ6ZiKIbObs93s3+RSQwI=
Subject key identifier: 5E:C6:78:A5:F4:10:82:3A:DD:5A:C5:CE:51:4C:36:73:46:8E:3F:8B
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 01975346EA66E790AFD26D696537D216912F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 0DDD
Signing time: Mon 09 Jun 2025 06:00:45 +0000
Manifest this update: Mon 09 Jun 2025 06:00:45 +0000
Manifest next update: Tue 10 Jun 2025 06:00:45 +0000
Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: R5UvHtNsLo5XBgmEeIBY3UA4KgpyOXlAvsfeKu2wJpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:46:ea:66:e7:90:af:d2:6d:69:65:37:d2:16:91:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Jun 9 06:00:45 2025 GMT
Not After : Jun 10 06:00:45 2025 GMT
Subject: CN=5ec678a5f410823add5ac5ce514c3673468e3f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:06:8d:83:f0:b8:8d:c9:95:d1:02:0a:dc:
a1:06:a9:2b:17:92:96:85:de:d5:cf:58:bc:9f:e8:
63:4f:0c:9c:00:f2:31:2b:89:bf:1b:4d:9f:b6:81:
04:73:22:19:b2:30:9a:c9:22:52:d5:24:b7:8f:dd:
54:e8:6b:4f:ac:ae:5e:e6:cd:34:7c:3b:d6:4b:eb:
f4:b7:21:14:9c:90:91:27:ff:e8:9f:7a:79:38:9f:
41:2a:30:e4:75:73:ef:8f:36:6f:7e:03:90:44:51:
bf:d9:71:79:0d:2c:68:71:55:30:6e:b9:0d:a9:5b:
6e:82:f6:ea:53:ac:d5:ef:05:20:d9:13:10:ce:f7:
88:95:10:d1:af:17:8c:8e:6f:ae:f2:35:7d:1f:82:
0c:e2:51:12:2a:4b:16:70:1e:64:0f:90:e9:86:df:
43:e6:d5:50:4f:5b:5c:7d:2b:1c:cf:6d:d7:35:45:
c6:c6:57:d1:6c:e3:48:d0:44:65:13:28:a0:6e:c3:
39:4b:95:c1:7b:07:ee:bf:63:66:3a:cc:12:8f:b0:
22:de:d4:56:a9:bc:53:0a:5e:55:05:35:f4:86:28:
d3:8c:6a:bc:a2:21:2e:c3:d5:74:08:14:fb:d1:a7:
32:f5:ca:69:cf:72:f5:3d:8b:fa:a0:02:1b:7f:80:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:78:A5:F4:10:82:3A:DD:5A:C5:CE:51:4C:36:73:46:8E:3F:8B
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e5:c6:18:a0:e6:71:45:f2:8f:85:ae:a5:11:8e:06:8f:7a:
cf:82:3f:c3:54:5d:b9:99:d6:25:54:da:eb:f5:96:4d:7c:f3:
37:2f:11:c0:74:19:90:e5:b9:8b:32:15:b3:eb:57:83:8b:e2:
ae:5d:4c:20:ec:95:33:2b:a4:91:81:c8:47:7c:72:03:ff:1a:
43:91:e3:42:3e:ca:31:40:7f:47:66:72:5b:fd:7d:24:cf:74:
0d:b2:72:9c:2a:42:51:18:25:72:8e:ed:97:a0:bf:be:c9:84:
2a:2d:f6:6c:99:00:f7:c4:7a:f1:2c:07:12:dc:ff:82:7f:2f:
7b:60:cf:96:c9:17:a9:c7:32:7f:d1:b0:ea:07:91:97:50:63:
32:18:56:b5:3b:c3:dc:96:82:bb:8c:d2:a0:8f:90:bb:fe:66:
f6:90:97:38:94:7e:26:18:65:7f:09:55:1f:79:5f:68:71:59:
95:73:28:f3:36:98:10:d6:a9:82:3c:e2:66:e2:b7:67:f0:dc:
b6:cd:b2:86:7b:c5:4f:25:57:da:cb:0a:fd:5f:1c:74:95:98:
d0:76:27:56:bd:01:69:9e:b3:82:08:df:87:44:66:c3:bd:d6:
87:b6:8f:00:31:28:7e:dd:bc:87:7e:60:2a:50:55:1a:cb:3d:
62:67:81:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTRupm55Cv0m1pZTfSFpEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWUyMGQxMDM0YjQ0ZWY3NWU5NWZkZjdlYjg4ODE1YjZm
N2QyZjgwHhcNMjUwNjA5MDYwMDQ1WhcNMjUwNjEwMDYwMDQ1WjAzMTEwLwYDVQQD
Eyg1ZWM2NzhhNWY0MTA4MjNhZGQ1YWM1Y2U1MTRjMzY3MzQ2OGUzZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkAGjYPwuI3JldECCtyhBqkrF5KW
hd7Vz1i8n+hjTwycAPIxK4m/G02ftoEEcyIZsjCaySJS1SS3j91U6GtPrK5e5s00
fDvWS+v0tyEUnJCRJ//on3p5OJ9BKjDkdXPvjzZvfgOQRFG/2XF5DSxocVUwbrkN
qVtugvbqU6zV7wUg2RMQzveIlRDRrxeMjm+u8jV9H4IM4lESKksWcB5kD5Dpht9D
5tVQT1tcfSscz23XNUXGxlfRbONI0ERlEyigbsM5S5XBewfuv2NmOswSj7Ai3tRW
qbxTCl5VBTX0hijTjGq8oiEuw9V0CBT70acy9cppz3L1PYv6oAIbf4A0eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7GeKX0EII63VrFzlFMNnNGjj+LMB8GA1UdIwQY
MBaAFMqeINEDS0Tvdelf3364iBW299L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYt
MTI3MDFhYjUxYWNmLzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYtMTI3MDFhYjUxYWNm
LzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuXGGKDm
cUXyj4WupRGOBo96z4I/w1RduZnWJVTa6/WWTXzzNy8RwHQZkOW5izIVs+tXg4vi
rl1MIOyVMyukkYHIR3xyA/8aQ5HjQj7KMUB/R2ZyW/19JM90DbJynCpCURglco7t
l6C/vsmEKi32bJkA98R68SwHEtz/gn8ve2DPlskXqccyf9Gw6geRl1BjMhhWtTvD
3JaCu4zSoI+Qu/5m9pCXOJR+JhhlfwlVH3lfaHFZlXMo8zaYENapgjziZuK3Z/Dc
ts2yhnvFTyVX2ssK/V8cdJWY0HYnVr0BaZ6zggjfh0Rmw73Wh7aPADEoft28h35g
KlBVGss9YmeBSA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:45 2025 by rpki-client