Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: FeStf6M7lPW2KSkRC6IMnvVLTx9HfIiZvAXq2vnmI7Q=
Subject key identifier: 2F:C7:A3:16:A3:9B:4A:64:2A:5F:B6:4D:9B:39:01:50:A0:29:3D:0C
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0197470C229A2585E76737F4BCA076254AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 12A5
Signing time: Fri 06 Jun 2025 21:01:06 +0000
Manifest this update: Fri 06 Jun 2025 21:01:06 +0000
Manifest next update: Sat 07 Jun 2025 21:01:06 +0000
Files and hashes: 1: PPDcjsjoszwTm8EI4XbGMJZozgI.roa (hash: 7Lx0Qx1q5+o5Xi1eI3iJhMLtFTgxseeHLhiTQPfBYeo=)
2: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: qpFEiPRY2LMPrnxBKHC1hPzMEXEmlLFZyh5oLgKfZH0=)
3: tedYlf87S78MkPQe8A70plM_Ngw.roa (hash: R2UtbWccTfdmsOnpPUNeRj+D5AnPyUqgeXRoHV5PeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:22:9a:25:85:e7:67:37:f4:bc:a0:76:25:4a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jun 6 21:01:06 2025 GMT
Not After : Jun 7 21:01:06 2025 GMT
Subject: CN=2fc7a316a39b4a642a5fb64d9b390150a0293d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:52:a1:5e:37:0f:57:e1:cc:5f:3d:82:e2:
da:93:ee:ff:cf:da:f8:b3:3d:a2:a5:4f:93:15:ec:
83:2f:29:4b:a4:92:b2:b1:5b:17:54:9c:a0:1a:fa:
66:9f:2e:43:1a:0c:ea:d5:a0:97:62:68:27:eb:25:
7e:84:27:ea:1b:17:fe:72:8c:38:82:e7:db:9a:06:
8c:d2:98:ab:a4:e7:31:e6:ca:fb:29:14:55:71:48:
eb:45:79:d6:a9:a1:23:f2:09:d8:53:16:7c:0f:a1:
c2:aa:47:09:59:4d:c6:a9:70:5e:50:9c:7d:5b:ab:
ce:61:53:ef:19:2c:f0:2b:32:9d:c7:e1:7f:c9:88:
50:1d:f0:8f:12:f7:33:29:b4:c5:ac:8c:53:70:0f:
fa:1f:44:99:21:d0:49:f8:26:95:8a:d5:21:34:c5:
09:b2:7d:a2:a7:df:c2:f9:19:69:ba:ea:25:f1:ec:
4f:8b:45:6c:d2:b6:19:82:7f:5e:cd:a7:92:2d:d2:
2d:cc:1c:e1:49:d4:22:e4:4d:09:d9:e5:37:48:79:
11:92:2d:3b:fd:4f:53:cc:84:68:b8:1a:c6:22:39:
11:4d:ab:c4:5c:c5:c2:fe:53:d4:06:1d:ac:2c:67:
5e:09:16:e4:96:9e:a8:40:ea:77:16:c1:e4:9e:1b:
37:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C7:A3:16:A3:9B:4A:64:2A:5F:B6:4D:9B:39:01:50:A0:29:3D:0C
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:df:b2:65:aa:d2:65:03:22:2e:13:e2:e8:49:93:65:f7:44:
00:08:4d:dd:89:30:0c:6c:46:c0:51:a9:73:ad:d6:00:1c:6e:
a0:79:ff:7d:f0:e2:32:29:77:77:25:b3:eb:de:06:fa:24:5a:
1a:ca:e4:1d:da:33:24:08:e7:23:68:27:53:f4:56:4e:1a:7c:
4a:46:76:a3:23:10:42:8c:81:d6:08:fd:ed:ac:ff:cb:e6:90:
ef:1d:ea:b2:ce:bd:d1:39:44:5d:1d:4b:1d:9e:9a:d1:25:f1:
e6:cd:58:75:53:a5:c1:02:d2:e2:29:59:d5:d5:c4:fe:04:ff:
1f:91:ee:a1:47:4d:7b:15:fc:b8:06:95:b4:d6:5a:23:e1:d5:
69:c0:27:4a:cc:0d:ac:9e:b3:54:93:75:bb:25:ad:62:c2:42:
94:78:ee:c7:e8:78:fc:a2:cb:36:e6:aa:61:cb:02:96:5b:5b:
40:5f:45:0b:b1:34:3e:e8:ec:b1:40:f6:90:5b:79:06:3c:4c:
91:43:36:17:1f:0f:dc:a9:2a:b6:fe:d6:26:02:8b:36:53:9e:
34:92:23:12:57:6e:20:8e:b2:c3:d1:1b:5d:5e:0c:b6:6f:d0:
db:a8:e7:24:00:b0:fe:64:fa:9e:01:49:d2:ac:b4:b1:ac:e4:
40:24:80:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHDCKaJYXnZzf0vKB2JUrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGM0OTRmNTYxOTNiNGU5YWRmM2RiNzJlNGYwMTk3OGM1
ODdmMTgwHhcNMjUwNjA2MjEwMTA2WhcNMjUwNjA3MjEwMTA2WjAzMTEwLwYDVQQD
EygyZmM3YTMxNmEzOWI0YTY0MmE1ZmI2NGQ5YjM5MDE1MGEwMjkzZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlRSoV43D1fhzF89guLak+7/z9r4
sz2ipU+TFeyDLylLpJKysVsXVJygGvpmny5DGgzq1aCXYmgn6yV+hCfqGxf+cow4
gufbmgaM0pirpOcx5sr7KRRVcUjrRXnWqaEj8gnYUxZ8D6HCqkcJWU3GqXBeUJx9
W6vOYVPvGSzwKzKdx+F/yYhQHfCPEvczKbTFrIxTcA/6H0SZIdBJ+CaVitUhNMUJ
sn2ip9/C+Rlpuuol8exPi0Vs0rYZgn9ezaeSLdItzBzhSdQi5E0J2eU3SHkRki07
/U9TzIRouBrGIjkRTavEXMXC/lPUBh2sLGdeCRbklp6oQOp3FsHknhs3UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/Hoxajm0pkKl+2TZs5AVCgKT0MMB8GA1UdIwQY
MBaAFGJMSU9WGTtOmt89ty5PAZeMWH8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2Mt
N2FhYjZlZjk1NWExLzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2MtN2FhYjZlZjk1NWEx
LzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9+yZarS
ZQMiLhPi6EmTZfdEAAhN3YkwDGxGwFGpc63WABxuoHn/ffDiMil3dyWz694G+iRa
GsrkHdozJAjnI2gnU/RWThp8SkZ2oyMQQoyB1gj97az/y+aQ7x3qss690TlEXR1L
HZ6a0SXx5s1YdVOlwQLS4ilZ1dXE/gT/H5HuoUdNexX8uAaVtNZaI+HVacAnSswN
rJ6zVJN1uyWtYsJClHjux+h4/KLLNuaqYcsClltbQF9FC7E0PujssUD2kFt5BjxM
kUM2Fx8P3Kkqtv7WJgKLNlOeNJIjElduII6yw9EbXV4Mtm/Q26jnJACw/mT6ngFJ
0qy0sazkQCSA0w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:22 2025 by rpki-client