Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: qLfQFoIwkN3bKSN0poVH4o408Y2yqPI1pqYKJxyGsO0=
Subject key identifier: 98:76:CE:B9:D8:BE:BC:7B:AC:F9:55:FA:4D:5E:7A:99:F7:24:3F:F1
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 01974E8E846D709E3D8793D72644DE7FAD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 08:00:52 +0000
Manifest this update: Sun 08 Jun 2025 08:00:52 +0000
Manifest next update: Mon 09 Jun 2025 08:00:52 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: IZsqim/i2rCzxuUk7w0o/5zmyEfsu6feenukY84Ij+Q=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:84:6d:70:9e:3d:87:93:d7:26:44:de:7f:ad:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Jun 8 08:00:52 2025 GMT
Not After : Jun 9 08:00:52 2025 GMT
Subject: CN=9876ceb9d8bebc7bacf955fa4d5e7a99f7243ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:c4:8d:0b:6c:ad:a6:7b:1b:3d:ad:e4:bf:
71:43:51:56:49:59:b7:84:31:28:eb:93:bd:25:6c:
ad:9f:80:57:81:aa:a1:b2:fb:32:d7:ee:b7:49:24:
6a:cd:42:28:a1:a7:bc:79:1f:ed:a4:dc:68:13:7c:
8b:39:82:f2:ef:0a:15:2d:4c:4b:4e:92:42:f7:2a:
2a:17:94:5b:53:e2:1b:8d:59:54:11:3d:2c:11:86:
42:e7:05:32:13:ba:06:d6:5a:a7:04:a1:5b:cf:88:
a7:51:63:6d:b9:cc:67:a7:1c:a0:24:5a:fe:e7:14:
84:68:77:36:53:1a:d0:43:56:db:ee:fc:eb:cd:a1:
da:93:bd:d3:c7:05:97:b9:f6:40:01:1f:18:ac:38:
46:27:0b:ed:b6:94:72:20:12:0b:80:2d:34:00:f8:
bf:a6:a2:80:4f:21:ea:e0:0a:41:0e:e7:37:6f:c1:
9c:92:20:68:6b:9d:2b:be:2b:af:b2:99:6c:dd:fa:
98:3c:b1:05:12:05:a8:b4:3e:f0:c1:ba:dc:20:dc:
22:b0:31:eb:95:46:e7:31:29:13:73:8a:61:1d:8f:
7a:0f:a4:8a:9c:ae:2f:00:70:6e:e0:86:4d:c8:b6:
ac:40:70:85:20:dd:0a:5e:9d:11:1d:00:21:72:5e:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:76:CE:B9:D8:BE:BC:7B:AC:F9:55:FA:4D:5E:7A:99:F7:24:3F:F1
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:88:f3:10:81:ea:a1:bc:dc:34:16:1b:38:01:8d:08:d1:
83:09:6d:ba:96:85:cd:ea:3f:fd:39:c6:12:75:14:09:12:55:
b2:40:d4:0d:84:ba:8a:fb:65:a8:e0:40:d0:41:03:8f:e3:79:
93:3f:7d:f4:b9:d1:21:26:b8:60:da:82:5d:05:bf:91:0a:ca:
a3:2e:1b:be:04:b3:b5:ab:1f:f5:22:48:0e:65:b6:70:21:11:
c1:a2:a7:8a:8e:1f:5f:a7:ee:e5:5c:5d:04:cc:c0:38:6c:e3:
c0:b5:f3:b7:cd:bf:6e:27:fb:5c:ec:b2:e2:bb:6f:07:a6:42:
bb:7f:b4:40:10:0f:ad:bf:bd:7c:84:a5:59:b7:29:02:48:37:
a6:22:16:f7:de:ee:e9:25:48:39:c5:9e:09:fa:c9:bf:60:c9:
82:d8:d1:3b:80:13:b5:b1:86:59:84:37:7d:42:e5:c1:12:1d:
4c:eb:c2:03:d5:60:6a:bd:2a:59:60:1f:c7:62:c4:ed:94:f6:
90:72:c2:63:7e:2a:2c:5e:8c:60:76:f6:4f:6b:88:a9:17:78:
2f:ff:77:da:3d:55:9d:51:03:c4:8a:aa:72:3b:23:44:dc:18:
46:28:61:ea:a5:98:5b:a5:3b:9d:a1:7a:48:0d:99:be:7a:6a:
da:1a:bd:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjoRtcJ49h5PXJkTef60vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjliMWEwODEzOWUxZGE5NjQzZGQwNDI0ZjVjZDY0NTA3
ZTM3NzEwHhcNMjUwNjA4MDgwMDUyWhcNMjUwNjA5MDgwMDUyWjAzMTEwLwYDVQQD
Eyg5ODc2Y2ViOWQ4YmViYzdiYWNmOTU1ZmE0ZDVlN2E5OWY3MjQzZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RjEjQtsraZ7Gz2t5L9xQ1FWSVm3
hDEo65O9JWytn4BXgaqhsvsy1+63SSRqzUIooae8eR/tpNxoE3yLOYLy7woVLUxL
TpJC9yoqF5RbU+IbjVlUET0sEYZC5wUyE7oG1lqnBKFbz4inUWNtucxnpxygJFr+
5xSEaHc2UxrQQ1bb7vzrzaHak73TxwWXufZAAR8YrDhGJwvttpRyIBILgC00APi/
pqKATyHq4ApBDuc3b8GckiBoa50rviuvspls3fqYPLEFEgWotD7wwbrcINwisDHr
lUbnMSkTc4phHY96D6SKnK4vAHBu4IZNyLasQHCFIN0KXp0RHQAhcl7drQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh2zrnYvrx7rPlV+k1eepn3JD/xMB8GA1UdIwQY
MBaAFGApsaCBOeHalkPdBCT1zWRQfjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzIt
NTYxNTUxM2ZkY2Y0LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzItNTYxNTUxM2ZkY2Y0
LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKOI8xCB
6qG83DQWGzgBjQjRgwltupaFzeo//TnGEnUUCRJVskDUDYS6ivtlqOBA0EEDj+N5
kz999LnRISa4YNqCXQW/kQrKoy4bvgSztasf9SJIDmW2cCERwaKnio4fX6fu5Vxd
BMzAOGzjwLXzt82/bif7XOyy4rtvB6ZCu3+0QBAPrb+9fISlWbcpAkg3piIW997u
6SVIOcWeCfrJv2DJgtjRO4ATtbGGWYQ3fULlwRIdTOvCA9Vgar0qWWAfx2LE7ZT2
kHLCY34qLF6MYHb2T2uIqRd4L/932j1VnVEDxIqqcjsjRNwYRihh6qWYW6U7naF6
SA2Zvnpq2hq9/w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:32:30 2025 by rpki-client