Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: yQpSnfWgVFPzRXeNfAEvz8I76CyUspicnqrNsEpLOD4=
Subject key identifier: B9:67:AC:24:39:D7:ED:87:A5:AE:84:A0:8B:EE:D0:D6:64:2F:53:F1
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 01976929A4FC4C1F3ABE6C9A7EC927C4B2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 12:00:26 +0000
Manifest this update: Fri 13 Jun 2025 12:00:26 +0000
Manifest next update: Sat 14 Jun 2025 12:00:26 +0000
Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=)
2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: tSTT1cUiclyljaNVVR0F4knpPOvaI5IgHgNcOmwJWcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:a4:fc:4c:1f:3a:be:6c:9a:7e:c9:27:c4:b2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Jun 13 12:00:26 2025 GMT
Not After : Jun 14 12:00:26 2025 GMT
Subject: CN=b967ac2439d7ed87a5ae84a08beed0d6642f53f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:aa:4f:40:9e:89:4f:e0:8d:90:06:57:11:
4d:2d:be:70:a3:33:88:89:88:79:8c:84:46:12:92:
c7:65:64:0c:5e:cc:42:a4:d4:66:74:dc:4b:9f:43:
36:91:18:62:bd:6a:aa:15:ec:d5:79:ba:08:f4:e7:
df:1a:32:7c:59:d0:76:9a:b2:00:48:a8:ec:85:ee:
ef:de:56:89:56:1e:35:ec:76:cd:c7:f7:05:0e:6d:
b9:18:27:04:5f:f5:5f:3d:50:d6:61:d8:35:5b:ac:
a4:b0:34:98:52:28:b8:61:1f:83:ee:62:e7:c2:c8:
f0:dc:6c:d7:00:96:c6:3e:6e:05:04:e3:66:aa:17:
cd:7d:3e:ee:ef:26:91:3b:6a:5d:31:74:e2:0b:7c:
12:aa:00:1b:68:61:0f:68:11:88:26:e4:d0:85:4a:
9b:eb:94:52:e9:57:39:fc:98:bd:17:56:f0:e9:5c:
12:ee:46:99:c2:5b:ae:dd:f7:78:3f:09:10:8e:f9:
56:f1:2c:f3:cd:35:14:b4:ff:0b:d8:9b:2f:eb:bf:
52:e4:52:4a:3b:57:47:a2:51:0a:cc:ca:09:2c:90:
d7:60:31:38:d5:aa:75:0e:c8:ec:74:67:b3:60:9d:
d8:44:39:c3:86:51:09:e2:6e:18:ad:04:a2:8e:15:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:67:AC:24:39:D7:ED:87:A5:AE:84:A0:8B:EE:D0:D6:64:2F:53:F1
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:41:ce:a9:e9:35:01:bf:e0:84:26:bf:6c:73:46:71:0b:61:
43:65:77:6f:b0:66:e3:4d:69:4a:df:f9:bc:f8:1b:0c:e5:b8:
83:1b:74:03:b2:f7:35:f1:22:db:22:2d:cb:b1:8f:30:db:4d:
9f:bf:70:ee:b2:ee:70:e4:d4:ab:43:60:f2:d3:95:ef:2d:53:
a1:b4:bb:8f:0c:df:4a:83:1c:e6:2f:9c:44:10:e7:4d:91:70:
b7:c1:98:4f:d0:4f:e1:d7:59:15:96:7d:43:ef:64:bb:73:a1:
be:5d:42:5d:97:62:15:81:0d:54:7c:cb:85:06:ae:26:e3:e2:
9c:7f:95:8a:89:91:ab:89:d2:88:be:dd:da:64:01:fc:b7:f8:
33:55:a9:21:e8:85:e2:97:8b:15:3e:79:6f:ec:0e:79:c3:4c:
f9:ab:12:1c:ca:9f:86:9f:0f:01:1b:31:dc:48:53:97:a3:48:
2e:d3:2c:1c:27:42:ef:07:6f:e3:41:6c:7c:07:83:1f:c9:5a:
6d:33:3a:77:2e:4e:d4:a6:2d:bd:ff:a3:3c:72:73:4a:1b:90:
e1:1e:5d:0e:f4:d3:35:28:2d:bf:4e:02:c2:06:4e:5c:98:09:
b4:bd:8b:32:ea:0b:d4:19:71:1d:3e:92:04:26:d1:3b:29:21:
04:a0:3d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKaT8TB86vmyafsknxLKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZjYwM2YzYTU1YTI5ZTY2MTdmMDk2YjNhNjliZmYwYTM5
MmE5MjgwHhcNMjUwNjEzMTIwMDI2WhcNMjUwNjE0MTIwMDI2WjAzMTEwLwYDVQQD
EyhiOTY3YWMyNDM5ZDdlZDg3YTVhZTg0YTA4YmVlZDBkNjY0MmY1M2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqESqT0CeiU/gjZAGVxFNLb5wozOI
iYh5jIRGEpLHZWQMXsxCpNRmdNxLn0M2kRhivWqqFezVeboI9OffGjJ8WdB2mrIA
SKjshe7v3laJVh417HbNx/cFDm25GCcEX/VfPVDWYdg1W6yksDSYUii4YR+D7mLn
wsjw3GzXAJbGPm4FBONmqhfNfT7u7yaRO2pdMXTiC3wSqgAbaGEPaBGIJuTQhUqb
65RS6Vc5/Ji9F1bw6VwS7kaZwluu3fd4PwkQjvlW8SzzzTUUtP8L2Jsv679S5FJK
O1dHolEKzMoJLJDXYDE41ap1DsjsdGezYJ3YRDnDhlEJ4m4YrQSijhUVFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlnrCQ51+2Hpa6EoIvu0NZkL1PxMB8GA1UdIwQY
MBaAFGL2A/OlWinmYX8Jazppv/CjkqkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80NzA2NWQtMmQ4My00NjQxLTgyMjMt
NDFmMzlhOGMwOWRkLzEvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS80NzA2NWQtMmQ4My00NjQxLTgyMjMtNDFmMzlhOGMwOWRk
LzEvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUHOqek1
Ab/ghCa/bHNGcQthQ2V3b7Bm401pSt/5vPgbDOW4gxt0A7L3NfEi2yIty7GPMNtN
n79w7rLucOTUq0Ng8tOV7y1TobS7jwzfSoMc5i+cRBDnTZFwt8GYT9BP4ddZFZZ9
Q+9ku3Ohvl1CXZdiFYENVHzLhQauJuPinH+ViomRq4nSiL7d2mQB/Lf4M1WpIeiF
4peLFT55b+wOecNM+asSHMqfhp8PARsx3EhTl6NILtMsHCdC7wdv40FsfAeDH8la
bTM6dy5O1KYtvf+jPHJzShuQ4R5dDvTTNSgtv04CwgZOXJgJtL2LMuoL1BlxHT6S
BCbROykhBKA9EQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:06 2025 by rpki-client