Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: rwCMn/v18Gzd5dLmCeQeLCy7dvuQsnhPLdi5OSbj4hw=
Subject key identifier: 50:1A:37:7B:43:93:F0:B2:45:67:22:ED:D2:A5:0E:E8:DA:63:04:F8
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019747B10A5BE0301145827C3C27B7C67F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 1263
Signing time: Sat 07 Jun 2025 00:01:14 +0000
Manifest this update: Sat 07 Jun 2025 00:01:14 +0000
Manifest next update: Sun 08 Jun 2025 00:01:14 +0000
Files and hashes: 1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: Zk7ml75yI++l9eFFO18ufaPCpJte2/KFqyksMcghkhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:0a:5b:e0:30:11:45:82:7c:3c:27:b7:c6:7f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jun 7 00:01:14 2025 GMT
Not After : Jun 8 00:01:14 2025 GMT
Subject: CN=501a377b4393f0b2456722edd2a50ee8da6304f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:18:5a:ab:89:74:c4:3b:7d:8e:cc:0e:5e:
e5:4b:fc:a1:ea:27:02:44:f9:ee:99:58:26:25:82:
f7:d2:dd:84:17:4d:47:35:97:4b:eb:6b:6e:e2:74:
47:63:af:e2:ce:83:80:cb:3b:f0:60:2a:44:ef:5d:
50:fc:ed:c7:84:ae:a0:54:cd:7c:c1:97:eb:01:00:
c3:20:af:0e:d9:6d:32:32:88:18:d7:e5:e3:d0:d7:
05:5a:16:d6:02:fe:be:3c:1f:26:13:75:a2:9b:73:
98:66:9e:73:31:ea:63:f3:9d:82:0b:bb:05:3f:b6:
91:f3:d8:64:d9:07:f5:15:69:8f:51:1a:68:45:e4:
66:76:12:13:64:99:e8:fb:2c:80:4f:bf:b6:15:48:
70:4c:28:fe:ef:b8:34:10:b1:df:c3:39:f9:fb:b4:
cc:94:f1:0a:f8:dd:eb:47:22:2c:0b:b7:54:c6:11:
95:79:fa:f4:1b:5a:cb:bb:d5:c5:20:ab:be:30:37:
63:14:cc:1c:57:6e:36:35:ae:3e:4d:8a:ec:6a:1a:
59:ea:29:60:f5:3a:8f:a9:58:42:df:bd:2f:3f:8a:
c4:12:19:a8:6c:18:48:9a:6e:b9:03:02:0e:f2:53:
c8:a6:3f:b5:bf:6f:09:69:c3:24:44:f9:1c:e4:87:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:37:7B:43:93:F0:B2:45:67:22:ED:D2:A5:0E:E8:DA:63:04:F8
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:11:ed:76:80:8a:5f:7d:d3:8a:56:6e:7c:37:10:ba:73:91:
94:f9:80:0d:24:a8:71:36:89:ab:2b:b6:7d:37:b6:a5:cc:d5:
2e:a6:a9:89:87:87:e9:6b:12:75:57:36:78:0c:27:fd:58:1b:
2a:2c:c6:45:83:d0:73:19:80:76:23:de:28:8b:aa:39:45:03:
b3:42:55:c6:83:49:2b:cd:3f:f8:7b:d8:45:8e:ad:09:34:9a:
85:b1:83:84:6e:26:e8:45:34:a8:ac:58:dd:03:11:ab:93:09:
fa:ca:8e:86:d0:02:df:76:33:0d:c6:30:b2:33:a2:8b:ea:a3:
1c:c2:63:8b:83:4e:2e:87:d7:a4:69:19:fe:22:71:f4:a4:70:
0a:38:04:6c:76:bc:11:78:da:84:54:df:08:43:f9:39:c2:91:
eb:bc:4f:55:da:4d:85:c2:65:ca:39:3d:c3:9a:9c:9e:0a:f6:
81:2c:96:61:50:42:4b:f2:f1:e7:b6:be:9f:3a:48:d0:39:aa:
74:77:83:59:0f:d6:20:7a:36:e1:68:89:7f:88:fd:0a:80:99:
f9:f0:bd:63:80:eb:a5:a3:ab:e4:9f:a3:84:59:60:75:84:63:
90:59:e1:cd:d6:73:11:ed:be:07:ec:9b:05:78:86:52:7e:03:
05:90:d3:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsQpb4DARRYJ8PCe3xn+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Y2RlYjMyOGUzMTg3ZGJmZjIzNzI5YTQ4YjQ3MDU0YzFk
NTE5ZGEwHhcNMjUwNjA3MDAwMTE0WhcNMjUwNjA4MDAwMTE0WjAzMTEwLwYDVQQD
Eyg1MDFhMzc3YjQzOTNmMGIyNDU2NzIyZWRkMmE1MGVlOGRhNjMwNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fkYWquJdMQ7fY7MDl7lS/yh6icC
RPnumVgmJYL30t2EF01HNZdL62tu4nRHY6/izoOAyzvwYCpE711Q/O3HhK6gVM18
wZfrAQDDIK8O2W0yMogY1+Xj0NcFWhbWAv6+PB8mE3Wim3OYZp5zMepj852CC7sF
P7aR89hk2Qf1FWmPURpoReRmdhITZJno+yyAT7+2FUhwTCj+77g0ELHfwzn5+7TM
lPEK+N3rRyIsC7dUxhGVefr0G1rLu9XFIKu+MDdjFMwcV242Na4+TYrsahpZ6ilg
9TqPqVhC370vP4rEEhmobBhImm65AwIO8lPIpj+1v28JacMkRPkc5If4XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAaN3tDk/CyRWci7dKlDujaYwT4MB8GA1UdIwQY
MBaAFMnN6zKOMYfb/yNymki0cFTB1RnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAt
Yjg5YWEwMWVkYzgwLzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAtYjg5YWEwMWVkYzgw
LzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxHtdoCK
X33TilZufDcQunORlPmADSSocTaJqyu2fTe2pczVLqapiYeH6WsSdVc2eAwn/Vgb
KizGRYPQcxmAdiPeKIuqOUUDs0JVxoNJK80/+HvYRY6tCTSahbGDhG4m6EU0qKxY
3QMRq5MJ+sqOhtAC33YzDcYwsjOii+qjHMJji4NOLofXpGkZ/iJx9KRwCjgEbHa8
EXjahFTfCEP5OcKR67xPVdpNhcJlyjk9w5qcngr2gSyWYVBCS/Lx57a+nzpI0Dmq
dHeDWQ/WIHo24WiJf4j9CoCZ+fC9Y4DrpaOr5J+jhFlgdYRjkFnhzdZzEe2+B+yb
BXiGUn4DBZDTYw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:36:55 2025 by rpki-client