Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: QX31gnkhvt9zpSRYnvzXNdS0ZaEIL4/cKdOuly5vqUo=
Subject key identifier: FF:FC:9D:39:0E:99:D0:87:6E:55:68:DF:A7:F6:79:A1:D0:B8:96:DF
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 0197481E25A19A566770FC10838B47C90119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 04C7
Signing time: Sat 07 Jun 2025 02:00:24 +0000
Manifest this update: Sat 07 Jun 2025 02:00:24 +0000
Manifest next update: Sun 08 Jun 2025 02:00:24 +0000
Files and hashes: 1: CZfj574ArDtJlgW2YQicypkXsXg.roa (hash: N05YSWHFpJvI1wd5d/zN3+j2iXKRF4AnTjnzlab5tTQ=)
2: S0bRpdJWK72QH0WUGiObKU-szZo.roa (hash: nahgUHhIrdKyE1HO3U29HHKRqVvxXNA6pcRe9FHTMjw=)
3: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: L9AQlKfmGl9gXaF/d6wph2fYFRGFitYY7PcUNX8y1bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:25:a1:9a:56:67:70:fc:10:83:8b:47:c9:01:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Jun 7 02:00:24 2025 GMT
Not After : Jun 8 02:00:24 2025 GMT
Subject: CN=fffc9d390e99d0876e5568dfa7f679a1d0b896df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:67:08:ec:94:76:62:53:08:dc:40:d9:77:
c8:0e:d4:55:bc:83:21:d4:18:9f:98:1e:02:da:f6:
16:59:66:ed:9c:68:4d:c7:91:40:52:ed:10:07:34:
e1:4f:37:0e:96:ee:15:a6:23:c4:a7:62:ef:da:7a:
4f:71:3e:09:03:17:62:94:c9:45:04:d7:3a:9e:17:
00:92:c7:8f:5e:4e:86:36:a0:5b:16:e6:fc:cc:57:
a0:f3:40:52:7d:80:74:15:59:7e:55:1b:58:95:f6:
e5:0d:48:77:90:e9:e8:f7:75:fb:33:f0:34:3a:d9:
50:f6:5d:2a:ed:66:a7:51:db:0a:02:d5:6d:55:56:
a7:7b:f0:df:98:2e:a8:14:d5:34:48:50:6a:4a:14:
44:39:8a:e3:b3:37:e2:a4:b7:39:52:a1:15:42:6e:
8f:f7:36:e5:64:42:43:fc:97:3d:9c:17:e7:2a:d7:
fc:bf:7e:ce:0e:5a:3a:f6:59:22:74:6e:a6:e6:1b:
9c:88:73:0a:a5:71:f1:d2:e3:58:f5:4c:26:8c:32:
b4:8d:99:75:52:fd:52:a2:13:93:9b:e9:19:32:3e:
22:f6:ea:09:a7:d9:f5:27:70:f8:ae:98:40:40:bb:
b5:e2:78:31:19:4c:dd:cf:7e:69:65:6f:d9:67:f1:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FC:9D:39:0E:99:D0:87:6E:55:68:DF:A7:F6:79:A1:D0:B8:96:DF
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:29:6d:f2:17:7f:2c:44:f2:fd:cd:bf:a0:58:30:05:51:b3:
7f:76:b6:0e:7d:58:b2:86:fe:58:92:5c:bf:81:0b:c7:67:2c:
da:19:3a:0c:46:22:07:90:47:ca:f6:1a:f4:44:0a:91:98:f8:
a6:6d:f5:2d:c3:1c:6b:ca:7b:31:7b:9c:d6:a8:5b:27:b7:a3:
5b:4a:e1:ec:7d:a0:69:3a:70:f4:1f:de:bd:cb:98:ec:b1:7b:
8b:55:f7:b5:3e:a0:72:37:e5:6a:36:46:c3:db:b8:4b:97:ce:
8e:f5:2d:87:ad:c2:bc:39:bc:43:e9:b9:14:f6:82:8f:a0:42:
ee:f7:2e:aa:17:ab:74:09:20:0e:9d:88:d0:c0:cd:18:e9:f6:
b6:d4:d3:d0:34:a7:a6:c2:eb:d8:4d:55:c3:fa:04:31:6b:6a:
59:36:33:c3:8e:9f:9f:bd:e7:f3:24:da:1f:e7:ac:19:23:3e:
5c:41:f4:4e:32:5e:ce:92:be:d2:f5:4d:be:1b:ea:67:9f:a0:
a7:18:96:dc:b2:93:b0:c4:27:3b:f0:31:ad:6b:79:27:3b:20:
80:b4:14:56:00:47:8e:9f:48:0b:b7:64:eb:53:98:87:8b:4f:
e0:ed:ac:e1:a3:8e:37:4c:0b:8d:c2:d8:9d:ae:9d:3d:dc:f5:
c2:31:f3:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHiWhmlZncPwQg4tHyQEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzc0ZmM0ZWFiMDBkNDFjMWVlZTQ3ZmRmYjAwMTA3OGM3
NGZhODUwHhcNMjUwNjA3MDIwMDI0WhcNMjUwNjA4MDIwMDI0WjAzMTEwLwYDVQQD
EyhmZmZjOWQzOTBlOTlkMDg3NmU1NTY4ZGZhN2Y2NzlhMWQwYjg5NmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28FnCOyUdmJTCNxA2XfIDtRVvIMh
1BifmB4C2vYWWWbtnGhNx5FAUu0QBzThTzcOlu4VpiPEp2Lv2npPcT4JAxdilMlF
BNc6nhcAksePXk6GNqBbFub8zFeg80BSfYB0FVl+VRtYlfblDUh3kOno93X7M/A0
OtlQ9l0q7WanUdsKAtVtVVane/DfmC6oFNU0SFBqShREOYrjszfipLc5UqEVQm6P
9zblZEJD/Jc9nBfnKtf8v37ODlo69lkidG6m5huciHMKpXHx0uNY9UwmjDK0jZl1
Uv1SohOTm+kZMj4i9uoJp9n1J3D4rphAQLu14ngxGUzdz35pZW/ZZ/Ge9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/8nTkOmdCHblVo36f2eaHQuJbfMB8GA1UdIwQY
MBaAFGE3T8TqsA1Bwe7kf9+wAQeMdPqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQt
MWZjMjU5YmI3ZGUyLzEvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQtMWZjMjU5YmI3ZGUy
LzEvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkylt8hd/
LETy/c2/oFgwBVGzf3a2Dn1Ysob+WJJcv4ELx2cs2hk6DEYiB5BHyvYa9EQKkZj4
pm31LcMca8p7MXuc1qhbJ7ejW0rh7H2gaTpw9B/evcuY7LF7i1X3tT6gcjflajZG
w9u4S5fOjvUth63CvDm8Q+m5FPaCj6BC7vcuqherdAkgDp2I0MDNGOn2ttTT0DSn
psLr2E1Vw/oEMWtqWTYzw46fn73n8yTaH+esGSM+XEH0TjJezpK+0vVNvhvqZ5+g
pxiW3LKTsMQnO/AxrWt5JzsggLQUVgBHjp9IC7dk61OYh4tP4O2s4aOON0wLjcLY
na6dPdz1wjHzlw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:48 2025 by rpki-client