Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File: _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier: On1P26mDuSRPd3wWkchLciKtdiVbdJ9Hoh9YTQ8jrf4=
Subject key identifier: E0:6F:B7:82:3A:62:49:4B:B9:B7:C6:68:78:E3:5A:3E:28:58:E3:B0
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial: 019775652C8F735F1CADF9A137E1C1D039AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number: 044E
Signing time: Sun 15 Jun 2025 21:00:54 +0000
Manifest this update: Sun 15 Jun 2025 21:00:54 +0000
Manifest next update: Mon 16 Jun 2025 21:00:54 +0000
Files and hashes: 1: LatVmLe7_3HhJVu7rsLTHeovBKs.roa (hash: IGGEFB71BgJP92qEL3zGMAOiHYa+Of8dpxdn55D3Bac=)
2: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: 3ZeVZ2ePSa2zJempdIJcmeyiCbTVDKQMW4WQYc58ot0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:2c:8f:73:5f:1c:ad:f9:a1:37:e1:c1:d0:39:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Validity
Not Before: Jun 15 21:00:54 2025 GMT
Not After : Jun 16 21:00:54 2025 GMT
Subject: CN=e06fb7823a62494bb9b7c66878e35a3e2858e3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:37:61:0a:7f:5d:fd:ac:4a:02:ea:69:9c:30:
11:96:45:6d:24:9d:fe:38:10:26:36:35:7d:de:c5:
48:03:46:c0:6a:b4:2e:d5:89:82:e4:77:07:04:29:
b0:8e:e8:ab:99:59:60:99:1c:b6:96:07:8b:c2:76:
3c:56:ea:f8:4a:a9:24:49:77:28:8e:fc:41:89:e0:
49:cc:08:fd:65:69:96:d7:85:de:1f:b1:dc:6f:2d:
3c:3f:40:3e:ef:10:39:6c:e4:fc:71:2b:b7:2b:6f:
5a:f2:12:e1:ae:9b:a5:10:f8:2c:44:19:97:74:ff:
8e:ec:a7:39:38:85:03:fa:3e:9d:74:72:0d:0f:90:
92:ea:66:f0:40:f3:7d:c7:90:33:42:84:04:1b:d0:
18:29:11:72:fd:04:09:77:5b:be:a8:3b:f4:51:45:
b3:94:5d:dd:0d:c7:fc:82:2e:f8:20:c4:bd:35:2e:
37:6b:32:a7:b4:a9:78:e3:87:fb:2b:ba:7c:77:b4:
33:d7:6d:9b:97:9d:f0:51:3f:ed:ca:d8:1b:0d:21:
8c:3f:37:1b:64:36:32:18:52:32:d6:ee:12:53:62:
35:7e:69:b4:00:cb:5e:6a:c0:1d:10:1a:68:f2:c4:
af:1b:01:c3:fb:aa:bb:f8:ba:75:95:aa:b8:d4:f1:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6F:B7:82:3A:62:49:4B:B9:B7:C6:68:78:E3:5A:3E:28:58:E3:B0
X509v3 Authority Key Identifier:
keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f7:c6:35:34:20:8d:4b:07:df:0a:bb:81:bb:b3:3b:9a:d6:da:
92:bf:38:9d:97:74:2f:9d:23:c2:87:b3:f9:a2:0a:47:45:b3:
06:fe:86:b5:ec:34:14:05:64:5b:21:9d:f5:0c:1b:c5:43:df:
62:37:f8:61:28:d2:cf:c3:76:34:dc:67:25:b5:de:de:d8:7b:
a0:fa:06:76:89:67:8d:e0:ed:73:bd:e1:8a:c0:f6:e9:36:f5:
f7:b3:f4:4d:08:bf:98:a6:0d:70:96:46:85:ab:df:7a:46:28:
30:4d:5a:f9:43:2e:81:fd:e6:32:47:5e:86:6b:1b:a1:3d:86:
8c:9d:4c:80:d8:da:5c:b9:b9:a2:95:de:36:b4:0f:ab:1b:d0:
10:20:87:8b:50:59:06:92:cf:07:4c:be:0a:17:06:b1:9d:f6:
f1:b5:95:5e:77:9d:ec:88:21:8c:54:66:67:b6:7f:07:12:08:
7a:ee:82:cf:55:e0:43:fe:64:58:21:21:69:da:4e:32:02:9c:
dc:94:2a:9c:b4:37:bd:3f:19:73:5b:66:a4:2b:88:6d:1b:80:
b0:68:ea:14:d2:eb:a4:0d:3c:1d:8f:ad:a6:f1:4f:36:1b:5d:
fa:df:18:11:a6:7e:d7:65:50:e6:47:dc:64:fc:76:08:3c:0f:
b7:72:c9:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1ZSyPc18crfmhN+HB0DmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMmRmMjk3ZGIxYWYwMzc2YTVhMmE3MmU2OThhN2ViMjg3
YWYzYWYwHhcNMjUwNjE1MjEwMDU0WhcNMjUwNjE2MjEwMDU0WjAzMTEwLwYDVQQD
EyhlMDZmYjc4MjNhNjI0OTRiYjliN2M2Njg3OGUzNWEzZTI4NThlM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DdhCn9d/axKAuppnDARlkVtJJ3+
OBAmNjV93sVIA0bAarQu1YmC5HcHBCmwjuirmVlgmRy2lgeLwnY8Vur4SqkkSXco
jvxBieBJzAj9ZWmW14XeH7Hcby08P0A+7xA5bOT8cSu3K29a8hLhrpulEPgsRBmX
dP+O7Kc5OIUD+j6ddHIND5CS6mbwQPN9x5AzQoQEG9AYKRFy/QQJd1u+qDv0UUWz
lF3dDcf8gi74IMS9NS43azKntKl444f7K7p8d7Qz122bl53wUT/tytgbDSGMPzcb
ZDYyGFIy1u4SU2I1fmm0AMteasAdEBpo8sSvGwHD+6q7+Lp1laq41PF2WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBvt4I6YklLubfGaHjjWj4oWOOwMB8GA1UdIwQY
MBaAFP8t8pfbGvA3aloqcuaYp+soevOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jZDUxZTgtNjU5NC00YTU4LWJkNTct
MDFmMjhmNGQ0OWY2LzEvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jZDUxZTgtNjU5NC00YTU4LWJkNTctMDFmMjhmNGQ0OWY2
LzEvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA98Y1NCCN
SwffCruBu7M7mtbakr84nZd0L50jwoez+aIKR0WzBv6Gtew0FAVkWyGd9QwbxUPf
Yjf4YSjSz8N2NNxnJbXe3th7oPoGdolnjeDtc73hisD26Tb197P0TQi/mKYNcJZG
havfekYoME1a+UMugf3mMkdehmsboT2GjJ1MgNjaXLm5opXeNrQPqxvQECCHi1BZ
BpLPB0y+ChcGsZ328bWVXned7IghjFRmZ7Z/BxIIeu6Cz1XgQ/5kWCEhadpOMgKc
3JQqnLQ3vT8Zc1tmpCuIbRuAsGjqFNLrpA08HY+tpvFPNhtd+t8YEaZ+12VQ5kfc
ZPx2CDwPt3LJag==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:24:55 2025 by rpki-client