Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: 3ZfnbAxDUnrtoLMa36q1uomIJk9nMZdsuYpVOViHyyc=
Subject key identifier: DA:FA:A2:60:34:1C:5A:42:C8:7F:14:B5:7F:7A:18:FE:8D:6D:E2:E1
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 0197673B35160C7DD5EE90C745C241942A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0B89
Signing time: Fri 13 Jun 2025 03:00:22 +0000
Manifest this update: Fri 13 Jun 2025 03:00:22 +0000
Manifest next update: Sat 14 Jun 2025 03:00:22 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: ktmPSZPll4ChCtlwXbgnGkx08N4KlB/jeuGq0QaQaeo=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:3b:35:16:0c:7d:d5:ee:90:c7:45:c2:41:94:2a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Jun 13 03:00:22 2025 GMT
Not After : Jun 14 03:00:22 2025 GMT
Subject: CN=dafaa260341c5a42c87f14b57f7a18fe8d6de2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:2f:96:e5:38:7e:67:3d:d7:f3:71:a9:0f:
7b:8f:5d:e3:7b:8f:e1:a2:42:62:12:21:53:f6:88:
02:c3:9a:ef:c4:66:9e:fb:f4:b1:36:75:39:eb:c2:
0d:48:b7:e1:8c:95:28:04:3c:84:0b:20:7b:fa:d2:
91:d9:c3:56:a5:4e:2c:c1:2e:a5:c4:e2:27:2f:36:
98:69:61:24:32:5a:71:aa:59:cd:0a:d2:b3:df:85:
dd:5f:6b:86:76:b9:f2:e9:4c:d9:dc:ee:58:23:ee:
6e:bb:36:ae:83:0a:3b:eb:64:33:1e:10:b5:7c:84:
22:9c:59:f5:be:fc:96:39:a8:14:e0:fe:1a:ff:01:
d7:4a:73:1a:d2:61:fc:58:8b:27:31:66:be:a2:e4:
7d:64:d9:ba:e7:6c:51:17:21:c3:71:2a:dc:a7:7e:
7f:4e:49:6c:67:70:65:e4:27:74:a5:9d:45:d4:62:
de:3b:25:9b:0d:49:72:0c:3a:73:fc:28:9b:1a:14:
df:83:d8:0f:bb:e0:57:b2:56:ce:f8:ef:e3:e3:20:
e1:3d:c5:2b:e1:a9:a2:78:9e:78:05:8b:d6:17:77:
86:79:d5:db:d5:5b:43:3b:75:d7:86:89:d7:90:65:
df:4d:51:b9:7f:4f:a4:eb:9e:83:55:f3:d9:d1:f6:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FA:A2:60:34:1C:5A:42:C8:7F:14:B5:7F:7A:18:FE:8D:6D:E2:E1
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:22:f8:6a:f0:0a:a7:f9:5f:5e:65:c8:5d:aa:75:07:56:60:
76:0d:47:01:5e:20:64:09:11:53:ec:d9:29:91:bd:a7:25:35:
3e:8a:a4:08:ce:7e:c5:af:9a:bf:3c:cc:29:71:3d:97:28:ee:
a6:53:5d:2d:cc:a3:57:cf:37:aa:6a:54:49:bf:fc:94:b2:ed:
87:9b:56:1c:c2:95:8d:4a:f7:d3:c3:e2:08:79:fd:fe:eb:1d:
28:f1:8e:7b:57:80:84:21:d7:3a:9c:80:c2:b4:36:cd:29:76:
fb:a0:a3:a1:4c:6a:03:38:99:47:f7:95:f8:ec:33:a5:cb:37:
2b:2a:1d:2a:b5:13:83:e3:0a:30:a2:35:51:ca:c0:33:04:8b:
5a:28:de:ec:67:bc:b7:b2:14:cc:1b:3a:99:2f:7c:6e:a1:d1:
c8:69:3d:15:42:6a:16:93:bc:c1:7f:11:a2:b6:da:cf:0f:e2:
21:cd:c9:a2:42:02:20:3c:be:e8:13:d3:85:04:e6:be:cc:73:
73:62:3c:40:53:4d:33:d2:af:61:8c:42:2e:c1:1b:a6:bc:2e:
65:ca:f7:55:76:fd:f4:ea:44:92:ff:67:a7:f9:35:b9:59:e0:
01:9b:7f:74:e6:e8:d6:c4:ed:9e:7f:96:a0:23:98:ff:af:b9:
f7:e7:b7:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnOzUWDH3V7pDHRcJBlCpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzg0MTAzMzhlMjFlOGVhYjk0MTE5ZDgwZTQxYTM5NTg0
OTFkZTYwHhcNMjUwNjEzMDMwMDIyWhcNMjUwNjE0MDMwMDIyWjAzMTEwLwYDVQQD
EyhkYWZhYTI2MDM0MWM1YTQyYzg3ZjE0YjU3ZjdhMThmZThkNmRlMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOovluU4fmc91/NxqQ97j13je4/h
okJiEiFT9ogCw5rvxGae+/SxNnU568INSLfhjJUoBDyECyB7+tKR2cNWpU4swS6l
xOInLzaYaWEkMlpxqlnNCtKz34XdX2uGdrny6UzZ3O5YI+5uuzaugwo762QzHhC1
fIQinFn1vvyWOagU4P4a/wHXSnMa0mH8WIsnMWa+ouR9ZNm652xRFyHDcSrcp35/
TklsZ3Bl5Cd0pZ1F1GLeOyWbDUlyDDpz/CibGhTfg9gPu+BXslbO+O/j4yDhPcUr
4amieJ54BYvWF3eGedXb1VtDO3XXhonXkGXfTVG5f0+k656DVfPZ0farfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr6omA0HFpCyH8UtX96GP6NbeLhMB8GA1UdIwQY
MBaAFGI4QQM44h6Oq5QRnYDkGjlYSR3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQt
MTNhNThlYjlkOGY1LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQtMTNhNThlYjlkOGY1
LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCL4avAK
p/lfXmXIXap1B1Zgdg1HAV4gZAkRU+zZKZG9pyU1PoqkCM5+xa+avzzMKXE9lyju
plNdLcyjV883qmpUSb/8lLLth5tWHMKVjUr308PiCHn9/usdKPGOe1eAhCHXOpyA
wrQ2zSl2+6CjoUxqAziZR/eV+Owzpcs3KyodKrUTg+MKMKI1UcrAMwSLWije7Ge8
t7IUzBs6mS98bqHRyGk9FUJqFpO8wX8Rorbazw/iIc3JokICIDy+6BPThQTmvsxz
c2I8QFNNM9KvYYxCLsEbprwuZcr3VXb99OpEkv9np/k1uVngAZt/dObo1sTtnn+W
oCOY/6+59+e3Og==
-----END CERTIFICATE-----
Generated at Fri Jun 13 12:35:40 2025 by rpki-client