Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
File: yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft (raw, json)
Hash identifier: KitBaAcOJm/9pyK0KGn7oESKP8+9DRDch2C0weS3c1M=
Subject key identifier: 6F:89:29:C3:3C:1D:90:07:52:3D:A4:EE:C7:64:F7:20:0C:A7:09:F3
Authority key identifier: CA:BF:19:34:FF:E9:BF:9C:E3:51:57:2E:D2:EB:82:07:CB:55:53:58
Certificate issuer: /CN=cabf1934ffe9bf9ce351572ed2eb8207cb555358
Certificate serial: 019827EC203AD3D576D001074848A9D19E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
Manifest number: 41
Signing time: Sun 20 Jul 2025 13:00:42 +0000
Manifest this update: Sun 20 Jul 2025 13:00:42 +0000
Manifest next update: Mon 21 Jul 2025 13:00:42 +0000
Files and hashes: 1: yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl (hash: NmkQYZhsk0+r7v69VqS2rPrl8cghokA+bjTbA/i7c9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:20:3a:d3:d5:76:d0:01:07:48:48:a9:d1:9e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabf1934ffe9bf9ce351572ed2eb8207cb555358
Validity
Not Before: Jul 20 13:00:42 2025 GMT
Not After : Jul 21 13:00:42 2025 GMT
Subject: CN=6f8929c33c1d9007523da4eec764f7200ca709f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:63:bb:d6:32:2f:29:01:47:cd:5b:a6:47:
89:e1:4c:94:ad:ff:82:7d:fd:d6:a1:9a:30:b6:8a:
72:3d:39:cf:f3:80:00:2e:a0:d7:4b:12:d5:8e:94:
41:63:14:1e:06:53:3a:e0:29:7a:53:24:56:47:0e:
cb:48:c1:5e:20:87:0d:81:b4:09:06:3b:e9:c2:e0:
84:21:2c:a5:3c:e8:11:36:24:ef:62:80:2a:ff:9c:
6e:da:7e:12:50:ff:a2:25:f7:bb:2b:4c:05:89:4e:
e2:3d:07:a4:d2:77:fd:05:62:a2:28:51:67:2d:42:
2c:86:d3:46:0c:7e:2c:fd:9b:7e:82:96:b9:fb:43:
96:24:d2:dd:c3:61:0e:29:7f:e9:db:84:50:1d:82:
45:45:fe:b7:28:01:94:28:d5:73:fa:a7:94:97:4b:
9f:c2:d9:51:83:14:0b:fc:74:77:71:97:7c:a6:c6:
18:87:d4:45:73:d7:b1:e0:2a:a0:ff:a3:a7:fb:6c:
ea:d0:93:91:22:7c:67:e8:a3:a9:3d:9b:3f:9c:d5:
c7:68:e8:b6:af:b1:8a:2b:09:e9:7e:df:dc:5a:33:
25:db:7b:6c:4a:9b:43:51:0a:53:81:68:46:7c:b6:
71:fb:6f:f6:84:f6:8a:64:98:48:40:28:33:7b:2a:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:89:29:C3:3C:1D:90:07:52:3D:A4:EE:C7:64:F7:20:0C:A7:09:F3
X509v3 Authority Key Identifier:
keyid:CA:BF:19:34:FF:E9:BF:9C:E3:51:57:2E:D2:EB:82:07:CB:55:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:83:e9:1e:fc:79:85:71:55:22:ff:5a:33:39:97:ca:d6:e8:
10:86:ed:13:49:01:1f:59:79:52:c3:75:9e:a4:1e:46:eb:56:
e0:27:07:f7:e5:52:18:28:94:b6:15:07:16:88:21:d7:2b:53:
cf:31:a1:f4:a0:24:64:4c:1e:98:da:14:b6:67:51:a9:55:ba:
85:96:bb:8e:8e:25:f0:b7:14:6e:1a:0d:01:18:0b:74:bd:ee:
83:d4:cc:e5:a7:6c:ee:40:c5:85:d0:4d:f6:b9:b6:5b:2a:21:
8d:e4:26:ae:8e:56:2e:05:3f:4b:0c:ba:18:ce:a0:f1:aa:3c:
9f:7c:1b:55:ec:ca:d2:03:3b:61:95:41:92:fd:94:6f:3c:7f:
e8:fe:c4:49:42:a7:59:25:7e:18:df:7b:f1:40:d1:99:c9:13:
f4:cc:a8:71:b5:7f:fd:c6:09:91:c1:b7:2b:38:6a:e4:da:7c:
43:95:2d:44:ee:75:6b:7e:09:e2:18:80:f0:c6:f2:21:34:eb:
e3:39:77:f0:67:fc:f8:ec:fd:47:90:4a:33:af:bd:e1:51:59:
9f:46:23:ad:4d:d4:5e:aa:aa:0a:db:79:88:2b:db:69:af:21:
f7:45:8d:59:3d:6f:07:03:24:19:19:1a:47:d6:85:ce:a4:4e:
fa:6a:b0:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgn7CA609V20AEHSEip0Z6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYmYxOTM0ZmZlOWJmOWNlMzUxNTcyZWQyZWI4MjA3Y2I1
NTUzNTgwHhcNMjUwNzIwMTMwMDQyWhcNMjUwNzIxMTMwMDQyWjAzMTEwLwYDVQQD
Eyg2Zjg5MjljMzNjMWQ5MDA3NTIzZGE0ZWVjNzY0ZjcyMDBjYTcwOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLBju9YyLykBR81bpkeJ4UyUrf+C
ff3WoZowtopyPTnP84AALqDXSxLVjpRBYxQeBlM64Cl6UyRWRw7LSMFeIIcNgbQJ
BjvpwuCEISylPOgRNiTvYoAq/5xu2n4SUP+iJfe7K0wFiU7iPQek0nf9BWKiKFFn
LUIshtNGDH4s/Zt+gpa5+0OWJNLdw2EOKX/p24RQHYJFRf63KAGUKNVz+qeUl0uf
wtlRgxQL/HR3cZd8psYYh9RFc9ex4Cqg/6On+2zq0JORInxn6KOpPZs/nNXHaOi2
r7GKKwnpft/cWjMl23tsSptDUQpTgWhGfLZx+2/2hPaKZJhIQCgzeypdkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+JKcM8HZAHUj2k7sdk9yAMpwnzMB8GA1UdIwQY
MBaAFMq/GTT/6b+c41FXLtLrggfLVVNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXI4Wk5QX3B2NXpqVVZjdTB1dUNCOHRWVTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85OGQ2YmItMGE4OS00OGM0LWI5MzIt
NWIzODkzNDNkYmM5LzEveXI4Wk5QX3B2NXpqVVZjdTB1dUNCOHRWVTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85OGQ2YmItMGE4OS00OGM0LWI5MzItNWIzODkzNDNkYmM5
LzEveXI4Wk5QX3B2NXpqVVZjdTB1dUNCOHRWVTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4PpHvx5
hXFVIv9aMzmXytboEIbtE0kBH1l5UsN1nqQeRutW4CcH9+VSGCiUthUHFogh1ytT
zzGh9KAkZEwemNoUtmdRqVW6hZa7jo4l8LcUbhoNARgLdL3ug9TM5ads7kDFhdBN
9rm2WyohjeQmro5WLgU/Swy6GM6g8ao8n3wbVezK0gM7YZVBkv2Ubzx/6P7ESUKn
WSV+GN978UDRmckT9MyocbV//cYJkcG3Kzhq5Np8Q5UtRO51a34J4hiA8MbyITTr
4zl38Gf8+Oz9R5BKM6+94VFZn0YjrU3UXqqqCtt5iCvbaa8h90WNWT1vBwMkGRka
R9aFzqRO+mqwsw==
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:29:42 2025 by rpki-client