Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: q63EIJJ69MwLYhYEaNK+2/7T3l97/gwleSIDOsPdbQU=
Subject key identifier: DB:B1:99:8C:33:43:7B:3B:A0:BE:0C:74:59:BD:EA:08:6A:9D:F0:D0
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 019758367A05E4537C2543C6C407A8907556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 02DD
Signing time: Tue 10 Jun 2025 05:00:54 +0000
Manifest this update: Tue 10 Jun 2025 05:00:54 +0000
Manifest next update: Wed 11 Jun 2025 05:00:54 +0000
Files and hashes: 1: Rui0sD0wI3PFIXuSgFCUVWy-M9k.roa (hash: hbv5XThLS6CFQJgStPKrJAlPn/du5JdwcgW0fJRsYnU=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: QcsAQ3jhYngQSthWdDkRu23XQMeGTmXHOy17FsLTZ8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:7a:05:e4:53:7c:25:43:c6:c4:07:a8:90:75:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Jun 10 05:00:54 2025 GMT
Not After : Jun 11 05:00:54 2025 GMT
Subject: CN=dbb1998c33437b3ba0be0c7459bdea086a9df0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:ab:a4:32:04:42:75:84:54:99:15:cf:47:
6f:c9:2d:fa:d5:20:83:82:ab:8c:50:96:f2:6d:3e:
c0:75:5a:16:e8:6a:53:62:4b:03:a7:c4:b8:f8:47:
46:b7:93:7d:44:72:2d:69:e5:1c:26:30:56:a4:5f:
26:d2:ea:b3:15:70:6c:86:eb:31:87:0a:99:9d:94:
d9:44:c9:0c:ca:a2:ac:98:bf:2a:5b:3e:0f:3c:9f:
6a:06:50:ff:b4:17:fa:f1:7c:62:9d:28:8f:41:de:
33:4d:ec:94:dc:34:b5:8a:8e:e5:43:de:72:b2:62:
fd:ab:de:3f:ed:97:c1:8f:95:6f:79:81:8a:f0:af:
58:bb:19:bc:a5:34:11:85:e0:a7:a2:ac:c9:04:04:
a7:fe:bd:1d:6a:ef:89:66:18:26:dc:6f:ce:89:d9:
6b:f5:e9:bc:53:b9:ca:ce:b0:c6:a4:bb:19:f1:3b:
bd:30:f7:b3:18:8c:01:02:76:e9:d6:b0:b1:4e:df:
6a:19:0a:ba:21:5a:c5:7e:70:8e:cc:2a:7e:dd:44:
e1:90:ad:f1:39:e8:54:ca:4f:57:6a:35:45:b8:26:
bc:b5:eb:76:f5:f0:7a:54:27:77:b8:df:2a:c5:12:
02:38:75:cf:61:06:3b:12:0d:19:2c:49:b9:7f:d2:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:99:8C:33:43:7B:3B:A0:BE:0C:74:59:BD:EA:08:6A:9D:F0:D0
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ad:32:b7:67:4a:42:ae:81:9f:76:fe:43:38:09:e7:04:e2:
dd:06:0c:6e:76:bf:9e:64:52:57:dd:e1:11:34:d6:11:be:ba:
94:e8:0a:7e:06:5e:54:24:72:19:7e:34:bb:e0:f8:47:a4:cd:
e1:c4:34:1d:94:7a:7c:01:e8:ce:05:37:7f:77:30:fb:0f:06:
9e:c8:6a:97:f3:f6:56:52:c2:72:1e:be:82:10:03:43:1c:7c:
22:08:1f:d8:64:df:e7:f9:32:ba:b5:9c:6a:26:84:45:db:9e:
90:74:d1:01:1a:dd:04:de:54:77:5e:54:5f:f3:9b:f9:01:1e:
bd:7d:45:35:e7:d3:78:a4:f2:82:e3:fc:d1:c5:47:15:f7:ac:
ec:b3:cc:a3:4c:86:20:e5:73:a5:04:64:a4:a2:1e:1d:56:97:
31:4b:a1:e7:ff:29:03:02:f6:24:55:aa:99:c7:e4:2d:f7:bc:
a1:41:be:c6:d7:6a:6e:c9:71:49:9b:7a:8b:3b:ff:5f:32:a0:
f9:fa:2d:86:13:12:69:a1:2b:47:87:8b:4d:f2:a8:2f:0f:36:
fa:5b:e7:37:67:f8:d1:10:cc:14:e1:ce:75:72:fb:7c:58:76:
f9:65:fd:97:6b:69:cd:51:2f:ca:70:a4:56:7d:63:d6:dd:1a:
a5:b0:98:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYNnoF5FN8JUPGxAeokHVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzlhMTU1MGQzZGIxYWMwYWViMTFjMTZkNjNlNDhhNjgz
YmNhMDMwHhcNMjUwNjEwMDUwMDU0WhcNMjUwNjExMDUwMDU0WjAzMTEwLwYDVQQD
EyhkYmIxOTk4YzMzNDM3YjNiYTBiZTBjNzQ1OWJkZWEwODZhOWRmMGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc2rpDIEQnWEVJkVz0dvyS361SCD
gquMUJbybT7AdVoW6GpTYksDp8S4+EdGt5N9RHItaeUcJjBWpF8m0uqzFXBshusx
hwqZnZTZRMkMyqKsmL8qWz4PPJ9qBlD/tBf68XxinSiPQd4zTeyU3DS1io7lQ95y
smL9q94/7ZfBj5VveYGK8K9Yuxm8pTQRheCnoqzJBASn/r0dau+JZhgm3G/Oidlr
9em8U7nKzrDGpLsZ8Tu9MPezGIwBAnbp1rCxTt9qGQq6IVrFfnCOzCp+3UThkK3x
OehUyk9XajVFuCa8tet29fB6VCd3uN8qxRICOHXPYQY7Eg0ZLEm5f9IM1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuxmYwzQ3s7oL4MdFm96ghqnfDQMB8GA1UdIwQY
MBaAFMrJoVUNPbGsCusRwW1j5IpoO8oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83NDI0YzUtMmM5OS00OTUyLTg2ZTct
MDczZmI4M2FiZmM2LzEveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83NDI0YzUtMmM5OS00OTUyLTg2ZTctMDczZmI4M2FiZmM2
LzEveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB60yt2dK
Qq6Bn3b+QzgJ5wTi3QYMbna/nmRSV93hETTWEb66lOgKfgZeVCRyGX40u+D4R6TN
4cQ0HZR6fAHozgU3f3cw+w8Gnshql/P2VlLCch6+ghADQxx8Iggf2GTf5/kyurWc
aiaERduekHTRARrdBN5Ud15UX/Ob+QEevX1FNefTeKTyguP80cVHFfes7LPMo0yG
IOVzpQRkpKIeHVaXMUuh5/8pAwL2JFWqmcfkLfe8oUG+xtdqbslxSZt6izv/XzKg
+fothhMSaaErR4eLTfKoLw82+lvnN2f40RDMFOHOdXL7fFh2+WX9l2tpzVEvynCk
Vn1j1t0apbCY/Q==
-----END CERTIFICATE-----
Generated at Tue Jun 10 15:16:18 2025 by rpki-client