Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: Tr6jKyHvbhN9sSijuN2PNhb4vPrC+z2oPg6RMLGeL5k=
Subject key identifier: 27:24:81:AD:E7:56:69:73:0B:D8:8E:65:9B:CE:3B:B8:C3:A1:06:FD
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 0197507C8D373A40FDB42E12F461873473CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 0E6D
Signing time: Sun 08 Jun 2025 17:00:29 +0000
Manifest this update: Sun 08 Jun 2025 17:00:29 +0000
Manifest next update: Mon 09 Jun 2025 17:00:29 +0000
Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=)
2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=)
3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: Wgsdzjjl2s5CLI76o/8VvrBvCz6k5MlI21P9gyg1RMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:8d:37:3a:40:fd:b4:2e:12:f4:61:87:34:73:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jun 8 17:00:29 2025 GMT
Not After : Jun 9 17:00:29 2025 GMT
Subject: CN=272481ade75669730bd88e659bce3bb8c3a106fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:0b:74:7e:cf:7b:44:12:01:e3:4e:fd:cc:
32:7b:56:41:d4:68:71:b3:d1:81:5f:cf:a8:42:15:
4c:0d:46:04:8f:78:2a:98:d6:7d:f0:20:68:c1:d8:
0d:6b:4e:61:fc:dd:5d:bb:12:ee:82:84:76:36:58:
f3:ef:3d:c0:c1:93:5b:46:7a:97:e2:b8:9e:ae:0f:
68:7c:e6:20:db:05:fa:ea:b8:5f:0a:59:f5:cd:2b:
1c:5e:35:a9:c3:07:74:b4:eb:02:91:9e:60:b1:ba:
30:f0:c9:19:e0:79:55:82:52:4d:1a:bc:6a:7d:64:
d0:60:c0:76:40:5f:af:2f:98:02:19:2a:d2:18:da:
a0:c6:05:b0:c6:ca:f8:28:be:60:b2:8b:e2:98:3a:
bc:c2:f4:dd:1d:fb:3a:d9:0f:08:16:63:a2:fa:62:
66:78:b6:f7:26:57:27:41:93:ea:91:ca:16:dc:0a:
bf:6a:d9:0a:2e:04:f6:5e:42:a1:09:0b:82:10:d6:
7a:a3:b0:9f:1b:a8:13:46:78:18:7b:7d:21:ac:3b:
f7:a8:e6:7a:9a:7b:1c:3b:3b:e8:3a:2f:32:ef:c8:
b4:f8:c2:e9:2a:20:ce:60:5b:67:02:9f:ed:59:8c:
8d:c2:e6:e3:8b:d8:01:2b:e2:95:fd:b7:60:32:b5:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:24:81:AD:E7:56:69:73:0B:D8:8E:65:9B:CE:3B:B8:C3:A1:06:FD
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b6:f4:3f:cd:03:94:a1:d7:63:27:83:cd:29:10:90:5d:83:
7a:e5:f7:73:75:8a:8f:90:1e:87:14:a2:1a:d7:c6:6c:9f:8e:
70:86:93:7c:a7:b8:a9:87:44:09:8b:e6:92:bd:8e:b8:86:fa:
df:88:1c:1e:32:2b:c4:84:df:8a:d7:66:03:07:2f:1b:1c:6e:
5a:f6:41:f8:45:f2:87:16:ec:7e:10:6a:db:42:d1:f0:1f:70:
6f:7a:ba:2b:d8:7c:3e:01:01:9d:d7:a5:a4:2d:3a:d5:ea:92:
4d:0b:bf:e0:c8:fe:72:d9:ae:38:7d:19:1c:01:0d:f4:cb:ec:
8f:7c:b3:86:08:a8:8a:70:f7:4d:96:2a:fb:62:fc:1f:17:59:
d5:ee:8b:67:7a:9b:e1:0f:15:a3:6a:61:f5:9b:ea:73:f5:3b:
df:96:04:de:bf:79:48:ab:30:fc:08:b5:a1:5d:a1:26:e7:56:
0e:a0:40:53:78:d7:6e:00:e6:9c:e5:f3:f4:d9:a5:8c:33:12:
50:f9:9a:52:3b:6c:a6:cd:19:d9:a9:72:35:8a:f8:6c:e5:bd:
17:09:1a:c5:c3:b5:70:6b:80:77:d4:e1:3e:e6:43:4e:85:40:
dd:fa:28:40:f5:db:a7:59:1b:2a:84:e4:eb:ca:4b:3b:19:57:
ba:e2:06:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQfI03OkD9tC4S9GGHNHPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj
MzlmMzQwHhcNMjUwNjA4MTcwMDI5WhcNMjUwNjA5MTcwMDI5WjAzMTEwLwYDVQQD
EygyNzI0ODFhZGU3NTY2OTczMGJkODhlNjU5YmNlM2JiOGMzYTEwNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl0LdH7Pe0QSAeNO/cwye1ZB1Ghx
s9GBX8+oQhVMDUYEj3gqmNZ98CBowdgNa05h/N1duxLugoR2Nljz7z3AwZNbRnqX
4rierg9ofOYg2wX66rhfCln1zSscXjWpwwd0tOsCkZ5gsbow8MkZ4HlVglJNGrxq
fWTQYMB2QF+vL5gCGSrSGNqgxgWwxsr4KL5gsovimDq8wvTdHfs62Q8IFmOi+mJm
eLb3JlcnQZPqkcoW3Aq/atkKLgT2XkKhCQuCENZ6o7CfG6gTRngYe30hrDv3qOZ6
mnscOzvoOi8y78i0+MLpKiDOYFtnAp/tWYyNwubji9gBK+KV/bdgMrW0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCckga3nVmlzC9iOZZvOO7jDoQb9MB8GA1UdIwQY
MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt
MjU2MzM5NzM2YzJiLzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi
LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7b0P80D
lKHXYyeDzSkQkF2DeuX3c3WKj5AehxSiGtfGbJ+OcIaTfKe4qYdECYvmkr2OuIb6
34gcHjIrxITfitdmAwcvGxxuWvZB+EXyhxbsfhBq20LR8B9wb3q6K9h8PgEBndel
pC061eqSTQu/4Mj+ctmuOH0ZHAEN9Mvsj3yzhgioinD3TZYq+2L8HxdZ1e6LZ3qb
4Q8Vo2ph9Zvqc/U735YE3r95SKsw/Ai1oV2hJudWDqBAU3jXbgDmnOXz9NmljDMS
UPmaUjtsps0Z2alyNYr4bOW9FwkaxcO1cGuAd9ThPuZDToVA3fooQPXbp1kbKoTk
68pLOxlXuuIGUA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:19:25 2025 by rpki-client