Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
File: Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft (raw, json)
Hash identifier: X+q1KbEBkJlGuR7ricyAVQWmLigZgqExP4ttqZRGmJg=
Subject key identifier: 5A:F5:BE:33:D3:70:8D:ED:E6:8C:31:43:78:28:13:D8:B5:E8:DF:9D
Authority key identifier: 62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95
Certificate issuer: /CN=628fe2d2343cf28e227b54f804b2ce032d3d1895
Certificate serial: 0198334B7A0E2D8B3530412DE89558C19B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
Manifest number: 4C
Signing time: Tue 22 Jul 2025 18:00:41 +0000
Manifest this update: Tue 22 Jul 2025 18:00:41 +0000
Manifest next update: Wed 23 Jul 2025 18:00:41 +0000
Files and hashes: 1: Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl (hash: 3zO+ehHO5yPvG+H9miurfBjE4OFsauepLPh1F1uCz+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:4b:7a:0e:2d:8b:35:30:41:2d:e8:95:58:c1:9b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628fe2d2343cf28e227b54f804b2ce032d3d1895
Validity
Not Before: Jul 22 18:00:41 2025 GMT
Not After : Jul 23 18:00:41 2025 GMT
Subject: CN=5af5be33d3708dede68c3143782813d8b5e8df9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:ad:54:fa:4c:34:f4:92:60:38:61:57:c2:
5e:45:41:c2:61:8a:f3:a7:7d:4a:1f:53:46:e8:a3:
21:81:03:cf:a1:30:c2:3b:cf:24:b5:6f:eb:96:cd:
0f:76:fd:38:c9:13:56:eb:b1:9c:f9:d0:43:95:58:
d1:63:22:95:c5:48:de:73:b2:17:30:b0:46:1c:c4:
59:77:62:bf:0e:fe:2f:8a:2a:e2:b1:aa:9d:f4:4e:
60:87:c4:84:87:03:c8:29:e1:44:66:69:de:a6:1e:
cc:27:96:b2:69:23:a3:84:6b:c9:05:18:d0:a1:72:
ba:b0:1a:5d:db:ec:9a:73:a8:bb:5d:8f:f2:cd:a0:
1f:58:dc:25:f8:d1:12:4e:cd:57:05:81:28:75:cc:
98:86:29:a6:8c:21:d8:ed:4a:b5:ca:f1:4a:96:8d:
80:d2:f5:49:57:7a:6c:0e:41:38:38:25:63:8b:63:
f2:19:cd:b0:0b:67:43:4c:0a:2b:20:30:60:79:c2:
36:22:68:63:02:b5:0c:0f:36:0e:04:0f:d1:58:eb:
cd:8a:be:69:6c:99:e5:5f:c5:c4:f6:fd:9a:94:18:
53:d6:42:de:d3:23:67:d7:92:4c:a1:77:09:cc:04:
02:11:75:79:1e:e4:d5:3b:b9:b7:c4:6c:00:79:3b:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:BE:33:D3:70:8D:ED:E6:8C:31:43:78:28:13:D8:B5:E8:DF:9D
X509v3 Authority Key Identifier:
keyid:62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ad:9c:15:df:70:5c:b8:68:67:bb:89:6d:1c:ad:59:2f:b5:
cc:09:5d:64:82:0d:dd:7b:4b:92:0d:df:13:63:53:d6:da:df:
a3:15:9c:87:4c:2d:d7:dd:2b:4e:13:46:92:d6:d8:9f:c4:3e:
31:e4:46:59:39:ec:b4:08:c5:c1:4b:5d:05:d2:42:c2:33:a5:
20:a8:e5:e2:71:7a:05:3d:fb:75:f6:0a:3c:fb:68:5d:c3:b3:
74:f3:d8:e4:9d:c7:85:26:ba:32:ab:e9:df:9a:4d:75:a7:91:
f4:b1:34:b9:0e:2a:e0:5d:42:87:94:41:ed:f1:ef:45:ac:5e:
b9:00:1a:96:58:96:a5:d9:f2:cc:35:9f:27:f5:2d:a7:93:aa:
56:fa:d7:c2:64:99:6e:1c:a6:99:55:a5:bf:a6:23:92:7a:40:
8f:58:48:e7:7a:41:3b:59:2b:28:ec:b3:96:7c:6d:9b:84:e5:
e8:91:14:15:b3:d7:cb:9a:90:29:5b:5d:e2:43:04:86:c0:c2:
f7:49:94:58:a4:1f:be:54:f4:b4:bc:5d:38:15:19:81:2a:3b:
66:16:af:93:a5:39:02:5c:7c:f1:ad:92:89:0a:7a:63:ee:35:
aa:f9:09:4b:7f:9b:e6:69:b8:15:2b:95:0b:14:68:d1:42:0b:
12:e0:3c:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgzS3oOLYs1MEEt6JVYwZsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOGZlMmQyMzQzY2YyOGUyMjdiNTRmODA0YjJjZTAzMmQz
ZDE4OTUwHhcNMjUwNzIyMTgwMDQxWhcNMjUwNzIzMTgwMDQxWjAzMTEwLwYDVQQD
Eyg1YWY1YmUzM2QzNzA4ZGVkZTY4YzMxNDM3ODI4MTNkOGI1ZThkZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXStVPpMNPSSYDhhV8JeRUHCYYrz
p31KH1NG6KMhgQPPoTDCO88ktW/rls0Pdv04yRNW67Gc+dBDlVjRYyKVxUjec7IX
MLBGHMRZd2K/Dv4viirisaqd9E5gh8SEhwPIKeFEZmneph7MJ5ayaSOjhGvJBRjQ
oXK6sBpd2+yac6i7XY/yzaAfWNwl+NESTs1XBYEodcyYhimmjCHY7Uq1yvFKlo2A
0vVJV3psDkE4OCVji2PyGc2wC2dDTAorIDBgecI2ImhjArUMDzYOBA/RWOvNir5p
bJnlX8XE9v2alBhT1kLe0yNn15JMoXcJzAQCEXV5HuTVO7m3xGwAeTvtMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr1vjPTcI3t5owxQ3goE9i16N+dMB8GA1UdIwQY
MBaAFGKP4tI0PPKOIntU+ASyzgMtPRiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9faTBqUTg4bzRpZTFUNEJMTE9BeTA5R0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85YWRiZTQtMzM2My00NTIzLTkyNzgt
MmY4MTIxYTI4YmYwLzEvWW9faTBqUTg4bzRpZTFUNEJMTE9BeTA5R0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85YWRiZTQtMzM2My00NTIzLTkyNzgtMmY4MTIxYTI4YmYw
LzEvWW9faTBqUTg4bzRpZTFUNEJMTE9BeTA5R0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkK2cFd9w
XLhoZ7uJbRytWS+1zAldZIIN3XtLkg3fE2NT1trfoxWch0wt190rThNGktbYn8Q+
MeRGWTnstAjFwUtdBdJCwjOlIKjl4nF6BT37dfYKPPtoXcOzdPPY5J3HhSa6Mqvp
35pNdaeR9LE0uQ4q4F1Ch5RB7fHvRaxeuQAalliWpdnyzDWfJ/Utp5OqVvrXwmSZ
bhymmVWlv6YjknpAj1hI53pBO1krKOyzlnxtm4Tl6JEUFbPXy5qQKVtd4kMEhsDC
90mUWKQfvlT0tLxdOBUZgSo7Zhavk6U5Alx88a2SiQp6Y+41qvkJS3+b5mm4FSuV
CxRo0UILEuA8TA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:27:04 2025 by rpki-client