Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: 3QOeBDAykY48m2ryFxkSYVyzeim/zO2qJT/EEPbLxqI=
Subject key identifier: 14:59:0F:34:20:07:3B:2D:B0:F8:02:E6:3B:37:16:64:CB:60:1D:99
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 01976961A21A980AB5EB2A8AE6BC0E6D4B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 1428
Signing time: Fri 13 Jun 2025 13:01:35 +0000
Manifest this update: Fri 13 Jun 2025 13:01:35 +0000
Manifest next update: Sat 14 Jun 2025 13:01:35 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: bFNrxri5aKGx/KsjWhl79+Bx0Pepst80uzunFhKa33Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:a2:1a:98:0a:b5:eb:2a:8a:e6:bc:0e:6d:4b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Jun 13 13:01:35 2025 GMT
Not After : Jun 14 13:01:35 2025 GMT
Subject: CN=14590f3420073b2db0f802e63b371664cb601d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:52:3b:a1:24:bb:2e:3b:df:1c:d8:c4:1a:
6b:76:2f:e6:37:44:d1:b3:11:53:81:2f:63:eb:2b:
c4:6b:ac:12:81:08:ef:e2:0b:62:49:30:88:10:f1:
e2:d4:4a:34:46:f1:ea:e6:ea:89:7a:5c:79:c1:c2:
7c:63:c6:f7:a8:05:ec:ad:48:64:62:84:5e:77:20:
37:f4:8b:72:c6:95:63:81:53:d8:50:5b:88:93:d5:
bb:a1:46:82:66:30:c1:59:15:5c:d5:eb:7e:31:38:
c1:b9:bb:1c:80:bd:3a:d7:9d:17:54:5e:c2:32:e0:
60:77:a7:ff:57:4b:8a:e8:b7:cb:5b:50:8f:80:19:
06:99:8c:c4:f4:d9:61:ea:30:9a:f0:57:e1:3b:ea:
3d:68:a8:1c:d6:be:39:91:0d:2c:b2:ca:4c:04:43:
b7:20:96:54:8b:7b:c3:eb:aa:b2:3b:73:c0:7d:92:
f7:90:5a:0d:37:8c:0a:d1:11:bb:f8:42:af:0c:08:
d7:8c:ea:b4:24:67:85:c0:db:dc:d2:e5:96:87:ae:
74:65:5b:6f:6b:c9:06:ca:79:c6:68:42:13:8b:42:
9b:c1:59:b0:b9:ea:5e:74:47:64:97:52:33:c1:60:
9b:83:74:76:fb:66:6f:60:f7:86:fd:60:bc:3b:63:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:59:0F:34:20:07:3B:2D:B0:F8:02:E6:3B:37:16:64:CB:60:1D:99
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ec:7f:4a:be:14:89:4c:d2:5b:8d:f9:26:12:47:9b:2e:42:
be:bf:0a:f8:5b:95:a8:de:29:b4:77:6b:b7:8e:e6:69:c3:68:
f3:a2:ee:be:a8:1f:20:c5:70:a5:8e:86:63:3a:7d:ad:ba:b0:
e4:36:3d:3d:e7:59:11:a7:66:b4:74:12:32:8c:d8:1e:f7:ee:
a7:d1:20:45:aa:82:f2:23:e7:b9:18:33:fd:c1:ce:6e:fa:f2:
74:43:43:4b:dc:cc:5a:dd:1c:d3:f9:e8:de:de:8b:ef:21:7c:
eb:32:d1:81:80:97:3f:66:aa:4a:40:ac:6d:4c:31:c6:26:5c:
1e:65:23:b7:ba:3f:a3:13:06:fa:d2:0a:b7:95:79:2b:b2:00:
88:b4:fb:35:e2:ff:86:cd:1b:49:22:df:1a:1c:28:fd:79:0e:
85:a1:64:84:d0:6e:dd:ff:06:7b:fb:16:23:35:68:f9:63:c7:
f2:0f:f0:a4:11:47:2a:ca:67:1b:cd:f1:48:de:d3:d3:01:46:
a3:84:fa:2d:1e:4f:7f:c9:4e:c5:df:c7:70:f1:ca:05:a1:54:
fa:86:14:b9:fb:70:59:38:ed:9d:10:fe:e0:29:8b:14:6f:f8:
c6:61:4d:55:d8:e9:bd:d0:47:08:ca:0b:7a:b9:56:e5:60:11:
7e:27:e7:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYaIamAq16yqK5rwObUtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNDc5MjFlNDQzMDUyMWE3NzI3ODg4YzEzYmM3YjhlMTA0
Y2JkYmUwHhcNMjUwNjEzMTMwMTM1WhcNMjUwNjE0MTMwMTM1WjAzMTEwLwYDVQQD
EygxNDU5MGYzNDIwMDczYjJkYjBmODAyZTYzYjM3MTY2NGNiNjAxZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhJSO6Ekuy473xzYxBprdi/mN0TR
sxFTgS9j6yvEa6wSgQjv4gtiSTCIEPHi1Eo0RvHq5uqJelx5wcJ8Y8b3qAXsrUhk
YoRedyA39ItyxpVjgVPYUFuIk9W7oUaCZjDBWRVc1et+MTjBubscgL06150XVF7C
MuBgd6f/V0uK6LfLW1CPgBkGmYzE9Nlh6jCa8FfhO+o9aKgc1r45kQ0ssspMBEO3
IJZUi3vD66qyO3PAfZL3kFoNN4wK0RG7+EKvDAjXjOq0JGeFwNvc0uWWh650ZVtv
a8kGynnGaEITi0KbwVmwuepedEdkl1IzwWCbg3R2+2ZvYPeG/WC8O2NjhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRZDzQgBzstsPgC5js3FmTLYB2ZMB8GA1UdIwQY
MBaAFMpHkh5EMFIadyeIjBO8e44QTL2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2It
ODNlNTVjNWY2ZjdkLzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2ItODNlNTVjNWY2Zjdk
LzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+x/Sr4U
iUzSW435JhJHmy5Cvr8K+FuVqN4ptHdrt47macNo86LuvqgfIMVwpY6GYzp9rbqw
5DY9PedZEadmtHQSMozYHvfup9EgRaqC8iPnuRgz/cHObvrydENDS9zMWt0c0/no
3t6L7yF86zLRgYCXP2aqSkCsbUwxxiZcHmUjt7o/oxMG+tIKt5V5K7IAiLT7NeL/
hs0bSSLfGhwo/XkOhaFkhNBu3f8Ge/sWIzVo+WPH8g/wpBFHKspnG83xSN7T0wFG
o4T6LR5Pf8lOxd/HcPHKBaFU+oYUuftwWTjtnRD+4CmLFG/4xmFNVdjpvdBHCMoL
erlW5WARfifntw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:07 2025 by rpki-client