Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: NZJBuVQsW01/+/OsvawD6tMVEOXUx2hQlMoQAofpXQs=
Subject key identifier: 6C:A0:6A:0D:51:49:64:D0:CD:38:09:CA:F3:27:C1:AC:4A:DC:6C:70
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 01974BFB1AC47A1A8A29C0C5A63BF0F198C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 12C3
Signing time: Sat 07 Jun 2025 20:00:36 +0000
Manifest this update: Sat 07 Jun 2025 20:00:36 +0000
Manifest next update: Sun 08 Jun 2025 20:00:36 +0000
Files and hashes: 1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: jOWMtpdLwgibv5vVWqx8gTi3l83oiahKweT2jefGhlg=)
3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:1a:c4:7a:1a:8a:29:c0:c5:a6:3b:f0:f1:98:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Jun 7 20:00:36 2025 GMT
Not After : Jun 8 20:00:36 2025 GMT
Subject: CN=6ca06a0d514964d0cd3809caf327c1ac4adc6c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:28:1a:f7:b2:59:a7:1a:3e:9c:f8:e2:53:
19:e9:37:2d:e3:3e:1a:6f:9d:6a:d7:4f:47:89:34:
4a:9c:9c:1a:5b:54:7f:c0:4c:1b:57:94:52:cc:3e:
51:fc:77:54:ce:00:b5:03:54:2f:b7:cc:cd:17:51:
53:c1:2d:4b:01:85:41:c6:34:3b:b6:01:99:c7:be:
c3:65:a0:cb:32:f0:3d:56:d0:be:76:43:31:e5:f3:
17:ed:54:37:2f:53:56:a2:e1:64:e7:b9:76:0f:3d:
7a:75:2e:4a:59:04:6b:80:12:9b:24:98:09:91:42:
c2:82:a8:e6:8d:20:05:e7:84:31:fa:f8:5c:08:fb:
c9:3e:3c:50:ad:ed:88:c2:c2:34:29:96:22:04:02:
cd:59:b9:4a:0b:65:cf:ee:be:5a:b0:15:cb:23:2a:
3e:c4:3d:3a:28:28:b2:12:f3:33:82:9c:4b:ac:5f:
a4:f9:e6:62:cb:5d:ca:b8:7e:d3:d0:0a:01:de:b3:
3e:b9:70:de:18:97:0d:e1:71:96:69:5f:85:e4:1b:
da:60:54:1d:c8:e3:3a:38:73:d6:2f:f4:db:31:17:
a1:2c:8d:3d:2a:da:40:66:9a:4d:14:84:ba:6d:7e:
c3:74:42:7c:14:63:f2:87:ad:59:7b:a3:29:5b:3f:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A0:6A:0D:51:49:64:D0:CD:38:09:CA:F3:27:C1:AC:4A:DC:6C:70
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:04:ab:d1:bb:23:04:9e:0d:f0:4a:57:2c:61:e3:40:e8:e2:
22:95:f6:a4:5a:9c:f6:99:17:5a:c6:0e:84:f2:da:f5:f2:a5:
b0:47:ee:bb:bc:60:3a:a0:c1:f7:f0:42:16:02:c1:73:22:66:
3e:8f:ae:96:34:60:08:82:be:3b:8e:25:97:75:71:42:66:18:
06:25:00:65:a7:3d:78:57:db:0b:85:a3:a1:77:50:6e:a2:30:
37:90:9f:57:2b:4e:6b:3f:05:19:71:ce:9e:c8:80:3d:cb:4d:
6f:66:ab:59:a2:20:96:97:5a:9a:9f:82:a8:22:85:38:ec:ae:
b7:db:93:43:6f:8f:85:84:86:4f:6c:81:3d:1c:12:dd:9d:4b:
76:95:d4:6d:48:07:1f:49:58:4c:7b:d6:2a:73:71:69:a9:36:
27:ac:5c:d6:fc:6a:d2:ed:15:b1:e0:80:f5:89:39:c7:b2:fb:
1f:ac:5a:83:58:3f:82:0c:7f:51:30:2c:01:b4:44:a2:7f:ec:
bc:17:c8:2a:0b:3e:2c:85:12:c2:1c:c8:61:e4:58:3a:d6:06:
69:cb:05:34:f8:d5:11:2f:a8:03:81:c0:9c:4b:a2:87:9c:4d:
f4:d3:1b:94:be:d7:29:cc:0d:11:96:a4:62:f7:3f:d8:21:3c:
d6:5c:fa:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+xrEehqKKcDFpjvw8ZjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYmEwYmU3Y2NlMzgwZTZiYjc0ZTNjNWZjZWEwODFlOTc5
OWFlNTQwHhcNMjUwNjA3MjAwMDM2WhcNMjUwNjA4MjAwMDM2WjAzMTEwLwYDVQQD
Eyg2Y2EwNmEwZDUxNDk2NGQwY2QzODA5Y2FmMzI3YzFhYzRhZGM2YzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx0oGveyWacaPpz44lMZ6Tct4z4a
b51q109HiTRKnJwaW1R/wEwbV5RSzD5R/HdUzgC1A1Qvt8zNF1FTwS1LAYVBxjQ7
tgGZx77DZaDLMvA9VtC+dkMx5fMX7VQ3L1NWouFk57l2Dz16dS5KWQRrgBKbJJgJ
kULCgqjmjSAF54Qx+vhcCPvJPjxQre2IwsI0KZYiBALNWblKC2XP7r5asBXLIyo+
xD06KCiyEvMzgpxLrF+k+eZiy13KuH7T0AoB3rM+uXDeGJcN4XGWaV+F5BvaYFQd
yOM6OHPWL/TbMRehLI09KtpAZppNFIS6bX7DdEJ8FGPyh61Ze6MpWz8R7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGygag1RSWTQzTgJyvMnwaxK3GxwMB8GA1UdIwQY
MBaAFGG6C+fM44Dmu3TjxfzqCB6Xma5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDIt
MjEwZDQ4MmE0YjkzLzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDItMjEwZDQ4MmE0Yjkz
LzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQSr0bsj
BJ4N8EpXLGHjQOjiIpX2pFqc9pkXWsYOhPLa9fKlsEfuu7xgOqDB9/BCFgLBcyJm
Po+uljRgCIK+O44ll3VxQmYYBiUAZac9eFfbC4WjoXdQbqIwN5CfVytOaz8FGXHO
nsiAPctNb2arWaIglpdamp+CqCKFOOyut9uTQ2+PhYSGT2yBPRwS3Z1LdpXUbUgH
H0lYTHvWKnNxaak2J6xc1vxq0u0VseCA9Yk5x7L7H6xag1g/ggx/UTAsAbREon/s
vBfIKgs+LIUSwhzIYeRYOtYGacsFNPjVES+oA4HAnEuih5xN9NMblL7XKcwNEZak
Yvc/2CE81lz69w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:06:24 2025 by rpki-client