Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: G7/aKLoLCYuc5a5OB0Tzgwdu2v3FHt4KlLNjvlIVkic=
Subject key identifier: E7:FA:4B:DF:69:36:E2:61:B0:1E:4A:04:EE:DC:18:8D:C6:87:6F:4D
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 019747E7D20257D901E0982583B341D4EEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 01:01:04 +0000
Manifest this update: Sat 07 Jun 2025 01:01:04 +0000
Manifest next update: Sun 08 Jun 2025 01:01:04 +0000
Files and hashes: 1: FpSNZXq3Bs_lAOfoxnm2_1Ntexk.roa (hash: P0ueHi3T6HBQ/Yjh4YAxSote8hQe/slz/U1OtoX8X6M=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: iRursnpfkuStS+VqhB9vWsi6/+vQFsS/qiDYyaPUKOg=)
3: iOzGDAy-qErjiYCUQPq5S2xsHRA.roa (hash: EO5Nyg7UrTNVSVoeALt1d3217TiALMgeZ+f/YmIuYh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:d2:02:57:d9:01:e0:98:25:83:b3:41:d4:ee:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Jun 7 01:01:04 2025 GMT
Not After : Jun 8 01:01:04 2025 GMT
Subject: CN=e7fa4bdf6936e261b01e4a04eedc188dc6876f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:a4:62:c5:30:26:f7:47:62:5b:b0:c8:bb:
57:d2:3f:a8:eb:24:ee:52:73:93:14:36:d6:8b:ab:
d0:4f:73:3e:1c:5f:9d:c9:f6:92:23:b1:09:88:65:
7f:42:63:94:1f:14:8e:4e:84:9b:ed:cf:d6:f4:fa:
66:d0:a9:b8:b7:ce:c5:e6:fb:87:ef:e1:d2:b5:53:
4e:c1:fa:84:bd:31:64:ce:39:05:bc:33:28:3a:7b:
04:6b:15:14:b7:7c:0e:ae:f0:4f:d3:72:28:e4:d9:
4f:62:b5:87:60:cc:78:61:d3:f0:08:1b:43:e7:b5:
de:a2:fe:f7:21:77:14:5a:0c:dd:ed:43:ca:77:e8:
48:bc:29:fa:17:0f:8d:9b:16:30:bf:08:f7:d8:9c:
6d:f9:be:71:2e:8f:f9:9b:19:e0:6f:5a:29:ee:07:
9c:bf:b2:76:3d:d1:cf:cc:93:ac:f0:c3:3f:f2:5a:
a8:24:a8:ab:f5:f2:e8:49:21:d0:1f:7a:6e:69:61:
a6:fb:36:3b:41:aa:c1:f8:7d:0d:dc:15:2a:d3:21:
6e:1c:25:d8:94:3b:bb:f3:5d:1a:e9:15:85:dc:8f:
88:4f:b3:4f:16:77:1f:c4:fa:f6:6d:9a:78:36:56:
7a:a0:79:9f:e3:fe:ec:3e:69:c4:c2:88:da:c5:2e:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FA:4B:DF:69:36:E2:61:B0:1E:4A:04:EE:DC:18:8D:C6:87:6F:4D
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d8:5a:10:1f:26:79:a5:9c:88:18:a5:96:9a:f5:19:db:4b:
59:6c:58:ba:60:9f:75:cb:0d:87:1a:0e:0d:b0:70:73:ab:54:
00:d7:c4:71:ed:51:fe:63:98:ed:52:13:79:11:f1:4d:1b:4e:
e2:c6:1f:4b:b7:7d:6d:4c:23:1b:6d:42:90:e8:fd:ae:df:ea:
89:0d:f1:4b:95:47:2e:18:89:fa:fb:71:dc:7d:36:db:e8:14:
f0:41:3e:27:2e:5d:16:5c:e7:21:5e:7c:a2:af:08:0e:28:20:
2e:c5:3e:c6:ad:5c:79:ec:61:a4:49:be:5b:74:b6:14:57:8b:
08:33:d9:8e:59:a8:c9:1a:77:75:3e:3d:ea:bc:e5:fe:f2:5a:
05:d9:75:86:65:42:83:a8:14:a6:dd:0c:e4:61:f4:ec:df:fb:
4b:4d:8b:67:ae:e5:da:fb:92:70:40:9b:a4:13:d0:13:dc:45:
27:df:67:ea:54:57:9c:7b:3e:e6:b8:3c:fa:a5:7a:c7:e1:d8:
be:3a:cc:7f:fb:34:09:d1:f2:00:c4:c9:bc:d0:bc:82:1a:54:
24:e6:58:0f:51:ff:a4:44:81:6e:4b:d6:a0:3b:91:64:17:45:
3f:bb:6e:bf:b3:ea:97:0c:97:58:e7:5d:4c:2a:20:e2:23:be:
0c:8f:f1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH59ICV9kB4Jglg7NB1O62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDRmNmVhNzllNGUyYTNlMDJhOGIzOGVkMGNkM2E0MDU5
MTM4YWMwHhcNMjUwNjA3MDEwMTA0WhcNMjUwNjA4MDEwMTA0WjAzMTEwLwYDVQQD
EyhlN2ZhNGJkZjY5MzZlMjYxYjAxZTRhMDRlZWRjMTg4ZGM2ODc2ZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpakYsUwJvdHYluwyLtX0j+o6yTu
UnOTFDbWi6vQT3M+HF+dyfaSI7EJiGV/QmOUHxSOToSb7c/W9Ppm0Km4t87F5vuH
7+HStVNOwfqEvTFkzjkFvDMoOnsEaxUUt3wOrvBP03Io5NlPYrWHYMx4YdPwCBtD
57Xeov73IXcUWgzd7UPKd+hIvCn6Fw+NmxYwvwj32Jxt+b5xLo/5mxngb1op7gec
v7J2PdHPzJOs8MM/8lqoJKir9fLoSSHQH3puaWGm+zY7QarB+H0N3BUq0yFuHCXY
lDu7810a6RWF3I+IT7NPFncfxPr2bZp4NlZ6oHmf4/7sPmnEwojaxS6MmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf6S99pNuJhsB5KBO7cGI3Gh29NMB8GA1UdIwQY
MBaAFGBE9up55OKj4CqLOO0M06QFkTisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVUMjZubms0cVBnS29zNDdRelRwQVdST0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82MTFhNDAtYjQ0NC00OTBjLTlkZWUt
MjdkNjA4ZDIwODczLzEvWUVUMjZubms0cVBnS29zNDdRelRwQVdST0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82MTFhNDAtYjQ0NC00OTBjLTlkZWUtMjdkNjA4ZDIwODcz
LzEvWUVUMjZubms0cVBnS29zNDdRelRwQVdST0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZthaEB8m
eaWciBillpr1GdtLWWxYumCfdcsNhxoODbBwc6tUANfEce1R/mOY7VITeRHxTRtO
4sYfS7d9bUwjG21CkOj9rt/qiQ3xS5VHLhiJ+vtx3H022+gU8EE+Jy5dFlznIV58
oq8IDiggLsU+xq1ceexhpEm+W3S2FFeLCDPZjlmoyRp3dT496rzl/vJaBdl1hmVC
g6gUpt0M5GH07N/7S02LZ67l2vuScECbpBPQE9xFJ99n6lRXnHs+5rg8+qV6x+HY
vjrMf/s0CdHyAMTJvNC8ghpUJOZYD1H/pESBbkvWoDuRZBdFP7tuv7PqlwyXWOdd
TCog4iO+DI/xAw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:57:41 2025 by rpki-client