Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/1f32cb-dab2-4a9f-ae77-8447e29c1524/1/YDRE4ZlioZHv0vIWoSji9M_io94.mft
File: YDRE4ZlioZHv0vIWoSji9M_io94.mft (raw, json)
Hash identifier: x6nacMO1ssntQ7G9PUNCnq3CuVPcapw+rvRdIDPWlE0=
Subject key identifier: 1B:5A:67:D8:AE:69:D7:0D:1D:68:B9:EC:AB:19:BE:9B:C7:F8:89:26
Authority key identifier: 60:34:44:E1:99:62:A1:91:EF:D2:F2:16:A1:28:E2:F4:CF:E2:A3:DE
Certificate issuer: /CN=603444e19962a191efd2f216a128e2f4cfe2a3de
Certificate serial: 01984966AA86B55B4652B6F60443CB4E0B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRE4ZlioZHv0vIWoSji9M_io94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/1f32cb-dab2-4a9f-ae77-8447e29c1524/1/YDRE4ZlioZHv0vIWoSji9M_io94.mft
Manifest number: 061B
Signing time: Sun 27 Jul 2025 01:02:01 +0000
Manifest this update: Sun 27 Jul 2025 01:02:01 +0000
Manifest next update: Mon 28 Jul 2025 01:02:01 +0000
Files and hashes: 1: YDRE4ZlioZHv0vIWoSji9M_io94.crl (hash: XhmwbX20aaA0+WchVqnzDRtutsO/UqejQ3LNa5Jwhzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/1f32cb-dab2-4a9f-ae77-8447e29c1524/1/YDRE4ZlioZHv0vIWoSji9M_io94.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/1f32cb-dab2-4a9f-ae77-8447e29c1524/1/YDRE4ZlioZHv0vIWoSji9M_io94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDRE4ZlioZHv0vIWoSji9M_io94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:aa:86:b5:5b:46:52:b6:f6:04:43:cb:4e:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603444e19962a191efd2f216a128e2f4cfe2a3de
Validity
Not Before: Jul 27 01:02:01 2025 GMT
Not After : Jul 28 01:02:01 2025 GMT
Subject: CN=1b5a67d8ae69d70d1d68b9ecab19be9bc7f88926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:30:1a:97:57:e0:f0:3a:c4:b6:c3:05:44:
da:0e:a7:02:50:1c:77:af:2f:38:30:8d:41:24:aa:
d8:2e:b1:08:d5:26:b3:be:03:7b:ec:f4:97:45:b4:
90:b0:20:3e:3b:72:66:5b:39:5e:2c:e4:e1:4e:aa:
ea:78:ad:b9:fe:c0:d7:14:56:9c:8e:05:7c:6d:92:
69:9c:20:67:e6:f1:5c:a6:d2:30:1e:6e:b9:2b:91:
a9:23:f2:b5:de:29:7f:25:d8:64:12:b7:6f:7b:af:
86:65:b3:03:e5:67:89:91:33:f4:e1:98:f2:dc:af:
bd:bf:fb:9f:56:31:9b:4d:06:c7:e0:34:9c:07:a1:
eb:c3:7e:73:c9:10:e5:33:4c:c1:97:11:d1:65:2b:
ee:88:22:91:82:92:2f:8b:98:32:51:14:15:40:48:
39:c7:e4:bd:af:9e:4c:01:dc:15:e1:ad:51:0f:08:
69:5a:01:3c:ed:d8:4d:0d:10:3f:53:d5:4f:71:3e:
33:0d:4b:4e:db:35:e0:66:92:55:0a:53:ab:17:cf:
7e:d8:fd:4d:97:1f:65:28:dc:f9:b0:7c:86:4a:66:
df:26:1c:6e:83:25:53:9c:dc:dc:1d:62:a3:db:a3:
cf:21:17:4c:13:33:70:d9:6b:2c:7b:ad:2f:0b:03:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5A:67:D8:AE:69:D7:0D:1D:68:B9:EC:AB:19:BE:9B:C7:F8:89:26
X509v3 Authority Key Identifier:
keyid:60:34:44:E1:99:62:A1:91:EF:D2:F2:16:A1:28:E2:F4:CF:E2:A3:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRE4ZlioZHv0vIWoSji9M_io94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f32cb-dab2-4a9f-ae77-8447e29c1524/1/YDRE4ZlioZHv0vIWoSji9M_io94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f32cb-dab2-4a9f-ae77-8447e29c1524/1/YDRE4ZlioZHv0vIWoSji9M_io94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bf:16:cc:e3:12:19:da:fc:84:7c:79:20:20:f6:6d:13:33:
42:55:3f:9a:69:32:ea:f3:d9:9a:00:30:4c:d6:34:bf:f1:f4:
48:04:ca:0a:0d:23:d2:a6:15:9b:7d:64:fc:87:3e:dc:f0:94:
68:c1:35:09:81:5a:32:b7:c4:f7:4e:71:63:2b:8e:5a:5c:7d:
89:82:98:61:15:7b:c7:e9:ae:f3:da:74:af:61:16:60:21:7d:
00:7b:0b:ad:44:a1:52:2e:c5:b7:b3:e1:46:d9:5f:68:d7:7b:
67:65:4c:10:8c:2e:9e:d1:51:11:bb:91:3c:d5:63:ba:e0:69:
32:fe:f0:b0:da:e3:8c:1b:e8:9e:f2:e5:f3:20:be:7d:30:8d:
4d:5a:91:78:52:b4:d8:bd:e6:b1:bc:f8:e2:d3:56:7a:35:0c:
6c:34:f3:8b:1a:c6:65:73:91:c7:33:d2:70:9e:bd:4d:92:45:
71:eb:bc:a2:30:d1:7b:04:27:69:bb:d8:ba:fb:2a:9e:cc:49:
df:50:4a:9d:01:3d:66:73:0d:b9:70:9d:92:e6:20:97:6f:1a:
10:58:76:c5:f5:96:14:d0:1b:d1:f5:1c:05:f1:87:a0:51:98:
f8:b2:8c:f2:54:9d:30:0b:15:ea:6e:eb:de:7c:67:d0:6c:99:
0c:fb:48:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZqqGtVtGUrb2BEPLTgtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzQ0NGUxOTk2MmExOTFlZmQyZjIxNmExMjhlMmY0Y2Zl
MmEzZGUwHhcNMjUwNzI3MDEwMjAxWhcNMjUwNzI4MDEwMjAxWjAzMTEwLwYDVQQD
EygxYjVhNjdkOGFlNjlkNzBkMWQ2OGI5ZWNhYjE5YmU5YmM3Zjg4OTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoigwGpdX4PA6xLbDBUTaDqcCUBx3
ry84MI1BJKrYLrEI1SazvgN77PSXRbSQsCA+O3JmWzleLOThTqrqeK25/sDXFFac
jgV8bZJpnCBn5vFcptIwHm65K5GpI/K13il/JdhkErdve6+GZbMD5WeJkTP04Zjy
3K+9v/ufVjGbTQbH4DScB6Hrw35zyRDlM0zBlxHRZSvuiCKRgpIvi5gyURQVQEg5
x+S9r55MAdwV4a1RDwhpWgE87dhNDRA/U9VPcT4zDUtO2zXgZpJVClOrF89+2P1N
lx9lKNz5sHyGSmbfJhxugyVTnNzcHWKj26PPIRdMEzNw2Wsse60vCwMwRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtaZ9iuadcNHWi57KsZvpvH+IkmMB8GA1UdIwQY
MBaAFGA0ROGZYqGR79LyFqEo4vTP4qPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURSRTRabGlvWkh2MHZJV29Tamk5TV9pbzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8xZjMyY2ItZGFiMi00YTlmLWFlNzct
ODQ0N2UyOWMxNTI0LzEvWURSRTRabGlvWkh2MHZJV29Tamk5TV9pbzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8xZjMyY2ItZGFiMi00YTlmLWFlNzctODQ0N2UyOWMxNTI0
LzEvWURSRTRabGlvWkh2MHZJV29Tamk5TV9pbzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU78WzOMS
Gdr8hHx5ICD2bRMzQlU/mmky6vPZmgAwTNY0v/H0SATKCg0j0qYVm31k/Ic+3PCU
aME1CYFaMrfE905xYyuOWlx9iYKYYRV7x+mu89p0r2EWYCF9AHsLrUShUi7Ft7Ph
RtlfaNd7Z2VMEIwuntFREbuRPNVjuuBpMv7wsNrjjBvonvLl8yC+fTCNTVqReFK0
2L3msbz44tNWejUMbDTzixrGZXORxzPScJ69TZJFceu8ojDRewQnabvYuvsqnsxJ
31BKnQE9ZnMNuXCdkuYgl28aEFh2xfWWFNAb0fUcBfGHoFGY+LKM8lSdMAsV6m7r
3nxn0GyZDPtIFw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:23 2025 by rpki-client