Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
File: y5-GErfxR1ABa4SMQvYN82rYMtk.mft (raw, json)
Hash identifier: EiT4Sc6oFhxPQS0mE8cKUVi3ZTuG7Pz40CjwxJGF7Zo=
Subject key identifier: 76:01:42:C2:31:D8:42:B2:84:D4:55:28:BA:27:CF:1A:E7:52:AA:52
Authority key identifier: CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
Certificate issuer: /CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Certificate serial: 01976F2CA77B3AC58DB11C5831E90D04FD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 16:01:26 +0000
Manifest this update: Sat 14 Jun 2025 16:01:26 +0000
Manifest next update: Sun 15 Jun 2025 16:01:26 +0000
Files and hashes: 1: 35Hkh6WGB56LhQUZWJy4fWu8adc.roa (hash: N+zjw78vBIKP/bKJa3b5qGQ6N/RlG9tWFNOT+GZrtRA=)
2: y5-GErfxR1ABa4SMQvYN82rYMtk.crl (hash: DqXNoZijjlmAM9ZBih4PhtqN9lWWm3J8OKTJ+r8kWp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:a7:7b:3a:c5:8d:b1:1c:58:31:e9:0d:04:fd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Validity
Not Before: Jun 14 16:01:26 2025 GMT
Not After : Jun 15 16:01:26 2025 GMT
Subject: CN=760142c231d842b284d45528ba27cf1ae752aa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:6c:e0:b0:f1:03:b4:fc:b9:9f:be:23:4f:
e8:1b:68:7b:5e:b9:3b:b2:7c:90:53:fb:ee:8b:b7:
98:97:f2:17:ad:74:3e:8c:49:f3:38:c5:aa:a6:a3:
c2:94:03:0a:aa:9e:04:99:32:28:08:9f:6b:c6:f2:
9e:d4:5e:a4:5b:76:5b:05:5d:68:38:68:1c:52:3e:
5d:1f:ac:67:5c:8f:53:37:62:b1:b4:ff:c8:5a:d5:
a0:50:d8:39:36:ee:e9:f1:67:e6:66:00:20:da:67:
9d:97:3f:0f:79:44:cd:43:f1:53:90:6d:77:72:d6:
32:d7:ba:62:c0:dd:ad:b7:6d:ab:58:43:a1:8e:2f:
6d:12:0c:76:91:db:57:d5:c8:58:0f:39:f8:fa:b5:
ba:cf:e3:6c:dd:9f:cf:80:6e:65:20:a2:1e:80:fc:
97:a2:a6:d2:0f:c4:98:5d:bb:4e:e2:6e:a4:14:8e:
cd:c5:18:34:bd:74:b0:5a:1f:30:5a:cd:4e:12:67:
4e:10:9f:0a:32:50:11:d3:81:3a:6d:fc:ec:ca:ac:
48:4e:82:a3:75:94:77:5c:a4:06:11:32:ab:76:8b:
54:80:a9:e1:05:38:87:7b:46:22:c4:a1:a3:9d:4c:
37:73:26:58:a2:f6:78:1c:b4:6a:cb:26:6f:4a:d5:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:01:42:C2:31:D8:42:B2:84:D4:55:28:BA:27:CF:1A:E7:52:AA:52
X509v3 Authority Key Identifier:
keyid:CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:74:e2:67:06:0f:68:ea:e6:17:52:21:36:12:b9:e1:6a:df:
18:9e:9e:ba:83:bc:aa:99:93:86:88:0f:40:73:c8:46:aa:1c:
6b:85:23:5e:eb:d5:1c:17:49:b7:11:a0:e1:ce:06:b6:0d:08:
56:a3:ec:e0:09:ec:f4:20:18:69:bf:92:06:25:5d:0d:a6:71:
3b:3c:02:88:d1:9e:9c:ba:31:ae:90:75:b2:af:05:f2:f4:ea:
1c:1c:02:0e:02:54:e7:39:85:41:8d:42:8d:7b:64:d5:2b:fa:
90:9d:80:3e:7b:b3:e1:64:d5:40:9b:3c:33:c7:a5:81:17:96:
a9:c1:7a:3c:a0:0b:ed:1a:df:70:06:d7:b3:d8:8c:06:7d:9f:
ff:88:2f:f0:1d:5d:ea:d8:e4:4d:d0:3f:59:90:61:af:b2:d9:
9c:60:c2:99:4e:f0:4a:e4:c0:59:12:4c:17:b6:eb:ab:e0:59:
e3:cb:21:3d:c4:39:71:b0:f6:16:97:0a:c3:1b:82:ea:b4:6d:
10:76:34:c1:c9:a4:10:1b:5a:6c:98:cd:dc:7b:e7:65:df:f7:
8b:43:13:25:8b:0b:e7:a6:78:98:d3:8f:db:ba:3a:e8:c4:23:
b2:5b:06:5f:44:85:e1:98:f1:0c:b3:f2:6a:67:74:7e:9e:02:
9b:14:7f:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLKd7OsWNsRxYMekNBP1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOWY4NjEyYjdmMTQ3NTAwMTZiODQ4YzQyZjYwZGYzNmFk
ODMyZDkwHhcNMjUwNjE0MTYwMTI2WhcNMjUwNjE1MTYwMTI2WjAzMTEwLwYDVQQD
Eyg3NjAxNDJjMjMxZDg0MmIyODRkNDU1MjhiYTI3Y2YxYWU3NTJhYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaNs4LDxA7T8uZ++I0/oG2h7Xrk7
snyQU/vui7eYl/IXrXQ+jEnzOMWqpqPClAMKqp4EmTIoCJ9rxvKe1F6kW3ZbBV1o
OGgcUj5dH6xnXI9TN2KxtP/IWtWgUNg5Nu7p8WfmZgAg2medlz8PeUTNQ/FTkG13
ctYy17piwN2tt22rWEOhji9tEgx2kdtX1chYDzn4+rW6z+Ns3Z/PgG5lIKIegPyX
oqbSD8SYXbtO4m6kFI7NxRg0vXSwWh8wWs1OEmdOEJ8KMlAR04E6bfzsyqxIToKj
dZR3XKQGETKrdotUgKnhBTiHe0YixKGjnUw3cyZYovZ4HLRqyyZvStU/SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYBQsIx2EKyhNRVKLonzxrnUqpSMB8GA1UdIwQY
MBaAFMufhhK38UdQAWuEjEL2DfNq2DLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTUtR0VyZnhSMUFCYTRTTVF2WU44MnJZTXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iODQ1MDAtZmZkYi00MmQyLTk0NjUt
YTJlYWRlODM5NTVkLzEveTUtR0VyZnhSMUFCYTRTTVF2WU44MnJZTXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iODQ1MDAtZmZkYi00MmQyLTk0NjUtYTJlYWRlODM5NTVk
LzEveTUtR0VyZnhSMUFCYTRTTVF2WU44MnJZTXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXTiZwYP
aOrmF1IhNhK54WrfGJ6euoO8qpmThogPQHPIRqoca4UjXuvVHBdJtxGg4c4Gtg0I
VqPs4Ans9CAYab+SBiVdDaZxOzwCiNGenLoxrpB1sq8F8vTqHBwCDgJU5zmFQY1C
jXtk1Sv6kJ2APnuz4WTVQJs8M8elgReWqcF6PKAL7RrfcAbXs9iMBn2f/4gv8B1d
6tjkTdA/WZBhr7LZnGDCmU7wSuTAWRJMF7brq+BZ48shPcQ5cbD2FpcKwxuC6rRt
EHY0wcmkEBtabJjN3HvnZd/3i0MTJYsL56Z4mNOP27o66MQjslsGX0SF4ZjxDLPy
amd0fp4CmxR/Tw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:30 2025 by rpki-client