Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier: s4R6Ia2PshQI6TYs5XmnUo1MXn1YFoq5+zBpzrsUEXY=
Subject key identifier: 40:14:A0:C2:12:F7:1B:26:2C:CF:26:74:1F:97:AA:B1:0C:35:C0:9D
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial: 01974A7B64CAEF074CACBB8AB0D73445C596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number: 118D
Signing time: Sat 07 Jun 2025 13:01:30 +0000
Manifest this update: Sat 07 Jun 2025 13:01:30 +0000
Manifest next update: Sun 08 Jun 2025 13:01:30 +0000
Files and hashes: 1: FMnMJSika8qzHn3rA1gugh6bskk.roa (hash: ifB+hpHW1Zidp1iRq+x5utdXKTTiyitHTNMMB+oocZw=)
2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: V4KBwDllt8driJt+qTEm9pBSCaQKGDhdZKX6z2iDN/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:64:ca:ef:07:4c:ac:bb:8a:b0:d7:34:45:c5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Validity
Not Before: Jun 7 13:01:30 2025 GMT
Not After : Jun 8 13:01:30 2025 GMT
Subject: CN=4014a0c212f71b262ccf26741f97aab10c35c09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:c6:ab:34:93:23:3b:44:cd:a5:41:73:ad:
e9:ef:0d:fe:00:32:1b:27:b1:20:4f:57:be:be:4e:
cf:9c:29:4d:96:55:4f:6f:0a:72:10:f0:95:e6:95:
76:0c:14:0f:54:0d:6e:4d:c7:14:08:61:30:4f:17:
e1:5f:3a:32:2f:48:b9:fe:13:0a:ff:26:ab:de:39:
09:01:57:38:a4:f7:f6:9c:cb:66:5a:ef:36:23:76:
95:d8:5a:8b:47:02:3e:04:47:e3:42:9a:cd:fa:51:
c5:45:5d:65:ea:cc:f5:3e:41:3f:e4:4f:86:4b:ba:
85:de:87:e5:10:2e:07:07:71:65:ab:51:90:18:3e:
a8:3b:89:61:33:d2:93:8f:3d:bb:5f:67:c8:1a:67:
f7:50:b6:61:0c:e7:6e:70:91:31:ae:f8:d6:bf:cd:
72:da:fe:96:ad:45:6b:d6:80:92:44:f1:8a:cd:76:
9b:23:9d:4f:cc:56:99:77:48:62:0f:3e:eb:cd:d8:
a8:c4:b9:f6:c3:46:85:f3:10:f1:18:c0:7f:e3:02:
9e:1e:b1:f3:6a:23:f4:2d:38:2b:70:56:e1:c7:cd:
bd:67:e4:f5:70:09:51:e5:f0:e3:69:ad:41:1c:2c:
0f:5a:a6:93:18:ad:a2:63:36:3e:20:66:dc:34:4b:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:A0:C2:12:F7:1B:26:2C:CF:26:74:1F:97:AA:B1:0C:35:C0:9D
X509v3 Authority Key Identifier:
keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:04:7b:4b:46:9a:b0:32:44:1a:97:ed:52:a1:ea:94:fe:8c:
5d:f0:e9:04:29:e5:f7:1c:9b:29:89:ff:e4:82:0a:55:d1:44:
14:c4:c7:de:69:76:ba:38:cb:16:cd:7f:a1:ed:c2:16:f8:97:
ec:44:6b:4d:ee:36:ae:11:1a:05:8b:73:5c:11:ce:5b:36:92:
b9:08:cd:e1:aa:a0:f0:b7:14:98:64:0f:a7:24:d5:02:1d:8b:
49:74:44:80:74:d1:4e:4f:6f:da:57:16:f6:ee:77:bf:62:11:
80:b1:90:95:db:e1:f0:58:33:80:fe:03:1d:32:8a:a1:55:0d:
47:c5:a2:8f:a5:8f:30:6c:41:42:67:ae:74:84:51:a0:19:8a:
ff:4c:0c:1b:a0:9a:d7:a9:57:07:57:90:d8:6f:ad:d2:3f:87:
1b:ac:75:fe:42:a8:37:6e:97:93:42:34:60:82:d7:44:0b:a8:
be:98:08:30:b3:be:a4:57:99:f0:c3:aa:ae:27:f9:0e:01:57:
d5:db:3c:08:39:8c:c8:9c:2e:8e:fb:0d:50:64:f3:bd:2e:b1:
b2:57:7f:43:9c:52:0a:02:8d:b1:62:dc:af:8b:98:95:23:50:
36:04:aa:07:e3:f0:91:93:50:7a:f6:24:e0:d6:83:d4:23:76:
12:b1:5d:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe2TK7wdMrLuKsNc0RcWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl
ZWRiNjQwHhcNMjUwNjA3MTMwMTMwWhcNMjUwNjA4MTMwMTMwWjAzMTEwLwYDVQQD
Eyg0MDE0YTBjMjEyZjcxYjI2MmNjZjI2NzQxZjk3YWFiMTBjMzVjMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklfGqzSTIztEzaVBc63p7w3+ADIb
J7EgT1e+vk7PnClNllVPbwpyEPCV5pV2DBQPVA1uTccUCGEwTxfhXzoyL0i5/hMK
/yar3jkJAVc4pPf2nMtmWu82I3aV2FqLRwI+BEfjQprN+lHFRV1l6sz1PkE/5E+G
S7qF3oflEC4HB3Flq1GQGD6oO4lhM9KTjz27X2fIGmf3ULZhDOducJExrvjWv81y
2v6WrUVr1oCSRPGKzXabI51PzFaZd0hiDz7rzdioxLn2w0aF8xDxGMB/4wKeHrHz
aiP0LTgrcFbhx829Z+T1cAlR5fDjaa1BHCwPWqaTGK2iYzY+IGbcNEs+MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAUoMIS9xsmLM8mdB+XqrEMNcCdMB8GA1UdIwQY
MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt
ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi
LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAR7S0aa
sDJEGpftUqHqlP6MXfDpBCnl9xybKYn/5IIKVdFEFMTH3ml2ujjLFs1/oe3CFviX
7ERrTe42rhEaBYtzXBHOWzaSuQjN4aqg8LcUmGQPpyTVAh2LSXREgHTRTk9v2lcW
9u53v2IRgLGQldvh8FgzgP4DHTKKoVUNR8Wij6WPMGxBQmeudIRRoBmK/0wMG6Ca
16lXB1eQ2G+t0j+HG6x1/kKoN26Xk0I0YILXRAuovpgIMLO+pFeZ8MOqrif5DgFX
1ds8CDmMyJwujvsNUGTzvS6xsld/Q5xSCgKNsWLcr4uYlSNQNgSqB+PwkZNQevYk
4NaD1CN2ErFdog==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:12 2025 by rpki-client