Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: BXZjF20zz4FBl1Um8X5QmFXIAtzAkZB6ahvzbbYotxY=
Subject key identifier: 7D:50:03:2B:9F:F4:BD:44:14:58:29:33:19:46:61:E9:E1:01:3A:3A
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 0197684E3E28160808941438BE4CA8BB9F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0B9B
Signing time: Fri 13 Jun 2025 08:00:47 +0000
Manifest this update: Fri 13 Jun 2025 08:00:47 +0000
Manifest next update: Sat 14 Jun 2025 08:00:47 +0000
Files and hashes: 1: YJQs11xqugWoEBWoZ3oCcK3sbS4.roa (hash: 9zEKu1Xz7UUzUVy1uRJShcboHyDK7OhgJL2RQwhgJQU=)
2: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: 0kSON+Q3zIyl2s1Nda0eotln5urj7hFjv9IoqR5tvZ4=)
3: kVcJYJ6Q63B4lKtQ5vKu6QeoxFU.roa (hash: zBFFe6GTU3Rj12iW+TDrkgjiFgVWN+v43RC3XAW3nrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:3e:28:16:08:08:94:14:38:be:4c:a8:bb:9f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jun 13 08:00:47 2025 GMT
Not After : Jun 14 08:00:47 2025 GMT
Subject: CN=7d50032b9ff4bd4414582933194661e9e1013a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:e3:f1:93:bc:58:f2:49:52:19:65:70:19:
59:14:bc:a3:14:a8:a5:72:ae:71:78:82:3a:40:04:
64:d9:e6:5f:95:f4:17:de:94:d3:75:84:78:a1:5a:
fe:79:a6:10:05:f2:36:01:77:7d:70:b4:ff:5e:07:
1c:6b:42:c3:7a:8e:79:89:1e:34:71:15:df:87:0d:
0d:62:1a:be:ed:38:36:78:86:4f:52:75:0e:c8:e6:
b2:0d:d8:04:21:97:9b:4b:2f:68:f6:89:aa:62:e9:
f9:ae:7f:de:f2:e6:2f:3d:b1:94:c6:e1:60:a2:bf:
68:36:25:f3:53:b3:63:86:70:4c:66:df:94:4c:ca:
24:81:6b:38:e8:67:b7:b8:4e:b3:6a:fb:c1:6f:64:
53:c2:c1:d8:28:5b:de:eb:4d:f1:06:56:20:d9:a7:
27:80:6d:f9:14:87:ab:ba:52:eb:c9:e8:cf:a0:31:
62:ec:2d:40:b5:ca:0b:cb:dd:cb:ed:de:b6:af:b8:
dc:97:94:57:06:f4:d4:d1:d7:2c:40:24:fd:a9:1a:
55:25:8c:08:9e:ed:68:74:aa:3e:25:52:d1:2e:9e:
dd:f5:6c:a5:bf:45:38:03:89:69:38:15:18:4b:f5:
12:40:ec:10:7f:7e:5d:f8:06:e8:3d:0d:19:07:9c:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:50:03:2B:9F:F4:BD:44:14:58:29:33:19:46:61:E9:E1:01:3A:3A
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6a:b3:42:3c:24:32:db:10:66:03:b6:6a:90:ee:08:f6:2b:
d8:2b:63:81:da:a0:4d:ca:8f:f4:12:18:2f:61:37:14:d8:46:
81:15:5b:e6:39:a4:31:88:e1:bf:8c:13:26:76:36:c8:cd:b7:
91:b9:99:4e:fb:31:80:b0:e9:a2:aa:40:47:a2:d6:82:8f:fe:
28:46:23:f3:55:cf:42:8d:f6:c7:6a:dc:cf:81:49:92:5e:d2:
8c:ce:61:fb:6d:6a:4b:ff:a9:c0:2c:cf:1f:18:80:4f:8e:29:
cf:7a:bd:4e:13:37:09:0a:a7:cd:7a:f8:56:26:d8:73:29:ee:
ca:a6:7c:23:fd:f8:7b:f7:d8:0b:2d:f0:af:0b:ac:c0:f2:ed:
57:be:0d:3f:f5:25:db:fe:df:a8:2e:26:3c:d4:8e:b0:99:c0:
7b:2c:2a:be:e8:85:78:31:ed:49:a7:89:aa:12:14:12:cb:3d:
47:ce:18:98:05:5c:9a:18:d2:e2:bd:11:30:18:bc:43:dd:2f:
de:bd:9e:c5:eb:e6:f6:04:d1:19:14:74:4d:87:aa:80:8c:28:
9c:57:45:b3:95:e4:f0:8e:b2:6d:a3:a1:2f:e9:56:68:30:15:
4b:fe:bd:73:1f:b8:43:f4:ff:d7:d6:14:e9:d3:d4:14:20:73:
98:b4:dc:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTj4oFggIlBQ4vkyou58yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh
YWNhN2IwHhcNMjUwNjEzMDgwMDQ3WhcNMjUwNjE0MDgwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZDUwMDMyYjlmZjRiZDQ0MTQ1ODI5MzMxOTQ2NjFlOWUxMDEzYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN3j8ZO8WPJJUhllcBlZFLyjFKil
cq5xeII6QARk2eZflfQX3pTTdYR4oVr+eaYQBfI2AXd9cLT/Xgcca0LDeo55iR40
cRXfhw0NYhq+7Tg2eIZPUnUOyOayDdgEIZebSy9o9omqYun5rn/e8uYvPbGUxuFg
or9oNiXzU7NjhnBMZt+UTMokgWs46Ge3uE6zavvBb2RTwsHYKFve603xBlYg2acn
gG35FIerulLryejPoDFi7C1AtcoLy93L7d62r7jcl5RXBvTU0dcsQCT9qRpVJYwI
nu1odKo+JVLRLp7d9Wylv0U4A4lpOBUYS/USQOwQf35d+AboPQ0ZB5w0/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1QAyuf9L1EFFgpMxlGYenhATo6MB8GA1UdIwQY
MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt
ODFjOGNlNzUwMTI0LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0
LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2qzQjwk
MtsQZgO2apDuCPYr2CtjgdqgTcqP9BIYL2E3FNhGgRVb5jmkMYjhv4wTJnY2yM23
kbmZTvsxgLDpoqpAR6LWgo/+KEYj81XPQo32x2rcz4FJkl7SjM5h+21qS/+pwCzP
HxiAT44pz3q9ThM3CQqnzXr4VibYcynuyqZ8I/34e/fYCy3wrwuswPLtV74NP/Ul
2/7fqC4mPNSOsJnAeywqvuiFeDHtSaeJqhIUEss9R84YmAVcmhjS4r0RMBi8Q90v
3r2exevm9gTRGRR0TYeqgIwonFdFs5Xk8I6ybaOhL+lWaDAVS/69cx+4Q/T/19YU
6dPUFCBzmLTc9Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:04 2025 by rpki-client