Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier: lx4TYZwtEAGK+h86gS4cuHXEHyn3h7dUxNZuXBZzA5w=
Subject key identifier: 62:30:62:A2:C3:A1:7C:2D:6E:07:78:A8:08:E3:2A:BE:E3:28:90:05
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer: /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial: 01974968169E80C652843467044A37016961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number: 0548
Signing time: Sat 07 Jun 2025 08:00:47 +0000
Manifest this update: Sat 07 Jun 2025 08:00:47 +0000
Manifest next update: Sun 08 Jun 2025 08:00:47 +0000
Files and hashes: 1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: F8pxg1Ju/FvmW57Y87+i8RRoxzRsWxgQAGJ48KXoftU=)
2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:16:9e:80:c6:52:84:34:67:04:4a:37:01:69:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637115f728f97d16e0d124963764088120205ae0
Validity
Not Before: Jun 7 08:00:47 2025 GMT
Not After : Jun 8 08:00:47 2025 GMT
Subject: CN=623062a2c3a17c2d6e0778a808e32abee3289005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:ed:57:ca:a8:4f:10:6c:1f:90:32:5b:e6:
9b:2d:83:40:89:28:ee:16:51:f3:1a:91:93:1e:79:
b9:c2:d8:a6:35:bc:5b:5c:cd:a9:90:f1:33:47:b7:
d9:14:7a:0b:60:c9:41:34:f0:41:cf:b5:f9:ab:13:
60:8b:49:fd:08:cd:ea:56:9c:a4:a6:79:57:4e:25:
8d:f1:51:d1:65:fa:c0:46:15:2b:4e:d0:5b:39:f5:
d1:96:28:72:82:93:44:82:99:e0:85:cb:93:b9:ed:
00:12:88:0b:73:e1:93:48:46:f0:44:0c:34:f4:bf:
02:1a:47:ef:89:92:cf:0d:62:a8:5c:bd:8b:35:3d:
9f:37:f9:11:26:b4:45:c2:93:6e:ed:6c:17:ee:b6:
c0:1a:83:d5:2d:41:6c:da:2a:ae:aa:80:22:8a:9d:
a8:9c:11:14:d6:d6:79:a7:b4:ab:e9:63:5c:8b:c5:
4f:d3:ea:6e:ce:44:39:c7:8a:b1:2f:1d:c4:6c:1e:
0c:fd:e1:26:11:30:a0:38:c0:ee:82:d1:1c:81:41:
47:97:56:73:01:62:c5:c9:4e:c6:e6:67:ea:0c:d7:
9c:ee:44:38:b3:23:d3:b5:96:3c:3e:71:1f:f0:16:
24:0a:c6:c2:21:f1:e1:28:41:8d:40:8d:85:d3:c7:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:30:62:A2:C3:A1:7C:2D:6E:07:78:A8:08:E3:2A:BE:E3:28:90:05
X509v3 Authority Key Identifier:
keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e5:f5:da:50:06:de:82:34:14:62:14:bd:5e:a6:d8:1d:2f:
e2:0e:bb:c1:15:85:e9:90:5c:d4:2f:c6:e9:68:b9:2b:1b:f1:
9e:d8:da:7e:46:7a:ac:94:2c:37:0b:e0:28:44:65:fb:15:60:
e9:20:c3:8b:84:50:a7:8c:78:64:48:26:a2:05:42:0b:5c:b9:
51:62:0a:d5:9b:4b:09:a9:38:7e:e0:c6:dc:aa:e3:c5:21:2c:
99:96:f8:a0:0e:94:5c:d2:18:53:67:49:05:af:26:4e:92:50:
dd:96:ce:18:88:a1:b2:02:6d:48:7f:de:9b:a7:d2:43:08:83:
ab:d4:d8:e3:60:de:3a:c3:71:61:17:92:62:39:75:ee:68:48:
e4:40:4f:77:64:d2:b9:2d:76:a7:63:79:f3:3e:bd:57:29:0d:
1e:2e:a2:4e:5d:a0:6c:b8:43:60:2d:d6:26:ec:71:78:d4:e7:
f0:4a:eb:d9:50:11:e1:5c:af:47:5c:21:ea:f5:86:02:41:7b:
64:d3:e4:f8:4c:7b:60:8f:d3:48:70:c9:95:85:78:b2:6d:80:
59:c6:67:02:53:37:25:d0:cb:5a:b7:b5:09:4d:79:25:c2:ec:
d9:73:13:20:9e:74:df:cc:81:e7:61:8b:43:8b:be:19:4b:fa:
09:42:0c:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaBaegMZShDRnBEo3AWlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzExNWY3MjhmOTdkMTZlMGQxMjQ5NjM3NjQwODgxMjAy
MDVhZTAwHhcNMjUwNjA3MDgwMDQ3WhcNMjUwNjA4MDgwMDQ3WjAzMTEwLwYDVQQD
Eyg2MjMwNjJhMmMzYTE3YzJkNmUwNzc4YTgwOGUzMmFiZWUzMjg5MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNLtV8qoTxBsH5AyW+abLYNAiSju
FlHzGpGTHnm5wtimNbxbXM2pkPEzR7fZFHoLYMlBNPBBz7X5qxNgi0n9CM3qVpyk
pnlXTiWN8VHRZfrARhUrTtBbOfXRlihygpNEgpnghcuTue0AEogLc+GTSEbwRAw0
9L8CGkfviZLPDWKoXL2LNT2fN/kRJrRFwpNu7WwX7rbAGoPVLUFs2iquqoAiip2o
nBEU1tZ5p7Sr6WNci8VP0+puzkQ5x4qxLx3EbB4M/eEmETCgOMDugtEcgUFHl1Zz
AWLFyU7G5mfqDNec7kQ4syPTtZY8PnEf8BYkCsbCIfHhKEGNQI2F08fz+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIwYqLDoXwtbgd4qAjjKr7jKJAFMB8GA1UdIwQY
MBaAFGNxFfco+X0W4NEkljdkCIEgIFrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFVjl5ajVmUmJnMFNTV04yUUlnU0FnV3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hODc1ZDMtOTkwNS00OTg0LWI5MmMt
ZTNiZTU1NjgyOTNkLzEvWTNFVjl5ajVmUmJnMFNTV04yUUlnU0FnV3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hODc1ZDMtOTkwNS00OTg0LWI5MmMtZTNiZTU1NjgyOTNk
LzEvWTNFVjl5ajVmUmJnMFNTV04yUUlnU0FnV3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOX12lAG
3oI0FGIUvV6m2B0v4g67wRWF6ZBc1C/G6Wi5KxvxntjafkZ6rJQsNwvgKERl+xVg
6SDDi4RQp4x4ZEgmogVCC1y5UWIK1ZtLCak4fuDG3KrjxSEsmZb4oA6UXNIYU2dJ
Ba8mTpJQ3ZbOGIihsgJtSH/em6fSQwiDq9TY42DeOsNxYReSYjl17mhI5EBPd2TS
uS12p2N58z69VykNHi6iTl2gbLhDYC3WJuxxeNTn8Err2VAR4VyvR1wh6vWGAkF7
ZNPk+Ex7YI/TSHDJlYV4sm2AWcZnAlM3JdDLWre1CU15JcLs2XMTIJ5038yB52GL
Q4u+GUv6CUIMuw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:57 2025 by rpki-client