Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
File: yWyebTIz4sJBILhdFxec-10zR4Q.mft (raw, json)
Hash identifier: VX50iN/Xse7x1W8VSS92VGXH17D0Dtuv2RMKLmKi94I=
Subject key identifier: FC:A2:69:16:F9:AF:79:FF:82:DF:4E:43:39:F1:C9:36:90:59:56:4E
Authority key identifier: C9:6C:9E:6D:32:33:E2:C2:41:20:B8:5D:17:17:9C:FB:5D:33:47:84
Certificate issuer: /CN=c96c9e6d3233e2c24120b85d17179cfb5d334784
Certificate serial: 0197782ECA5E03E2DDD682A6A683680DC503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
Manifest number: 0583
Signing time: Mon 16 Jun 2025 10:00:21 +0000
Manifest this update: Mon 16 Jun 2025 10:00:21 +0000
Manifest next update: Tue 17 Jun 2025 10:00:21 +0000
Files and hashes: 1: VZHF0nE3qVwIIpqdmF6QQh7nLs0.roa (hash: mQT6bJlTC89LqB3D9GVMba8EFmBGqFt+S6QYF8yZZKY=)
2: yWyebTIz4sJBILhdFxec-10zR4Q.crl (hash: ClV9QL57Dnrhcg1aDQP0RXufVqy5FJ87Wl0+mtVIQqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:ca:5e:03:e2:dd:d6:82:a6:a6:83:68:0d:c5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c9e6d3233e2c24120b85d17179cfb5d334784
Validity
Not Before: Jun 16 10:00:21 2025 GMT
Not After : Jun 17 10:00:21 2025 GMT
Subject: CN=fca26916f9af79ff82df4e4339f1c9369059564e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:e6:e0:30:4c:9a:75:23:45:5d:22:02:89:
2f:f0:7f:67:2c:21:73:5a:af:16:ab:9b:40:2f:14:
0b:67:10:9f:e9:be:70:18:be:88:6d:a5:22:29:98:
4f:65:a1:59:a1:70:60:d8:54:9e:81:4e:d8:9b:ef:
c9:9c:e2:52:c8:41:45:44:37:f7:f8:40:84:98:a9:
dd:ce:6b:d9:25:83:91:fe:7b:fa:60:55:61:78:2a:
93:38:91:57:d3:ce:9f:1d:3e:9c:17:d7:ab:af:1a:
05:74:fa:d4:41:db:1e:4e:ac:6d:2a:8c:ae:98:f1:
11:fd:d2:50:5e:df:97:6d:4c:4e:73:26:a3:d8:61:
a5:c8:50:92:a8:2e:e7:35:b5:b0:00:2f:d9:38:d2:
29:4c:bb:df:89:7d:44:15:32:84:4d:95:71:97:b6:
0a:36:fa:44:65:f9:e8:9a:64:5c:15:1e:2c:1a:ff:
80:b2:bf:00:f2:94:52:e7:e8:db:47:a0:80:d8:20:
a3:89:7c:7c:d3:ae:56:b6:9c:02:22:02:89:18:26:
34:8d:fd:c4:b3:3b:71:4e:60:c7:da:a0:59:d4:88:
d4:16:7b:b2:b5:4d:e5:75:b4:a9:75:96:6b:b8:64:
07:a5:bc:46:89:85:51:e8:0c:28:7d:b6:f1:9d:bc:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A2:69:16:F9:AF:79:FF:82:DF:4E:43:39:F1:C9:36:90:59:56:4E
X509v3 Authority Key Identifier:
keyid:C9:6C:9E:6D:32:33:E2:C2:41:20:B8:5D:17:17:9C:FB:5D:33:47:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f2:fb:7b:17:4a:b6:55:dd:34:3d:61:5a:76:d7:c9:1e:b6:
00:5e:56:31:d3:f2:5a:70:08:8b:30:4e:1c:96:72:c7:8d:4e:
2a:54:07:07:30:05:5e:e2:d0:6a:a0:58:3c:de:b8:25:75:64:
f5:73:ff:be:b4:f6:ff:87:95:cb:2b:c0:23:0d:80:40:d6:8a:
a7:c0:91:5c:87:43:92:2f:51:4d:4c:49:24:73:dc:fe:fb:31:
33:6f:f0:24:ec:12:cd:78:84:cc:09:db:2f:a9:7f:98:20:9f:
51:b9:1a:1c:a0:5a:3b:21:32:16:6a:c9:ef:ca:7f:3c:8f:f5:
40:f1:b6:93:be:b5:a2:2d:94:22:65:d6:33:7a:eb:55:aa:c5:
ee:f2:8c:81:ba:76:90:b5:0d:51:f4:74:2e:c6:c8:7e:0b:a3:
ae:32:e5:6b:6b:7e:62:de:83:7a:4a:47:6d:0c:fc:c6:c2:58:
82:83:38:44:da:cd:33:41:1a:46:86:5d:3f:a0:a9:f3:4b:3f:
eb:70:59:59:ad:ab:92:fd:35:70:4d:bf:2b:0b:e2:6a:47:c6:
e4:ee:d4:9f:2b:97:90:05:7f:73:cd:6b:f4:59:e0:0a:97:ef:
73:96:84:68:43:20:0d:ea:18:6d:f2:af:b0:38:c5:6a:f5:e7:
bf:bc:9a:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4LspeA+Ld1oKmpoNoDcUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NmM5ZTZkMzIzM2UyYzI0MTIwYjg1ZDE3MTc5Y2ZiNWQz
MzQ3ODQwHhcNMjUwNjE2MTAwMDIxWhcNMjUwNjE3MTAwMDIxWjAzMTEwLwYDVQQD
EyhmY2EyNjkxNmY5YWY3OWZmODJkZjRlNDMzOWYxYzkzNjkwNTk1NjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPnm4DBMmnUjRV0iAokv8H9nLCFz
Wq8Wq5tALxQLZxCf6b5wGL6IbaUiKZhPZaFZoXBg2FSegU7Ym+/JnOJSyEFFRDf3
+ECEmKndzmvZJYOR/nv6YFVheCqTOJFX086fHT6cF9errxoFdPrUQdseTqxtKoyu
mPER/dJQXt+XbUxOcyaj2GGlyFCSqC7nNbWwAC/ZONIpTLvfiX1EFTKETZVxl7YK
NvpEZfnommRcFR4sGv+Asr8A8pRS5+jbR6CA2CCjiXx8065WtpwCIgKJGCY0jf3E
sztxTmDH2qBZ1IjUFnuytU3ldbSpdZZruGQHpbxGiYVR6AwofbbxnbypoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyiaRb5r3n/gt9OQznxyTaQWVZOMB8GA1UdIwQY
MBaAFMlsnm0yM+LCQSC4XRcXnPtdM0eEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVd5ZWJUSXo0c0pCSUxoZEZ4ZWMtMTB6UjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iZDlmM2MtOWEwMy00MjBkLThhMjkt
ZDA5NGRmYTM2NGQ2LzEveVd5ZWJUSXo0c0pCSUxoZEZ4ZWMtMTB6UjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iZDlmM2MtOWEwMy00MjBkLThhMjktZDA5NGRmYTM2NGQ2
LzEveVd5ZWJUSXo0c0pCSUxoZEZ4ZWMtMTB6UjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfL7exdK
tlXdND1hWnbXyR62AF5WMdPyWnAIizBOHJZyx41OKlQHBzAFXuLQaqBYPN64JXVk
9XP/vrT2/4eVyyvAIw2AQNaKp8CRXIdDki9RTUxJJHPc/vsxM2/wJOwSzXiEzAnb
L6l/mCCfUbkaHKBaOyEyFmrJ78p/PI/1QPG2k761oi2UImXWM3rrVarF7vKMgbp2
kLUNUfR0LsbIfgujrjLla2t+Yt6DekpHbQz8xsJYgoM4RNrNM0EaRoZdP6Cp80s/
63BZWa2rkv01cE2/KwviakfG5O7UnyuXkAV/c81r9FngCpfvc5aEaEMgDeoYbfKv
sDjFavXnv7ya3Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:15:52 2025 by rpki-client