Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: 32aAGcMPrsUbBOjoqgDJhwpV16oiLMgoIiuSWc+0tHc=
Subject key identifier: 28:00:76:6D:BD:FD:01:BB:C5:C3:ED:C4:48:96:53:FB:03:1A:A2:4B
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 01976DABB3208372A47CE8BA7EF119B035FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 106F
Signing time: Sat 14 Jun 2025 09:00:58 +0000
Manifest this update: Sat 14 Jun 2025 09:00:58 +0000
Manifest next update: Sun 15 Jun 2025 09:00:58 +0000
Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: 9Bor8y/o6xAkxtUx+eK5iiX+hds/eW7P8lI/v1s6m+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:b3:20:83:72:a4:7c:e8:ba:7e:f1:19:b0:35:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Jun 14 09:00:58 2025 GMT
Not After : Jun 15 09:00:58 2025 GMT
Subject: CN=2800766dbdfd01bbc5c3edc4489653fb031aa24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:c5:96:e8:50:a5:dd:fa:11:1d:11:f0:38:
15:5c:47:c3:70:09:b4:50:f4:87:f4:12:ff:91:f6:
e6:f4:c1:8a:b0:77:ee:ce:b1:49:82:c9:23:70:23:
40:7c:aa:b4:ef:7f:bc:9e:43:b0:e9:91:d8:24:6b:
c0:b9:af:3d:a9:8d:36:e3:03:07:3f:ca:34:d9:16:
2e:90:1d:3a:fb:67:b3:cc:00:c4:c0:bf:62:92:d3:
d9:cf:e7:b4:8e:01:04:98:ba:e6:b4:48:65:fa:9f:
a6:73:51:c6:a2:95:e4:ed:c7:77:27:f2:1d:4b:9b:
a7:3a:38:70:c0:89:6d:a9:a5:22:0d:f6:91:de:eb:
e2:db:aa:45:39:f6:1d:f6:e0:00:9f:97:47:d0:e8:
04:ae:35:ff:08:10:81:b5:3e:85:b2:1c:14:7c:40:
90:ef:38:b6:2d:ee:07:35:c9:e1:dc:f8:19:d9:57:
78:7b:2b:14:94:23:ca:f2:c6:9b:fe:8f:e2:5c:7d:
c4:6a:df:44:f1:22:74:83:36:f1:f6:04:1f:4f:9e:
cc:d6:9a:27:bb:09:43:ad:19:33:4e:a9:27:79:52:
b5:90:39:57:e0:70:3b:9a:18:62:8d:c3:ea:bb:b8:
d8:0a:51:cd:05:60:c9:77:9c:2c:b4:02:7e:b9:99:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:76:6D:BD:FD:01:BB:C5:C3:ED:C4:48:96:53:FB:03:1A:A2:4B
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:25:ca:81:a4:74:28:a8:ae:0b:4e:21:ae:07:19:a5:37:28:
33:67:2b:e4:fc:8b:09:88:75:09:6f:eb:92:07:0c:e2:fc:70:
30:48:6f:4e:d3:20:b6:a8:ed:5f:38:3f:93:d2:26:25:51:af:
26:35:ea:53:fc:43:7f:ea:f1:6b:35:c6:5e:2a:10:a5:33:e6:
4e:97:18:ae:3c:67:58:6c:74:b0:75:b6:b2:54:51:99:6c:7a:
b4:f4:0f:5a:c6:0e:eb:92:39:97:36:69:09:5c:88:45:a5:cc:
c8:34:f4:b6:f6:79:c5:44:d4:15:f6:5b:31:34:7c:cb:75:ed:
08:16:51:84:4e:f7:6f:72:30:32:28:7c:ce:93:52:75:5d:d3:
c8:52:52:c0:ff:d2:7a:94:03:7e:c0:c4:a9:5a:00:d4:83:5b:
ec:9a:d0:62:7e:ce:b0:b3:25:bb:81:ec:75:48:a6:8a:ad:29:
c1:e9:09:56:5c:ec:a6:4a:6d:5b:74:95:2e:54:d2:f2:9e:74:
f6:03:a4:79:b1:1e:59:5e:92:05:ae:ac:7f:56:bc:d6:bb:56:
03:15:93:51:3b:ee:45:5d:90:ae:3f:16:33:ef:51:36:fb:73:
57:0c:52:3f:bb:51:8e:75:39:e8:41:41:77:d9:5e:28:ac:63:
57:7a:62:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq7Mgg3KkfOi6fvEZsDX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj
OWRiNWYwHhcNMjUwNjE0MDkwMDU4WhcNMjUwNjE1MDkwMDU4WjAzMTEwLwYDVQQD
EygyODAwNzY2ZGJkZmQwMWJiYzVjM2VkYzQ0ODk2NTNmYjAzMWFhMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxrFluhQpd36ER0R8DgVXEfDcAm0
UPSH9BL/kfbm9MGKsHfuzrFJgskjcCNAfKq073+8nkOw6ZHYJGvAua89qY024wMH
P8o02RYukB06+2ezzADEwL9iktPZz+e0jgEEmLrmtEhl+p+mc1HGopXk7cd3J/Id
S5unOjhwwIltqaUiDfaR3uvi26pFOfYd9uAAn5dH0OgErjX/CBCBtT6FshwUfECQ
7zi2Le4HNcnh3PgZ2Vd4eysUlCPK8sab/o/iXH3Eat9E8SJ0gzbx9gQfT57M1pon
uwlDrRkzTqkneVK1kDlX4HA7mhhijcPqu7jYClHNBWDJd5wstAJ+uZkQ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgAdm29/QG7xcPtxEiWU/sDGqJLMB8GA1UdIwQY
MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt
MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri
LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiXKgaR0
KKiuC04hrgcZpTcoM2cr5PyLCYh1CW/rkgcM4vxwMEhvTtMgtqjtXzg/k9ImJVGv
JjXqU/xDf+rxazXGXioQpTPmTpcYrjxnWGx0sHW2slRRmWx6tPQPWsYO65I5lzZp
CVyIRaXMyDT0tvZ5xUTUFfZbMTR8y3XtCBZRhE73b3IwMih8zpNSdV3TyFJSwP/S
epQDfsDEqVoA1INb7JrQYn7OsLMlu4HsdUimiq0pwekJVlzspkptW3SVLlTS8p50
9gOkebEeWV6SBa6sf1a81rtWAxWTUTvuRV2Qrj8WM+9RNvtzVwxSP7tRjnU56EFB
d9leKKxjV3piWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:11:06 2025 by rpki-client