Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: oUXl+LNEZZrO0iLISvvazxz6gTYXm2w8NXduzvJ21+A=
Subject key identifier: 73:81:8D:38:68:60:EF:63:EC:2D:A6:63:BA:90:D1:63:CA:DC:5A:37
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 01976D06A78065BEC2ED34384FEFE6E26194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 06:00:42 +0000
Manifest this update: Sat 14 Jun 2025 06:00:42 +0000
Manifest next update: Sun 15 Jun 2025 06:00:42 +0000
Files and hashes: 1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: 3gzc/OW0/tMFve+Z46XsGyLcs0Hj7j2VM6vYgtECxLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:a7:80:65:be:c2:ed:34:38:4f:ef:e6:e2:61:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Jun 14 06:00:42 2025 GMT
Not After : Jun 15 06:00:42 2025 GMT
Subject: CN=73818d386860ef63ec2da663ba90d163cadc5a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:5b:69:73:a6:1e:32:7a:78:ea:b7:4d:fb:
bb:6b:51:4b:d6:cc:6a:72:f0:7d:94:8f:bf:d8:50:
e2:7d:02:a3:e0:93:ed:ff:d6:3e:ee:92:cc:6d:2c:
69:df:42:f7:e4:90:bc:2d:09:4a:9f:54:17:a9:5a:
d5:f8:04:64:e4:7a:4c:9e:5d:54:c2:c1:fd:ef:a3:
9f:ff:05:d6:45:1e:a4:46:fe:34:d6:37:8b:64:4e:
e5:23:02:21:44:d9:ce:65:5d:0b:9c:5f:fb:ff:2e:
10:59:ff:4d:ed:a9:3f:ad:16:dc:00:5e:fc:34:f5:
46:ba:d8:f4:ac:cc:c4:a0:3f:d4:5b:88:c3:05:4a:
8e:94:d2:eb:f0:d4:01:51:dd:e7:95:08:b0:f5:66:
7a:9e:3b:38:31:14:48:1e:91:be:77:ac:15:2e:ce:
6f:5e:e7:4c:6d:73:ed:a2:9c:61:eb:8f:f0:af:9b:
ba:ad:90:81:6b:dc:9a:36:84:8e:86:b1:6d:cb:79:
9b:a0:e4:39:4c:45:1c:9a:6c:d9:49:8e:46:68:77:
31:03:d5:81:cf:31:f3:db:b7:8d:19:f6:8e:1c:f6:
0f:f7:ec:85:ef:fa:09:4c:c5:7e:3a:31:d0:d2:37:
bf:94:65:d4:87:b9:9a:4b:a6:dd:bd:f9:c8:b2:26:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:81:8D:38:68:60:EF:63:EC:2D:A6:63:BA:90:D1:63:CA:DC:5A:37
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d1:07:4c:bc:b9:03:1a:35:5f:e3:e7:52:a0:80:a1:c6:81:
c1:27:47:37:47:13:8c:fe:6b:9f:93:53:e0:34:49:78:9a:7d:
75:93:15:55:3d:c0:5a:f7:e0:50:eb:ba:ae:c9:2a:02:60:8c:
bd:a7:4f:ef:84:91:42:76:c8:04:a9:40:a2:e9:5c:8f:b6:5f:
25:b2:c1:0a:9a:e4:56:27:e0:88:74:97:a2:28:1d:69:33:83:
2d:5c:e1:94:55:2d:bd:50:2f:49:5b:35:76:34:c3:c8:22:40:
e2:0d:42:b8:18:1a:a9:51:78:6b:d8:b7:df:62:17:1b:f1:ad:
8f:a6:34:7c:0e:6d:76:20:8e:c4:40:56:35:f2:3c:b1:4d:bd:
9c:eb:2d:ec:1e:a8:d5:87:7d:61:36:3f:15:f0:e9:79:56:57:
9d:47:47:99:fe:ff:53:be:09:70:e7:3a:21:ab:d6:d9:95:e8:
52:96:54:ee:a7:16:2b:23:98:36:3e:35:b7:d5:de:33:0e:f7:
26:59:1b:b0:bb:43:ea:e8:71:14:57:26:43:ae:78:9d:59:7c:
be:40:4f:93:ee:b4:5b:29:94:07:11:7c:1f:85:3f:0b:e9:39:
b4:5a:7a:08:08:88:2f:b1:d4:23:68:b8:06:8b:c1:d5:72:63:
f3:39:1f:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBqeAZb7C7TQ4T+/m4mGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OGU5Y2IyN2YzZDFhYmNjNGNjNjFjM2MxYmJmZGM3MjYy
OGU1N2IwHhcNMjUwNjE0MDYwMDQyWhcNMjUwNjE1MDYwMDQyWjAzMTEwLwYDVQQD
Eyg3MzgxOGQzODY4NjBlZjYzZWMyZGE2NjNiYTkwZDE2M2NhZGM1YTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN1baXOmHjJ6eOq3Tfu7a1FL1sxq
cvB9lI+/2FDifQKj4JPt/9Y+7pLMbSxp30L35JC8LQlKn1QXqVrV+ARk5HpMnl1U
wsH976Of/wXWRR6kRv401jeLZE7lIwIhRNnOZV0LnF/7/y4QWf9N7ak/rRbcAF78
NPVGutj0rMzEoD/UW4jDBUqOlNLr8NQBUd3nlQiw9WZ6njs4MRRIHpG+d6wVLs5v
XudMbXPtopxh64/wr5u6rZCBa9yaNoSOhrFty3mboOQ5TEUcmmzZSY5GaHcxA9WB
zzHz27eNGfaOHPYP9+yF7/oJTMV+OjHQ0je/lGXUh7maS6bdvfnIsiYjKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOBjThoYO9j7C2mY7qQ0WPK3Fo3MB8GA1UdIwQY
MBaAFJmOnLJ/PRq8xMxhw8G7/ccmKOV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODct
NTJkNmIzZTQ3ODlmLzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODctNTJkNmIzZTQ3ODlm
LzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNEHTLy5
Axo1X+PnUqCAocaBwSdHN0cTjP5rn5NT4DRJeJp9dZMVVT3AWvfgUOu6rskqAmCM
vadP74SRQnbIBKlAoulcj7ZfJbLBCprkVifgiHSXoigdaTODLVzhlFUtvVAvSVs1
djTDyCJA4g1CuBgaqVF4a9i332IXG/Gtj6Y0fA5tdiCOxEBWNfI8sU29nOst7B6o
1Yd9YTY/FfDpeVZXnUdHmf7/U74JcOc6IavW2ZXoUpZU7qcWKyOYNj41t9XeMw73
JlkbsLtD6uhxFFcmQ654nVl8vkBPk+60WymUBxF8H4U/C+k5tFp6CAiIL7HUI2i4
BovB1XJj8zkf4w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:58:30 2025 by rpki-client