Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: wbfMzzEMjR4rjEAfGrmEf+1U8CLUknEP52/GnMnc3KE=
Subject key identifier: FD:E5:6F:92:04:AA:98:CC:51:E9:D9:37:75:52:95:DD:D1:BF:C6:2C
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 019748554BDC708D9461D83A294B519C96B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0E03
Signing time: Sat 07 Jun 2025 03:00:38 +0000
Manifest this update: Sat 07 Jun 2025 03:00:38 +0000
Manifest next update: Sun 08 Jun 2025 03:00:38 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: 3zTcYzPDb3v/mAXKioTeOf7LRL31kWTkIJlMewemN6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:4b:dc:70:8d:94:61:d8:3a:29:4b:51:9c:96:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Jun 7 03:00:38 2025 GMT
Not After : Jun 8 03:00:38 2025 GMT
Subject: CN=fde56f9204aa98cc51e9d937755295ddd1bfc62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:5f:f6:d4:14:ee:da:14:c3:81:bf:1b:93:
03:8d:af:7a:be:af:b8:05:d5:74:49:32:0d:48:5a:
72:58:24:ca:71:57:a0:75:6a:f4:b9:fe:13:c5:41:
5c:3f:31:39:8e:6b:3d:46:fe:c1:c1:04:38:9e:9e:
ea:61:7a:06:7d:4f:9a:de:a7:3a:09:cc:d3:39:5c:
c5:a1:b3:65:39:69:b8:78:47:d1:a8:ee:34:37:9e:
63:50:18:98:08:db:65:8b:01:2b:42:ef:25:fa:cf:
bd:19:e0:c2:42:b6:dd:55:82:8b:57:23:f5:0c:70:
02:8d:5d:db:02:9f:04:3b:d7:f9:0d:01:b9:91:ae:
28:c7:df:be:56:ab:a5:fe:02:bf:c3:2b:0d:43:1f:
5d:fc:6d:64:12:d2:f9:b5:10:f7:ea:12:65:33:3e:
bd:0a:41:b9:8c:72:7a:05:ca:64:77:db:6d:0a:d1:
9c:36:bf:0a:a1:09:0c:81:21:38:1a:5e:de:71:d1:
16:d5:0e:43:2d:ee:95:05:8a:24:cc:44:7a:98:8d:
31:9b:72:57:8a:66:53:e6:6a:58:2d:d7:5b:f4:00:
04:cf:e1:d6:1b:4a:e7:e5:51:13:c6:63:1f:38:0c:
71:3f:de:1b:81:66:8e:ca:56:67:f5:bd:dc:0b:01:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E5:6F:92:04:AA:98:CC:51:E9:D9:37:75:52:95:DD:D1:BF:C6:2C
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:70:eb:37:03:ac:a8:89:12:e1:c0:a9:95:c6:fc:43:86:7b:
2b:52:fa:4b:03:5a:1f:7d:0b:da:0d:b2:12:4f:ad:61:7a:03:
d0:60:f9:65:e6:27:e5:c4:af:d9:77:8b:62:d6:13:b7:0b:6a:
14:bf:87:3c:3f:29:9d:c5:57:e9:e4:1f:d0:be:38:6c:89:b1:
1b:62:9d:ff:82:d4:1e:0e:a8:e6:04:6b:75:ec:ae:b4:08:47:
6d:88:1a:4e:ee:0f:aa:5d:e2:a4:52:ad:f7:bb:01:2e:65:8d:
4a:4c:de:26:67:85:bf:1b:8c:18:1e:44:b3:d5:f2:34:ab:ec:
3c:ab:66:b9:b1:51:9f:b2:ff:f9:4e:c5:98:fb:cc:3c:ca:08:
a3:67:f4:08:55:9c:f1:82:fc:df:d8:23:d4:e7:9a:10:ce:9b:
02:73:26:81:6b:33:ac:dc:da:0d:f5:48:44:4b:72:c2:41:c4:
c4:07:b6:ce:0c:dd:fc:ad:4d:be:75:d7:3a:5e:ad:5c:41:8b:
4a:68:d8:f2:81:cf:51:43:60:b8:3a:ce:19:2b:de:67:81:fc:
e4:05:e6:08:b9:81:20:48:91:2d:a0:a2:ac:86:d0:27:af:d9:
34:a6:fe:30:0a:af:d3:4a:55:f1:a0:62:f6:c4:25:d3:9c:8e:
d5:01:85:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVUvccI2UYdg6KUtRnJa2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDZiZDAwZGFhNGRhOTJhMGMzNmZhY2RkOWNkNjk0OTFk
OTZjNjgwHhcNMjUwNjA3MDMwMDM4WhcNMjUwNjA4MDMwMDM4WjAzMTEwLwYDVQQD
EyhmZGU1NmY5MjA0YWE5OGNjNTFlOWQ5Mzc3NTUyOTVkZGQxYmZjNjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBFf9tQU7toUw4G/G5MDja96vq+4
BdV0STINSFpyWCTKcVegdWr0uf4TxUFcPzE5jms9Rv7BwQQ4np7qYXoGfU+a3qc6
CczTOVzFobNlOWm4eEfRqO40N55jUBiYCNtliwErQu8l+s+9GeDCQrbdVYKLVyP1
DHACjV3bAp8EO9f5DQG5ka4ox9++Vqul/gK/wysNQx9d/G1kEtL5tRD36hJlMz69
CkG5jHJ6Bcpkd9ttCtGcNr8KoQkMgSE4Gl7ecdEW1Q5DLe6VBYokzER6mI0xm3JX
imZT5mpYLddb9AAEz+HWG0rn5VETxmMfOAxxP94bgWaOylZn9b3cCwE9xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3lb5IEqpjMUenZN3VSld3Rv8YsMB8GA1UdIwQY
MBaAFGJGvQDapNqSoMNvrN2c1pSR2WxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzQ3MzgtNTgzMC00MTdjLTgzNjAt
MGQ2MGQ2NDczMmJmLzEvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzQ3MzgtNTgzMC00MTdjLTgzNjAtMGQ2MGQ2NDczMmJm
LzEvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXDrNwOs
qIkS4cCplcb8Q4Z7K1L6SwNaH30L2g2yEk+tYXoD0GD5ZeYn5cSv2XeLYtYTtwtq
FL+HPD8pncVX6eQf0L44bImxG2Kd/4LUHg6o5gRrdeyutAhHbYgaTu4Pql3ipFKt
97sBLmWNSkzeJmeFvxuMGB5Es9XyNKvsPKtmubFRn7L/+U7FmPvMPMoIo2f0CFWc
8YL839gj1OeaEM6bAnMmgWszrNzaDfVIREtywkHExAe2zgzd/K1NvnXXOl6tXEGL
SmjY8oHPUUNguDrOGSveZ4H85AXmCLmBIEiRLaCirIbQJ6/ZNKb+MAqv00pV8aBi
9sQl05yO1QGFUA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:36 2025 by rpki-client