
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier: pQdTDI8hdxZ18zaBxUsvehQXcpcNaQ/7WLWyQBmsI6E=
Subject key identifier: DA:42:B8:1E:86:76:EA:D6:1B:3C:68:B4:BA:0D:CD:29:A7:8F:BD:9F
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 01976FD0AAAB986452FB9061F5D833E44764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number: 02F0
Signing time: Sat 14 Jun 2025 19:00:35 +0000
Manifest this update: Sat 14 Jun 2025 19:00:35 +0000
Manifest next update: Sun 15 Jun 2025 19:00:35 +0000
Files and hashes: 1: q46mhqb037SisDm5N4bZ1WyfVUE.roa (hash: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=)
2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: 5wLvDKm0hRapHU2bz1D+sClvDYXWw0uUoublk9UKlh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:aa:ab:98:64:52:fb:90:61:f5:d8:33:e4:47:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Jun 14 19:00:35 2025 GMT
Not After : Jun 15 19:00:35 2025 GMT
Subject: CN=da42b81e8676ead61b3c68b4ba0dcd29a78fbd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:aa:e5:41:fe:0d:21:c8:32:1f:20:46:dc:
ca:f8:f4:57:d0:81:00:ce:80:ee:50:57:c2:a3:ab:
a7:c4:e9:de:97:89:55:4d:41:94:81:bf:dd:35:d6:
4f:70:d9:4b:c2:a7:db:97:bb:0a:7c:84:57:06:da:
8e:90:da:d6:12:ba:0e:00:20:56:59:41:a7:0c:2c:
ae:9c:e8:9f:75:1a:0a:45:10:7d:16:7b:8f:6d:2f:
7e:11:b5:8f:4e:58:4c:b3:f3:20:d9:ea:12:07:72:
30:a5:86:e2:a1:8c:70:67:ba:43:67:6b:8d:20:ac:
c6:40:a5:9c:01:a7:2f:63:12:9c:ac:8d:a0:09:8c:
cb:ac:fd:54:05:f2:b9:f2:bf:50:e2:44:be:43:ce:
b5:80:25:09:1c:78:d1:5e:6a:cc:61:1c:61:b4:5f:
46:7d:bc:47:67:7e:6c:67:39:6c:4a:b3:47:30:61:
6e:9a:98:64:36:4f:e5:a8:7b:20:6b:98:9c:1f:6b:
6a:c8:2f:c4:f8:06:31:7e:03:be:a6:9b:8d:d9:fe:
a4:7f:f5:3e:a7:d9:ea:af:4e:d6:d7:77:22:2a:ff:
71:c3:e2:85:71:82:d8:00:45:b5:d1:b9:1f:9d:ea:
3d:8c:1e:ce:74:75:8d:ca:72:52:14:54:c8:94:03:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:42:B8:1E:86:76:EA:D6:1B:3C:68:B4:BA:0D:CD:29:A7:8F:BD:9F
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:86:bd:f8:98:e0:ff:85:b7:47:a8:f9:8e:a9:02:90:c9:e7:
14:69:c3:c6:df:ef:54:0d:ad:25:6c:04:59:56:05:bb:54:6a:
aa:6d:5c:bd:48:ce:90:3c:ff:e4:7c:d0:9c:b6:b1:3d:0c:bc:
c7:2b:43:5e:35:10:bb:29:30:65:cc:00:f2:ae:09:37:78:12:
e1:2d:2c:9f:c6:7e:e2:aa:b5:7e:22:64:e6:fa:61:9f:e1:36:
fe:7f:c2:85:62:3f:c4:bd:db:77:d2:0a:67:13:b7:0b:55:8e:
11:49:fa:03:2d:70:03:43:29:66:ad:44:82:c0:fd:e2:39:f7:
49:5c:30:e3:a6:e5:fb:9d:b0:30:b8:93:5b:68:4c:0c:c8:5e:
7d:00:8b:4b:b1:f0:c9:6a:4f:99:58:f9:75:e4:d1:78:7b:6b:
04:2c:43:75:e8:59:37:ff:f5:db:df:e4:84:81:e0:06:b0:4b:
5f:6e:27:70:76:07:eb:50:a2:01:45:b1:86:3e:47:7b:bb:27:
e7:ea:ed:0a:57:b1:72:f1:19:6a:20:95:8d:de:e9:44:0c:ca:
fe:47:9e:8e:28:90:a0:01:7e:9f:5f:d9:94:db:b4:54:2f:c2:
29:f1:8a:e4:95:48:7b:1a:6c:75:53:15:89:9b:6b:f3:59:d2:
22:58:26:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0KqrmGRS+5Bh9dgz5EdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTlmYzcyNWIwYzNlZjEwMzczNDYwZjliZjU5YmNlM2Vk
NTBhMzQwHhcNMjUwNjE0MTkwMDM1WhcNMjUwNjE1MTkwMDM1WjAzMTEwLwYDVQQD
EyhkYTQyYjgxZTg2NzZlYWQ2MWIzYzY4YjRiYTBkY2QyOWE3OGZiZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuReq5UH+DSHIMh8gRtzK+PRX0IEA
zoDuUFfCo6unxOnel4lVTUGUgb/dNdZPcNlLwqfbl7sKfIRXBtqOkNrWEroOACBW
WUGnDCyunOifdRoKRRB9FnuPbS9+EbWPTlhMs/Mg2eoSB3IwpYbioYxwZ7pDZ2uN
IKzGQKWcAacvYxKcrI2gCYzLrP1UBfK58r9Q4kS+Q861gCUJHHjRXmrMYRxhtF9G
fbxHZ35sZzlsSrNHMGFumphkNk/lqHsga5icH2tqyC/E+AYxfgO+ppuN2f6kf/U+
p9nqr07W13ciKv9xw+KFcYLYAEW10bkfneo9jB7OdHWNynJSFFTIlAPX/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpCuB6GdurWGzxotLoNzSmnj72fMB8GA1UdIwQY
MBaAFMvp/HJbDD7xA3NGD5v1m84+1Qo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDIt
NTVhNTRkZjE0MzRlLzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDItNTVhNTRkZjE0MzRl
LzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoa9+Jjg
/4W3R6j5jqkCkMnnFGnDxt/vVA2tJWwEWVYFu1Rqqm1cvUjOkDz/5HzQnLaxPQy8
xytDXjUQuykwZcwA8q4JN3gS4S0sn8Z+4qq1fiJk5vphn+E2/n/ChWI/xL3bd9IK
ZxO3C1WOEUn6Ay1wA0MpZq1EgsD94jn3SVww46bl+52wMLiTW2hMDMhefQCLS7Hw
yWpPmVj5deTReHtrBCxDdehZN//129/khIHgBrBLX24ncHYH61CiAUWxhj5He7sn
5+rtClexcvEZaiCVjd7pRAzK/keejiiQoAF+n1/ZlNu0VC/CKfGK5JVIexpsdVMV
iZtr81nSIlgmWw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:17:59 2025 by rpki-client