Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier: 6h/8xLTbEAM1tW2JJPPibgIIbFIUPLda4+2JHtOBrSw=
Subject key identifier: 6B:A5:FD:32:9D:3D:A9:F4:5C:63:40:14:FE:BF:CA:66:21:E2:7D:12
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 01974C320FEF5BEF9C01AC89B80B47A98563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 21:00:38 +0000
Manifest this update: Sat 07 Jun 2025 21:00:38 +0000
Manifest next update: Sun 08 Jun 2025 21:00:38 +0000
Files and hashes: 1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: NyWAY9lac8ajCF17tPPtX44f6592IpvN6Dea+KTlNNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:0f:ef:5b:ef:9c:01:ac:89:b8:0b:47:a9:85:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Jun 7 21:00:38 2025 GMT
Not After : Jun 8 21:00:38 2025 GMT
Subject: CN=6ba5fd329d3da9f45c634014febfca6621e27d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:af:e8:61:65:86:dc:46:db:6a:6e:c9:c4:89:
b5:fc:01:1e:fb:ea:99:bf:b2:1c:b3:54:8c:9b:24:
bd:20:6f:d0:55:dd:91:4a:68:af:a5:88:b8:96:3d:
4f:11:9d:ce:96:6b:1e:8b:4f:3c:a8:b7:eb:f9:c1:
c6:ca:02:ae:d0:a5:63:78:0a:6a:e0:f4:12:3b:ba:
bd:11:72:23:05:a9:54:86:09:38:07:f7:c3:6d:4c:
cf:58:51:b8:ff:d0:8e:be:25:3e:47:e6:2b:8d:03:
1c:7a:ec:de:fc:17:e9:a2:1d:f4:0d:7b:64:82:a3:
21:3e:04:30:cd:16:c4:28:11:07:d7:57:96:56:e2:
99:09:cf:5e:e2:79:2f:9e:2e:6b:34:13:73:74:1f:
9b:5e:0e:e7:0a:36:b5:aa:48:a9:1b:0e:f6:fc:04:
a1:5c:d4:fd:ed:f6:49:d3:60:e0:7f:fb:1f:e5:e1:
e2:29:f1:89:fb:06:19:50:38:80:3c:42:b5:8b:ee:
32:67:d0:a0:df:b8:7d:70:67:03:79:cc:fa:7c:5e:
f9:a8:ca:9c:46:f9:ca:42:37:05:85:f7:54:4a:87:
e0:ee:58:76:67:7c:17:6b:2a:b6:7b:f6:e9:17:9e:
9d:8e:b8:94:62:f8:48:eb:1c:de:9f:80:c0:d4:2c:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A5:FD:32:9D:3D:A9:F4:5C:63:40:14:FE:BF:CA:66:21:E2:7D:12
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:17:47:d1:54:25:e4:b5:85:f1:cc:28:74:96:33:3c:41:7c:
fd:fa:b6:c9:2d:42:b9:be:94:5d:59:85:a6:23:0c:54:c8:2c:
a4:06:4c:76:ed:61:8e:0c:45:46:c5:cf:fd:ad:88:75:ed:13:
2d:15:33:ca:31:9e:db:79:3a:73:29:b3:c5:1d:6e:6c:16:32:
1b:da:d7:f3:0f:d9:b5:ee:4f:fe:8d:bf:a2:93:88:6a:c3:d4:
55:16:ed:68:7b:21:d6:36:49:f0:a0:43:2e:0c:c5:7c:06:42:
66:dc:38:e1:8a:6c:a1:8e:90:b7:e3:60:7e:89:6e:fe:78:51:
3a:0e:95:82:f5:13:8f:5d:ba:43:3c:88:96:53:96:51:eb:46:
47:61:15:37:d9:ff:fa:9c:21:5d:96:15:73:75:bf:f2:4c:6a:
54:2d:4f:de:6a:84:12:bd:a7:5f:de:c4:e5:91:2d:1b:31:93:
b1:da:44:f6:3c:df:01:06:16:4b:56:1a:1b:e9:56:09:b9:03:
5f:45:3c:6a:91:b7:1f:8a:ea:e2:6d:e2:55:7b:8b:e9:95:54:
0c:a7:18:ec:24:7c:da:ae:11:56:41:36:cd:5a:a2:10:c6:89:
6a:9c:82:3f:dc:7e:59:28:26:31:24:3b:ed:eb:b4:03:8d:7d:
79:36:c5:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMg/vW++cAayJuAtHqYVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzM0ODFkM2ZhNDg3MTBkY2I5NzNmZGNkMjkzNDBkZWRi
NjIyOWEwHhcNMjUwNjA3MjEwMDM4WhcNMjUwNjA4MjEwMDM4WjAzMTEwLwYDVQQD
Eyg2YmE1ZmQzMjlkM2RhOWY0NWM2MzQwMTRmZWJmY2E2NjIxZTI3ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a/oYWWG3Ebbam7JxIm1/AEe++qZ
v7Ics1SMmyS9IG/QVd2RSmivpYi4lj1PEZ3Olmsei088qLfr+cHGygKu0KVjeApq
4PQSO7q9EXIjBalUhgk4B/fDbUzPWFG4/9COviU+R+YrjQMceuze/Bfpoh30DXtk
gqMhPgQwzRbEKBEH11eWVuKZCc9e4nkvni5rNBNzdB+bXg7nCja1qkipGw72/ASh
XNT97fZJ02Dgf/sf5eHiKfGJ+wYZUDiAPEK1i+4yZ9Cg37h9cGcDecz6fF75qMqc
RvnKQjcFhfdUSofg7lh2Z3wXayq2e/bpF56djriUYvhI6xzen4DA1CyNFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGul/TKdPan0XGNAFP6/ymYh4n0SMB8GA1UdIwQY
MBaAFMkzSB0/pIcQ3Llz/c0pNA3ttiKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUt
ZmVmZDM3NjY2NzQxLzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUtZmVmZDM3NjY2NzQx
LzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhdH0VQl
5LWF8cwodJYzPEF8/fq2yS1Cub6UXVmFpiMMVMgspAZMdu1hjgxFRsXP/a2Ide0T
LRUzyjGe23k6cymzxR1ubBYyG9rX8w/Zte5P/o2/opOIasPUVRbtaHsh1jZJ8KBD
LgzFfAZCZtw44YpsoY6Qt+Ngfolu/nhROg6VgvUTj126QzyIllOWUetGR2EVN9n/
+pwhXZYVc3W/8kxqVC1P3mqEEr2nX97E5ZEtGzGTsdpE9jzfAQYWS1YaG+lWCbkD
X0U8apG3H4rq4m3iVXuL6ZVUDKcY7CR82q4RVkE2zVqiEMaJapyCP9x+WSgmMSQ7
7eu0A419eTbF/w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:23 2025 by rpki-client