Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File: sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier: nsrsfuVxRJ0Lcoy0vahXpY4g06NI/pQkBzuJHK1qwaM=
Subject key identifier: F8:7D:9E:ED:05:16:DE:06:B0:23:3C:07:6E:A1:A5:CB:C2:0A:A0:BD
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial: 01974DE9C3AD355037D092650A5948486942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number: 02AD
Signing time: Sun 08 Jun 2025 05:00:54 +0000
Manifest this update: Sun 08 Jun 2025 05:00:54 +0000
Manifest next update: Mon 09 Jun 2025 05:00:54 +0000
Files and hashes: 1: OfdMOcUbbc7oEojb1zo08qkIRuQ.roa (hash: IicrU+y2VcBYbd4QyyTDfZZRjrYA59p1rvePkvFgFRg=)
2: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: d3jk04DDJ61MCw5rXZLJUTs8DsLfhT3FltPRjHUuifo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:c3:ad:35:50:37:d0:92:65:0a:59:48:48:69:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Validity
Not Before: Jun 8 05:00:54 2025 GMT
Not After : Jun 9 05:00:54 2025 GMT
Subject: CN=f87d9eed0516de06b0233c076ea1a5cbc20aa0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:43:77:6f:55:15:29:e3:b5:0e:d3:07:3b:
78:f0:d2:c9:b3:9e:e9:5e:c6:10:6c:3c:4a:c6:c4:
5e:42:51:8d:5f:7e:02:e2:26:8e:f7:ac:2d:e1:42:
00:5b:1f:0c:73:10:e6:a6:ab:dd:31:6e:32:55:68:
0c:d1:7e:82:a5:45:9b:66:eb:77:5f:aa:61:9f:9a:
c2:66:69:b1:30:40:42:5d:ee:4d:43:8f:3e:2f:5f:
26:9d:a9:63:6b:47:1c:0c:45:96:7a:93:21:3a:a2:
ca:95:8a:9d:81:93:8e:34:2d:21:37:e6:a1:e7:1d:
31:65:07:db:d5:a0:eb:34:66:20:53:89:cb:42:cd:
84:b6:32:9d:28:9f:92:88:6e:57:bd:3d:9d:d9:e3:
f6:56:d7:02:96:5a:1f:7a:09:3c:73:93:08:95:fb:
89:41:a4:07:04:f0:6f:54:51:a0:18:46:8e:75:9b:
34:4e:33:fc:d4:c1:48:32:55:e9:d8:22:f4:18:5c:
b6:ff:77:9e:16:74:7e:84:2c:bb:97:7f:50:84:d6:
99:b0:70:7d:d1:1a:18:63:87:df:8a:5e:e5:fb:3b:
27:9c:67:06:90:4e:c7:2a:c9:13:d9:3e:2b:f4:a9:
cf:52:e4:41:e3:f7:e9:f8:f2:9b:d2:6f:fe:02:cd:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7D:9E:ED:05:16:DE:06:B0:23:3C:07:6E:A1:A5:CB:C2:0A:A0:BD
X509v3 Authority Key Identifier:
keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:41:94:eb:5d:50:a3:76:48:1b:e2:cb:ba:ed:87:08:80:17:
22:66:c0:31:81:57:d1:0d:50:d8:45:c0:04:c0:eb:bf:7c:38:
49:fe:0b:f4:98:52:b9:51:1b:94:76:72:c3:46:62:dd:64:a3:
f3:bf:ef:0e:46:5e:a0:c0:e5:9e:42:cd:67:75:d7:89:88:eb:
76:35:10:56:b8:c8:38:25:22:e2:dc:de:fc:17:6e:f6:e5:72:
e3:86:4c:8b:bf:2d:47:a2:ab:02:b3:d0:c7:c2:84:7b:03:26:
9f:86:af:2e:22:0c:a4:b5:f9:f9:1a:ad:07:ce:fe:dc:d3:cf:
56:a0:20:05:aa:f2:95:bc:aa:f6:e5:0a:4d:a8:6b:cd:6c:f0:
95:2b:67:89:76:bd:63:78:89:05:9b:f9:95:56:b4:24:87:73:
25:71:2e:c7:25:1b:fa:b1:44:0c:ef:97:d6:9c:75:3c:ad:9b:
47:04:de:78:2d:e1:5e:99:a5:77:18:4a:f6:e0:84:96:d2:79:
04:d9:99:52:2a:c4:9e:d8:90:d7:11:b7:83:b0:bd:7f:8c:06:
f4:08:99:01:89:c4:53:ad:57:a1:df:9e:be:0f:32:f4:95:68:
79:9d:41:02:ba:0b:68:08:c3:bb:68:ad:7a:54:2c:7e:68:3a:
c9:a9:f1:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6cOtNVA30JJlCllISGlCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODdjY2VjNDlhYTVmNjZhYTAyNjQ4ZDkxYjRhMmVlOGZm
N2JkZTYwHhcNMjUwNjA4MDUwMDU0WhcNMjUwNjA5MDUwMDU0WjAzMTEwLwYDVQQD
EyhmODdkOWVlZDA1MTZkZTA2YjAyMzNjMDc2ZWExYTVjYmMyMGFhMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxxDd29VFSnjtQ7TBzt48NLJs57p
XsYQbDxKxsReQlGNX34C4iaO96wt4UIAWx8McxDmpqvdMW4yVWgM0X6CpUWbZut3
X6phn5rCZmmxMEBCXe5NQ48+L18mnalja0ccDEWWepMhOqLKlYqdgZOONC0hN+ah
5x0xZQfb1aDrNGYgU4nLQs2EtjKdKJ+SiG5XvT2d2eP2VtcCllofegk8c5MIlfuJ
QaQHBPBvVFGgGEaOdZs0TjP81MFIMlXp2CL0GFy2/3eeFnR+hCy7l39QhNaZsHB9
0RoYY4ffil7l+zsnnGcGkE7HKskT2T4r9KnPUuRB4/fp+PKb0m/+As3ySwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh9nu0FFt4GsCM8B26hpcvCCqC9MB8GA1UdIwQY
MBaAFLGHzOxJql9mqgJkjZG0ou6P973mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MjI4MWEtZDY4OC00MTVkLWEyYzYt
MTdmNGUwZjZjZGViLzEvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83MjI4MWEtZDY4OC00MTVkLWEyYzYtMTdmNGUwZjZjZGVi
LzEvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkGU611Q
o3ZIG+LLuu2HCIAXImbAMYFX0Q1Q2EXABMDrv3w4Sf4L9JhSuVEblHZyw0Zi3WSj
87/vDkZeoMDlnkLNZ3XXiYjrdjUQVrjIOCUi4tze/Bdu9uVy44ZMi78tR6KrArPQ
x8KEewMmn4avLiIMpLX5+RqtB87+3NPPVqAgBarylbyq9uUKTahrzWzwlStniXa9
Y3iJBZv5lVa0JIdzJXEuxyUb+rFEDO+X1px1PK2bRwTeeC3hXpmldxhK9uCEltJ5
BNmZUirEntiQ1xG3g7C9f4wG9AiZAYnEU61Xod+evg8y9JVoeZ1BAroLaAjDu2it
elQsfmg6yanx5Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:45:00 2025 by rpki-client