Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: jrnCVED7NsgSt1mDKaZJ/IHp5k5GzHaptnqVr6Wqtcs=
Subject key identifier: B7:A6:47:BA:26:EE:F2:2F:C1:12:A5:BA:6B:2C:0D:3E:01:E5:A4:19
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 01974742DF59AEA4C676B85C9316F8D9DB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 06AF
Signing time: Fri 06 Jun 2025 22:00:54 +0000
Manifest this update: Fri 06 Jun 2025 22:00:54 +0000
Manifest next update: Sat 07 Jun 2025 22:00:54 +0000
Files and hashes: 1: YSlfWP3DY80Smx0TIqkuPzTOoec.roa (hash: zxri6NDPBUgI6E9l7vT1svBXNo7QAt30+iiVihETiFE=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: /uGtxUpPyG4w7FWQJBGQaCSVdg3HUC+bFzeyWwEGIec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:df:59:ae:a4:c6:76:b8:5c:93:16:f8:d9:db:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Jun 6 22:00:54 2025 GMT
Not After : Jun 7 22:00:54 2025 GMT
Subject: CN=b7a647ba26eef22fc112a5ba6b2c0d3e01e5a419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:d3:6f:51:3b:6a:be:98:58:b0:46:09:7c:
a8:89:b2:ff:95:81:64:09:fb:90:9f:f5:be:cc:6b:
e0:f3:12:62:e3:00:37:cd:ff:bd:79:86:1c:aa:8d:
0a:1b:14:d7:2b:fd:0a:7b:2f:b2:cd:be:db:ec:19:
18:e2:06:f9:1d:05:85:da:a6:6c:f9:21:a6:42:6c:
86:62:fc:6d:48:af:49:09:0b:1d:f7:b8:cd:58:71:
ff:6a:4c:ec:65:58:39:a3:fc:4d:18:59:5b:09:12:
bb:06:f6:a1:8c:ec:cb:d0:ed:77:a1:c1:36:a2:35:
c7:19:d8:69:ca:e3:26:43:6e:91:3a:07:8e:38:9d:
3f:54:0c:59:92:77:eb:18:a3:5e:75:f5:e3:65:e4:
9a:0e:12:2a:5d:bf:14:9f:dc:3d:bc:5c:e5:c5:99:
27:f7:25:76:92:75:bd:82:b0:a7:c4:33:b9:4b:7b:
37:6f:14:9b:27:5c:25:23:16:9d:3d:0f:7a:6d:d0:
42:b0:03:6e:84:7f:f1:75:65:be:a4:67:83:aa:1f:
70:42:22:a7:36:09:fe:89:32:18:cc:7a:a6:1b:e8:
71:99:96:39:32:c5:06:ef:ae:91:87:34:38:6b:46:
25:13:09:cb:cb:cf:f3:f6:e2:eb:15:d7:25:8e:68:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:47:BA:26:EE:F2:2F:C1:12:A5:BA:6B:2C:0D:3E:01:E5:A4:19
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:24:44:4a:ee:2e:54:30:3a:34:fd:71:9f:92:fe:fe:be:a6:
d0:9c:66:5e:58:4c:a8:21:dd:c4:a5:a3:dc:a6:7f:98:ab:43:
02:6d:70:98:26:db:d8:6d:15:d9:67:1c:2c:a5:55:2d:d2:e7:
b5:f2:e0:32:56:2a:df:06:66:b5:bc:20:09:70:13:e8:9a:e8:
43:86:31:5b:aa:21:fd:83:4f:ad:ea:ee:3b:71:8f:d4:3a:e2:
ec:6b:fd:e1:10:3e:41:8b:80:bd:0e:43:60:a6:4f:b0:20:6e:
62:26:de:0a:bf:ec:17:40:fa:7a:76:2b:fb:e4:19:eb:f1:30:
fb:3c:ca:d8:67:8b:e3:0d:91:b0:06:e5:3b:10:d5:1b:08:ea:
9d:54:bf:31:1c:52:ca:23:40:7a:1f:bb:44:7d:4b:d6:5f:94:
b9:9d:21:45:50:93:ca:80:9d:31:b2:65:2a:00:e5:60:33:03:
a4:ed:52:c9:5a:05:ae:91:bc:4a:8b:79:79:a1:9e:5c:31:ca:
35:f6:5e:50:62:d9:47:4c:51:1d:03:c3:1f:c2:fa:e8:96:b8:
62:0a:0a:2c:bd:51:18:0c:19:7a:cf:45:ca:74:7a:4f:47:77:
bd:da:f1:15:6b:c9:17:ec:66:78:b6:03:d3:f5:55:84:e3:2f:
60:c3:37:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQt9ZrqTGdrhckxb42dsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGZlYWVjYTIyZDJkMjYxOGI0MzNjZjAwYWIxNDRiZDhi
ODBkYmQwHhcNMjUwNjA2MjIwMDU0WhcNMjUwNjA3MjIwMDU0WjAzMTEwLwYDVQQD
EyhiN2E2NDdiYTI2ZWVmMjJmYzExMmE1YmE2YjJjMGQzZTAxZTVhNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqXTb1E7ar6YWLBGCXyoibL/lYFk
CfuQn/W+zGvg8xJi4wA3zf+9eYYcqo0KGxTXK/0Key+yzb7b7BkY4gb5HQWF2qZs
+SGmQmyGYvxtSK9JCQsd97jNWHH/akzsZVg5o/xNGFlbCRK7BvahjOzL0O13ocE2
ojXHGdhpyuMmQ26ROgeOOJ0/VAxZknfrGKNedfXjZeSaDhIqXb8Un9w9vFzlxZkn
9yV2knW9grCnxDO5S3s3bxSbJ1wlIxadPQ96bdBCsANuhH/xdWW+pGeDqh9wQiKn
Ngn+iTIYzHqmG+hxmZY5MsUG766RhzQ4a0YlEwnLy8/z9uLrFdcljmgovwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLemR7om7vIvwRKlumssDT4B5aQZMB8GA1UdIwQY
MBaAFMnf6uyiLS0mGLQzzwCrFEvYuA29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMt
YmMzNjJkMzc2OGJkLzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMtYmMzNjJkMzc2OGJk
LzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSRESu4u
VDA6NP1xn5L+/r6m0JxmXlhMqCHdxKWj3KZ/mKtDAm1wmCbb2G0V2WccLKVVLdLn
tfLgMlYq3wZmtbwgCXAT6JroQ4YxW6oh/YNPreruO3GP1Dri7Gv94RA+QYuAvQ5D
YKZPsCBuYibeCr/sF0D6enYr++QZ6/Ew+zzK2GeL4w2RsAblOxDVGwjqnVS/MRxS
yiNAeh+7RH1L1l+UuZ0hRVCTyoCdMbJlKgDlYDMDpO1SyVoFrpG8Sot5eaGeXDHK
NfZeUGLZR0xRHQPDH8L66Ja4YgoKLL1RGAwZes9FynR6T0d3vdrxFWvJF+xmeLYD
0/VVhOMvYMM3ag==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:34 2025 by rpki-client