Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File: y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier: nCm//wj62ulol2VDoi17JCPrtJ0QrOhF9ughxJYfXHM=
Subject key identifier: 5D:48:86:49:85:ED:0A:05:34:58:23:8B:21:45:3F:1B:37:9B:84:8E
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer: /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial: 01974B56D1CB0D1E438C2EDF7EEB0BF60BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number: 05A7
Signing time: Sat 07 Jun 2025 17:01:10 +0000
Manifest this update: Sat 07 Jun 2025 17:01:10 +0000
Manifest next update: Sun 08 Jun 2025 17:01:10 +0000
Files and hashes: 1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: aQGL4u6ML8ttq8bT+6HM738ZwDU+NQvPlrgCzuD27D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:d1:cb:0d:1e:43:8c:2e:df:7e:eb:0b:f6:0b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Validity
Not Before: Jun 7 17:01:10 2025 GMT
Not After : Jun 8 17:01:10 2025 GMT
Subject: CN=5d48864985ed0a053458238b21453f1b379b848e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ef:a2:85:7e:19:c6:1f:42:f3:c9:f0:33:11:
05:d5:7c:78:6a:2b:5e:aa:6d:00:a5:61:7d:9e:76:
c1:80:65:17:02:73:67:bc:5f:d6:9c:a1:13:f0:02:
34:75:1f:a8:f8:1d:f1:19:33:98:04:32:7d:6c:d2:
ba:8c:a7:d0:68:37:a7:5a:e0:23:23:3e:f6:56:c4:
5e:ed:a7:bb:70:3b:96:1a:29:80:fa:2b:b7:2c:31:
78:90:c2:06:b2:ba:0e:a4:04:97:18:ec:7b:5b:25:
e0:6f:cc:87:a1:02:e4:81:d6:e0:e6:e4:21:8f:76:
d4:6f:89:32:7e:9f:9e:11:17:ff:de:6f:06:51:05:
1e:e0:ca:a5:65:fd:d0:e8:5b:ce:d6:09:fd:7b:ca:
26:0b:9b:1d:78:de:8f:cb:fb:db:e1:05:95:3b:03:
9b:11:9f:bb:da:b3:c4:d1:3e:9f:c2:b4:3a:68:56:
8d:c8:1c:ee:53:db:23:73:e5:4a:87:5e:89:60:08:
a2:b4:6e:c5:ed:3c:8f:db:d9:6c:05:44:2c:b9:ae:
aa:e8:10:54:bf:47:3b:20:9b:13:0d:31:c5:22:5c:
32:27:b6:59:a1:87:e1:92:e2:7c:dc:76:e4:38:a0:
83:80:47:7b:c0:85:83:81:06:e0:f6:e1:b9:e4:86:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:48:86:49:85:ED:0A:05:34:58:23:8B:21:45:3F:1B:37:9B:84:8E
X509v3 Authority Key Identifier:
keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:45:ce:ef:98:06:c3:57:ab:64:d0:fd:0e:33:6a:68:77:67:
c6:f2:91:e4:b9:2b:c4:f8:1d:4a:c6:25:f6:4b:c3:5f:1d:14:
3d:d6:ee:50:7e:b6:b6:ac:1f:96:fd:4d:df:00:87:e2:78:c2:
8f:01:dd:aa:b7:65:56:d3:d3:74:78:34:29:dd:56:08:99:d3:
10:be:3d:0c:0f:27:dc:6f:5f:39:06:e0:74:84:a0:32:db:42:
81:ed:aa:5d:4d:9b:45:7e:37:dd:99:e9:d6:e8:43:ae:c7:35:
f3:51:19:a1:c2:e9:c3:9a:60:24:26:c1:2b:ee:0f:5c:f9:78:
9e:80:d7:cf:ce:c8:ef:1e:e0:f8:2e:ca:0e:48:6e:1f:41:5e:
2b:f1:85:59:0f:5e:b8:f5:eb:73:9c:bf:ef:97:dd:f2:77:c9:
84:bc:68:82:db:5b:e2:49:48:03:a0:a8:3b:e8:ac:32:a2:da:
80:94:e2:d7:1a:25:c4:d5:2c:8d:22:53:39:71:5d:22:6b:21:
5f:44:98:b6:00:06:fe:98:ab:da:03:0c:c2:98:36:ea:12:02:
31:7c:ba:b8:74:53:7a:ea:a9:2b:d6:93:f8:d1:b9:07:2a:90:
1e:13:40:82:bd:82:dd:93:3b:a1:7c:5c:3d:e4:03:02:cd:5e:
1d:95:b5:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVtHLDR5DjC7ffusL9gv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmIwMjc5ZmNkMjNhOGU1ODNmMzQ1YWI5MDQ3MjhlNmQw
ZTRjNjIwHhcNMjUwNjA3MTcwMTEwWhcNMjUwNjA4MTcwMTEwWjAzMTEwLwYDVQQD
Eyg1ZDQ4ODY0OTg1ZWQwYTA1MzQ1ODIzOGIyMTQ1M2YxYjM3OWI4NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9O+ihX4Zxh9C88nwMxEF1Xx4aite
qm0ApWF9nnbBgGUXAnNnvF/WnKET8AI0dR+o+B3xGTOYBDJ9bNK6jKfQaDenWuAj
Iz72VsRe7ae7cDuWGimA+iu3LDF4kMIGsroOpASXGOx7WyXgb8yHoQLkgdbg5uQh
j3bUb4kyfp+eERf/3m8GUQUe4MqlZf3Q6FvO1gn9e8omC5sdeN6Py/vb4QWVOwOb
EZ+72rPE0T6fwrQ6aFaNyBzuU9sjc+VKh16JYAiitG7F7TyP29lsBUQsua6q6BBU
v0c7IJsTDTHFIlwyJ7ZZoYfhkuJ83HbkOKCDgEd7wIWDgQbg9uG55IaJ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1IhkmF7QoFNFgjiyFFPxs3m4SOMB8GA1UdIwQY
MBaAFMv7Ann80jqOWD80WrkEco5tDkxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgt
ODBmODIwMjcxNGRhLzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgtODBmODIwMjcxNGRh
LzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4UXO75gG
w1erZND9DjNqaHdnxvKR5LkrxPgdSsYl9kvDXx0UPdbuUH62tqwflv1N3wCH4njC
jwHdqrdlVtPTdHg0Kd1WCJnTEL49DA8n3G9fOQbgdISgMttCge2qXU2bRX433Znp
1uhDrsc181EZocLpw5pgJCbBK+4PXPl4noDXz87I7x7g+C7KDkhuH0FeK/GFWQ9e
uPXrc5y/75fd8nfJhLxogttb4klIA6CoO+isMqLagJTi1xolxNUsjSJTOXFdImsh
X0SYtgAG/pir2gMMwpg26hICMXy6uHRTeuqpK9aT+NG5ByqQHhNAgr2C3ZM7oXxc
PeQDAs1eHZW13A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:32:25 2025 by rpki-client