Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/98e825-b58c-456e-af28-7b35a06ab54b/1/YQy4N7bSF3jkw9u5aWefDxxQtIo.mft
File: YQy4N7bSF3jkw9u5aWefDxxQtIo.mft (raw, json)
Hash identifier: j85FuXNM4M8HsNbXiGaDwHV3UQ+tiu5QOyoyOJA5sSI=
Subject key identifier: 76:49:3E:E5:15:45:38:E0:DF:6B:08:26:36:7C:9C:B6:9D:B9:C5:F1
Authority key identifier: 61:0C:B8:37:B6:D2:17:78:E4:C3:DB:B9:69:67:9F:0F:1C:50:B4:8A
Certificate issuer: /CN=610cb837b6d21778e4c3dbb969679f0f1c50b48a
Certificate serial: 019836162BA85B7BE14D340AE301447EA88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQy4N7bSF3jkw9u5aWefDxxQtIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/98e825-b58c-456e-af28-7b35a06ab54b/1/YQy4N7bSF3jkw9u5aWefDxxQtIo.mft
Manifest number: 0E0F
Signing time: Wed 23 Jul 2025 07:01:19 +0000
Manifest this update: Wed 23 Jul 2025 07:01:19 +0000
Manifest next update: Thu 24 Jul 2025 07:01:19 +0000
Files and hashes: 1: YQy4N7bSF3jkw9u5aWefDxxQtIo.crl (hash: 9ZiMjsexXUVKsTuA2tHe5jj8C4W9Wm85mqjKRTwMbUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/98e825-b58c-456e-af28-7b35a06ab54b/1/YQy4N7bSF3jkw9u5aWefDxxQtIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/98e825-b58c-456e-af28-7b35a06ab54b/1/YQy4N7bSF3jkw9u5aWefDxxQtIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQy4N7bSF3jkw9u5aWefDxxQtIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:2b:a8:5b:7b:e1:4d:34:0a:e3:01:44:7e:a8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610cb837b6d21778e4c3dbb969679f0f1c50b48a
Validity
Not Before: Jul 23 07:01:19 2025 GMT
Not After : Jul 24 07:01:19 2025 GMT
Subject: CN=76493ee5154538e0df6b0826367c9cb69db9c5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:ec:61:7f:cd:4c:cb:5f:b8:6c:b3:01:28:
db:3d:04:42:a9:08:d6:a1:7f:e4:47:5b:10:b0:28:
4a:dd:f5:e7:70:86:d5:fc:0a:54:a4:ae:0a:ae:e4:
88:a0:6b:e3:b3:68:2f:3b:29:42:49:c5:a1:1e:12:
5d:df:43:92:df:c4:b7:25:59:96:bc:41:18:19:f9:
d8:d3:3d:2a:09:a8:64:1f:d3:bf:34:92:8b:f1:77:
a8:13:07:99:4e:c1:09:16:e2:e0:4f:75:df:5d:5f:
53:d5:39:bf:fa:6b:dc:1a:b1:99:23:18:a4:f4:65:
27:70:b4:34:57:cf:24:4f:34:08:0c:c8:90:98:29:
e0:cf:6e:53:e2:9e:a9:bd:38:a3:73:db:45:ec:13:
b4:1d:55:ca:85:5a:16:71:fa:45:14:06:b5:1a:cd:
6b:0b:d2:b6:bd:1c:0d:db:fc:89:4c:0b:12:df:30:
2e:6d:99:aa:58:b7:69:d0:6b:73:80:ea:f4:5d:24:
47:33:05:8b:e2:cd:53:1c:21:ae:c6:7f:e5:93:98:
94:44:c0:fa:27:e4:20:b5:eb:81:92:41:e6:f9:03:
af:b3:70:f1:32:e7:9a:53:33:5b:f2:db:2a:f9:59:
9c:c9:88:96:12:af:6a:af:10:11:ac:1f:c5:45:7d:
00:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:49:3E:E5:15:45:38:E0:DF:6B:08:26:36:7C:9C:B6:9D:B9:C5:F1
X509v3 Authority Key Identifier:
keyid:61:0C:B8:37:B6:D2:17:78:E4:C3:DB:B9:69:67:9F:0F:1C:50:B4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQy4N7bSF3jkw9u5aWefDxxQtIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/98e825-b58c-456e-af28-7b35a06ab54b/1/YQy4N7bSF3jkw9u5aWefDxxQtIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/98e825-b58c-456e-af28-7b35a06ab54b/1/YQy4N7bSF3jkw9u5aWefDxxQtIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:35:68:db:3f:fb:47:fd:8c:2c:c9:e2:c6:4a:e7:69:c6:2e:
e4:c8:5b:04:5f:32:bf:13:67:c8:8c:bd:79:35:f0:63:c1:a8:
55:3a:05:b9:48:5c:5d:07:b7:67:c9:e4:2a:07:0b:71:58:bf:
cb:86:b8:dc:e4:72:7c:9c:41:92:04:ba:c5:bb:57:10:1a:4c:
f4:f9:6a:19:a0:d5:ef:ee:7a:3e:cb:3a:15:eb:be:e5:2b:96:
b2:ff:4f:e5:47:7a:b1:c0:c7:ee:b2:1a:a6:85:03:3e:3a:f9:
65:ec:83:31:51:1d:0d:2c:ea:be:ce:89:cf:9b:15:91:8a:0d:
cf:17:54:5d:58:31:dc:62:40:d2:70:77:32:27:58:aa:cd:5e:
49:27:18:74:95:dd:6f:56:fe:79:6f:9d:b9:7d:68:5f:77:b0:
05:3b:60:bb:b9:5e:ab:9f:a7:17:30:36:4d:4c:84:c3:df:b0:
58:14:fb:7f:a1:3e:68:2e:55:7a:07:08:0b:32:7e:92:a8:fa:
f3:8c:d2:36:7d:39:25:83:a3:92:6a:45:64:c6:5e:2b:e7:51:
ab:3b:5f:00:37:0c:cb:98:85:db:cc:a9:c8:5c:d9:b3:94:f7:
53:20:45:71:2a:33:ff:42:0a:d7:5e:39:43:19:34:b7:82:43:
2b:0b:cf:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg2FiuoW3vhTTQK4wFEfqiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMGNiODM3YjZkMjE3NzhlNGMzZGJiOTY5Njc5ZjBmMWM1
MGI0OGEwHhcNMjUwNzIzMDcwMTE5WhcNMjUwNzI0MDcwMTE5WjAzMTEwLwYDVQQD
Eyg3NjQ5M2VlNTE1NDUzOGUwZGY2YjA4MjYzNjdjOWNiNjlkYjljNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1LsYX/NTMtfuGyzASjbPQRCqQjW
oX/kR1sQsChK3fXncIbV/ApUpK4KruSIoGvjs2gvOylCScWhHhJd30OS38S3JVmW
vEEYGfnY0z0qCahkH9O/NJKL8XeoEweZTsEJFuLgT3XfXV9T1Tm/+mvcGrGZIxik
9GUncLQ0V88kTzQIDMiQmCngz25T4p6pvTijc9tF7BO0HVXKhVoWcfpFFAa1Gs1r
C9K2vRwN2/yJTAsS3zAubZmqWLdp0GtzgOr0XSRHMwWL4s1THCGuxn/lk5iURMD6
J+QgteuBkkHm+QOvs3DxMueaUzNb8tsq+VmcyYiWEq9qrxARrB/FRX0APwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZJPuUVRTjg32sIJjZ8nLaducXxMB8GA1UdIwQY
MBaAFGEMuDe20hd45MPbuWlnnw8cULSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVF5NE43YlNGM2prdzl1NWFXZWZEeHhRdElvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85OGU4MjUtYjU4Yy00NTZlLWFmMjgt
N2IzNWEwNmFiNTRiLzEvWVF5NE43YlNGM2prdzl1NWFXZWZEeHhRdElvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy85OGU4MjUtYjU4Yy00NTZlLWFmMjgtN2IzNWEwNmFiNTRi
LzEvWVF5NE43YlNGM2prdzl1NWFXZWZEeHhRdElvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizVo2z/7
R/2MLMnixkrnacYu5MhbBF8yvxNnyIy9eTXwY8GoVToFuUhcXQe3Z8nkKgcLcVi/
y4a43ORyfJxBkgS6xbtXEBpM9PlqGaDV7+56Pss6Feu+5SuWsv9P5Ud6scDH7rIa
poUDPjr5ZeyDMVEdDSzqvs6Jz5sVkYoNzxdUXVgx3GJA0nB3MidYqs1eSScYdJXd
b1b+eW+duX1oX3ewBTtgu7leq5+nFzA2TUyEw9+wWBT7f6E+aC5VegcICzJ+kqj6
84zSNn05JYOjkmpFZMZeK+dRqztfADcMy5iF28ypyFzZs5T3UyBFcSoz/0IK1145
Qxk0t4JDKwvPVw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 16:43:57 2025 by rpki-client