Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: f8cOG8BS9opzAWZa9hi7ChqgsmN9Gc9BlKqB+oxCJMk=
Subject key identifier: D6:9E:F6:BA:60:BB:23:04:F3:73:15:4F:C4:87:36:C8:79:0A:F9:34
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 01976929BC18C53C0AA6F1D734D824E1C6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 08C2
Signing time: Fri 13 Jun 2025 12:00:32 +0000
Manifest this update: Fri 13 Jun 2025 12:00:32 +0000
Manifest next update: Sat 14 Jun 2025 12:00:32 +0000
Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: DsY6kMcMj2Q3KKpdhFtKVnPxrkmnMDpZt9bvCPT9L/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:bc:18:c5:3c:0a:a6:f1:d7:34:d8:24:e1:c6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Jun 13 12:00:32 2025 GMT
Not After : Jun 14 12:00:32 2025 GMT
Subject: CN=d69ef6ba60bb2304f373154fc48736c8790af934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:62:39:63:20:04:99:a0:0a:1f:26:0a:52:
7e:f7:7e:93:44:c1:b0:f9:5d:30:6d:2f:98:ba:09:
82:a1:9b:90:d5:80:50:8d:a3:31:70:b8:1a:03:e5:
8f:8b:d4:d5:15:7b:dd:ae:6b:b0:3a:87:95:ea:d7:
60:dc:e4:68:c6:2b:ae:28:d0:69:17:87:c9:e5:20:
3a:c9:43:2f:ea:5e:37:a9:a3:8a:ad:da:0e:bd:e5:
64:19:a8:03:17:5e:2e:49:97:be:36:7a:6e:69:83:
c4:70:7c:e8:cf:0c:1c:04:12:4c:02:3f:3d:e1:9f:
7c:71:58:ec:57:0c:bc:37:cf:a8:ba:e7:9d:22:49:
32:25:b4:d0:93:43:57:6c:e8:6a:7b:57:31:95:be:
51:6a:44:fe:6a:94:8c:a8:dc:ed:2c:40:a7:db:8b:
ee:6e:8d:83:c0:ce:a6:db:05:8b:eb:d6:1e:d4:89:
29:7d:7a:f5:21:b3:95:a7:c7:19:90:e5:00:f4:04:
72:84:8e:07:22:b9:3b:65:01:41:92:53:46:61:b8:
71:dc:c9:88:6f:cc:9b:08:4a:e1:29:a8:20:e0:d2:
17:d8:87:f7:23:0a:ad:3f:53:63:20:eb:63:a5:11:
24:cd:82:b2:fd:77:bf:51:14:17:c4:41:ac:1c:23:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:F6:BA:60:BB:23:04:F3:73:15:4F:C4:87:36:C8:79:0A:F9:34
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4d:ef:03:ce:34:fb:aa:58:58:ea:45:34:d7:23:bc:ce:cb:
d6:6f:ef:88:fc:9a:e2:1f:ed:1a:90:8a:2f:b7:cd:a4:2a:24:
b0:af:cb:f1:19:4f:05:56:79:02:dd:87:71:e1:95:6d:9a:7d:
2b:58:a1:95:9f:2c:c5:ad:37:dc:46:c4:c7:a7:72:07:a1:fa:
8f:ef:27:ef:a8:17:8f:0f:b1:86:d5:9d:f1:44:9a:89:3f:21:
a5:fe:ca:33:c1:84:6a:e2:bb:34:90:78:4c:4e:9f:d3:ec:61:
cd:2b:4b:3d:dd:5b:f8:ea:0c:bb:36:57:7f:7c:1c:c2:7e:e8:
58:ea:80:7c:7f:af:c9:b2:42:a0:b5:62:56:9f:05:d3:58:c4:
aa:f9:ab:10:d8:63:de:4d:a4:fe:67:16:9f:80:74:f3:e3:1a:
e7:63:5a:df:15:b8:8a:ec:ac:b8:13:2a:03:15:d2:68:c3:77:
b5:bf:c4:4a:b0:33:6a:ca:14:32:5e:27:ee:0e:63:ae:73:c5:
4b:8a:5d:75:80:24:da:3a:9f:a4:d6:5a:f9:7c:c0:cd:d6:62:
7f:f7:bb:cd:16:46:c1:fb:d2:26:f7:5a:9e:ca:42:4c:f2:79:
2d:63:26:29:cb:4a:11:17:20:07:c1:62:93:10:82:22:1f:9d:
ad:6b:13:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKbwYxTwKpvHXNNgk4cbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE3MTVjMmY0YjkwMDhjOGY0YjYwNjU0ZjdmM2M3NjM1
M2FlNjcwHhcNMjUwNjEzMTIwMDMyWhcNMjUwNjE0MTIwMDMyWjAzMTEwLwYDVQQD
EyhkNjllZjZiYTYwYmIyMzA0ZjM3MzE1NGZjNDg3MzZjODc5MGFmOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh9iOWMgBJmgCh8mClJ+936TRMGw
+V0wbS+YugmCoZuQ1YBQjaMxcLgaA+WPi9TVFXvdrmuwOoeV6tdg3ORoxiuuKNBp
F4fJ5SA6yUMv6l43qaOKrdoOveVkGagDF14uSZe+NnpuaYPEcHzozwwcBBJMAj89
4Z98cVjsVwy8N8+ouuedIkkyJbTQk0NXbOhqe1cxlb5RakT+apSMqNztLECn24vu
bo2DwM6m2wWL69Ye1IkpfXr1IbOVp8cZkOUA9ARyhI4HIrk7ZQFBklNGYbhx3MmI
b8ybCErhKagg4NIX2If3IwqtP1NjIOtjpREkzYKy/Xe/URQXxEGsHCM8ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNae9rpguyME83MVT8SHNsh5Cvk0MB8GA1UdIwQY
MBaAFGP6cVwvS5AIyPS2BlT388djU65nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEt
NjVhNWVmMGFmMGI0LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEtNjVhNWVmMGFmMGI0
LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY03vA840
+6pYWOpFNNcjvM7L1m/viPya4h/tGpCKL7fNpCoksK/L8RlPBVZ5At2HceGVbZp9
K1ihlZ8sxa033EbEx6dyB6H6j+8n76gXjw+xhtWd8USaiT8hpf7KM8GEauK7NJB4
TE6f0+xhzStLPd1b+OoMuzZXf3wcwn7oWOqAfH+vybJCoLViVp8F01jEqvmrENhj
3k2k/mcWn4B08+Ma52Na3xW4iuysuBMqAxXSaMN3tb/ESrAzasoUMl4n7g5jrnPF
S4pddYAk2jqfpNZa+XzAzdZif/e7zRZGwfvSJvdanspCTPJ5LWMmKctKERcgB8Fi
kxCCIh+drWsTvA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:00 2025 by rpki-client