Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: 0+zE2echea+ULB+Dm9tdEh+l26cJNqBWmReS2xvxb8o=
Subject key identifier: 4A:7F:B2:58:34:52:C0:15:CD:2C:ED:74:19:53:9F:03:8F:94:63:7F
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 01976DABADEE6EE0753C5584777484C09377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 07BC
Signing time: Sat 14 Jun 2025 09:00:56 +0000
Manifest this update: Sat 14 Jun 2025 09:00:56 +0000
Manifest next update: Sun 15 Jun 2025 09:00:56 +0000
Files and hashes: 1: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: L26YvXbMdGqu2vNhod/KoKmFrfnNvFcmglqGDXNoU0I=)
3: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:ad:ee:6e:e0:75:3c:55:84:77:74:84:c0:93:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Jun 14 09:00:56 2025 GMT
Not After : Jun 15 09:00:56 2025 GMT
Subject: CN=4a7fb2583452c015cd2ced7419539f038f94637f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:d9:d6:0e:fa:a2:ee:df:d1:7d:d0:fb:69:
3b:ab:a6:fa:c5:0c:09:eb:1d:b0:2b:53:17:c9:a2:
22:4f:7a:83:7d:06:64:dd:e6:a8:61:b3:41:de:24:
2d:fb:3b:3b:11:a1:44:0f:aa:54:06:55:b9:8a:c6:
16:7d:48:0d:1f:67:1b:d0:ef:94:59:53:db:3d:91:
56:d9:48:d7:4f:41:01:d8:6c:ca:01:14:6c:a8:6f:
69:dc:f4:12:d5:69:98:89:72:2e:e1:cc:6e:0e:ed:
49:b3:dc:dc:a8:4e:aa:9e:5e:c4:21:20:9a:60:08:
7a:f3:5f:24:8e:15:f1:ad:09:62:d1:de:f4:38:c6:
94:88:2c:6e:2d:ea:ce:88:c8:6d:15:cb:21:20:ef:
8d:64:07:c3:cd:97:24:eb:47:ac:57:4e:fb:f7:7c:
27:0e:b5:23:1c:68:da:6c:e4:c0:39:ca:48:e2:06:
26:75:50:6a:c7:d3:75:7f:c8:56:55:02:a4:b3:22:
79:c0:b4:a7:17:c7:a2:bc:78:d7:fd:5e:41:64:95:
bf:59:25:c1:43:87:ae:63:08:b6:43:ba:05:fd:50:
67:df:86:af:a4:13:ac:4f:99:ed:ca:27:b1:e0:00:
55:37:43:53:77:43:98:39:46:88:62:c0:c3:a9:e2:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:B2:58:34:52:C0:15:CD:2C:ED:74:19:53:9F:03:8F:94:63:7F
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:da:18:4f:b9:f9:55:de:35:97:17:49:d8:37:e2:d3:ab:6a:
c9:d3:d9:b9:00:87:40:77:26:eb:8c:55:f6:28:05:c5:fa:c2:
38:14:b3:9f:a0:79:e3:c8:24:8d:d8:1a:7e:e7:67:05:61:f8:
c6:cc:16:a0:0f:11:20:1c:e3:32:be:0c:ea:4c:7b:c9:af:d6:
48:ab:c6:d6:f9:06:30:e8:ba:c5:67:e7:e9:84:18:25:21:a5:
d9:db:fa:51:db:99:b8:a0:5e:05:8b:38:53:05:e9:b2:f1:63:
d3:09:ef:1c:99:e3:2c:77:c5:d7:bc:6e:ef:70:b2:c1:0f:ad:
4b:f7:8a:0c:0d:36:2f:76:a4:7e:e0:50:84:db:66:05:7d:bd:
84:63:20:6c:b4:6a:b1:d7:a3:c8:92:a6:ec:ba:71:45:e8:91:
ff:dd:5c:9f:52:89:fe:7d:c4:d2:84:77:02:68:4e:1e:c0:a9:
86:79:01:bc:f8:81:70:a9:1e:3b:f6:6b:7c:58:92:a8:c7:c4:
71:0b:39:ee:8d:ab:4d:b1:f7:cc:b7:2b:4c:f1:f0:75:3c:6a:
ad:f5:24:6b:05:b5:26:fb:e2:d1:7e:87:a7:4f:2e:3a:66:fb:
6f:ef:4e:b4:54:ee:43:6a:80:4d:79:30:d1:f3:c4:a4:0a:13:
7c:ba:93:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq63ubuB1PFWEd3SEwJN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj
ZTUzZWQwHhcNMjUwNjE0MDkwMDU2WhcNMjUwNjE1MDkwMDU2WjAzMTEwLwYDVQQD
Eyg0YTdmYjI1ODM0NTJjMDE1Y2QyY2VkNzQxOTUzOWYwMzhmOTQ2MzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtDZ1g76ou7f0X3Q+2k7q6b6xQwJ
6x2wK1MXyaIiT3qDfQZk3eaoYbNB3iQt+zs7EaFED6pUBlW5isYWfUgNH2cb0O+U
WVPbPZFW2UjXT0EB2GzKARRsqG9p3PQS1WmYiXIu4cxuDu1Js9zcqE6qnl7EISCa
YAh6818kjhXxrQli0d70OMaUiCxuLerOiMhtFcshIO+NZAfDzZck60esV07793wn
DrUjHGjabOTAOcpI4gYmdVBqx9N1f8hWVQKksyJ5wLSnF8eivHjX/V5BZJW/WSXB
Q4euYwi2Q7oF/VBn34avpBOsT5ntyiex4ABVN0NTd0OYOUaIYsDDqeI0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp/slg0UsAVzSztdBlTnwOPlGN/MB8GA1UdIwQY
MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt
ZDUyYTE4OTg1OTk5LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5
LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNoYT7n5
Vd41lxdJ2Dfi06tqydPZuQCHQHcm64xV9igFxfrCOBSzn6B548gkjdgafudnBWH4
xswWoA8RIBzjMr4M6kx7ya/WSKvG1vkGMOi6xWfn6YQYJSGl2dv6UduZuKBeBYs4
UwXpsvFj0wnvHJnjLHfF17xu73CywQ+tS/eKDA02L3akfuBQhNtmBX29hGMgbLRq
sdejyJKm7LpxReiR/91cn1KJ/n3E0oR3AmhOHsCphnkBvPiBcKkeO/ZrfFiSqMfE
cQs57o2rTbH3zLcrTPHwdTxqrfUkawW1Jvvi0X6Hp08uOmb7b+9OtFTuQ2qATXkw
0fPEpAoTfLqTog==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:56 2025 by rpki-client