Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: lPfS2bvS2Lro2ACgBEactMFKeUQ/oagN5okMK83JaXA=
Subject key identifier: 64:D2:E5:C7:C5:A4:62:6B:BA:BA:68:BB:B3:74:D8:35:CE:98:D8:F1
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019769614DF1E681F0EDDE31382225413E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0D52
Signing time: Fri 13 Jun 2025 13:01:13 +0000
Manifest this update: Fri 13 Jun 2025 13:01:13 +0000
Manifest next update: Sat 14 Jun 2025 13:01:13 +0000
Files and hashes: 1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: tAoJ1bQa8vpJD5/QkMvaITBRu1DtAWBWlTv+4Ztdcuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:4d:f1:e6:81:f0:ed:de:31:38:22:25:41:3e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Jun 13 13:01:13 2025 GMT
Not After : Jun 14 13:01:13 2025 GMT
Subject: CN=64d2e5c7c5a4626bbaba68bbb374d835ce98d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:22:61:65:68:de:5f:27:40:05:12:08:b5:
76:ae:1e:a5:bb:c9:d6:bf:63:16:12:4c:94:97:ae:
df:44:5b:8c:77:bd:dd:73:01:48:8f:ca:11:2d:5a:
5f:5b:a0:b6:2b:41:9c:be:48:56:3a:6b:ae:43:30:
70:0d:88:2e:74:a9:80:7e:ae:b0:18:a4:b0:bf:1d:
70:f4:80:23:34:26:02:d1:5a:2f:4e:99:4a:1a:54:
13:7e:18:f6:9a:9a:6e:28:2f:79:fd:03:65:f9:f1:
22:77:73:bb:9a:65:59:9d:4c:66:47:d5:89:6b:12:
df:08:2f:0c:9a:b1:7a:ad:e7:eb:3d:9b:c6:bd:24:
79:a3:e4:dc:16:d1:c4:28:ae:c1:f0:e9:46:14:ec:
6d:c7:87:57:ea:ef:0d:36:df:d4:62:a5:14:fe:4b:
5b:e6:d0:5f:3c:46:52:64:63:2a:ff:da:d8:db:6d:
4f:18:ee:70:16:9e:06:88:81:09:5a:2b:0f:99:40:
5a:72:a8:3c:46:47:e0:5e:52:5b:4a:60:cc:11:4e:
26:9d:48:19:39:c4:4f:b3:7a:57:42:ea:de:fa:62:
d6:af:0f:1b:5c:15:4c:ba:a1:e9:5a:e9:89:9d:b6:
89:fe:d0:e6:87:2d:cb:37:85:8a:5b:38:fa:5b:11:
73:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D2:E5:C7:C5:A4:62:6B:BA:BA:68:BB:B3:74:D8:35:CE:98:D8:F1
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:99:39:cb:52:64:2d:d9:7a:f1:9c:6a:f5:93:0e:bf:a6:7b:
37:2d:e0:fb:a8:07:f0:ea:03:63:4a:c1:39:f2:cb:ab:db:ca:
bb:cd:2f:bd:fb:23:1b:23:76:fb:0f:7a:16:89:27:c0:51:ef:
29:ee:73:2f:a8:a6:02:f9:56:76:f7:1b:8c:91:c0:b9:9c:44:
f1:63:e6:18:13:af:b6:7d:27:52:04:5f:39:c6:83:fd:4d:0c:
bb:47:9e:6a:21:1c:e7:82:ab:8d:8b:76:4e:69:c7:ee:f7:ee:
91:56:cc:2e:79:95:fa:c7:58:97:e2:30:d5:e1:3f:53:32:c9:
a7:4a:17:dd:1f:8e:a4:50:18:4c:c2:da:b1:fb:4c:e5:56:6e:
19:5e:45:d8:89:0a:43:5b:c4:3b:e6:67:68:f1:bc:c6:9d:ec:
3b:8f:64:a7:70:75:d3:24:d6:b7:a1:44:55:ea:8e:1e:c5:9c:
d7:73:4f:12:24:6b:a3:de:17:5c:de:47:94:c8:54:bd:74:7e:
0a:d3:ae:2c:f0:3c:d5:c5:60:c1:2d:0e:3f:68:a3:9a:d3:3b:
06:77:33:c0:9c:d9:8b:75:0d:82:5b:a2:3f:49:53:7f:ab:35:
0d:3f:ae:b2:51:6c:38:6a:53:f7:e6:c2:6d:bd:83:1f:09:03:
21:c8:8c:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYU3x5oHw7d4xOCIlQT43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl
ZTRjZTEwHhcNMjUwNjEzMTMwMTEzWhcNMjUwNjE0MTMwMTEzWjAzMTEwLwYDVQQD
Eyg2NGQyZTVjN2M1YTQ2MjZiYmFiYTY4YmJiMzc0ZDgzNWNlOThkOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj4iYWVo3l8nQAUSCLV2rh6lu8nW
v2MWEkyUl67fRFuMd73dcwFIj8oRLVpfW6C2K0GcvkhWOmuuQzBwDYgudKmAfq6w
GKSwvx1w9IAjNCYC0VovTplKGlQTfhj2mppuKC95/QNl+fEid3O7mmVZnUxmR9WJ
axLfCC8MmrF6refrPZvGvSR5o+TcFtHEKK7B8OlGFOxtx4dX6u8NNt/UYqUU/ktb
5tBfPEZSZGMq/9rY221PGO5wFp4GiIEJWisPmUBacqg8RkfgXlJbSmDMEU4mnUgZ
OcRPs3pXQure+mLWrw8bXBVMuqHpWumJnbaJ/tDmhy3LN4WKWzj6WxFz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTS5cfFpGJrurpou7N02DXOmNjxMB8GA1UdIwQY
MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt
MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz
LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5k5y1Jk
Ldl68Zxq9ZMOv6Z7Ny3g+6gH8OoDY0rBOfLLq9vKu80vvfsjGyN2+w96FoknwFHv
Ke5zL6imAvlWdvcbjJHAuZxE8WPmGBOvtn0nUgRfOcaD/U0Mu0eeaiEc54KrjYt2
TmnH7vfukVbMLnmV+sdYl+Iw1eE/UzLJp0oX3R+OpFAYTMLasftM5VZuGV5F2IkK
Q1vEO+ZnaPG8xp3sO49kp3B10yTWt6FEVeqOHsWc13NPEiRro94XXN5HlMhUvXR+
CtOuLPA81cVgwS0OP2ijmtM7BnczwJzZi3UNgluiP0lTf6s1DT+uslFsOGpT9+bC
bb2DHwkDIciMkA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:26 2025 by rpki-client