Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
File: yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json)
Hash identifier: WxaRRGbnF2yIpsPe1QHmJ2Pzqpk1bKk1oFMH5rVgWhw=
Subject key identifier: 10:14:72:83:EB:01:DB:16:06:13:CC:53:A1:BF:BC:39:DE:B1:DC:93
Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
Certificate issuer: /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Certificate serial: 01974A7AB53844F68A757C84468487DE9883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
Manifest number: 0CB2
Signing time: Sat 07 Jun 2025 13:00:44 +0000
Manifest this update: Sat 07 Jun 2025 13:00:44 +0000
Manifest next update: Sun 08 Jun 2025 13:00:44 +0000
Files and hashes: 1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: mYgkTvmz8liOk3nyDHz0hw6eGNDvOC9TAJpTcy4pRLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:b5:38:44:f6:8a:75:7c:84:46:84:87:de:98:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Validity
Not Before: Jun 7 13:00:44 2025 GMT
Not After : Jun 8 13:00:44 2025 GMT
Subject: CN=10147283eb01db160613cc53a1bfbc39deb1dc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:ff:5f:37:cd:4a:eb:73:c2:95:23:c1:5c:
da:6c:e7:2b:2c:e6:be:32:5b:d3:74:65:e3:25:5d:
1d:11:eb:dc:e0:bc:d7:76:45:ce:2d:bd:de:f6:99:
14:fe:c7:94:2a:1c:14:66:73:69:eb:5d:b2:4b:62:
19:a8:16:1c:87:15:b8:5c:c7:5a:63:b9:a2:e5:4f:
a2:73:12:7f:c9:25:17:81:47:38:af:b0:c9:a9:e7:
2d:88:7f:4b:34:d3:ef:3b:82:71:e7:42:45:3f:80:
c0:73:e0:ce:82:4c:25:60:6c:ab:87:f7:f5:4f:89:
03:34:d8:92:de:96:ab:d7:ab:db:9e:b2:bf:49:ee:
5e:ad:97:19:64:a9:88:a7:77:84:9d:d9:c0:f9:ea:
3d:8b:ec:0a:4a:e9:fb:48:2e:79:6f:ee:6c:0c:94:
ed:ae:c2:57:9a:63:5c:a0:f4:35:d8:9e:bc:3a:74:
82:12:ad:aa:e9:fb:64:74:0b:05:11:22:c4:46:0a:
e1:74:a6:af:05:ea:09:4a:b1:37:6e:d5:a3:00:32:
ca:d2:8c:1a:09:16:66:8e:84:8b:c3:57:ea:c6:4c:
d7:a3:aa:22:a9:c3:f3:aa:04:aa:3c:74:75:6f:97:
80:54:a7:a5:51:95:3b:62:aa:e0:fe:75:18:bf:4a:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:14:72:83:EB:01:DB:16:06:13:CC:53:A1:BF:BC:39:DE:B1:DC:93
X509v3 Authority Key Identifier:
keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:08:ab:6f:50:06:d5:6d:30:42:bc:fb:06:f3:90:c4:0d:e1:
98:18:8c:3b:58:ea:ea:97:49:8a:e5:da:ce:b4:de:11:98:86:
43:c7:17:cb:ac:dd:6e:09:e3:8b:d7:cf:7b:39:e9:04:9c:bb:
21:84:6a:1d:d0:6a:d5:bd:fb:9f:48:1c:37:73:bd:37:3b:3d:
06:bd:4b:a4:30:10:e1:d4:b0:38:9e:14:b1:26:a3:39:ed:f4:
42:ff:b8:70:93:e1:e8:79:20:af:db:da:62:79:52:dd:43:9d:
92:95:ca:a8:59:c6:fd:cb:8f:ee:03:af:7c:14:91:65:91:d0:
2e:fd:1b:17:1e:dd:96:40:d6:8d:07:cc:d5:c3:e0:88:c7:db:
f8:2d:ac:16:e4:1f:8c:0f:15:c7:ad:42:bd:92:1d:00:a0:9a:
f3:42:da:2e:77:77:24:a9:b4:a0:05:af:14:47:ec:93:03:65:
32:b7:aa:e0:72:cd:e0:ef:85:a0:f0:08:02:57:bd:85:83:3b:
b5:ed:1c:e6:e1:9e:59:71:1e:9b:e3:0b:f5:46:d8:38:fc:4a:
b6:9e:e5:65:8e:21:7b:b3:43:ed:d9:14:52:9a:b3:60:40:3f:
fb:16:8f:d4:ca:cb:25:35:b4:f6:83:46:9d:15:32:1e:06:2c:
c9:e6:c9:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKerU4RPaKdXyERoSH3piDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MThiYTE4NTViMTExMDdlY2YwYjJiMzQzNjA3Y2NiYmU3
NmEzOGQwHhcNMjUwNjA3MTMwMDQ0WhcNMjUwNjA4MTMwMDQ0WjAzMTEwLwYDVQQD
EygxMDE0NzI4M2ViMDFkYjE2MDYxM2NjNTNhMWJmYmMzOWRlYjFkYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfz/XzfNSutzwpUjwVzabOcrLOa+
MlvTdGXjJV0dEevc4LzXdkXOLb3e9pkU/seUKhwUZnNp612yS2IZqBYchxW4XMda
Y7mi5U+icxJ/ySUXgUc4r7DJqectiH9LNNPvO4Jx50JFP4DAc+DOgkwlYGyrh/f1
T4kDNNiS3par16vbnrK/Se5erZcZZKmIp3eEndnA+eo9i+wKSun7SC55b+5sDJTt
rsJXmmNcoPQ12J68OnSCEq2q6ftkdAsFESLERgrhdKavBeoJSrE3btWjADLK0owa
CRZmjoSLw1fqxkzXo6oiqcPzqgSqPHR1b5eAVKelUZU7Yqrg/nUYv0ou5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAUcoPrAdsWBhPMU6G/vDnesdyTMB8GA1UdIwQY
MBaAFMgYuhhVsREH7PCys0NgfMu+dqONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMt
OWZmNmUzN2FhM2M0LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMtOWZmNmUzN2FhM2M0
LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAirb1AG
1W0wQrz7BvOQxA3hmBiMO1jq6pdJiuXazrTeEZiGQ8cXy6zdbgnji9fPeznpBJy7
IYRqHdBq1b37n0gcN3O9Nzs9Br1LpDAQ4dSwOJ4UsSajOe30Qv+4cJPh6Hkgr9va
YnlS3UOdkpXKqFnG/cuP7gOvfBSRZZHQLv0bFx7dlkDWjQfM1cPgiMfb+C2sFuQf
jA8Vx61CvZIdAKCa80LaLnd3JKm0oAWvFEfskwNlMreq4HLN4O+FoPAIAle9hYM7
te0c5uGeWXEem+ML9UbYOPxKtp7lZY4he7ND7dkUUpqzYEA/+xaP1MrLJTW09oNG
nRUyHgYsyebJaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:22 2025 by rpki-client