Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: D56xes4dECQwU5SUpzJsSZCaNxxoNHsXa3AYJKuWNiQ=
Subject key identifier: 12:AA:35:8B:1E:26:85:3E:1E:0F:BA:02:27:45:9B:9F:B2:E1:5E:68
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 019768F2D878EE4F6FCBEAB97FE147C5AE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 0E9E
Signing time: Fri 13 Jun 2025 11:00:34 +0000
Manifest this update: Fri 13 Jun 2025 11:00:34 +0000
Manifest next update: Sat 14 Jun 2025 11:00:34 +0000
Files and hashes: 1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: 6aLqbQLlkuwvotWt39ZE2rAw/io+QV3dPm2yPE6TDC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:d8:78:ee:4f:6f:cb:ea:b9:7f:e1:47:c5:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Jun 13 11:00:34 2025 GMT
Not After : Jun 14 11:00:34 2025 GMT
Subject: CN=12aa358b1e26853e1e0fba0227459b9fb2e15e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:61:8f:6f:20:18:bf:e7:e9:98:66:23:58:
30:69:2a:33:16:85:42:b8:a3:57:11:e0:79:9c:96:
22:64:b1:fd:19:7c:b6:d9:d8:20:49:d4:e6:2c:c3:
81:c0:96:6f:22:52:35:5c:b9:00:4a:f1:95:23:4f:
cf:41:3b:d5:37:ad:5d:06:97:af:b3:e2:ae:d3:d5:
e6:ed:16:b7:b9:80:e5:89:5d:c1:bd:90:94:60:e9:
30:d7:69:09:ac:24:28:56:b0:3e:af:7f:ab:74:ca:
98:02:53:52:a6:66:48:4b:ef:0e:8a:2a:f5:02:e4:
b1:9d:f9:2a:22:cb:9e:cf:20:7e:7b:98:ba:af:bd:
9d:aa:70:74:72:f5:24:7c:91:7c:2d:71:98:65:f9:
f7:97:69:fa:b5:c5:ab:10:12:78:38:6e:37:c4:44:
7b:f2:b3:3f:d3:a7:0f:25:68:7f:ab:72:40:b4:d5:
e2:47:57:51:22:d0:58:39:0d:96:22:40:9d:49:3f:
22:ac:1f:46:13:fe:c5:1c:6c:a3:13:88:d5:23:a7:
93:3d:ad:39:b6:43:3d:3e:1e:e0:f3:69:49:05:52:
17:3d:85:b8:92:49:b6:9e:f0:dc:98:b4:cb:e2:81:
49:68:cb:72:b9:cb:17:f3:48:63:f4:1c:67:eb:33:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:35:8B:1E:26:85:3E:1E:0F:BA:02:27:45:9B:9F:B2:E1:5E:68
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:66:70:3b:77:98:e5:22:30:7e:a6:10:43:f1:60:61:67:fe:
04:1f:8f:be:00:b9:fd:00:12:31:fb:e4:5f:81:4f:32:14:1b:
ef:60:01:56:24:4a:62:af:73:ae:20:d6:fb:bf:4f:e2:a9:40:
07:cd:d7:ee:37:1d:a2:77:bf:73:04:9b:17:11:ea:63:60:2b:
f3:7d:58:c4:e6:76:82:5d:ab:69:c1:d6:d7:2e:42:1b:81:88:
61:ef:af:8c:ce:0b:00:55:fb:11:9b:2a:e3:c5:8b:9e:1e:c4:
dd:bf:73:55:64:b1:58:dc:fb:f5:60:1d:39:74:a6:40:d2:9f:
a0:36:19:a0:99:48:34:df:66:83:e9:f4:60:9b:70:cf:ba:49:
d8:ba:eb:39:5a:32:c9:b5:31:ef:a9:c2:b4:00:1e:90:b7:cc:
6f:1c:cb:83:e0:7a:03:43:61:7a:84:4c:8e:7d:6b:3c:f8:ed:
1f:a5:4f:a4:de:00:60:c5:37:07:c5:69:d4:8c:22:13:5b:9b:
84:93:6b:f1:ac:e7:c7:d1:c9:d8:51:45:66:02:a0:4a:a9:54:
66:c3:46:76:b2:a9:25:d1:c8:6c:81:d3:6c:8d:16:62:1c:d2:
61:49:74:b2:19:05:e0:74:4d:99:6d:86:f7:9e:72:a0:3f:8c:
74:9d:cd:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8th47k9vy+q5f+FHxa5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTAyNDNmOTg2MzZmYWEwZmI2YzVhZTZiYWQ5YjBhYmFk
MjM0MzgwHhcNMjUwNjEzMTEwMDM0WhcNMjUwNjE0MTEwMDM0WjAzMTEwLwYDVQQD
EygxMmFhMzU4YjFlMjY4NTNlMWUwZmJhMDIyNzQ1OWI5ZmIyZTE1ZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9lhj28gGL/n6ZhmI1gwaSozFoVC
uKNXEeB5nJYiZLH9GXy22dggSdTmLMOBwJZvIlI1XLkASvGVI0/PQTvVN61dBpev
s+Ku09Xm7Ra3uYDliV3BvZCUYOkw12kJrCQoVrA+r3+rdMqYAlNSpmZIS+8Oiir1
AuSxnfkqIsuezyB+e5i6r72dqnB0cvUkfJF8LXGYZfn3l2n6tcWrEBJ4OG43xER7
8rM/06cPJWh/q3JAtNXiR1dRItBYOQ2WIkCdST8irB9GE/7FHGyjE4jVI6eTPa05
tkM9Ph7g82lJBVIXPYW4kkm2nvDcmLTL4oFJaMtyucsX80hj9Bxn6zNUIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKqNYseJoU+Hg+6AidFm5+y4V5oMB8GA1UdIwQY
MBaAFMsQJD+YY2+qD7bFrmutmwq60jQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mOGViOWMtNWI5OS00Y2VmLTkzZjAt
NDhmMTUxYjUyMzFmLzEveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9mOGViOWMtNWI5OS00Y2VmLTkzZjAtNDhmMTUxYjUyMzFm
LzEveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWZwO3eY
5SIwfqYQQ/FgYWf+BB+PvgC5/QASMfvkX4FPMhQb72ABViRKYq9zriDW+79P4qlA
B83X7jcdone/cwSbFxHqY2Ar831YxOZ2gl2racHW1y5CG4GIYe+vjM4LAFX7EZsq
48WLnh7E3b9zVWSxWNz79WAdOXSmQNKfoDYZoJlINN9mg+n0YJtwz7pJ2LrrOVoy
ybUx76nCtAAekLfMbxzLg+B6A0NheoRMjn1rPPjtH6VPpN4AYMU3B8Vp1IwiE1ub
hJNr8aznx9HJ2FFFZgKgSqlUZsNGdrKpJdHIbIHTbI0WYhzSYUl0shkF4HRNmW2G
955yoD+MdJ3Nrg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:45 2025 by rpki-client