Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json)
Hash identifier: 1z5qMnExcJkO0eQxfRYaAsGf7oWiTKyM95SyflpXK5k=
Subject key identifier: D9:FA:76:A2:7B:4D:A3:42:08:D2:7A:B2:0A:03:71:57:46:EB:30:CA
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 0197499F5DBAD4B0A588E57C84CE45DA9AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
Manifest number: 0B0A
Signing time: Sat 07 Jun 2025 09:01:10 +0000
Manifest this update: Sat 07 Jun 2025 09:01:10 +0000
Manifest next update: Sun 08 Jun 2025 09:01:10 +0000
Files and hashes: 1: eiXFhQbxCQpcEPNruQeHmSAD-Z0.roa (hash: MfMam3uqTveTnOv++uzEyTkwTSJ0lTcdAkWlcL+odNo=)
2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: J/5uPL28GWc5vMfdB9NyMEdnjpv30+VTX/Yt2P4SyD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:5d:ba:d4:b0:a5:88:e5:7c:84:ce:45:da:9a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Jun 7 09:01:10 2025 GMT
Not After : Jun 8 09:01:10 2025 GMT
Subject: CN=d9fa76a27b4da34208d27ab20a03715746eb30ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:a1:d6:ce:80:29:6c:2c:10:19:97:7f:3a:
ba:9e:f9:7e:7a:14:3c:7b:c1:a1:19:ad:89:42:ed:
72:7a:76:6e:5b:e6:f9:7a:1f:21:84:c6:75:59:39:
04:b7:1b:7e:a8:89:3c:0e:d5:bc:b7:5c:4f:c2:71:
00:51:48:62:dd:1f:7c:d1:0b:1c:62:e2:ca:9e:f7:
02:ae:6e:56:c5:f0:78:b4:cb:f4:ae:a8:27:0e:e6:
4e:da:56:8b:70:4f:27:29:4f:d2:72:80:62:41:91:
e7:b5:4d:e3:88:f9:ba:75:25:79:dd:11:42:c8:fb:
dc:19:92:f6:d9:c2:14:27:95:fa:a1:f3:96:df:0f:
4f:1e:2b:b2:31:d7:2e:19:72:01:a7:f6:48:3b:0c:
a6:14:17:f4:92:1f:8a:5f:91:74:8c:7e:7b:d3:2e:
f5:38:c7:25:7c:0e:55:50:08:99:d3:75:cb:4a:70:
73:27:39:c4:b7:a8:5c:75:64:68:fb:e1:47:e0:ee:
2c:e1:e0:fb:a3:e7:5c:84:d1:58:80:99:22:6f:63:
f5:a1:67:cf:d8:41:26:1f:e7:27:ee:6a:dc:ef:99:
7d:df:e8:57:9d:61:63:7e:f5:19:ef:3f:2e:df:81:
83:96:e3:6a:42:4f:62:ce:34:f4:ed:13:36:10:c7:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:76:A2:7B:4D:A3:42:08:D2:7A:B2:0A:03:71:57:46:EB:30:CA
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:86:6e:aa:71:5b:db:34:2e:ac:36:a1:34:91:f5:de:cd:b0:
f6:f8:d9:01:d2:0f:24:6c:4c:c1:53:6d:63:d2:b2:29:03:70:
8b:d3:15:cb:93:82:61:15:21:e1:33:84:32:1f:75:bb:f8:23:
e2:80:b4:c3:9c:08:15:b1:8b:0f:a3:02:d0:87:1a:e2:e8:32:
df:58:9c:3f:b5:80:f2:39:e2:20:cc:c2:77:0d:71:f3:ac:13:
61:df:08:91:04:59:9f:3b:4d:1e:1e:0e:f8:f6:8b:26:c1:ad:
40:57:5f:63:87:b0:7c:67:09:5e:e7:3d:99:4f:ff:68:46:42:
8b:76:ac:9d:42:7c:d4:fc:13:ea:6a:fa:9b:8b:3c:7c:6e:a4:
cb:8f:b9:ac:2f:8d:eb:d7:be:ed:10:8e:a6:d5:a7:14:ba:c2:
98:f1:7f:0e:cf:be:b5:a2:d5:af:4e:26:9b:31:f2:07:f7:e5:
ae:07:19:0d:69:e6:af:85:a7:c3:79:42:bf:3b:05:f5:60:f6:
ef:3d:11:9e:3c:63:d9:ea:a5:99:71:e6:6c:01:59:b6:c6:bf:
c3:94:66:78:9d:36:98:8b:7f:ae:df:32:de:4c:ac:4b:66:83:
2b:34:01:0f:3b:23:e4:4e:8c:8d:f4:40:27:a5:ac:6e:12:86:
55:1d:c9:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1261LCliOV8hM5F2pqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTQyYjI3MDY3NjFjMmJhNzUzMjg5NzgzZWRmOTg1ZTMz
OGYxNzcwHhcNMjUwNjA3MDkwMTEwWhcNMjUwNjA4MDkwMTEwWjAzMTEwLwYDVQQD
EyhkOWZhNzZhMjdiNGRhMzQyMDhkMjdhYjIwYTAzNzE1NzQ2ZWIzMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY6h1s6AKWwsEBmXfzq6nvl+ehQ8
e8GhGa2JQu1yenZuW+b5eh8hhMZ1WTkEtxt+qIk8DtW8t1xPwnEAUUhi3R980Qsc
YuLKnvcCrm5WxfB4tMv0rqgnDuZO2laLcE8nKU/ScoBiQZHntU3jiPm6dSV53RFC
yPvcGZL22cIUJ5X6ofOW3w9PHiuyMdcuGXIBp/ZIOwymFBf0kh+KX5F0jH570y71
OMclfA5VUAiZ03XLSnBzJznEt6hcdWRo++FH4O4s4eD7o+dchNFYgJkib2P1oWfP
2EEmH+cn7mrc75l93+hXnWFjfvUZ7z8u34GDluNqQk9izjT07RM2EMeaYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNn6dqJ7TaNCCNJ6sgoDcVdG6zDKMB8GA1UdIwQY
MBaAFMqUKycGdhwrp1Mol4Pt+YXjOPF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOGMxM2QtZTdkMy00YWE5LWE5MTEt
ZWQ2NDgwNTk3N2YwLzEveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iOGMxM2QtZTdkMy00YWE5LWE5MTEtZWQ2NDgwNTk3N2Yw
LzEveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIZuqnFb
2zQurDahNJH13s2w9vjZAdIPJGxMwVNtY9KyKQNwi9MVy5OCYRUh4TOEMh91u/gj
4oC0w5wIFbGLD6MC0Ica4ugy31icP7WA8jniIMzCdw1x86wTYd8IkQRZnztNHh4O
+PaLJsGtQFdfY4ewfGcJXuc9mU//aEZCi3asnUJ81PwT6mr6m4s8fG6ky4+5rC+N
69e+7RCOptWnFLrCmPF/Ds++taLVr04mmzHyB/flrgcZDWnmr4Wnw3lCvzsF9WD2
7z0Rnjxj2eqlmXHmbAFZtsa/w5RmeJ02mIt/rt8y3kysS2aDKzQBDzsj5E6MjfRA
J6WsbhKGVR3JSw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:58 2025 by rpki-client