
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: e+XtrlgrT0lVnHON2B6bLeef7NluQKaTe4ypCEL3WnU=
Subject key identifier: 50:E2:A4:65:87:5A:E2:6E:A0:F2:1F:0B:42:6D:CD:50:D4:27:CA:B8
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 01976B86565D06C7AD3D0E61D5A3EAB798DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 02E7
Signing time: Fri 13 Jun 2025 23:00:55 +0000
Manifest this update: Fri 13 Jun 2025 23:00:55 +0000
Manifest next update: Sat 14 Jun 2025 23:00:55 +0000
Files and hashes: 1: Rui0sD0wI3PFIXuSgFCUVWy-M9k.roa (hash: hbv5XThLS6CFQJgStPKrJAlPn/du5JdwcgW0fJRsYnU=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: +Ef3YM8yEVp6lAHzlD0Byalj4oxKsf3OYoPVFzpF2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:56:5d:06:c7:ad:3d:0e:61:d5:a3:ea:b7:98:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Jun 13 23:00:55 2025 GMT
Not After : Jun 14 23:00:55 2025 GMT
Subject: CN=50e2a465875ae26ea0f21f0b426dcd50d427cab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:01:3a:03:2a:a3:a3:2d:ac:47:fe:35:fc:
c3:bc:3f:db:41:24:02:b0:91:aa:14:61:e4:55:65:
28:a5:b3:06:18:4d:2b:c3:2b:2b:63:54:21:b3:63:
ee:d2:6f:50:a5:52:58:bf:c8:6c:53:45:12:6d:4d:
b6:08:29:17:a9:19:a1:52:76:dc:62:13:42:09:44:
2a:fc:ff:36:0e:1e:a2:b7:88:ce:c8:03:06:e9:78:
99:b1:8d:08:61:ca:8f:33:8a:db:4b:4a:cd:c6:a2:
6b:c5:5e:3e:9b:43:e8:73:94:be:dd:29:6b:06:e9:
ca:5d:82:6e:ef:a8:88:e8:ea:90:6e:66:77:93:d8:
eb:dd:e2:07:66:bf:d1:65:06:dd:91:f2:91:0f:a1:
d7:4c:8c:65:64:00:b4:6b:6c:17:dd:0c:68:71:a3:
a1:63:ae:cf:2b:46:b8:35:51:a0:96:e5:6f:36:ad:
09:4d:e0:d9:7f:98:8b:59:4b:d0:62:43:73:64:44:
dd:ab:e2:7a:95:a9:22:9a:b2:b7:b8:26:14:d2:86:
be:8b:97:70:e8:dc:a5:03:b6:84:0b:f2:24:7f:e0:
a3:ad:68:b6:8d:9f:79:d0:aa:03:47:1b:d6:7c:69:
0d:d0:44:fa:bc:36:fc:32:b6:f7:1f:24:5f:bb:cc:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E2:A4:65:87:5A:E2:6E:A0:F2:1F:0B:42:6D:CD:50:D4:27:CA:B8
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c0:90:3e:9c:d2:72:e4:b3:77:dd:72:ff:30:a9:02:ef:f6:
32:cc:ac:09:58:e7:a5:1e:57:14:05:74:74:19:fe:1b:13:9c:
d9:5d:85:7f:d5:31:16:7e:1c:af:21:1a:b3:2d:2d:34:8f:6a:
42:22:96:2b:55:74:c4:be:cc:4b:3c:b7:9f:9f:eb:69:a2:6f:
6f:6a:cc:b6:2f:60:05:7a:34:69:5a:96:b3:6f:02:0b:63:28:
8a:a0:17:58:b5:c9:e4:8f:5a:38:7c:ed:46:13:cb:e4:bd:da:
98:9e:e3:44:4d:63:76:f3:03:df:b3:aa:60:a3:a8:05:c7:fa:
ab:74:22:a9:f8:92:22:b3:24:0b:2d:c5:2d:bf:b3:79:6b:a5:
3d:4a:85:e1:ad:f9:62:39:04:52:7a:ad:88:cf:a7:e3:6c:4d:
31:16:d4:5c:0a:03:77:56:76:6f:c8:3e:9e:09:03:d0:dd:45:
17:cc:c5:59:5c:58:7e:8d:6f:0f:30:dc:91:19:a0:de:6f:d6:
f3:5e:c4:01:d7:1c:0f:df:32:6e:d1:3d:75:6f:14:e1:7d:de:
5a:8b:bd:1d:c0:58:74:9f:9b:a9:f6:86:61:75:90:e5:9d:7a:
40:b2:88:bb:2a:c4:04:0b:df:c5:f4:c8:cb:8e:14:c4:27:72:
f8:cb:ce:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrhlZdBsetPQ5h1aPqt5jeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzlhMTU1MGQzZGIxYWMwYWViMTFjMTZkNjNlNDhhNjgz
YmNhMDMwHhcNMjUwNjEzMjMwMDU1WhcNMjUwNjE0MjMwMDU1WjAzMTEwLwYDVQQD
Eyg1MGUyYTQ2NTg3NWFlMjZlYTBmMjFmMGI0MjZkY2Q1MGQ0MjdjYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36QBOgMqo6MtrEf+NfzDvD/bQSQC
sJGqFGHkVWUopbMGGE0rwysrY1Qhs2Pu0m9QpVJYv8hsU0USbU22CCkXqRmhUnbc
YhNCCUQq/P82Dh6it4jOyAMG6XiZsY0IYcqPM4rbS0rNxqJrxV4+m0Poc5S+3Slr
BunKXYJu76iI6OqQbmZ3k9jr3eIHZr/RZQbdkfKRD6HXTIxlZAC0a2wX3QxocaOh
Y67PK0a4NVGgluVvNq0JTeDZf5iLWUvQYkNzZETdq+J6lakimrK3uCYU0oa+i5dw
6NylA7aEC/Ikf+CjrWi2jZ950KoDRxvWfGkN0ET6vDb8Mrb3HyRfu8zNZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDipGWHWuJuoPIfC0JtzVDUJ8q4MB8GA1UdIwQY
MBaAFMrJoVUNPbGsCusRwW1j5IpoO8oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83NDI0YzUtMmM5OS00OTUyLTg2ZTct
MDczZmI4M2FiZmM2LzEveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83NDI0YzUtMmM5OS00OTUyLTg2ZTctMDczZmI4M2FiZmM2
LzEveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsCQPpzS
cuSzd91y/zCpAu/2MsysCVjnpR5XFAV0dBn+GxOc2V2Ff9UxFn4cryEasy0tNI9q
QiKWK1V0xL7MSzy3n5/raaJvb2rMti9gBXo0aVqWs28CC2MoiqAXWLXJ5I9aOHzt
RhPL5L3amJ7jRE1jdvMD37OqYKOoBcf6q3QiqfiSIrMkCy3FLb+zeWulPUqF4a35
YjkEUnqtiM+n42xNMRbUXAoDd1Z2b8g+ngkD0N1FF8zFWVxYfo1vDzDckRmg3m/W
817EAdccD98ybtE9dW8U4X3eWou9HcBYdJ+bqfaGYXWQ5Z16QLKIuyrEBAvfxfTI
y44UxCdy+MvOsQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:59:39 2025 by rpki-client