Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: W/yijxidvPIHlYyQbj+3auknJpOSOZdcWNCF7mJQD9I=
Subject key identifier: FF:A5:71:44:52:95:68:8A:E4:BA:12:A8:AD:B1:BF:D5:AB:C6:DC:A3
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 01974A0C7E048A644093614395D8E2684593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0C64
Signing time: Sat 07 Jun 2025 11:00:21 +0000
Manifest this update: Sat 07 Jun 2025 11:00:21 +0000
Manifest next update: Sun 08 Jun 2025 11:00:21 +0000
Files and hashes: 1: PaUzB8wgbbRsaVQjkghBHBx-i68.roa (hash: lFrqYnlO5yM3Jwu/7kIddY95Ktd00GHwSSlGhdD9Z3M=)
2: o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa (hash: I2VZfYqX7cBWwD9BfQYsIfq3N0fck3zT8r6EAvsy5D8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: i/oQOX98KG3d9OenHK9bUdNTrc0QrcoGd/bWDs2i7uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:7e:04:8a:64:40:93:61:43:95:d8:e2:68:45:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jun 7 11:00:21 2025 GMT
Not After : Jun 8 11:00:21 2025 GMT
Subject: CN=ffa571445295688ae4ba12a8adb1bfd5abc6dca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:b3:53:c0:64:ad:78:9f:6b:3e:f5:93:8f:
cd:f8:46:71:42:d4:7a:9b:9e:87:ba:05:68:7c:31:
86:c1:62:c5:6b:51:9c:bb:9e:3c:bb:f3:fd:e7:a2:
93:9c:8c:41:83:e3:d8:4f:df:03:35:e6:bb:be:0c:
a8:aa:3a:55:27:98:91:22:eb:2e:15:fd:9d:1c:11:
ac:14:83:3c:d5:2f:b1:c3:a9:24:39:28:1f:46:a6:
4a:84:ff:e1:05:67:82:e1:99:50:cb:fb:78:49:68:
a1:66:6d:68:8b:05:92:15:0d:b3:99:80:e5:91:b9:
55:06:d5:f0:59:99:f7:b0:a1:c2:2d:0e:c6:d4:ed:
db:dd:71:31:eb:69:0d:21:e5:ff:61:0d:17:2a:1f:
ca:50:66:0c:02:d3:80:0f:97:0e:c3:a0:29:5d:76:
a9:8e:5c:e1:ce:ae:34:a6:99:72:93:ff:9c:bd:07:
d3:87:35:f1:af:15:c5:e9:3b:0f:33:28:96:57:5e:
63:d6:78:4e:9f:80:5c:38:9f:22:27:20:bd:3a:82:
05:ee:c0:3e:a8:80:0c:9f:ad:f9:5b:f8:17:1b:63:
86:86:32:17:3c:65:8d:a6:33:cb:9d:08:96:b8:1b:
5a:76:49:6e:e8:ee:b6:33:39:53:f7:ed:30:52:74:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A5:71:44:52:95:68:8A:E4:BA:12:A8:AD:B1:BF:D5:AB:C6:DC:A3
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:aa:da:06:c5:3a:7e:b4:8f:e2:14:fd:a0:6f:b8:bf:f5:a5:
0d:b8:28:fe:0d:33:2c:d2:93:01:93:61:9d:80:03:f9:b9:db:
f8:7b:49:64:c4:5a:b8:7b:3a:7e:73:8f:c0:6c:8e:89:a3:1a:
77:25:19:56:c6:35:f6:b1:80:bd:33:c0:cc:d9:04:da:d1:46:
3f:2d:6b:80:80:ce:f0:d0:d1:ce:9c:74:00:4b:a8:7f:88:26:
4c:8c:e8:3a:05:d1:29:6e:55:83:42:05:38:3f:bf:c3:9a:c8:
43:60:2b:93:a0:14:6f:93:3a:3a:e9:c0:09:a7:e8:48:5b:3d:
bc:7e:2b:c4:60:4c:be:dd:19:b5:dd:76:db:d1:1a:67:d0:12:
14:f8:71:40:9b:c0:10:4d:77:fc:24:9f:ff:a8:e6:0b:99:61:
e1:39:d2:8c:bc:d8:2d:0a:fd:47:83:54:ab:d2:8d:52:03:d3:
df:65:26:fa:d9:87:de:b6:aa:1e:40:d7:be:94:fe:a9:06:36:
c7:67:03:2e:62:7a:aa:07:fa:7b:83:d9:84:89:cc:51:6f:51:
b9:74:cc:2c:9a:58:48:9c:68:7e:1f:c8:3f:5f:fb:88:d7:0d:
55:f3:70:eb:1a:f7:ed:6b:65:e5:ac:72:5e:fc:7b:d2:fa:45:
13:1f:98:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDH4EimRAk2FDldjiaEWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTFjNDJkZmE2YWZiYzExZTc4ZWU5ZGUyZTc4NWY4YTIw
YjUwNDMwHhcNMjUwNjA3MTEwMDIxWhcNMjUwNjA4MTEwMDIxWjAzMTEwLwYDVQQD
EyhmZmE1NzE0NDUyOTU2ODhhZTRiYTEyYThhZGIxYmZkNWFiYzZkY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiazU8BkrXifaz71k4/N+EZxQtR6
m56HugVofDGGwWLFa1Gcu548u/P956KTnIxBg+PYT98DNea7vgyoqjpVJ5iRIusu
Ff2dHBGsFIM81S+xw6kkOSgfRqZKhP/hBWeC4ZlQy/t4SWihZm1oiwWSFQ2zmYDl
kblVBtXwWZn3sKHCLQ7G1O3b3XEx62kNIeX/YQ0XKh/KUGYMAtOAD5cOw6ApXXap
jlzhzq40pplyk/+cvQfThzXxrxXF6TsPMyiWV15j1nhOn4BcOJ8iJyC9OoIF7sA+
qIAMn635W/gXG2OGhjIXPGWNpjPLnQiWuBtadklu6O62MzlT9+0wUnTInQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+lcURSlWiK5LoSqK2xv9WrxtyjMB8GA1UdIwQY
MBaAFMqRxC36avvBHnjuneLnhfiiC1BDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NTFlODQtMmYxYS00Yzc3LWIxZjIt
ZDU4NjUwNDFhMTRmLzEveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NTFlODQtMmYxYS00Yzc3LWIxZjItZDU4NjUwNDFhMTRm
LzEveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaraBsU6
frSP4hT9oG+4v/WlDbgo/g0zLNKTAZNhnYAD+bnb+HtJZMRauHs6fnOPwGyOiaMa
dyUZVsY19rGAvTPAzNkE2tFGPy1rgIDO8NDRzpx0AEuof4gmTIzoOgXRKW5Vg0IF
OD+/w5rIQ2Ark6AUb5M6OunACafoSFs9vH4rxGBMvt0Ztd1229EaZ9ASFPhxQJvA
EE13/CSf/6jmC5lh4TnSjLzYLQr9R4NUq9KNUgPT32Um+tmH3raqHkDXvpT+qQY2
x2cDLmJ6qgf6e4PZhInMUW9RuXTMLJpYSJxofh/IP1/7iNcNVfNw6xr37Wtl5axy
Xvx70vpFEx+Y2g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:26:36 2025 by rpki-client