Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: 77eiUlK2pdZMEix9lGixiwK3VSnlrl5K3MN36VYw7l0=
Subject key identifier: 31:A2:F7:17:7B:15:4B:9A:85:B5:90:FF:91:5E:AB:46:CE:15:D9:08
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 0197974C39F9C4CC82D13DC0BC0E5430ED0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 1042
Signing time: Sun 22 Jun 2025 11:00:44 +0000
Manifest this update: Sun 22 Jun 2025 11:00:44 +0000
Manifest next update: Mon 23 Jun 2025 11:00:44 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: DcbEHTQIjdRD7xvtVI1LHoaq/AyaBi6UsXWnW1okRP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:97:4c:39:f9:c4:cc:82:d1:3d:c0:bc:0e:54:30:ed:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Jun 22 11:00:44 2025 GMT
Not After : Jun 23 11:00:44 2025 GMT
Subject: CN=31a2f7177b154b9a85b590ff915eab46ce15d908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:0a:c3:93:cf:ab:90:50:b1:e4:cd:9b:b5:
ec:de:9f:39:1e:ba:31:35:1f:69:21:6b:e2:1c:e2:
97:ea:94:57:18:79:c6:15:5f:05:63:d5:cc:77:15:
8a:1a:51:09:f9:9c:1c:94:fa:76:e0:f0:5e:b9:61:
d0:3c:2a:71:0f:74:96:c7:f3:ff:ed:68:3d:0d:a2:
e0:5a:00:e5:60:52:47:dd:66:92:fe:a6:82:44:6d:
49:51:66:e6:de:84:28:11:6c:ae:a5:6d:ff:d9:c9:
e8:8f:5c:bb:5c:a1:10:f1:d6:04:20:79:72:04:e3:
f1:11:98:ec:94:b5:27:ec:21:c9:dc:e3:67:e8:69:
e7:6a:d8:06:ae:31:05:39:e0:59:db:0e:e7:03:89:
29:f5:5f:f7:56:d2:0d:2b:25:5c:f4:5b:82:3c:f7:
fc:09:5f:91:7b:d5:cc:f6:23:5b:7e:14:7f:7b:63:
12:cd:2a:70:b5:d4:00:dc:0a:04:7d:90:2d:20:91:
15:71:f6:4a:81:b5:13:2e:d7:4b:af:61:30:38:58:
a3:e5:53:50:58:04:31:00:45:f6:73:02:be:0c:c2:
31:a4:7c:a9:14:08:4b:f9:3c:b7:10:c6:a9:46:03:
41:39:8a:04:ea:80:cc:e6:00:fe:74:ba:35:89:ce:
62:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A2:F7:17:7B:15:4B:9A:85:B5:90:FF:91:5E:AB:46:CE:15:D9:08
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:91:33:f9:09:c7:c7:70:e3:ab:d2:8c:73:33:92:ea:93:eb:
f5:29:9e:ca:c1:fd:f3:82:1a:ac:d5:5d:ad:70:38:f2:04:0a:
43:12:91:2a:3e:ba:c3:94:9c:66:ad:b8:6b:a0:1b:89:0a:7d:
28:6e:77:ff:0b:c1:51:9b:b5:16:ef:35:14:14:04:b9:79:81:
18:41:ba:44:a8:a3:3a:20:9e:5f:af:1b:88:14:22:45:4f:7c:
40:fe:29:56:83:f8:f2:60:5d:88:bd:7e:03:3d:40:d1:5f:3e:
2c:5e:ad:3b:ba:29:f0:fe:59:f0:a3:8e:a0:45:f5:86:09:5e:
ad:65:38:4e:72:54:e6:be:72:3c:74:57:ee:5b:be:f3:9f:3f:
c6:b0:29:8b:63:ea:1a:8f:09:cd:92:db:65:0b:76:88:0b:42:
70:4a:f8:b3:38:0a:53:db:97:d5:19:df:23:97:60:75:6b:9b:
1c:e1:1b:86:8f:6c:ac:78:53:1b:b9:9c:e8:3f:ad:96:50:2a:
0f:54:0d:ef:c6:48:58:91:33:9e:46:ee:ca:60:ec:e0:ba:2e:
c9:58:3e:65:26:61:0e:76:c2:a5:8e:5d:8f:4e:a9:05:20:3b:
13:14:ca:d0:9c:6e:0f:e5:6d:4f:c1:42:e0:b6:ca:62:20:fb:
fa:5b:86:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeXTDn5xMyC0T3AvA5UMO0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3
ZDE0MTEwHhcNMjUwNjIyMTEwMDQ0WhcNMjUwNjIzMTEwMDQ0WjAzMTEwLwYDVQQD
EygzMWEyZjcxNzdiMTU0YjlhODViNTkwZmY5MTVlYWI0NmNlMTVkOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/sKw5PPq5BQseTNm7Xs3p85Hrox
NR9pIWviHOKX6pRXGHnGFV8FY9XMdxWKGlEJ+ZwclPp24PBeuWHQPCpxD3SWx/P/
7Wg9DaLgWgDlYFJH3WaS/qaCRG1JUWbm3oQoEWyupW3/2cnoj1y7XKEQ8dYEIHly
BOPxEZjslLUn7CHJ3ONn6GnnatgGrjEFOeBZ2w7nA4kp9V/3VtINKyVc9FuCPPf8
CV+Re9XM9iNbfhR/e2MSzSpwtdQA3AoEfZAtIJEVcfZKgbUTLtdLr2EwOFij5VNQ
WAQxAEX2cwK+DMIxpHypFAhL+Ty3EMapRgNBOYoE6oDM5gD+dLo1ic5iVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGi9xd7FUuahbWQ/5Feq0bOFdkIMB8GA1UdIwQY
MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt
YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk
LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZEz+QnH
x3Djq9KMczOS6pPr9SmeysH984IarNVdrXA48gQKQxKRKj66w5ScZq24a6AbiQp9
KG53/wvBUZu1Fu81FBQEuXmBGEG6RKijOiCeX68biBQiRU98QP4pVoP48mBdiL1+
Az1A0V8+LF6tO7op8P5Z8KOOoEX1hglerWU4TnJU5r5yPHRX7lu+858/xrApi2Pq
Go8JzZLbZQt2iAtCcEr4szgKU9uX1RnfI5dgdWubHOEbho9srHhTG7mc6D+tllAq
D1QN78ZIWJEznkbuymDs4LouyVg+ZSZhDnbCpY5dj06pBSA7ExTK0JxuD+VtT8FC
4LbKYiD7+luG/g==
-----END CERTIFICATE-----
Generated at Sun Jun 22 15:52:01 2025 by rpki-client