Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: TLZ2ga5wP55nThVYLQRUJy+z+EEF36Zx7mTHgdQVAPw=
Subject key identifier: 9D:B9:18:0A:29:B9:DB:F4:1F:30:C0:FF:48:FE:A2:88:95:C1:4C:D1
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 01974B1FCDBF7F5E1B57C201FD0194614DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 16:01:04 +0000
Manifest this update: Sat 07 Jun 2025 16:01:04 +0000
Manifest next update: Sun 08 Jun 2025 16:01:04 +0000
Files and hashes: 1: UvHXXFoVL7W8kRf_CmjRtC48uH4.roa (hash: E8q/i3b6Anio6852XqG98vgAFVWa9Xn560kQh/u0aSY=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: RJzRaackwx+RLpI/t6fQDEVIIA6iHk4h+KgEBgUYrc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:cd:bf:7f:5e:1b:57:c2:01:fd:01:94:61:4d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Jun 7 16:01:04 2025 GMT
Not After : Jun 8 16:01:04 2025 GMT
Subject: CN=9db9180a29b9dbf41f30c0ff48fea28895c14cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:2c:79:3b:80:0b:d4:b7:db:cf:80:90:d1:
0a:a7:ce:fb:fc:14:76:89:6f:07:ed:3c:f0:f7:70:
e5:2c:91:33:17:4b:0f:27:1d:68:c4:ef:8c:59:69:
85:1a:fc:5c:7e:b1:d1:16:f4:57:e4:d8:a0:37:2c:
5c:06:85:ec:21:fc:03:d1:b5:cc:40:b9:06:0f:a7:
51:f1:26:3a:22:3b:1b:94:8a:e0:56:7e:6d:25:2c:
23:4c:14:32:fd:5d:25:20:86:61:be:99:18:74:dd:
e9:8b:93:2e:bb:95:6d:72:14:5a:18:a3:39:c7:4c:
0c:a5:30:4d:8d:d0:d6:89:1e:41:d6:b6:17:4d:ea:
f5:8d:c2:b2:c6:84:bc:53:1b:50:d3:c8:6e:b3:6e:
86:db:f2:63:02:fb:5d:ac:b8:7d:75:c4:12:8c:b7:
80:7b:fd:18:9e:f3:2d:a8:8f:25:72:74:6c:0b:93:
be:39:59:7c:11:29:0e:1f:65:ac:88:43:dd:ab:53:
cd:df:ea:4a:38:14:31:68:1a:aa:a8:d5:7f:6a:d9:
c9:79:bf:0c:a0:a6:88:0e:15:34:cc:40:d0:f1:5a:
4a:4c:35:96:2a:18:33:74:08:a8:45:c8:61:a7:9a:
5a:5b:1e:91:e7:0a:7a:dd:63:9f:ca:b7:4a:09:20:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B9:18:0A:29:B9:DB:F4:1F:30:C0:FF:48:FE:A2:88:95:C1:4C:D1
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f4:ee:65:c1:a7:08:be:be:55:b3:88:77:18:46:5a:df:6e:
72:8e:3d:10:2c:8e:f0:91:43:f6:97:46:9b:3f:b6:30:55:b5:
e3:51:2a:b3:39:8b:8e:00:19:9f:46:df:75:f3:fc:65:f0:cc:
8b:fe:37:83:ff:d8:e7:19:57:bb:af:53:db:84:f8:18:79:d4:
62:c1:fa:67:17:5b:9c:34:3c:90:26:63:50:3c:68:83:97:fc:
41:ba:a9:29:38:c7:39:1d:e6:a0:be:2e:39:fa:67:b3:67:57:
f1:5d:e1:c9:2f:44:0f:3c:c4:5a:d4:be:84:5a:7a:11:f6:85:
e6:4d:72:b9:f1:d9:92:fc:a8:b4:e8:88:16:3c:59:ac:44:5a:
88:2a:14:7e:d4:03:02:89:69:96:45:9f:6a:9f:7c:c2:35:ad:
10:f8:92:70:45:14:4b:41:38:45:17:1c:fe:41:19:04:09:21:
4d:9f:c9:01:57:b8:dd:fb:a5:56:7c:12:df:8e:64:08:12:13:
29:78:50:db:84:5c:26:6d:56:08:37:d7:24:a6:f5:85:77:70:
16:7f:d1:bb:24:f5:ca:52:6a:03:ae:d3:86:e1:10:42:23:b7:
82:1d:4f:8a:fe:2a:84:6c:36:3d:0a:1e:0b:98:96:d0:96:b8:
74:5e:cb:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH82/f14bV8IB/QGUYU3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTAwZjFlMTFlMmQyNWQwYjIzMTZhZDZlMDEyNjg0ODM5
YWM4MWUwHhcNMjUwNjA3MTYwMTA0WhcNMjUwNjA4MTYwMTA0WjAzMTEwLwYDVQQD
Eyg5ZGI5MTgwYTI5YjlkYmY0MWYzMGMwZmY0OGZlYTI4ODk1YzE0Y2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw24seTuAC9S328+AkNEKp877/BR2
iW8H7Tzw93DlLJEzF0sPJx1oxO+MWWmFGvxcfrHRFvRX5NigNyxcBoXsIfwD0bXM
QLkGD6dR8SY6IjsblIrgVn5tJSwjTBQy/V0lIIZhvpkYdN3pi5Muu5VtchRaGKM5
x0wMpTBNjdDWiR5B1rYXTer1jcKyxoS8UxtQ08hus26G2/JjAvtdrLh9dcQSjLeA
e/0YnvMtqI8lcnRsC5O+OVl8ESkOH2WsiEPdq1PN3+pKOBQxaBqqqNV/atnJeb8M
oKaIDhU0zEDQ8VpKTDWWKhgzdAioRchhp5paWx6R5wp63WOfyrdKCSAgNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ25GAopudv0HzDA/0j+ooiVwUzRMB8GA1UdIwQY
MBaAFMqQDx4R4tJdCyMWrW4BJoSDmsgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBBUEhoSGkwbDBMSXhhdGJnRW1oSU9heUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mNjk2OWMtM2E2ZS00YmVjLTk3NDIt
ZWNlODdjNmEwMzE4LzEveXBBUEhoSGkwbDBMSXhhdGJnRW1oSU9heUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mNjk2OWMtM2E2ZS00YmVjLTk3NDItZWNlODdjNmEwMzE4
LzEveXBBUEhoSGkwbDBMSXhhdGJnRW1oSU9heUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPTuZcGn
CL6+VbOIdxhGWt9uco49ECyO8JFD9pdGmz+2MFW141EqszmLjgAZn0bfdfP8ZfDM
i/43g//Y5xlXu69T24T4GHnUYsH6ZxdbnDQ8kCZjUDxog5f8QbqpKTjHOR3moL4u
Ofpns2dX8V3hyS9EDzzEWtS+hFp6EfaF5k1yufHZkvyotOiIFjxZrERaiCoUftQD
AolplkWfap98wjWtEPiScEUUS0E4RRcc/kEZBAkhTZ/JAVe43fulVnwS345kCBIT
KXhQ24RcJm1WCDfXJKb1hXdwFn/RuyT1ylJqA67ThuEQQiO3gh1Piv4qhGw2PQoe
C5iW0Ja4dF7LpA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:09 2025 by rpki-client