Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: Xb7Db1UUeni9bOzoWQJ7zWtuHVFu9JJDUZ3VeK7qjSY=
Subject key identifier: 94:95:74:65:EB:47:CC:13:E4:8C:B2:56:55:CC:D6:2D:47:5A:59:40
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 0197488CEB569D94D4022FB7CE6E33F9745A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 014E
Signing time: Sat 07 Jun 2025 04:01:24 +0000
Manifest this update: Sat 07 Jun 2025 04:01:24 +0000
Manifest next update: Sun 08 Jun 2025 04:01:24 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: PblAiN97a141g/NJdVpKm2OLwWwezdyc8CSwT02yOo4=)
2: wK5U0OA4so9Bb6LaTOAhvYcrZbw.roa (hash: i3F3Ec/aHEk6lLvyEsCOnZPx8LpXq7mO54DzXI/2qs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:eb:56:9d:94:d4:02:2f:b7:ce:6e:33:f9:74:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Jun 7 04:01:24 2025 GMT
Not After : Jun 8 04:01:24 2025 GMT
Subject: CN=94957465eb47cc13e48cb25655ccd62d475a5940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ab:a8:c4:d1:4d:ea:e9:a8:bd:c4:e2:1b:76:
70:1f:65:c5:b8:91:e7:2d:33:bd:00:13:3d:bb:cb:
79:9e:7d:db:d6:2d:af:72:9a:d2:b7:27:fc:75:0d:
73:e0:a1:c6:21:ae:dd:d5:3c:72:ec:dc:7c:c6:38:
a4:43:42:f9:d7:ba:25:c0:fb:07:09:50:56:9b:1c:
79:0e:1e:e4:33:6c:da:c0:6b:c3:2a:8b:23:b6:02:
64:b4:e7:2b:3d:97:39:e0:81:e9:ea:38:6e:67:1a:
d7:6d:74:6b:df:9b:5e:b8:89:88:4c:4f:ec:52:66:
e1:37:fa:a3:7d:79:50:b5:96:3d:c2:28:94:52:33:
84:9d:32:45:1b:81:8a:7d:83:8c:4e:45:95:39:34:
d7:98:38:45:5b:41:c6:fe:bf:25:fe:0e:f2:17:a0:
cc:a0:4b:b1:1a:10:0e:f4:4d:13:23:58:32:9e:0e:
75:bb:3f:f1:70:4e:c8:67:55:ab:e0:0b:29:79:4d:
c1:d9:72:30:42:88:c2:a6:ed:81:fc:70:61:3b:53:
e7:90:2d:a3:9b:41:a0:46:c3:81:0d:16:b6:c4:09:
3e:09:5f:b7:99:41:db:9f:76:a9:79:5e:82:c9:39:
0a:17:d8:c2:56:e0:d0:58:1a:5c:1c:9a:c3:0a:c5:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:95:74:65:EB:47:CC:13:E4:8C:B2:56:55:CC:D6:2D:47:5A:59:40
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:57:b1:a0:06:b0:bd:26:53:60:b1:04:66:80:c1:1e:12:18:
2c:eb:35:82:4e:59:42:84:51:93:b6:3a:e3:65:fb:d5:e5:93:
b1:7e:00:ab:7c:73:77:d2:4a:95:5b:7a:10:22:1a:22:37:63:
5c:f2:63:dd:84:ae:92:28:d3:a7:78:dd:15:fb:0e:f4:01:a0:
54:c3:9e:a1:a9:5a:d7:84:40:72:d3:eb:fc:cb:cc:cb:90:cb:
b4:02:a3:1c:0f:e3:1e:75:d4:4d:ab:99:d7:d8:20:fa:f0:8f:
37:19:80:87:ac:ad:3c:83:ee:f9:b2:bd:6e:45:8a:21:8f:0a:
3c:63:d4:e9:75:78:01:d6:73:44:04:c9:b5:bb:d0:26:93:42:
90:ca:c2:2b:11:48:1b:37:b0:50:29:4f:62:58:34:a2:b6:63:
c0:3e:ab:e7:e0:be:de:c0:bc:7b:55:ae:72:3d:ee:81:36:a6:
23:25:95:25:e1:5a:ad:2e:eb:c4:f6:d5:71:45:53:86:ee:a3:
eb:dd:44:a6:1d:62:7d:f4:c1:98:98:6c:28:1a:6d:84:c6:32:
86:b3:6b:cc:d1:d5:c6:af:de:c8:57:3a:a4:8c:f4:8a:1c:70:
74:32:cf:cf:8c:84:bb:dd:b7:e3:78:4e:57:cf:1e:6a:c4:cb:
2a:28:43:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjOtWnZTUAi+3zm4z+XRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjVhYWM3NmZlNmJmMjkxMzM1ZDE5YTY1OGU2NDg5MTA1
Yjg2OWYwHhcNMjUwNjA3MDQwMTI0WhcNMjUwNjA4MDQwMTI0WjAzMTEwLwYDVQQD
Eyg5NDk1NzQ2NWViNDdjYzEzZTQ4Y2IyNTY1NWNjZDYyZDQ3NWE1OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6uoxNFN6umovcTiG3ZwH2XFuJHn
LTO9ABM9u8t5nn3b1i2vcprStyf8dQ1z4KHGIa7d1Txy7Nx8xjikQ0L517olwPsH
CVBWmxx5Dh7kM2zawGvDKosjtgJktOcrPZc54IHp6jhuZxrXbXRr35teuImITE/s
UmbhN/qjfXlQtZY9wiiUUjOEnTJFG4GKfYOMTkWVOTTXmDhFW0HG/r8l/g7yF6DM
oEuxGhAO9E0TI1gyng51uz/xcE7IZ1Wr4AspeU3B2XIwQojCpu2B/HBhO1PnkC2j
m0GgRsOBDRa2xAk+CV+3mUHbn3apeV6CyTkKF9jCVuDQWBpcHJrDCsXwNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSVdGXrR8wT5IyyVlXM1i1HWllAMB8GA1UdIwQY
MBaAFGD1qsdv5r8pEzXRmmWOZIkQW4afMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMTJiMDAtYWY4Mi00NzM1LWFhYzEt
MmJmYjZhZGRjZjQ1LzEvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jMTJiMDAtYWY4Mi00NzM1LWFhYzEtMmJmYjZhZGRjZjQ1
LzEvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlexoAaw
vSZTYLEEZoDBHhIYLOs1gk5ZQoRRk7Y642X71eWTsX4Aq3xzd9JKlVt6ECIaIjdj
XPJj3YSukijTp3jdFfsO9AGgVMOeoala14RActPr/MvMy5DLtAKjHA/jHnXUTauZ
19gg+vCPNxmAh6ytPIPu+bK9bkWKIY8KPGPU6XV4AdZzRATJtbvQJpNCkMrCKxFI
GzewUClPYlg0orZjwD6r5+C+3sC8e1Wucj3ugTamIyWVJeFarS7rxPbVcUVThu6j
691Eph1iffTBmJhsKBpthMYyhrNrzNHVxq/eyFc6pIz0ihxwdDLPz4yEu92343hO
V88easTLKihDrg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:35 2025 by rpki-client