
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
File: Y5-G_U81pnvLwn-OtveHq4veSfk.mft (raw, json)
Hash identifier: Ee38+YA+MrGj8j+U10LHWoONVVCS5SrQT4/FboLiJmw=
Subject key identifier: DD:4C:85:B3:D5:1D:11:70:31:FA:C7:39:6E:98:84:51:96:2D:E4:7D
Authority key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
Certificate issuer: /CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Certificate serial: 01974DB259241EFE3B2489CE5FBF3AB02EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
Manifest number: 0F76
Signing time: Sun 08 Jun 2025 04:00:23 +0000
Manifest this update: Sun 08 Jun 2025 04:00:23 +0000
Manifest next update: Mon 09 Jun 2025 04:00:23 +0000
Files and hashes: 1: Y5-G_U81pnvLwn-OtveHq4veSfk.crl (hash: cdqMjSZi6E2ZrjwwdoLbFT6RX2JyFeY2fimPNGLp8so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:59:24:1e:fe:3b:24:89:ce:5f:bf:3a:b0:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Validity
Not Before: Jun 8 04:00:23 2025 GMT
Not After : Jun 9 04:00:23 2025 GMT
Subject: CN=dd4c85b3d51d117031fac7396e988451962de47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:8e:4a:09:d5:7c:e1:46:29:5c:d9:99:12:
2c:f4:d1:14:89:45:7e:9a:3e:4d:3a:ba:5b:0f:fa:
12:89:7f:2b:7c:6a:e1:28:93:03:a0:37:72:e1:37:
52:31:fd:75:e3:79:b7:92:49:ae:f8:04:af:45:c2:
8e:04:53:aa:b5:f1:49:90:ab:59:23:00:88:3d:05:
b3:0c:c7:f1:3d:94:db:21:3a:6d:8b:fc:85:b6:33:
d6:4d:82:21:49:02:be:fc:99:31:cf:ca:3c:bb:2a:
80:75:5a:0a:01:c4:fd:43:20:30:8f:4a:3d:27:f6:
a1:25:c6:ce:d4:1f:da:95:90:b6:ae:e4:ea:34:6b:
68:65:9b:41:10:52:d6:d2:49:e4:5b:d8:c7:c0:94:
f9:c9:98:2c:8f:0a:f7:b2:2d:99:dd:17:2e:c9:8e:
63:b9:76:e7:7e:97:b5:05:d7:a5:5d:ca:c2:cd:2a:
54:6f:f0:1c:a8:ac:8b:36:be:31:d3:18:79:53:df:
e8:c0:70:1b:77:a5:90:e0:9a:96:3a:09:a7:63:8c:
02:b8:40:ca:b3:ad:46:85:13:fa:f0:93:33:20:42:
ee:ba:06:eb:e8:74:8c:90:6e:60:de:cc:7f:b1:a6:
03:c6:27:79:8c:91:6e:72:cf:1e:30:4c:8b:19:f2:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:85:B3:D5:1D:11:70:31:FA:C7:39:6E:98:84:51:96:2D:E4:7D
X509v3 Authority Key Identifier:
keyid:63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0b:0e:cb:d5:5b:85:b4:50:a3:e0:5a:1c:50:07:20:8b:ad:
13:31:14:6a:29:0b:c0:7d:a4:98:90:59:d6:76:af:82:b3:2e:
7d:5e:a9:41:eb:4f:15:b7:61:92:94:c5:45:a5:40:23:b3:7c:
e3:5e:8e:53:4e:e9:be:6f:eb:74:df:44:c6:ec:a9:5f:c8:0b:
f1:c0:26:69:e9:c3:9d:db:d1:b3:fd:57:95:32:2b:32:e8:af:
7e:3f:d2:db:b8:42:cb:b6:a2:08:7b:5e:06:9f:5f:65:d0:30:
2d:d9:40:75:70:cb:66:bf:79:d8:e5:ec:c0:82:4f:a2:25:e9:
8c:da:df:7b:45:f4:1b:5f:db:7c:f7:78:f2:4e:88:36:ed:0b:
0c:4e:9c:61:e2:27:bd:92:3b:0e:e6:6e:89:29:52:f3:08:59:
aa:d0:e3:18:50:e5:07:5a:6d:bd:d0:24:b7:23:a9:ed:e6:f6:
07:19:b7:d8:6c:66:b2:eb:d9:a1:81:3d:fd:c5:99:a4:db:bb:
af:f6:76:25:37:d5:90:56:53:c3:92:30:3b:8d:0b:de:2c:cf:
73:d9:fa:62:7b:32:8a:86:f0:04:8e:d3:fc:2b:40:89:59:6d:
ab:42:d9:97:2e:b3:07:69:c1:11:f3:31:02:03:79:2d:78:99:
49:1e:33:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNslkkHv47JInOX786sC6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOWY4NmZkNGYzNWE2N2JjYmMyN2Y4ZWI2Zjc4N2FiOGJk
ZTQ5ZjkwHhcNMjUwNjA4MDQwMDIzWhcNMjUwNjA5MDQwMDIzWjAzMTEwLwYDVQQD
EyhkZDRjODViM2Q1MWQxMTcwMzFmYWM3Mzk2ZTk4ODQ1MTk2MmRlNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLqOSgnVfOFGKVzZmRIs9NEUiUV+
mj5NOrpbD/oSiX8rfGrhKJMDoDdy4TdSMf1143m3kkmu+ASvRcKOBFOqtfFJkKtZ
IwCIPQWzDMfxPZTbITpti/yFtjPWTYIhSQK+/Jkxz8o8uyqAdVoKAcT9QyAwj0o9
J/ahJcbO1B/alZC2ruTqNGtoZZtBEFLW0knkW9jHwJT5yZgsjwr3si2Z3RcuyY5j
uXbnfpe1BdelXcrCzSpUb/AcqKyLNr4x0xh5U9/owHAbd6WQ4JqWOgmnY4wCuEDK
s61GhRP68JMzIELuugbr6HSMkG5g3sx/saYDxid5jJFucs8eMEyLGfK+NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1MhbPVHRFwMfrHOW6YhFGWLeR9MB8GA1UdIwQY
MBaAFGOfhv1PNaZ7y8J/jrb3h6uL3kn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTUtR19VODFwbnZMd24tT3R2ZUhxNHZlU2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xM2UyNTMtMzQ0YS00ZGI3LWJhY2Yt
MGYxMWRhMjg5ZTFmLzEvWTUtR19VODFwbnZMd24tT3R2ZUhxNHZlU2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xM2UyNTMtMzQ0YS00ZGI3LWJhY2YtMGYxMWRhMjg5ZTFm
LzEvWTUtR19VODFwbnZMd24tT3R2ZUhxNHZlU2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQsOy9Vb
hbRQo+BaHFAHIIutEzEUaikLwH2kmJBZ1navgrMufV6pQetPFbdhkpTFRaVAI7N8
416OU07pvm/rdN9ExuypX8gL8cAmaenDndvRs/1XlTIrMuivfj/S27hCy7aiCHte
Bp9fZdAwLdlAdXDLZr952OXswIJPoiXpjNrfe0X0G1/bfPd48k6INu0LDE6cYeIn
vZI7DuZuiSlS8whZqtDjGFDlB1ptvdAktyOp7eb2Bxm32GxmsuvZoYE9/cWZpNu7
r/Z2JTfVkFZTw5IwO40L3izPc9n6YnsyiobwBI7T/CtAiVltq0LZly6zB2nBEfMx
AgN5LXiZSR4zwg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:09 2025 by rpki-client