Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
File: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft (raw, json)
Hash identifier: SP2vjYzFYYiG5XD30tbUUq8mDASTEOL5U8P6xjaGdEE=
Subject key identifier: D2:74:8B:F4:44:87:AE:EB:B5:59:98:8E:37:4E:B5:5A:69:58:F9:98
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial: 01974A4400C6432F8B8AE250904B94740A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 12:01:00 +0000
Manifest this update: Sat 07 Jun 2025 12:01:00 +0000
Manifest next update: Sun 08 Jun 2025 12:01:00 +0000
Files and hashes: 1: 3yYGs7gC6Yt8xSj2vfENPhVXFvE.roa (hash: BuidZ1GvGdKg7gwYd2Ptl6PuYSRGUATkT25l43mgSwk=)
2: MTEEbTxLhwcmIFVyPc3_83L2SWM.roa (hash: pPAVTHjE82w53qTWAl4KRukHgVB0WjzGZSXqRTGTWY4=)
3: gIOaHcti7t355LnXTtGCztKWtS0.roa (hash: Cn1RCEjcCDtykL3i8BWxXer7cpYHt86vURgQOr3lUzo=)
4: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl (hash: 0H1MHovBqWTqX+CJvbHJZfx5z7hS097CXLAQD1QX+1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:44:00:c6:43:2f:8b:8a:e2:50:90:4b:94:74:0a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Validity
Not Before: Jun 7 12:01:00 2025 GMT
Not After : Jun 8 12:01:00 2025 GMT
Subject: CN=d2748bf44487aeebb559988e374eb55a6958f998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:cb:2e:ce:71:c3:50:2c:d9:31:1f:fa:7b:
57:21:e0:38:3e:92:42:c1:ea:af:d6:fe:6e:ac:96:
26:a0:4d:7a:ad:29:7a:ee:a1:d0:2a:84:82:7e:9f:
75:0a:53:69:03:84:2e:37:06:e7:c7:b4:ed:26:7b:
e6:08:21:11:57:41:ab:29:fd:8c:49:e1:85:b5:66:
b6:5a:8b:5b:e5:ba:91:57:ee:81:35:2c:56:f9:5a:
6f:4c:0e:73:cf:81:94:36:13:dc:aa:3e:95:05:e8:
5d:24:03:d3:e5:eb:e6:00:5c:c2:93:30:04:3d:b0:
c4:44:88:a0:b3:7e:74:7b:fc:dc:3a:12:80:02:42:
b9:a5:37:6a:5c:78:e6:e9:fc:ba:7c:c6:1b:d4:28:
e9:15:ce:c3:ae:1f:d3:40:03:5a:9a:00:58:a4:57:
4c:2b:c6:d7:05:d8:c1:3c:47:00:76:cf:a2:ba:98:
62:86:e1:47:cb:72:9c:e7:4d:48:49:c9:1c:39:4b:
b2:43:2c:91:3e:bc:c3:5c:90:ff:30:a1:65:08:17:
d2:54:91:35:11:3f:8a:d5:db:e5:97:bb:28:c9:e9:
11:17:aa:07:a2:57:16:15:0a:ec:cf:8d:55:3f:60:
87:9b:23:ce:16:25:44:e3:5d:30:b0:66:a8:a2:ed:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:8B:F4:44:87:AE:EB:B5:59:98:8E:37:4E:B5:5A:69:58:F9:98
X509v3 Authority Key Identifier:
keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a2:a4:d0:e3:84:2b:36:a8:2d:27:b0:81:2e:03:c6:fc:ab:
a2:53:9b:91:b4:df:8c:b6:15:84:cd:d2:8c:26:1c:56:82:2d:
27:5c:a5:b0:5e:b3:3d:94:30:26:39:7b:a8:b6:19:0b:d0:34:
68:10:83:65:2f:5f:67:67:41:ef:aa:57:db:1d:50:40:1c:4a:
fd:83:bf:0f:b7:a7:d0:2d:e3:fa:dc:2f:d3:30:f4:98:51:bd:
93:0d:47:9a:9c:36:a9:a5:5c:88:7b:c5:2c:db:ff:29:b1:f3:
66:b6:9f:28:59:73:aa:c4:98:29:96:d6:2a:58:5a:c6:c7:f6:
24:ac:f3:35:fb:a5:10:81:e0:14:d8:49:c0:c7:8f:19:30:54:
c0:72:58:9f:c6:ab:f6:de:c6:1c:68:78:3f:13:ce:e9:d8:81:
7d:aa:fc:70:e5:de:39:7d:56:cb:fb:53:48:d1:7d:da:42:4d:
89:38:91:ce:34:35:15:ad:26:3a:f7:47:b9:63:2a:3d:8e:c2:
04:cc:f8:43:84:e4:2f:19:11:bd:a1:30:ed:ef:17:e8:68:69:
b0:9f:db:fc:81:7a:d4:22:93:8a:6e:9e:02:4b:80:1d:5d:65:
cb:6a:b6:92:a2:be:f4:3d:1e:67:75:bf:27:b8:b5:9d:97:18:
57:36:f0:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKRADGQy+LiuJQkEuUdApTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMmU4MDc4ZWE0MjBhZmMxYTc4YmY5MjJhOWEyZjI3NDY3
OWM4YTgwHhcNMjUwNjA3MTIwMTAwWhcNMjUwNjA4MTIwMTAwWjAzMTEwLwYDVQQD
EyhkMjc0OGJmNDQ0ODdhZWViYjU1OTk4OGUzNzRlYjU1YTY5NThmOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0HLLs5xw1As2TEf+ntXIeA4PpJC
weqv1v5urJYmoE16rSl67qHQKoSCfp91ClNpA4QuNwbnx7TtJnvmCCERV0GrKf2M
SeGFtWa2Wotb5bqRV+6BNSxW+VpvTA5zz4GUNhPcqj6VBehdJAPT5evmAFzCkzAE
PbDERIigs350e/zcOhKAAkK5pTdqXHjm6fy6fMYb1CjpFc7Drh/TQANamgBYpFdM
K8bXBdjBPEcAds+iuphihuFHy3Kc501ISckcOUuyQyyRPrzDXJD/MKFlCBfSVJE1
ET+K1dvll7soyekRF6oHolcWFQrsz41VP2CHmyPOFiVE410wsGaoou2lHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJ0i/REh67rtVmYjjdOtVppWPmYMB8GA1UdIwQY
MBaAFJMugHjqQgr8Gni/kiqaLydGecioMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODkt
MzRiYTA3MzhhMzQxLzEva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODktMzRiYTA3MzhhMzQx
LzEva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqKk0OOE
KzaoLSewgS4DxvyrolObkbTfjLYVhM3SjCYcVoItJ1ylsF6zPZQwJjl7qLYZC9A0
aBCDZS9fZ2dB76pX2x1QQBxK/YO/D7en0C3j+twv0zD0mFG9kw1Hmpw2qaVciHvF
LNv/KbHzZrafKFlzqsSYKZbWKlhaxsf2JKzzNfulEIHgFNhJwMePGTBUwHJYn8ar
9t7GHGh4PxPO6diBfar8cOXeOX1Wy/tTSNF92kJNiTiRzjQ1Fa0mOvdHuWMqPY7C
BMz4Q4TkLxkRvaEw7e8X6GhpsJ/b/IF61CKTim6eAkuAHV1ly2q2kqK+9D0eZ3W/
J7i1nZcYVzbwuA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:36:33 2025 by rpki-client