Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: XfrdtHISZjps+YWKAX1G/r4FDci07JqPXRK7Rk7Y9Tk=
Subject key identifier: 10:78:CD:DF:23:91:CC:1A:CB:77:15:0C:9A:B5:25:E4:00:C0:64:DB
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 01976F9A774AABF01C249A99AF56499B39B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 18:01:23 +0000
Manifest this update: Sat 14 Jun 2025 18:01:23 +0000
Manifest next update: Sun 15 Jun 2025 18:01:23 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: d6ev5Lq_SgXWZaDiFmTX8HhBeK8.roa (hash: 7NMCb/zeY3TNsahsQ59GZgDuhRzC5SGnnyyZpSOipqs=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: UxxfdkWoV/W3aqRyO/SGXNHiCwYa6o8V1xFGRIWBbDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:77:4a:ab:f0:1c:24:9a:99:af:56:49:9b:39:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jun 14 18:01:23 2025 GMT
Not After : Jun 15 18:01:23 2025 GMT
Subject: CN=1078cddf2391cc1acb77150c9ab525e400c064db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:2a:7d:70:65:8c:43:b5:c5:d1:51:bf:8f:
98:5b:3f:06:fb:e5:40:4d:f1:8e:40:a4:6b:37:f0:
15:34:5e:23:f9:67:95:96:99:2e:73:a3:97:fa:29:
2d:ca:ef:9d:89:81:ed:9d:0c:4d:2c:46:ea:43:c0:
b6:3e:d0:66:65:cc:80:4e:8a:b7:05:58:62:66:87:
46:8c:22:76:e4:df:3e:55:7b:df:4d:f5:a7:6d:9c:
c1:65:0d:22:bd:9b:46:fb:a6:b4:5b:b7:09:f1:2f:
5f:94:63:20:58:ae:17:bf:38:37:33:bd:f6:01:ce:
45:c9:8e:61:75:98:7f:27:b3:1c:0d:87:bb:f7:ac:
78:38:02:58:89:6f:54:b1:7f:ea:5b:bd:27:3c:40:
17:d3:c2:58:0d:fe:b0:39:23:7b:ae:73:3f:c9:5d:
ad:b8:2a:01:d1:fb:a0:ff:65:8a:c3:73:84:63:3f:
8d:1b:04:8a:b6:97:ed:45:f6:72:a9:8f:80:d5:93:
11:fe:de:f3:cc:05:88:59:1b:fa:ee:46:36:8a:0a:
be:9c:a4:e5:d8:d1:d3:cc:0c:f9:41:78:ba:34:a3:
1d:1e:3f:a6:1b:a7:4c:cf:3d:e4:95:2f:b9:a7:2a:
f7:35:41:d7:40:36:e7:34:e3:8c:64:e6:2f:19:ec:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:78:CD:DF:23:91:CC:1A:CB:77:15:0C:9A:B5:25:E4:00:C0:64:DB
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:be:7f:e1:98:01:4a:5b:05:a5:de:75:2a:ab:64:0e:10:f9:
e1:93:e5:a2:14:88:43:37:7e:6d:ed:6b:d3:c4:3a:33:9a:33:
32:81:e3:04:6d:69:d1:0a:05:20:9d:a7:f6:53:cf:c2:07:c1:
22:24:e9:99:ae:52:db:d8:64:4d:c3:89:bf:5e:e7:71:b7:3c:
b8:38:87:ef:f4:44:1b:4c:7c:4c:99:89:70:ff:ba:e1:1b:7f:
62:12:27:c5:ab:c9:ca:1f:9d:47:37:d1:12:ad:a5:bf:4b:04:
8e:8d:10:2e:60:5f:46:fc:e4:8a:12:0d:94:48:8a:92:1f:a6:
82:03:a5:13:06:e3:e3:40:9f:44:24:0c:45:dd:db:13:78:82:
ce:b1:c5:99:cd:e0:37:03:10:d2:a1:69:13:30:f8:fd:62:84:
b7:be:6b:8b:53:be:31:38:95:87:ac:44:cc:c7:6e:39:73:5b:
f3:5b:08:c7:4e:ea:2e:ee:17:25:ec:30:46:e8:f5:94:c1:e9:
94:4b:48:bf:a9:cb:28:3d:60:09:42:72:cd:75:43:75:e4:ce:
78:67:59:cb:de:61:95:3e:91:b7:be:ac:c6:01:5e:eb:78:0f:
8a:39:4f:a0:f9:dd:cf:ce:a7:74:30:f5:15:db:87:ac:93:7e:
b8:24:1a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmndKq/AcJJqZr1ZJmzm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy
NDlhMzMwHhcNMjUwNjE0MTgwMTIzWhcNMjUwNjE1MTgwMTIzWjAzMTEwLwYDVQQD
EygxMDc4Y2RkZjIzOTFjYzFhY2I3NzE1MGM5YWI1MjVlNDAwYzA2NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfQqfXBljEO1xdFRv4+YWz8G++VA
TfGOQKRrN/AVNF4j+WeVlpkuc6OX+iktyu+diYHtnQxNLEbqQ8C2PtBmZcyAToq3
BVhiZodGjCJ25N8+VXvfTfWnbZzBZQ0ivZtG+6a0W7cJ8S9flGMgWK4Xvzg3M732
Ac5FyY5hdZh/J7McDYe796x4OAJYiW9UsX/qW70nPEAX08JYDf6wOSN7rnM/yV2t
uCoB0fug/2WKw3OEYz+NGwSKtpftRfZyqY+A1ZMR/t7zzAWIWRv67kY2igq+nKTl
2NHTzAz5QXi6NKMdHj+mG6dMzz3klS+5pyr3NUHXQDbnNOOMZOYvGeyo4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB4zd8jkcway3cVDJq1JeQAwGTbMB8GA1UdIwQY
MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt
MzVlZDViNTNkYTA1LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1
LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr5/4ZgB
SlsFpd51KqtkDhD54ZPlohSIQzd+be1r08Q6M5ozMoHjBG1p0QoFIJ2n9lPPwgfB
IiTpma5S29hkTcOJv17ncbc8uDiH7/REG0x8TJmJcP+64Rt/YhInxavJyh+dRzfR
Eq2lv0sEjo0QLmBfRvzkihINlEiKkh+mggOlEwbj40CfRCQMRd3bE3iCzrHFmc3g
NwMQ0qFpEzD4/WKEt75ri1O+MTiVh6xEzMduOXNb81sIx07qLu4XJewwRuj1lMHp
lEtIv6nLKD1gCUJyzXVDdeTOeGdZy95hlT6Rt76sxgFe63gPijlPoPndz86ndDD1
FduHrJN+uCQayA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:17:45 2025 by rpki-client