Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: yvBmcpLabAkeyYrVXjs88Nmm4d6DQ+2jbnC8Mej3XPc=
Subject key identifier: 41:35:B1:0A:F8:65:90:31:97:DF:63:B9:67:94:78:A1:3E:BA:07:E8
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 01974A7AACDFBE02FA19E6671FC45266C63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 13:00:42 +0000
Manifest this update: Sat 07 Jun 2025 13:00:42 +0000
Manifest next update: Sun 08 Jun 2025 13:00:42 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: 84By/hCdSN1kIan/yqbimi05xdrkgx0B4kFdgYLeGwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:ac:df:be:02:fa:19:e6:67:1f:c4:52:66:c6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Jun 7 13:00:42 2025 GMT
Not After : Jun 8 13:00:42 2025 GMT
Subject: CN=4135b10af865903197df63b9679478a13eba07e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:b0:9a:af:e5:d4:61:a7:2d:af:79:d9:92:
8e:66:39:01:17:b5:27:5f:e1:63:5e:ca:39:36:cd:
e2:a2:b2:03:24:bf:8c:ff:86:4c:dd:f2:cb:22:ba:
51:71:25:41:43:69:e9:97:79:3c:cc:11:f2:ae:33:
a4:39:bb:8c:2d:ef:0a:22:b7:23:59:d8:fe:51:9a:
5c:c8:2b:9b:9d:6f:eb:f1:5a:2f:aa:3a:5b:9a:df:
cc:00:64:bb:ec:11:21:a4:4e:7c:4d:ef:54:9d:e9:
f3:9b:c6:0d:cf:78:d0:a7:d2:2a:d9:b8:08:12:de:
a5:43:4d:a0:dc:0a:3f:9a:06:f4:5d:15:2c:5d:aa:
e2:ee:7d:95:76:43:26:5d:f3:c3:32:9d:76:9e:41:
1a:66:87:9d:de:ee:c2:b0:38:fd:e7:b4:3e:5d:e3:
2c:e0:ec:8c:4a:98:cd:63:19:03:a8:8c:cb:06:85:
18:82:73:df:1e:20:83:85:a1:f9:34:05:ee:df:92:
5f:2b:65:78:98:01:95:92:91:d3:eb:06:9e:ce:99:
78:6f:78:d3:1a:96:1f:54:53:d2:06:aa:72:78:bc:
83:90:3e:9c:66:fd:0f:7c:5c:01:82:7b:4f:3c:34:
ae:62:db:38:85:06:bb:38:27:d3:7e:d0:6f:20:1f:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:35:B1:0A:F8:65:90:31:97:DF:63:B9:67:94:78:A1:3E:BA:07:E8
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:dd:ab:46:c0:51:d4:f0:f7:97:9a:d6:9e:dc:4e:48:8d:8d:
89:4e:91:f5:c6:69:ec:5a:63:c2:29:4f:21:cd:6c:44:4b:5c:
0a:ea:84:52:13:ef:b4:81:a4:da:32:08:5b:4d:2c:bd:4d:34:
c6:9d:ed:b8:6d:09:6d:54:c4:b7:6f:d8:e4:09:4f:bb:35:19:
85:51:b1:1f:6e:54:60:fc:5a:98:ce:60:37:e9:c9:f3:00:19:
79:85:65:69:4d:24:8b:73:29:71:b4:a8:b9:12:41:67:56:cf:
b4:76:e6:24:08:8a:fc:fd:48:1c:a4:92:b3:fc:59:38:77:30:
82:0f:64:7f:d2:2e:02:f1:8f:87:1c:9e:e4:68:02:d0:6b:f2:
18:79:1c:7d:30:6b:b8:21:e1:5b:ff:cc:63:9e:a1:e7:b9:eb:
ad:72:bf:d9:2f:fb:5b:83:8c:a6:a1:38:dd:3d:8f:74:3d:41:
23:1a:f3:fd:88:c8:30:81:af:af:c0:f4:80:c0:08:b6:5d:68:
e5:5f:4f:3d:2a:73:63:86:fb:2b:fd:fb:f1:de:55:4d:7b:d3:
a5:49:d7:ee:fc:20:60:9b:59:80:44:d9:7e:a9:74:e5:6a:ea:
9b:94:03:d7:f7:ac:84:da:55:30:34:38:f7:30:6a:fc:64:53:
48:65:00:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeqzfvgL6GeZnH8RSZsY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5N2RjNmQ4ZGY1ZDA4NGU5MjMwNjM0ODhkMzdkM2FlMDEx
NDc3N2IwHhcNMjUwNjA3MTMwMDQyWhcNMjUwNjA4MTMwMDQyWjAzMTEwLwYDVQQD
Eyg0MTM1YjEwYWY4NjU5MDMxOTdkZjYzYjk2Nzk0NzhhMTNlYmEwN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEKwmq/l1GGnLa952ZKOZjkBF7Un
X+FjXso5Ns3iorIDJL+M/4ZM3fLLIrpRcSVBQ2npl3k8zBHyrjOkObuMLe8KIrcj
Wdj+UZpcyCubnW/r8Vovqjpbmt/MAGS77BEhpE58Te9Unenzm8YNz3jQp9Iq2bgI
Et6lQ02g3Ao/mgb0XRUsXari7n2VdkMmXfPDMp12nkEaZoed3u7CsDj957Q+XeMs
4OyMSpjNYxkDqIzLBoUYgnPfHiCDhaH5NAXu35JfK2V4mAGVkpHT6waezpl4b3jT
GpYfVFPSBqpyeLyDkD6cZv0PfFwBgntPPDSuYts4hQa7OCfTftBvIB9GGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE1sQr4ZZAxl99juWeUeKE+ugfoMB8GA1UdIwQY
MBaAFMl9xtjfXQhOkjBjSI03064BFHd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYt
MmE2YmMzODMyYTBhLzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYtMmE2YmMzODMyYTBh
LzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABd2rRsBR
1PD3l5rWntxOSI2NiU6R9cZp7FpjwilPIc1sREtcCuqEUhPvtIGk2jIIW00svU00
xp3tuG0JbVTEt2/Y5AlPuzUZhVGxH25UYPxamM5gN+nJ8wAZeYVlaU0ki3MpcbSo
uRJBZ1bPtHbmJAiK/P1IHKSSs/xZOHcwgg9kf9IuAvGPhxye5GgC0GvyGHkcfTBr
uCHhW//MY56h57nrrXK/2S/7W4OMpqE43T2PdD1BIxrz/YjIMIGvr8D0gMAItl1o
5V9PPSpzY4b7K/378d5VTXvTpUnX7vwgYJtZgETZfql05Wrqm5QD1/eshNpVMDQ4
9zBq/GRTSGUAiw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:47 2025 by rpki-client