Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: x2AJySPKCD9SDzgQS7aOXl9+Jl4T4/3Vd3plQrMVRCo=
Subject key identifier: D2:2A:58:10:ED:92:C6:FA:B3:57:B7:41:0A:62:44:FF:4C:0B:AB:F6
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019749D58FA527C31A9EA97142D35A1F2ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:00:22 +0000
Manifest this update: Sat 07 Jun 2025 10:00:22 +0000
Manifest next update: Sun 08 Jun 2025 10:00:22 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: 3wHpi+NK6whdp9UcX3yudKfhGQGzxcU+K61wwkXYaIY=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:8f:a5:27:c3:1a:9e:a9:71:42:d3:5a:1f:2e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jun 7 10:00:22 2025 GMT
Not After : Jun 8 10:00:22 2025 GMT
Subject: CN=d22a5810ed92c6fab357b7410a6244ff4c0babf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:a8:93:c6:e0:76:cd:6e:d9:54:48:9e:4c:
9f:d8:6f:ad:4a:a0:76:61:62:79:69:18:03:4e:ac:
ab:fe:08:6d:fe:1d:73:d4:90:94:bf:65:e3:f7:98:
5d:a9:d6:f0:c0:d9:d4:c7:a3:99:a1:2d:91:d1:7f:
5d:74:95:c8:7e:98:8a:fc:af:fb:59:69:8e:d9:3f:
1b:28:b1:b3:b2:66:fa:e6:2b:e8:5e:ab:db:6a:c4:
b1:1e:ce:5f:81:40:76:cd:27:fa:1e:14:ca:75:59:
ba:8f:10:be:49:4f:f1:89:d7:8d:21:af:b8:45:58:
56:42:df:ce:fb:2b:b0:aa:a4:8f:6b:79:fe:54:20:
0b:62:0e:91:07:a5:11:ce:ea:c6:15:1f:1b:7d:a5:
80:be:df:58:f2:2c:a4:1c:d0:1b:e5:a7:31:44:3d:
2e:1c:d4:ab:e9:5e:48:b7:a8:5e:9a:76:49:c4:be:
27:f1:50:6e:0c:6f:42:3e:a1:c8:48:79:f2:95:09:
17:ef:1e:ff:73:7e:90:b5:f3:ba:17:8c:39:14:e5:
20:e5:92:be:30:4e:f2:60:3c:82:32:fe:58:c2:9b:
98:83:3a:cd:d7:2a:7b:69:c7:31:17:85:94:1a:57:
d8:e4:6d:b1:01:3f:9b:8c:71:1e:cb:e9:ea:94:07:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:58:10:ED:92:C6:FA:B3:57:B7:41:0A:62:44:FF:4C:0B:AB:F6
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f5:e8:d6:e2:fa:3a:a8:ad:6b:03:80:6f:51:61:05:db:03:
4f:df:50:44:a4:5e:16:d4:73:7c:8a:2a:48:37:71:33:53:d9:
30:c0:67:d1:17:72:4a:7f:9c:8c:bb:56:38:71:d9:b1:7d:61:
d4:36:fe:2e:ba:da:09:0e:70:c0:9c:47:36:fc:c2:d6:2a:e5:
c5:e2:92:63:ae:8f:fa:37:ba:b8:b6:6a:4e:0a:1e:02:f3:9f:
21:00:b5:76:d0:d7:db:83:28:db:05:5a:d3:73:a1:7d:0e:7d:
3a:02:b4:e5:f5:84:22:49:41:c2:3c:a2:32:cf:4c:d7:df:0f:
b2:04:02:75:50:91:2f:0b:10:c0:bb:80:0c:af:f7:e9:6b:00:
2e:6b:71:5b:b7:ce:7a:39:0c:c6:ea:64:d8:1d:14:52:d0:5b:
c1:55:ce:8a:3d:d0:fc:36:c5:2f:53:95:d0:88:30:67:8e:b5:
38:27:6b:57:93:98:35:7f:e6:70:6a:09:dd:d3:a8:e3:c9:83:
e6:2f:34:0f:49:aa:f3:ba:b9:8f:60:07:d6:7a:3a:91:6f:47:
27:20:2b:1d:2a:45:50:73:63:97:9c:cc:62:e4:f9:44:fc:7a:
ea:73:c8:50:45:65:19:a8:86:b2:0f:ca:25:29:6d:26:97:b4:
55:28:cf:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1Y+lJ8ManqlxQtNaHy7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj
NTVhNGEwHhcNMjUwNjA3MTAwMDIyWhcNMjUwNjA4MTAwMDIyWjAzMTEwLwYDVQQD
EyhkMjJhNTgxMGVkOTJjNmZhYjM1N2I3NDEwYTYyNDRmZjRjMGJhYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPeok8bgds1u2VRInkyf2G+tSqB2
YWJ5aRgDTqyr/ght/h1z1JCUv2Xj95hdqdbwwNnUx6OZoS2R0X9ddJXIfpiK/K/7
WWmO2T8bKLGzsmb65ivoXqvbasSxHs5fgUB2zSf6HhTKdVm6jxC+SU/xideNIa+4
RVhWQt/O+yuwqqSPa3n+VCALYg6RB6URzurGFR8bfaWAvt9Y8iykHNAb5acxRD0u
HNSr6V5It6hemnZJxL4n8VBuDG9CPqHISHnylQkX7x7/c36QtfO6F4w5FOUg5ZK+
ME7yYDyCMv5YwpuYgzrN1yp7accxF4WUGlfY5G2xAT+bjHEey+nqlAcqLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIqWBDtksb6s1e3QQpiRP9MC6v2MB8GA1UdIwQY
MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt
YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj
LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfXo1uL6
OqitawOAb1FhBdsDT99QRKReFtRzfIoqSDdxM1PZMMBn0RdySn+cjLtWOHHZsX1h
1Db+LrraCQ5wwJxHNvzC1irlxeKSY66P+je6uLZqTgoeAvOfIQC1dtDX24Mo2wVa
03OhfQ59OgK05fWEIklBwjyiMs9M198PsgQCdVCRLwsQwLuADK/36WsALmtxW7fO
ejkMxupk2B0UUtBbwVXOij3Q/DbFL1OV0IgwZ461OCdrV5OYNX/mcGoJ3dOo48mD
5i80D0mq87q5j2AH1no6kW9HJyArHSpFUHNjl5zMYuT5RPx66nPIUEVlGaiGsg/K
JSltJpe0VSjPuA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:33:41 2025 by rpki-client