
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: HijRVEbMskhxsAGBQtES1Hm6aQujmQeYuXX2JEp+UUw=
Subject key identifier: FD:13:84:E0:B0:27:40:01:E1:02:8F:93:DE:26:8D:E7:A4:BC:81:BE
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 0197462FAFEAC0968C0F4EF5C5572448EA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 17:00:19 +0000
Manifest this update: Fri 06 Jun 2025 17:00:19 +0000
Manifest next update: Sat 07 Jun 2025 17:00:19 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: h/RyLHvTYcENiAgG0pMqwH5GSJXupZtdZw9xbNPNtPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:af:ea:c0:96:8c:0f:4e:f5:c5:57:24:48:ea:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Jun 6 17:00:19 2025 GMT
Not After : Jun 7 17:00:19 2025 GMT
Subject: CN=fd1384e0b0274001e1028f93de268de7a4bc81be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:0c:71:65:bb:2c:22:46:35:82:a5:97:a0:
02:e1:02:eb:2c:27:7f:82:83:55:ee:5e:6e:c7:5e:
d9:df:23:20:3b:6e:60:a6:87:78:75:53:9b:1a:19:
e7:e1:45:27:9d:b6:e3:62:33:0d:2b:bd:f1:40:91:
fb:96:7b:96:3b:ef:d6:3f:76:64:f0:e9:f5:d5:9d:
b8:1c:e7:7c:f0:2d:4b:b1:ae:3d:20:ae:d5:e5:0d:
c8:da:a6:be:98:46:67:d8:70:0e:c0:f0:0b:12:bc:
39:22:6f:cc:03:62:60:11:ba:5c:30:90:75:e7:08:
c8:96:99:a8:cc:f1:7d:f8:bf:85:ac:22:14:14:10:
4b:79:85:b0:dc:d3:dc:7c:db:8a:df:e2:9e:25:74:
b7:08:3a:d2:90:cb:4d:86:e2:64:92:ec:bc:d2:c1:
74:98:66:e6:1b:23:44:e1:79:08:ef:c0:36:54:95:
cd:78:ff:0f:f4:0d:c7:e9:77:09:43:2d:35:38:53:
78:75:01:d3:5a:fe:94:d1:10:2a:91:52:8a:bc:5d:
7c:b7:9c:27:b5:14:f2:2e:8f:8d:ea:26:85:a7:ff:
dc:9a:cd:60:69:a5:31:28:65:25:4e:69:0e:8a:00:
d5:d3:5e:56:96:56:be:36:80:1d:7b:03:7b:ea:7f:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:13:84:E0:B0:27:40:01:E1:02:8F:93:DE:26:8D:E7:A4:BC:81:BE
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2e:85:b5:d5:cf:f5:37:e5:19:1d:81:ba:5e:2a:9b:ba:6e:
9d:fc:f1:43:8b:9c:0d:d6:83:f1:6a:a2:97:03:cf:8f:92:64:
90:15:f0:94:08:0f:91:f3:e5:1a:26:79:d3:23:8f:61:a7:e6:
d5:58:2d:9d:dc:92:0c:32:5b:e1:5b:36:8f:ca:23:64:2b:15:
78:d4:3e:4b:3a:f5:b6:cc:c5:6a:22:3a:a6:c5:ba:21:65:f3:
62:8a:bd:b5:55:62:5f:ce:ff:f7:31:3e:ba:0c:43:10:fd:cc:
e6:fb:f7:0c:d6:51:e3:27:84:79:56:f7:cb:9e:e4:8a:00:49:
02:f6:24:c8:dc:1b:dd:cb:9c:ab:d7:77:fb:a8:66:e5:5c:01:
4b:5a:88:8a:b3:25:47:ae:a7:2e:6e:b7:c1:34:ee:5b:3c:7c:
34:c6:a3:7c:88:84:99:15:27:74:d4:c0:6a:b1:86:f0:33:ca:
9c:a3:68:09:2a:17:a5:70:db:dd:fe:9a:0d:71:ce:95:27:20:
85:bd:95:f3:8a:3c:89:b4:b1:b9:03:a8:f2:43:89:70:6f:a2:
c9:9c:f5:58:a6:c7:61:ae:90:e2:82:85:f3:1e:84:94:2f:ed:
76:3b:e6:f7:a3:43:ef:91:27:ac:16:96:4b:4f:20:5f:12:73:
e5:44:5b:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL6/qwJaMD071xVckSOpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNWUzZWM1YTkwNjIzY2NiOTc3ODRkM2NlZjI0MjEyYTMx
Y2JhZjEwHhcNMjUwNjA2MTcwMDE5WhcNMjUwNjA3MTcwMDE5WjAzMTEwLwYDVQQD
EyhmZDEzODRlMGIwMjc0MDAxZTEwMjhmOTNkZTI2OGRlN2E0YmM4MWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbcMcWW7LCJGNYKll6AC4QLrLCd/
goNV7l5ux17Z3yMgO25gpod4dVObGhnn4UUnnbbjYjMNK73xQJH7lnuWO+/WP3Zk
8On11Z24HOd88C1Lsa49IK7V5Q3I2qa+mEZn2HAOwPALErw5Im/MA2JgEbpcMJB1
5wjIlpmozPF9+L+FrCIUFBBLeYWw3NPcfNuK3+KeJXS3CDrSkMtNhuJkkuy80sF0
mGbmGyNE4XkI78A2VJXNeP8P9A3H6XcJQy01OFN4dQHTWv6U0RAqkVKKvF18t5wn
tRTyLo+N6iaFp//cms1gaaUxKGUlTmkOigDV015Wlla+NoAdewN76n+LOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0ThOCwJ0AB4QKPk94mjeekvIG+MB8GA1UdIwQY
MBaAFMpePsWpBiPMuXeE087yQhKjHLrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMt
NmYzMWY2ZjdmMTZiLzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMtNmYzMWY2ZjdmMTZi
LzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKy6FtdXP
9TflGR2Bul4qm7punfzxQ4ucDdaD8WqilwPPj5JkkBXwlAgPkfPlGiZ50yOPYafm
1VgtndySDDJb4Vs2j8ojZCsVeNQ+Szr1tszFaiI6psW6IWXzYoq9tVViX87/9zE+
ugxDEP3M5vv3DNZR4yeEeVb3y57kigBJAvYkyNwb3cucq9d3+6hm5VwBS1qIirMl
R66nLm63wTTuWzx8NMajfIiEmRUndNTAarGG8DPKnKNoCSoXpXDb3f6aDXHOlScg
hb2V84o8ibSxuQOo8kOJcG+iyZz1WKbHYa6Q4oKF8x6ElC/tdjvm96ND75EnrBaW
S08gXxJz5URbTA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:06:10 2025 by rpki-client