Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: GUwUuCaNc0ZwtrfSfHPqAq8+Hl6caSZzzsHN4UcmwSA=
Subject key identifier: 4A:51:53:6D:37:A9:68:07:58:45:67:C3:65:A2:4D:21:D0:2B:18:84
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 01976A73A77C9FD203D4AA67FC23D7E3E6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0C74
Signing time: Fri 13 Jun 2025 18:00:53 +0000
Manifest this update: Fri 13 Jun 2025 18:00:53 +0000
Manifest next update: Sat 14 Jun 2025 18:00:53 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: +d/3BAP/X9t5efN+PkbeiAADPVKbIzvlHQ8z7L64qBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:a7:7c:9f:d2:03:d4:aa:67:fc:23:d7:e3:e6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jun 13 18:00:53 2025 GMT
Not After : Jun 14 18:00:53 2025 GMT
Subject: CN=4a51536d37a96807584567c365a24d21d02b1884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:a1:e1:1c:7f:95:82:f6:62:3e:9d:12:95:
f3:2f:bf:97:f8:56:5c:96:1c:b4:01:cc:68:48:30:
ef:71:0e:0d:0a:bc:3d:ed:4d:73:09:ed:93:7e:f2:
79:70:e9:ea:d8:a0:c7:1f:10:34:89:2a:09:21:c8:
f4:2c:b5:6b:21:7e:8c:b1:32:bb:ca:5c:d0:c0:a1:
0a:92:ee:48:d6:1f:24:d3:f7:cc:89:cd:0b:5f:a9:
ee:5c:80:9d:5f:e6:97:cc:72:83:8b:15:53:be:14:
98:5e:1f:3f:75:2d:db:24:dd:5c:40:d7:31:9d:cb:
59:3b:12:f6:a3:a8:b2:8a:f1:7f:21:26:93:67:81:
6b:d7:a2:c0:48:33:d7:ed:6e:ea:82:6a:46:f1:8f:
d4:72:10:09:5e:9b:f7:35:54:18:91:99:e1:fe:61:
c3:6a:cf:bd:19:f4:70:27:56:01:fc:6d:9d:0d:40:
b5:fd:22:31:15:2b:fb:0d:21:59:ae:96:d0:57:7e:
1f:40:5d:72:40:89:2e:dd:ee:47:cc:62:91:1e:fa:
52:a5:60:8b:3d:9e:35:e0:87:58:dd:57:c3:41:9a:
28:88:51:dc:9c:b2:18:17:d6:c1:90:ae:1e:0a:a0:
a9:14:36:ce:0f:be:86:cd:26:33:d7:c9:ab:59:bd:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:53:6D:37:A9:68:07:58:45:67:C3:65:A2:4D:21:D0:2B:18:84
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:75:26:59:68:ba:5f:03:90:7e:40:84:4a:49:2b:b6:1b:83:
ac:a5:40:3c:d3:66:99:d5:30:72:af:f8:aa:90:7d:ed:74:a2:
07:8b:cc:22:1a:c5:59:0a:5a:26:62:34:a8:dc:8b:0b:9f:9f:
8e:5b:5d:56:59:6d:c2:67:9c:cb:ca:57:55:c0:80:1c:33:2d:
ca:a3:2d:51:cf:db:6f:7b:41:25:f6:35:5c:52:de:96:0c:e7:
ab:c6:5c:cd:65:da:b8:3c:47:62:df:96:63:89:3d:b2:dc:cf:
1b:ae:35:4b:b5:6a:cd:28:e9:04:e1:fc:35:3a:06:44:87:42:
94:22:4d:1f:e8:9f:52:fc:37:e7:71:ca:ae:b6:e8:c3:f7:85:
1e:70:1b:c6:84:ae:65:f8:a4:79:35:26:df:90:e4:18:91:60:
f5:45:fa:92:27:6f:12:c0:aa:21:84:71:0c:9f:02:52:69:46:
5a:b8:64:04:35:4e:81:41:a4:e5:a8:66:32:67:c7:09:94:fa:
52:86:e8:ae:14:ca:52:28:63:75:35:db:02:fc:02:ea:cf:71:
c9:07:73:cc:86:d7:14:9c:81:ba:98:2f:af:e1:12:c2:f2:18:
cd:a1:a2:26:26:ff:24:3e:a9:8a:28:d7:8e:76:8c:fe:b8:52:
d9:34:20:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqc6d8n9ID1Kpn/CPX4+bZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1
M2Y4MzgwHhcNMjUwNjEzMTgwMDUzWhcNMjUwNjE0MTgwMDUzWjAzMTEwLwYDVQQD
Eyg0YTUxNTM2ZDM3YTk2ODA3NTg0NTY3YzM2NWEyNGQyMWQwMmIxODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Euh4Rx/lYL2Yj6dEpXzL7+X+FZc
lhy0AcxoSDDvcQ4NCrw97U1zCe2TfvJ5cOnq2KDHHxA0iSoJIcj0LLVrIX6MsTK7
ylzQwKEKku5I1h8k0/fMic0LX6nuXICdX+aXzHKDixVTvhSYXh8/dS3bJN1cQNcx
nctZOxL2o6iyivF/ISaTZ4Fr16LASDPX7W7qgmpG8Y/UchAJXpv3NVQYkZnh/mHD
as+9GfRwJ1YB/G2dDUC1/SIxFSv7DSFZrpbQV34fQF1yQIku3e5HzGKRHvpSpWCL
PZ414IdY3VfDQZooiFHcnLIYF9bBkK4eCqCpFDbOD76GzSYz18mrWb0NtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpRU203qWgHWEVnw2WiTSHQKxiEMB8GA1UdIwQY
MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt
MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5
LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3UmWWi6
XwOQfkCESkkrthuDrKVAPNNmmdUwcq/4qpB97XSiB4vMIhrFWQpaJmI0qNyLC5+f
jltdVlltwmecy8pXVcCAHDMtyqMtUc/bb3tBJfY1XFLelgznq8ZczWXauDxHYt+W
Y4k9stzPG641S7VqzSjpBOH8NToGRIdClCJNH+ifUvw353HKrrbow/eFHnAbxoSu
ZfikeTUm35DkGJFg9UX6kidvEsCqIYRxDJ8CUmlGWrhkBDVOgUGk5ahmMmfHCZT6
UoborhTKUihjdTXbAvwC6s9xyQdzzIbXFJyBupgvr+ESwvIYzaGiJib/JD6piijX
jnaM/rhS2TQgqQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:45:04 2025 by rpki-client