Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: RkkZlGaoWMlkdrtfXB7TPmgGM55sYhUmNYBcUvIQ1Co=
Subject key identifier: 13:C1:56:70:F5:E6:A7:FC:0A:FE:62:24:FE:CC:CB:C3:23:A0:E4:35
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 019873E387A18D1331252BFC7BB0AC1020DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 07:02:27 +0000
Manifest this update: Mon 04 Aug 2025 07:02:27 +0000
Manifest next update: Tue 05 Aug 2025 07:02:27 +0000
Files and hashes: 1: 526G98YrX5YRgU8kSVFlOR-68SU.roa (hash: EfmIyH+1frBE08mLPE+N4lUdJCEbw7QSSljLZgrUP1M=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: DLMFwgP4e8vszVEYDGxhpuBFvHdNoYBsLF/721VK3+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:87:a1:8d:13:31:25:2b:fc:7b:b0:ac:10:20:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Aug 4 07:02:27 2025 GMT
Not After : Aug 5 07:02:27 2025 GMT
Subject: CN=13c15670f5e6a7fc0afe6224fecccbc323a0e435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:bf:02:59:58:e4:b3:6e:3e:a9:98:03:f5:
29:4b:1f:3a:ee:68:0c:e9:50:a5:c1:c1:63:f4:49:
09:2c:60:99:f3:18:d3:ad:db:c9:20:25:a7:74:11:
7b:85:ab:97:30:d5:bf:1c:08:39:ee:b4:5e:92:cc:
57:e4:bc:a7:93:ef:78:8b:ab:8f:95:e3:3e:a5:e1:
59:7b:bc:e9:67:a5:5b:e9:a5:7c:b3:ad:3b:93:08:
65:bc:a2:95:5f:56:28:74:1f:46:6b:25:af:0e:45:
09:0b:ae:55:cf:a8:32:9b:96:af:07:a4:f4:74:da:
e0:1d:3a:7d:cf:2f:a9:21:83:bd:04:9a:98:a5:77:
66:97:69:04:2e:05:5d:0b:ad:ec:6d:04:0f:ba:6b:
bd:ff:c8:f8:45:97:17:69:9e:9d:a2:65:b1:51:8b:
8d:bf:f0:fe:24:27:ee:cc:0a:49:14:4c:d1:b0:be:
02:58:23:ed:af:95:c1:87:76:59:68:a4:41:69:78:
d5:f5:ac:70:db:c1:4c:8d:ad:c7:ab:e0:b7:3e:1b:
a0:72:9c:18:16:46:87:50:a7:28:de:46:fb:39:42:
e6:9c:b1:da:35:11:ff:f1:fd:5d:d8:f4:20:34:06:
ab:15:f8:dd:72:58:95:f1:e3:6a:1c:5f:68:86:69:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C1:56:70:F5:E6:A7:FC:0A:FE:62:24:FE:CC:CB:C3:23:A0:E4:35
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:55:ba:c0:fa:10:67:a0:5e:c6:1a:81:ec:be:ab:ff:45:3c:
67:a2:b1:40:cd:18:08:5b:25:78:71:c0:8d:e9:4e:a2:99:56:
30:91:b7:27:56:d5:d0:84:fe:96:4d:20:a6:a5:0e:75:4d:82:
9d:6d:7b:00:1d:5a:ec:a2:1c:fb:35:ec:8f:5b:1c:6a:3d:f1:
db:42:34:d0:bb:19:d3:b5:e8:cb:ec:8b:e9:75:99:45:08:59:
a1:0c:bf:6a:c1:35:43:f7:f8:93:8e:20:c1:93:52:51:f3:d2:
39:88:f0:3a:69:2b:da:5e:a7:c1:68:e8:47:9b:92:65:fd:42:
7b:ba:88:59:2f:6a:46:a6:9d:f7:bc:2f:38:f2:8c:75:da:40:
22:86:24:d6:1d:b4:f4:b9:04:90:4f:7c:14:53:15:df:b2:20:
c3:86:e9:06:5e:4e:af:96:57:b5:02:b3:5d:89:a7:34:7b:3d:
7d:b8:c9:51:fd:f3:e3:26:f0:c6:8f:39:31:90:be:54:f2:34:
08:e8:12:35:23:ab:a1:1c:e9:40:ea:b9:27:53:c5:22:bb:ed:
63:e0:ea:ed:84:d7:20:4f:67:3d:a2:29:03:12:0f:b1:ae:70:
93:71:5c:2d:59:84:de:bb:55:fd:b9:04:c1:ff:27:93:52:e8:
4b:ec:80:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz44ehjRMxJSv8e7CsECDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDk2ZTM3NDA5MmNjMzAwYmQwYmIwNmM0MTY0MDkzMmVj
ZjhiNDkwHhcNMjUwODA0MDcwMjI3WhcNMjUwODA1MDcwMjI3WjAzMTEwLwYDVQQD
EygxM2MxNTY3MGY1ZTZhN2ZjMGFmZTYyMjRmZWNjY2JjMzIzYTBlNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMK/AllY5LNuPqmYA/UpSx867mgM
6VClwcFj9EkJLGCZ8xjTrdvJICWndBF7hauXMNW/HAg57rReksxX5Lynk+94i6uP
leM+peFZe7zpZ6Vb6aV8s607kwhlvKKVX1YodB9GayWvDkUJC65Vz6gym5avB6T0
dNrgHTp9zy+pIYO9BJqYpXdml2kELgVdC63sbQQPumu9/8j4RZcXaZ6domWxUYuN
v/D+JCfuzApJFEzRsL4CWCPtr5XBh3ZZaKRBaXjV9axw28FMja3Hq+C3PhugcpwY
FkaHUKco3kb7OULmnLHaNRH/8f1d2PQgNAarFfjdcliV8eNqHF9ohmk48wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPBVnD15qf8Cv5iJP7My8MjoOQ1MB8GA1UdIwQY
MBaAFGAJbjdAkswwC9C7BsQWQJMuz4tJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85MWNmZTctNWMyZC00NzRhLWI1ODct
YzQ1ODUyYzdiZTIwLzEvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85MWNmZTctNWMyZC00NzRhLWI1ODctYzQ1ODUyYzdiZTIw
LzEvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVW6wPoQ
Z6BexhqB7L6r/0U8Z6KxQM0YCFsleHHAjelOoplWMJG3J1bV0IT+lk0gpqUOdU2C
nW17AB1a7KIc+zXsj1scaj3x20I00LsZ07Xoy+yL6XWZRQhZoQy/asE1Q/f4k44g
wZNSUfPSOYjwOmkr2l6nwWjoR5uSZf1Ce7qIWS9qRqad97wvOPKMddpAIoYk1h20
9LkEkE98FFMV37Igw4bpBl5Or5ZXtQKzXYmnNHs9fbjJUf3z4ybwxo85MZC+VPI0
COgSNSOroRzpQOq5J1PFIrvtY+Dq7YTXIE9nPaIpAxIPsa5wk3FcLVmE3rtV/bkE
wf8nk1LoS+yAKQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:14 2025 by rpki-client