Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json)
Hash identifier: ntXR2XRcTxI3K+qqiHC/FDoEEcadgVoeg72QhfVLr+A=
Subject key identifier: B5:F8:2F:FD:C5:55:E0:6F:84:E5:AA:80:7B:06:51:E0:B2:30:01:21
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 01974C32295D19BD4F25A15DEC0CF0663DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 21:00:45 +0000
Manifest this update: Sat 07 Jun 2025 21:00:45 +0000
Manifest next update: Sun 08 Jun 2025 21:00:45 +0000
Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: or+14l8CvEZQenVi8o36MkNefZT7xr5DkYTmJ0I4aw4=)
2: doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa (hash: +MKv/V0IfbD2z8rIVhSAM4id+TCFCy9eVNZqs6dovHs=)
3: t9q3JQRIfHPbUTHA-7F2iigGH4c.roa (hash: s2L1muHfCT4EhX7O1DIS6+l6imOYfyQC+qFGEKmez7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:29:5d:19:bd:4f:25:a1:5d:ec:0c:f0:66:3d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Jun 7 21:00:45 2025 GMT
Not After : Jun 8 21:00:45 2025 GMT
Subject: CN=b5f82ffdc555e06f84e5aa807b0651e0b2300121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:d9:56:5e:03:f5:b4:e0:02:d1:81:6d:a0:
f5:9a:4d:76:75:55:2e:ae:ee:2b:c6:34:cc:36:2a:
5e:24:94:90:cb:78:9b:98:43:78:61:6a:72:b7:7f:
16:0d:5f:e8:0a:12:8f:88:5a:79:58:c8:a5:fb:d2:
ba:23:03:1a:b7:fb:a8:31:d2:7f:72:af:96:17:60:
31:6d:54:4b:ce:5f:56:60:7a:65:5f:39:5a:09:ef:
7b:27:13:f0:3d:f3:62:d6:03:dc:65:d0:0c:3a:b0:
c9:38:bd:d6:f8:1e:3f:0e:d0:88:df:42:60:8f:8a:
d4:ee:8c:24:de:d0:fb:e4:ea:32:f9:76:70:be:ef:
47:60:af:16:6b:9f:cb:1a:b7:e5:cf:0e:c3:59:ec:
0b:15:ae:f3:f9:53:0d:19:05:de:4b:4f:53:ad:15:
24:69:1d:98:15:dc:03:3a:42:58:8b:8f:1a:a7:6b:
b7:8f:47:04:ae:cf:f1:2f:9c:fc:c2:46:e5:97:36:
4b:d0:97:f9:de:b1:67:fb:3e:a9:94:98:18:ac:f3:
5a:a8:67:1f:39:b2:08:40:4a:14:eb:4f:52:e3:9f:
f7:87:85:40:b4:49:01:94:e7:98:5f:cc:dc:38:f9:
59:f9:3a:ee:53:67:7d:91:6d:c7:45:2b:dc:f9:c5:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:2F:FD:C5:55:E0:6F:84:E5:AA:80:7B:06:51:E0:B2:30:01:21
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7e:3e:a2:bf:9a:15:da:5f:d7:59:02:9f:7c:45:91:55:36:
bf:d4:1c:70:15:99:d8:97:06:1f:75:e9:96:a8:de:8c:8e:6f:
5d:95:49:0d:46:03:01:d5:e1:9c:a8:fa:55:22:16:25:b1:db:
e0:f5:d1:d0:0d:29:ad:b8:70:39:f5:2e:c4:fc:72:0d:30:fc:
4a:96:3f:d8:86:82:97:2c:bf:28:e0:ec:0e:7b:59:a5:3d:13:
79:03:25:fd:66:05:d9:45:1f:2c:0e:be:35:d6:ed:87:4e:3e:
17:70:6b:43:27:28:52:6c:31:30:2c:d3:94:db:39:87:95:69:
3b:18:29:8b:90:df:db:17:65:04:fa:5e:ed:52:37:32:ce:7d:
0c:79:7c:f3:ad:6f:4c:35:58:a2:5d:8a:13:fa:ac:09:5d:3a:
15:c8:8f:8d:a2:d4:80:4c:14:08:92:d6:6f:10:c9:0a:2a:6e:
12:25:f4:87:9e:41:55:86:2c:63:ec:45:72:9d:25:7e:ad:67:
50:76:2c:98:24:74:5d:82:fe:1f:cb:69:5d:cf:65:b8:8f:1d:
40:ff:c5:da:0f:5b:e1:c5:0e:17:89:a8:62:99:66:5d:4f:bb:
c9:35:88:36:a0:ee:87:cc:1d:4f:e0:51:71:fc:ef:21:c4:9e:
63:51:f0:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMildGb1PJaFd7AzwZj24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNzI1MmViYmIzMzQ4NGFkY2VjNzQwNWFkZWE0ZGUwOGEw
YWZiMDQwHhcNMjUwNjA3MjEwMDQ1WhcNMjUwNjA4MjEwMDQ1WjAzMTEwLwYDVQQD
EyhiNWY4MmZmZGM1NTVlMDZmODRlNWFhODA3YjA2NTFlMGIyMzAwMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1jZVl4D9bTgAtGBbaD1mk12dVUu
ru4rxjTMNipeJJSQy3ibmEN4YWpyt38WDV/oChKPiFp5WMil+9K6IwMat/uoMdJ/
cq+WF2AxbVRLzl9WYHplXzlaCe97JxPwPfNi1gPcZdAMOrDJOL3W+B4/DtCI30Jg
j4rU7owk3tD75Ooy+XZwvu9HYK8Wa5/LGrflzw7DWewLFa7z+VMNGQXeS09TrRUk
aR2YFdwDOkJYi48ap2u3j0cErs/xL5z8wkbllzZL0Jf53rFn+z6plJgYrPNaqGcf
ObIIQEoU609S45/3h4VAtEkBlOeYX8zcOPlZ+TruU2d9kW3HRSvc+cWwHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX4L/3FVeBvhOWqgHsGUeCyMAEhMB8GA1UdIwQY
MBaAFGFyUuu7M0hK3Ox0Ba3qTeCKCvsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMt
NjYzNWRlYmMzOTVjLzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMtNjYzNWRlYmMzOTVj
LzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcH4+or+a
Fdpf11kCn3xFkVU2v9QccBWZ2JcGH3XplqjejI5vXZVJDUYDAdXhnKj6VSIWJbHb
4PXR0A0prbhwOfUuxPxyDTD8SpY/2IaClyy/KODsDntZpT0TeQMl/WYF2UUfLA6+
Ndbth04+F3BrQycoUmwxMCzTlNs5h5VpOxgpi5Df2xdlBPpe7VI3Ms59DHl8861v
TDVYol2KE/qsCV06FciPjaLUgEwUCJLWbxDJCipuEiX0h55BVYYsY+xFcp0lfq1n
UHYsmCR0XYL+H8tpXc9luI8dQP/F2g9b4cUOF4moYplmXU+7yTWINqDuh8wdT+BR
cfzvIcSeY1Hweg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:44 2025 by rpki-client