Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: 55k/udK6b0Jnwn9D7/RjvGF0NOmoEY0XhxS2K/nxs/w=
Subject key identifier: 17:EE:D8:1D:66:E5:B6:06:1B:E9:05:B7:B3:9B:65:A3:E9:4F:A6:66
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 0197496832183B7E0DDF2A1AE76B2997FAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 09CA
Signing time: Sat 07 Jun 2025 08:00:54 +0000
Manifest this update: Sat 07 Jun 2025 08:00:54 +0000
Manifest next update: Sun 08 Jun 2025 08:00:54 +0000
Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: fjOYeVkVN4R0Mf1gO73weCKpkgpUjlMLawS7GiaMNLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:32:18:3b:7e:0d:df:2a:1a:e7:6b:29:97:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Jun 7 08:00:54 2025 GMT
Not After : Jun 8 08:00:54 2025 GMT
Subject: CN=17eed81d66e5b6061be905b7b39b65a3e94fa666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:40:8a:cf:ad:2c:b5:42:01:2c:d9:77:a5:
4b:3b:28:78:c3:29:49:e7:45:55:ad:9d:73:16:d3:
7c:1a:b1:31:c9:e7:98:7b:12:bc:63:41:c6:5a:07:
7e:eb:72:cc:6f:ce:63:10:75:18:f6:a3:38:fb:96:
2c:9b:58:f8:4a:9c:bb:4b:a0:8b:ba:a9:63:06:de:
be:e3:35:34:44:50:fc:eb:0a:43:be:8d:e6:89:1c:
8d:54:72:3c:43:32:39:47:2b:41:69:3e:43:47:24:
29:2f:d0:fe:f6:b3:75:0d:b6:f8:0f:41:f6:05:c9:
66:16:ad:49:e0:82:41:57:fb:e4:a7:f8:f9:f5:3b:
dd:59:77:f3:48:8d:0d:1b:49:ab:4c:e0:81:13:31:
ae:77:fc:1b:6a:eb:6c:f3:45:ee:0e:df:2b:49:be:
74:96:4f:b6:77:9d:aa:18:94:71:8d:0d:38:05:76:
fb:42:f7:bc:d2:14:66:9a:89:3d:f7:23:01:a7:71:
30:f7:c9:27:32:ba:1c:d7:78:03:21:e9:62:b8:09:
ec:b3:06:b7:f8:76:d4:6d:0b:52:5b:f5:84:2b:81:
e8:11:41:95:47:78:d9:b8:c0:ad:49:03:c3:c0:13:
9e:93:94:3f:97:eb:8e:9e:8e:87:3c:29:ee:5c:fb:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EE:D8:1D:66:E5:B6:06:1B:E9:05:B7:B3:9B:65:A3:E9:4F:A6:66
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:db:8e:da:0c:44:6e:34:04:66:23:8a:b8:5d:1b:1c:ba:0c:
20:30:f2:46:b4:ca:22:8e:7a:6e:27:da:34:6c:db:a2:1d:fd:
00:be:2b:3c:de:38:d5:e8:61:09:04:e0:e2:19:06:8e:14:c9:
ac:85:4b:70:36:11:e8:bd:0c:8d:61:d3:a0:66:b8:e7:83:c0:
db:89:2b:49:15:02:32:9f:e0:51:63:80:35:b0:e6:38:67:28:
d7:71:b9:7e:47:c8:33:c6:00:e1:21:5b:89:bf:4d:de:09:be:
b1:b6:ff:c4:81:f2:5c:e9:f4:e3:0a:4e:09:76:81:18:66:a6:
61:c6:7e:76:8d:07:c6:41:8b:94:75:fc:02:44:90:b9:6e:0d:
83:0f:b3:23:41:3e:dc:a0:5e:a8:0d:db:90:3d:bf:9f:25:6b:
05:b2:02:de:3e:1e:87:d5:83:6a:9c:0c:0f:50:f5:17:60:3e:
d8:71:3a:57:f3:d9:03:6b:37:cb:d4:80:ea:ec:ac:b4:99:99:
60:2f:90:cf:99:a0:97:9a:58:90:f3:6d:80:7f:2c:ea:0f:f0:
37:04:64:05:ed:2e:31:8a:2a:eb:e1:02:a1:cd:69:f8:6d:a6:
5a:2d:cb:ea:47:9b:06:17:ed:b5:5b:f8:5b:11:7e:a5:8a:16:
30:70:6a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaDIYO34N3yoa52spl/r6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjE3ODAwZjE5NDNhZjFjNTE0Mjg0Y2MzYmU3ODBlOWMy
MWRkNzgwHhcNMjUwNjA3MDgwMDU0WhcNMjUwNjA4MDgwMDU0WjAzMTEwLwYDVQQD
EygxN2VlZDgxZDY2ZTViNjA2MWJlOTA1YjdiMzliNjVhM2U5NGZhNjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy15Ais+tLLVCASzZd6VLOyh4wylJ
50VVrZ1zFtN8GrExyeeYexK8Y0HGWgd+63LMb85jEHUY9qM4+5Ysm1j4Spy7S6CL
uqljBt6+4zU0RFD86wpDvo3miRyNVHI8QzI5RytBaT5DRyQpL9D+9rN1Dbb4D0H2
BclmFq1J4IJBV/vkp/j59TvdWXfzSI0NG0mrTOCBEzGud/wbauts80XuDt8rSb50
lk+2d52qGJRxjQ04BXb7Qve80hRmmok99yMBp3Ew98knMroc13gDIeliuAnsswa3
+HbUbQtSW/WEK4HoEUGVR3jZuMCtSQPDwBOek5Q/l+uOno6HPCnuXPsDAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfu2B1m5bYGG+kFt7ObZaPpT6ZmMB8GA1UdIwQY
MBaAFMrxeADxlDrxxRQoTMO+eA6cId14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2Ut
ODA1OTdlYjQ0NDI2LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2UtODA1OTdlYjQ0NDI2
LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONuO2gxE
bjQEZiOKuF0bHLoMIDDyRrTKIo56bifaNGzboh39AL4rPN441ehhCQTg4hkGjhTJ
rIVLcDYR6L0MjWHToGa454PA24krSRUCMp/gUWOANbDmOGco13G5fkfIM8YA4SFb
ib9N3gm+sbb/xIHyXOn04wpOCXaBGGamYcZ+do0HxkGLlHX8AkSQuW4Ngw+zI0E+
3KBeqA3bkD2/nyVrBbIC3j4eh9WDapwMD1D1F2A+2HE6V/PZA2s3y9SA6uystJmZ
YC+Qz5mgl5pYkPNtgH8s6g/wNwRkBe0uMYoq6+ECoc1p+G2mWi3L6kebBhfttVv4
WxF+pYoWMHBqUw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:06 2025 by rpki-client