Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
File: yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json)
Hash identifier: fGtJnRuCZlxlrbZu6uQfxTTTGFsnn5GlnkoZgJjjjBw=
Subject key identifier: 32:B8:2B:C5:1C:55:AD:A8:BF:29:40:69:8D:5A:71:FB:DA:EF:06:36
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial: 019755A336D5F75BD5E8667B8E1464663427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
Manifest number: 0A04
Signing time: Mon 09 Jun 2025 17:00:49 +0000
Manifest this update: Mon 09 Jun 2025 17:00:49 +0000
Manifest next update: Tue 10 Jun 2025 17:00:49 +0000
Files and hashes: 1: DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa (hash: 2p6cZB/6xzzCJ7jeUbBrD5Bf0hcHEh4tn/vPl+35cnU=)
2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: 88HKzDRUVG4I3D99b8jVwgFCjkXGr1SCgZkcfQOH6Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a3:36:d5:f7:5b:d5:e8:66:7b:8e:14:64:66:34:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
Validity
Not Before: Jun 9 17:00:49 2025 GMT
Not After : Jun 10 17:00:49 2025 GMT
Subject: CN=32b82bc51c55ada8bf2940698d5a71fbdaef0636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:5c:3b:6e:40:b0:bc:da:a2:46:7c:f2:ad:
37:26:95:be:49:f7:07:2f:e3:58:51:2a:6f:cb:dc:
e9:b2:11:50:a5:6e:02:84:42:4f:9b:cf:db:bb:79:
d6:71:4a:af:06:7b:15:39:6a:6f:7b:08:0e:83:a6:
e3:04:96:a6:1b:0e:5e:86:ed:e5:d0:06:95:2f:96:
88:40:9d:34:d2:c7:61:11:3b:71:bf:c2:3f:b6:8e:
36:3d:e7:0e:d9:02:fd:49:09:d6:6c:1c:36:29:be:
4e:66:13:99:36:c6:0e:2b:c8:5f:86:48:ad:e8:d0:
51:26:89:83:07:34:b3:83:63:85:18:fb:a5:ec:da:
08:d1:b4:2a:92:47:fa:eb:52:91:08:c7:39:14:54:
a6:5b:ae:00:cc:7e:ba:b2:ef:ac:00:ec:00:9d:99:
65:2b:d3:07:4b:57:50:13:43:0d:bf:5e:76:0f:d2:
09:46:37:2e:70:87:48:37:f1:d8:39:95:db:45:32:
29:d8:2a:f3:cd:0d:80:d2:4b:08:87:1b:0e:b2:ad:
7e:67:ec:4d:1a:3f:86:ba:55:6b:c6:fe:49:04:7f:
65:ed:d7:54:6e:7a:26:04:92:90:66:e0:ab:b2:e3:
f0:b0:74:de:b5:33:9f:7d:56:42:91:97:87:39:b0:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B8:2B:C5:1C:55:AD:A8:BF:29:40:69:8D:5A:71:FB:DA:EF:06:36
X509v3 Authority Key Identifier:
keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:48:75:6a:d2:9e:dd:6d:42:2e:9d:2a:0f:49:88:6b:d3:69:
02:10:83:a6:b5:f7:dc:25:71:77:67:bd:9b:88:6a:2f:fd:48:
b9:3c:f5:d6:2e:34:b6:74:2e:28:10:d4:6c:8c:1f:6e:55:96:
e0:56:81:5e:90:ca:8b:af:67:58:e1:b0:a4:00:c8:8b:aa:48:
4e:5b:1f:87:00:72:cc:2c:18:35:3d:d6:ba:14:e7:1d:2e:de:
8d:b5:57:0b:71:75:d8:53:b7:7b:6d:46:d6:f6:00:ef:65:a6:
82:8d:23:59:24:fc:41:c4:3a:9e:10:8b:1e:be:45:c9:31:68:
02:a1:8d:95:04:7b:39:83:b7:a0:54:c7:88:e1:fd:c3:b7:bc:
05:79:ff:f3:36:77:a7:e5:82:24:7d:9b:73:ad:19:7d:d3:af:
f3:2b:77:75:2a:ac:d5:3e:ba:94:4f:0d:b6:32:cb:81:85:74:
4b:27:2f:1a:cf:6a:40:6e:68:0a:b7:7f:2f:47:91:6c:ea:58:
2b:52:81:42:62:49:85:35:22:51:22:af:6c:4d:3a:08:ae:0d:
28:b3:08:51:40:08:76:64:8b:00:16:30:fd:4a:c5:e0:33:04:
d9:9c:ca:a6:71:39:79:de:72:a3:98:58:54:d7:64:f4:61:cd:
4a:cb:85:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdVozbV91vV6GZ7jhRkZjQnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NWQwMWI0NDI5NDZlMTkyNDMxM2Q1NjRmMzFiN2U0MmUy
NDU1ZTcwHhcNMjUwNjA5MTcwMDQ5WhcNMjUwNjEwMTcwMDQ5WjAzMTEwLwYDVQQD
EygzMmI4MmJjNTFjNTVhZGE4YmYyOTQwNjk4ZDVhNzFmYmRhZWYwNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKtcO25AsLzaokZ88q03JpW+SfcH
L+NYUSpvy9zpshFQpW4ChEJPm8/bu3nWcUqvBnsVOWpvewgOg6bjBJamGw5ehu3l
0AaVL5aIQJ000sdhETtxv8I/to42PecO2QL9SQnWbBw2Kb5OZhOZNsYOK8hfhkit
6NBRJomDBzSzg2OFGPul7NoI0bQqkkf661KRCMc5FFSmW64AzH66su+sAOwAnZll
K9MHS1dQE0MNv152D9IJRjcucIdIN/HYOZXbRTIp2CrzzQ2A0ksIhxsOsq1+Z+xN
Gj+GulVrxv5JBH9l7ddUbnomBJKQZuCrsuPwsHTetTOffVZCkZeHObBmhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK4K8UcVa2ovylAaY1acfva7wY2MB8GA1UdIwQY
MBaAFMhdAbRClG4ZJDE9Vk8xt+QuJFXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NTA4NzMtZDA2My00MjBkLWEwNTEt
MTZiOTdiOWE4ODVlLzEveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81NTA4NzMtZDA2My00MjBkLWEwNTEtMTZiOTdiOWE4ODVl
LzEveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0h1atKe
3W1CLp0qD0mIa9NpAhCDprX33CVxd2e9m4hqL/1IuTz11i40tnQuKBDUbIwfblWW
4FaBXpDKi69nWOGwpADIi6pITlsfhwByzCwYNT3WuhTnHS7ejbVXC3F12FO3e21G
1vYA72Wmgo0jWST8QcQ6nhCLHr5FyTFoAqGNlQR7OYO3oFTHiOH9w7e8BXn/8zZ3
p+WCJH2bc60ZfdOv8yt3dSqs1T66lE8NtjLLgYV0SycvGs9qQG5oCrd/L0eRbOpY
K1KBQmJJhTUiUSKvbE06CK4NKLMIUUAIdmSLABYw/UrF4DME2ZzKpnE5ed5yo5hY
VNdk9GHNSsuFYA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 23:42:58 2025 by rpki-client