Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: 9+7zaXYa5t7j9JyjxoHRgfX4KO8ZT4C6c3bfChCQoFE=
Subject key identifier: 91:17:08:5F:A9:56:D9:70:9B:CC:CD:D3:25:A4:22:E2:A2:71:CB:82
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 01974D44A51ECC1EB4B23355EF2B384839F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 02:00:33 +0000
Manifest this update: Sun 08 Jun 2025 02:00:33 +0000
Manifest next update: Mon 09 Jun 2025 02:00:33 +0000
Files and hashes: 1: HnblzgjRhv7ohFCku2dgX5Jr7vw.roa (hash: o9K0gGCxUA0R4sGgN9lj9M6IzHoNtSXBjdq46DJlaa4=)
2: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (hash: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: sykTULEYUecp7JvnMwxZKBS9+KQUZFnmb6IBW45CL/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:a5:1e:cc:1e:b4:b2:33:55:ef:2b:38:48:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Jun 8 02:00:33 2025 GMT
Not After : Jun 9 02:00:33 2025 GMT
Subject: CN=9117085fa956d9709bcccdd325a422e2a271cb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:98:90:c3:3b:3a:72:07:bd:7a:6b:59:e5:
db:2c:43:bb:37:5d:73:bb:95:08:06:6c:dd:a5:c2:
16:34:02:25:70:a0:0c:0b:cc:02:53:4d:23:2b:d3:
8c:9b:bd:f3:85:33:dc:02:0f:aa:1d:2f:08:f5:77:
2f:7b:aa:61:05:8d:15:21:c8:4a:d3:f6:15:ea:16:
80:d3:f4:da:3e:0f:51:5d:38:42:5e:2a:1d:e0:5f:
03:5e:2d:54:58:7a:ad:0b:04:7c:34:e1:fd:db:44:
d4:f9:05:c8:4e:a5:20:27:de:79:24:12:9a:31:08:
f9:41:d9:89:ff:69:a4:86:c2:6e:b7:fb:ab:bd:c4:
c6:12:a5:f9:7f:a3:7b:09:3a:df:8a:5d:c0:aa:50:
3c:24:ca:d4:2c:ab:f0:40:7e:3e:58:30:22:c0:87:
08:c7:ad:fa:a0:7a:df:1b:d7:a6:11:5d:0d:5f:c9:
2b:83:68:1c:17:c0:71:91:65:1c:7d:df:bd:de:ba:
9a:59:13:9d:2e:07:1b:43:67:76:c4:29:2b:62:e8:
9a:33:c7:94:f7:51:69:67:55:07:a7:71:49:53:55:
a8:9f:b3:34:79:bc:a5:af:96:f0:b5:6d:f6:20:69:
55:17:3f:d8:8a:7f:4a:ab:dd:4a:fc:5d:e6:7e:e7:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:17:08:5F:A9:56:D9:70:9B:CC:CD:D3:25:A4:22:E2:A2:71:CB:82
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:87:ec:6d:3a:4c:b6:b1:3f:07:cd:13:fa:1d:9e:b1:e8:47:
47:fa:04:7f:d4:5c:68:51:e3:f5:21:0d:a6:3e:ff:fd:44:b0:
b7:e1:a8:3a:49:45:94:45:71:df:00:a0:04:ba:0f:41:02:27:
9b:f0:fd:29:19:3b:dd:3a:77:e1:b8:32:fc:b7:85:ba:d9:77:
8c:ed:fd:88:2c:b1:50:ba:90:19:52:9c:b0:14:eb:03:76:a5:
8d:97:39:59:b9:7c:9e:9e:4d:be:dd:ec:9a:ee:0b:a6:ba:ff:
7e:09:6c:53:db:22:fd:d5:19:8c:4e:b2:92:d2:a4:77:86:b0:
ba:67:ec:e3:08:5f:0e:1e:38:11:70:b4:0d:d8:ee:f5:ca:4a:
69:fd:dc:38:f4:4e:dd:89:14:e9:f0:44:7d:ea:c1:f3:ee:23:
86:99:4b:2c:0b:62:12:9d:1b:62:a2:f3:c1:b7:0b:1c:8f:1e:
71:3d:19:d2:87:a9:b1:77:86:0e:80:4e:2f:3e:ff:35:de:41:
f4:c4:a8:c3:6d:c1:9a:2b:ff:cc:3d:ed:89:72:5f:df:ff:e7:
a8:5d:b4:e9:1f:91:d9:ac:46:d0:a0:01:81:b4:f3:59:e3:63:
70:f3:47:ef:52:ab:68:46:75:99:ed:0c:56:6e:01:6b:6d:85:
3c:c7:67:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRKUezB60sjNV7ys4SDn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTIyMGU1M2U0ZjgxY2EyNThjY2ZlYTE4NzI4MDI4MGY1
ZjYyMWEwHhcNMjUwNjA4MDIwMDMzWhcNMjUwNjA5MDIwMDMzWjAzMTEwLwYDVQQD
Eyg5MTE3MDg1ZmE5NTZkOTcwOWJjY2NkZDMyNWE0MjJlMmEyNzFjYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWmYkMM7OnIHvXprWeXbLEO7N11z
u5UIBmzdpcIWNAIlcKAMC8wCU00jK9OMm73zhTPcAg+qHS8I9Xcve6phBY0VIchK
0/YV6haA0/TaPg9RXThCXiod4F8DXi1UWHqtCwR8NOH920TU+QXITqUgJ955JBKa
MQj5QdmJ/2mkhsJut/urvcTGEqX5f6N7CTrfil3AqlA8JMrULKvwQH4+WDAiwIcI
x636oHrfG9emEV0NX8krg2gcF8BxkWUcfd+93rqaWROdLgcbQ2d2xCkrYuiaM8eU
91FpZ1UHp3FJU1Won7M0ebylr5bwtW32IGlVFz/Yin9Kq91K/F3mfueVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEXCF+pVtlwm8zN0yWkIuKiccuCMB8GA1UdIwQY
MBaAFMpSIOU+T4HKJYzP6hhygCgPX2IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODkt
ZjIzYzVhNTMxODIzLzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODktZjIzYzVhNTMxODIz
LzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYfsbTpM
trE/B80T+h2esehHR/oEf9RcaFHj9SENpj7//USwt+GoOklFlEVx3wCgBLoPQQIn
m/D9KRk73Tp34bgy/LeFutl3jO39iCyxULqQGVKcsBTrA3aljZc5Wbl8np5Nvt3s
mu4Lprr/fglsU9si/dUZjE6yktKkd4awumfs4whfDh44EXC0Ddju9cpKaf3cOPRO
3YkU6fBEferB8+4jhplLLAtiEp0bYqLzwbcLHI8ecT0Z0oepsXeGDoBOLz7/Nd5B
9MSow23Bmiv/zD3tiXJf3//nqF206R+R2axG0KABgbTzWeNjcPNH71KraEZ1me0M
Vm4Ba22FPMdnIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:14:35 2025 by rpki-client