Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: a2ZPdqxP8bcqzNwQMgJ8N9LJCx+a7MJxDplsLSpA7HU=
Subject key identifier: 23:FC:3B:E1:CD:A8:48:94:18:03:8B:C8:7E:16:BB:04:EB:2B:47:F0
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019768BBFEF23DCC3041AB807ABFBAC60CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 10:00:40 +0000
Manifest this update: Fri 13 Jun 2025 10:00:40 +0000
Manifest next update: Sat 14 Jun 2025 10:00:40 +0000
Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=)
2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: SmZ+lGH9aSWaI5uLT0hMhBwBrPD3Tcg8+1ZlGtyIdU8=)
3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:fe:f2:3d:cc:30:41:ab:80:7a:bf:ba:c6:0c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jun 13 10:00:40 2025 GMT
Not After : Jun 14 10:00:40 2025 GMT
Subject: CN=23fc3be1cda8489418038bc87e16bb04eb2b47f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8c:81:04:b7:65:4a:2c:f6:66:b0:68:d8:f1:
d4:99:5c:80:a3:6e:a1:09:07:d1:f3:7e:60:0b:6c:
84:77:3b:8f:d4:68:73:a4:01:6d:67:72:a6:8a:d0:
1f:0a:8b:2e:61:98:94:10:2d:5a:a0:ea:db:7b:cb:
d3:da:cc:75:62:2a:2e:35:5e:00:f9:e5:5c:5d:98:
26:f1:32:58:eb:f6:28:de:ad:4a:39:b2:1b:6c:57:
08:bb:0b:08:08:fd:c8:44:0b:c0:7b:0a:c0:b5:4c:
ff:dc:02:0f:1f:2f:dd:9e:5b:4f:0f:9e:a3:eb:48:
7a:c7:00:90:4a:95:f0:d8:46:d5:a4:f9:ba:79:ab:
92:86:f4:2b:10:d8:d1:b4:34:6d:7c:57:8f:e9:c3:
77:ea:06:41:19:e7:4a:96:d0:f1:6f:e3:93:3c:e1:
3c:3f:e5:f5:ee:d6:97:2d:38:c4:01:a6:1a:81:e0:
a3:bf:c4:b0:d7:d2:e3:21:ce:07:52:50:3b:d4:e1:
f7:9b:6d:1d:59:e0:fa:86:84:9d:39:9c:cf:5a:15:
77:d6:ba:82:f0:69:33:6a:69:0e:f2:b8:fc:87:87:
19:1d:48:fd:c2:e3:32:ee:4c:b9:25:c5:98:16:6b:
1a:aa:f9:d1:4e:b6:28:98:b7:42:ac:41:53:c3:6d:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FC:3B:E1:CD:A8:48:94:18:03:8B:C8:7E:16:BB:04:EB:2B:47:F0
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c2:17:ea:2c:db:0e:b0:5f:ff:cf:4f:27:d0:e5:65:4a:90:
6a:6a:fb:d9:5c:e8:6f:ed:a7:79:fd:e5:21:98:0b:b7:b4:69:
4b:89:db:6a:e7:7b:a4:24:8c:e2:87:e7:c7:40:63:ec:26:e7:
fb:31:4a:83:8c:36:fb:92:02:a4:3d:6d:a9:9a:db:cc:d4:53:
02:1d:76:ae:c0:1b:40:c1:2a:b5:e7:2b:0b:ce:45:77:90:d5:
5b:a9:7a:76:5b:2d:9a:4b:df:95:d5:da:c0:d2:f6:3f:96:7a:
b9:ec:6a:65:d2:5a:94:69:71:41:45:23:ce:a3:f3:6b:31:96:
1c:bf:6f:e7:ed:1e:3a:03:4a:ed:b6:28:b0:94:50:b1:3f:54:
60:77:f2:83:da:e7:da:84:85:ed:91:4b:08:38:f9:63:b8:75:
13:a1:43:34:ba:20:f6:56:04:a6:36:52:97:b8:94:ba:02:82:
0a:3d:0c:18:c3:6a:84:c0:3d:42:5f:ec:90:ca:32:ed:ea:92:
9f:0b:98:f3:95:db:08:4e:12:4d:4f:82:73:45:66:e0:2f:c0:
32:30:e6:31:c9:83:1d:61:15:22:46:98:79:b6:7a:39:f3:92:
89:e5:6e:cc:24:fa:8d:8f:a3:7f:95:b5:4a:f1:09:0c:36:a1:
25:20:39:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou/7yPcwwQauAer+6xgy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjc5OTk2NDVlMTViNjUyNjhhMGQ5M2JiMTRjNGY1MTcy
NDQ1MWIwHhcNMjUwNjEzMTAwMDQwWhcNMjUwNjE0MTAwMDQwWjAzMTEwLwYDVQQD
EygyM2ZjM2JlMWNkYTg0ODk0MTgwMzhiYzg3ZTE2YmIwNGViMmI0N2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4yBBLdlSiz2ZrBo2PHUmVyAo26h
CQfR835gC2yEdzuP1GhzpAFtZ3KmitAfCosuYZiUEC1aoOrbe8vT2sx1YiouNV4A
+eVcXZgm8TJY6/Yo3q1KObIbbFcIuwsICP3IRAvAewrAtUz/3AIPHy/dnltPD56j
60h6xwCQSpXw2EbVpPm6eauShvQrENjRtDRtfFeP6cN36gZBGedKltDxb+OTPOE8
P+X17taXLTjEAaYageCjv8Sw19LjIc4HUlA71OH3m20dWeD6hoSdOZzPWhV31rqC
8GkzamkO8rj8h4cZHUj9wuMy7ky5JcWYFmsaqvnRTrYomLdCrEFTw20fnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP8O+HNqEiUGAOLyH4WuwTrK0fwMB8GA1UdIwQY
MBaAFGFnmZZF4VtlJooNk7sUxPUXJEUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMzFhMjUtMjUwNy00NzFkLWFkYzct
ODgwN2Y5NWFlNzVkLzEvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kMzFhMjUtMjUwNy00NzFkLWFkYzctODgwN2Y5NWFlNzVk
LzEvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8IX6izb
DrBf/89PJ9DlZUqQamr72Vzob+2nef3lIZgLt7RpS4nbaud7pCSM4ofnx0Bj7Cbn
+zFKg4w2+5ICpD1tqZrbzNRTAh12rsAbQMEqtecrC85Fd5DVW6l6dlstmkvfldXa
wNL2P5Z6uexqZdJalGlxQUUjzqPzazGWHL9v5+0eOgNK7bYosJRQsT9UYHfyg9rn
2oSF7ZFLCDj5Y7h1E6FDNLog9lYEpjZSl7iUugKCCj0MGMNqhMA9Ql/skMoy7eqS
nwuY85XbCE4STU+Cc0Vm4C/AMjDmMcmDHWEVIkaYebZ6OfOSieVuzCT6jY+jf5W1
SvEJDDahJSA5Vw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:41 2025 by rpki-client