Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: bij3W94VkqL5Jh95N+kyNVP/7aBxzFGjgHOxIlxSpuc=
Subject key identifier: D2:C3:21:88:CF:4D:3E:70:1A:AF:16:70:B6:1D:86:E0:BC:B3:1B:90
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019747E731830ADDE5871B1953EA3A1FAB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 1510
Signing time: Sat 07 Jun 2025 01:00:23 +0000
Manifest this update: Sat 07 Jun 2025 01:00:23 +0000
Manifest next update: Sun 08 Jun 2025 01:00:23 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: NGv0+4hme4Kcob5fZ3ACIK0RJeoDL1pvMIz/52o3PKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:31:83:0a:dd:e5:87:1b:19:53:ea:3a:1f:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Jun 7 01:00:23 2025 GMT
Not After : Jun 8 01:00:23 2025 GMT
Subject: CN=d2c32188cf4d3e701aaf1670b61d86e0bcb31b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:01:53:6a:e0:df:66:6c:40:ae:97:43:34:
6a:c8:ba:86:ef:19:ca:e4:49:cb:12:63:db:d3:80:
55:d8:6c:ac:74:50:ac:a9:d3:00:34:e8:aa:24:bc:
e6:f2:2a:60:de:e1:96:62:71:14:df:f2:95:54:24:
9d:10:44:b2:fe:08:6a:3c:7c:76:8b:6c:77:03:6c:
29:68:f7:1c:80:5c:47:75:eb:fa:02:58:4c:fd:82:
52:0d:ae:e7:aa:45:f1:34:9e:8e:14:37:5e:17:e2:
90:b9:2a:ec:5d:2a:74:39:88:2d:4e:33:68:9a:a0:
23:79:a4:c0:65:63:e5:8f:12:df:b3:8c:c1:1f:5a:
c5:6d:d0:44:2c:ef:13:ad:4c:74:a4:86:17:ab:56:
ae:13:f8:4d:b3:87:ee:15:21:98:5d:20:eb:a8:9a:
99:82:19:71:d5:a7:6d:76:28:5e:1e:d2:39:e8:80:
d6:f0:f6:e6:c8:07:fe:f9:1e:c5:e4:87:bf:dd:cf:
29:ef:f8:c2:a6:83:18:74:0c:10:2f:f8:4f:81:18:
e8:ad:17:c2:ce:3f:df:1c:d3:7d:88:8d:58:12:ee:
55:28:4f:00:3c:7c:f7:6c:02:ed:eb:33:a3:30:aa:
d8:71:2c:cf:d7:13:11:16:64:67:1c:bd:7e:05:4c:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C3:21:88:CF:4D:3E:70:1A:AF:16:70:B6:1D:86:E0:BC:B3:1B:90
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8b:5f:64:08:37:5e:43:53:1e:d2:a3:a2:50:99:e0:52:dc:
7c:2a:6d:3e:35:2b:47:7e:b5:09:f4:2a:e7:d6:aa:29:9f:18:
6d:d3:55:65:68:f3:3c:d8:19:b9:b8:fd:e9:11:06:f6:35:3f:
0b:3a:63:7b:fe:5f:5c:4f:d4:39:ef:08:68:36:6e:a4:10:89:
02:a5:48:49:8e:8f:df:e6:94:cc:39:7f:eb:dc:95:45:15:6e:
3a:6b:23:8f:d3:58:b6:9d:f1:a4:c0:c0:f2:95:4f:3a:d7:55:
aa:b8:3e:f6:4a:eb:7d:a5:5e:38:0a:c6:e9:27:ec:3e:2f:50:
a8:dc:a4:4f:8f:a6:8f:2c:d1:e8:12:1e:19:1a:cc:ba:26:6e:
b8:35:6c:4e:a8:b8:3c:f9:8e:46:df:79:28:2d:f9:a6:15:97:
1c:67:a3:8b:2f:b9:9e:7b:b3:0e:dd:a9:d6:be:d1:bd:7a:fc:
fa:f2:c7:c0:0d:11:dd:5d:7d:80:de:f9:ca:44:98:c9:d5:19:
6a:d3:30:6b:70:9e:00:42:74:1d:36:7d:a5:3a:6d:24:a0:50:
00:74:34:a4:64:95:93:b0:7f:40:a9:77:51:79:0c:28:59:c3:
44:e0:0f:d3:f5:16:25:af:0e:f2:c8:59:1c:06:6f:f0:97:48:
df:68:5d:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH5zGDCt3lhxsZU+o6H6uOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2JjYTg3NjQ5NDY5MzJiYTJkYThiZGI3ZDEzY2Q4Njg5
NWFmNjkwHhcNMjUwNjA3MDEwMDIzWhcNMjUwNjA4MDEwMDIzWjAzMTEwLwYDVQQD
EyhkMmMzMjE4OGNmNGQzZTcwMWFhZjE2NzBiNjFkODZlMGJjYjMxYjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4cBU2rg32ZsQK6XQzRqyLqG7xnK
5EnLEmPb04BV2GysdFCsqdMANOiqJLzm8ipg3uGWYnEU3/KVVCSdEESy/ghqPHx2
i2x3A2wpaPccgFxHdev6AlhM/YJSDa7nqkXxNJ6OFDdeF+KQuSrsXSp0OYgtTjNo
mqAjeaTAZWPljxLfs4zBH1rFbdBELO8TrUx0pIYXq1auE/hNs4fuFSGYXSDrqJqZ
ghlx1adtdiheHtI56IDW8PbmyAf++R7F5Ie/3c8p7/jCpoMYdAwQL/hPgRjorRfC
zj/fHNN9iI1YEu5VKE8APHz3bALt6zOjMKrYcSzP1xMRFmRnHL1+BUz+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLDIYjPTT5wGq8WcLYdhuC8sxuQMB8GA1UdIwQY
MBaAFMo7yodklGkyui2ovbfRPNhola9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAt
MDEyZGRlYWRmNzVlLzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAtMDEyZGRlYWRmNzVl
LzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOItfZAg3
XkNTHtKjolCZ4FLcfCptPjUrR361CfQq59aqKZ8YbdNVZWjzPNgZubj96REG9jU/
Czpje/5fXE/UOe8IaDZupBCJAqVISY6P3+aUzDl/69yVRRVuOmsjj9NYtp3xpMDA
8pVPOtdVqrg+9krrfaVeOArG6SfsPi9QqNykT4+mjyzR6BIeGRrMuiZuuDVsTqi4
PPmORt95KC35phWXHGejiy+5nnuzDt2p1r7RvXr8+vLHwA0R3V19gN75ykSYydUZ
atMwa3CeAEJ0HTZ9pTptJKBQAHQ0pGSVk7B/QKl3UXkMKFnDROAP0/UWJa8O8shZ
HAZv8JdI32hdwA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:38:28 2025 by rpki-client