Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier: GSGHRhrPldiBJeW8LoaIcW0NOcfBWu3n4cv+cAp7uwo=
Subject key identifier: 9C:8B:E5:0D:F3:AF:D9:B6:13:98:68:9B:9F:A6:F6:3E:7A:09:42:12
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 0197586D821600813C3CA78E8BCFCFDBE8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number: 0D1E
Signing time: Tue 10 Jun 2025 06:01:01 +0000
Manifest this update: Tue 10 Jun 2025 06:01:01 +0000
Manifest next update: Wed 11 Jun 2025 06:01:01 +0000
Files and hashes: 1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=)
2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=)
3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: tFU+3qRWvUnN95n3ixmT/4X3C3v8OKQdSw3BM2q572U=)
4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:82:16:00:81:3c:3c:a7:8e:8b:cf:cf:db:e8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Jun 10 06:01:01 2025 GMT
Not After : Jun 11 06:01:01 2025 GMT
Subject: CN=9c8be50df3afd9b61398689b9fa6f63e7a094212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:cb:26:43:d3:c3:81:8d:e8:91:43:21:0e:
c3:18:94:65:74:d4:d7:c5:87:7b:94:6c:ed:aa:e8:
ce:5f:0d:0b:fc:ac:6d:8d:c6:ba:f1:e0:c0:8e:53:
d4:a4:37:d3:31:2b:7e:6a:62:55:64:b5:7c:02:c5:
ed:80:7c:31:0a:d1:81:29:06:3f:78:3e:cf:c2:06:
71:fa:a0:f6:8c:a3:03:de:fd:0e:f3:30:77:de:cf:
02:ec:94:37:3e:0e:42:3b:13:1b:56:ac:7d:4e:21:
e1:57:13:08:64:00:88:b8:6e:a4:90:27:c2:76:96:
44:97:dd:83:b0:b4:a9:23:09:76:97:be:f2:61:3c:
37:dd:22:3a:ec:9b:3a:12:52:78:53:be:74:32:ac:
86:60:e6:ff:c7:e6:9a:96:aa:7c:35:bd:d0:9e:c6:
16:3d:cd:23:dc:16:4e:47:5e:4d:2c:c8:c7:3b:6e:
5a:84:fa:c0:d1:fb:c7:0b:71:f9:37:2f:de:1e:cf:
02:94:28:d5:7f:c4:0c:da:cc:fc:eb:0c:a8:e3:16:
39:8a:b5:92:3f:78:30:01:6e:01:da:7d:20:2f:88:
2a:78:c0:11:66:ec:3c:2b:e1:00:10:e6:c6:e2:53:
01:17:69:bc:7b:14:01:9c:45:17:c7:f6:11:8e:44:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8B:E5:0D:F3:AF:D9:B6:13:98:68:9B:9F:A6:F6:3E:7A:09:42:12
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:8e:0f:43:c5:15:f9:09:44:fd:71:d0:65:09:7f:19:9f:e0:
dd:8f:7f:09:93:e2:64:cc:7a:44:d5:80:89:38:7a:20:4b:bc:
a6:30:ea:b2:d4:94:42:20:e2:0b:13:72:ef:4b:23:f2:b1:54:
85:e0:7c:38:d0:64:67:bf:ee:85:0c:53:c4:60:7a:7f:2a:9b:
a9:86:2b:4e:74:0d:d8:36:bd:24:49:0e:0f:17:e7:6d:87:9c:
90:4e:b9:29:b1:df:e0:82:29:f4:86:35:3b:d8:35:97:47:5e:
f7:fc:31:a9:11:42:d1:c8:c9:c5:73:0e:38:dc:ea:d2:7d:17:
9b:e9:c6:34:d6:95:1a:4d:e6:90:66:51:3e:ae:72:56:79:41:
f9:55:93:7f:7d:05:e6:f9:31:54:f7:5e:93:9d:c5:38:82:96:
af:3d:3d:df:82:4a:fe:0a:c3:00:bd:a2:28:51:a0:b9:04:5f:
2d:a4:dc:51:28:b6:98:40:f9:48:2d:7d:98:fb:9e:3e:6d:22:
9a:4b:9f:3a:fe:04:ce:39:73:05:0f:8d:7a:42:59:96:47:52:
08:31:07:2f:49:f0:dd:ce:01:57:00:23:f6:a0:6a:d9:dd:99:
33:9f:e5:bc:ed:18:61:bd:12:bf:fe:56:d1:51:6f:29:77:81:
44:bb:a0:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYbYIWAIE8PKeOi8/P2+jhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGUxOWEyMjc1ODE2YTI4ZTVlODBjOGY5YTI4Y2M1YTFk
OWMwZDUwHhcNMjUwNjEwMDYwMTAxWhcNMjUwNjExMDYwMTAxWjAzMTEwLwYDVQQD
Eyg5YzhiZTUwZGYzYWZkOWI2MTM5ODY4OWI5ZmE2ZjYzZTdhMDk0MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dHLJkPTw4GN6JFDIQ7DGJRldNTX
xYd7lGztqujOXw0L/Kxtjca68eDAjlPUpDfTMSt+amJVZLV8AsXtgHwxCtGBKQY/
eD7PwgZx+qD2jKMD3v0O8zB33s8C7JQ3Pg5COxMbVqx9TiHhVxMIZACIuG6kkCfC
dpZEl92DsLSpIwl2l77yYTw33SI67Js6ElJ4U750MqyGYOb/x+aalqp8Nb3QnsYW
Pc0j3BZOR15NLMjHO25ahPrA0fvHC3H5Ny/eHs8ClCjVf8QM2sz86wyo4xY5irWS
P3gwAW4B2n0gL4gqeMARZuw8K+EAEObG4lMBF2m8exQBnEUXx/YRjkTH2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyL5Q3zr9m2E5hom5+m9j56CUISMB8GA1UdIwQY
MBaAFGFOGaInWBaijl6AyPmijMWh2cDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAt
ODcwNTQ0Y2FhZmFiLzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAtODcwNTQ0Y2FhZmFi
LzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0I4PQ8UV
+QlE/XHQZQl/GZ/g3Y9/CZPiZMx6RNWAiTh6IEu8pjDqstSUQiDiCxNy70sj8rFU
heB8ONBkZ7/uhQxTxGB6fyqbqYYrTnQN2Da9JEkODxfnbYeckE65KbHf4IIp9IY1
O9g1l0de9/wxqRFC0cjJxXMOONzq0n0Xm+nGNNaVGk3mkGZRPq5yVnlB+VWTf30F
5vkxVPdek53FOIKWrz0934JK/grDAL2iKFGguQRfLaTcUSi2mED5SC19mPuePm0i
mkufOv4EzjlzBQ+NekJZlkdSCDEHL0nw3c4BVwAj9qBq2d2ZM5/lvO0YYb0Sv/5W
0VFvKXeBRLuggA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 09:49:47 2025 by rpki-client