Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: n9a0aDBej1jHIEs6ACsMS1/3P8UYNzneWGUV2dgxKEo=
Subject key identifier: E8:68:CF:FB:4D:B9:63:62:51:89:90:2C:EC:11:C1:FB:D1:98:9B:65
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 0197496833430E57E9F75B97D737FBDDDF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 105E
Signing time: Sat 07 Jun 2025 08:00:55 +0000
Manifest this update: Sat 07 Jun 2025 08:00:55 +0000
Manifest next update: Sun 08 Jun 2025 08:00:55 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: 7k/W9ToBNrsJ5kIBhaumYlOBFLbm4Y0/RiZ2hIaifZM=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:33:43:0e:57:e9:f7:5b:97:d7:37:fb:dd:df:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Jun 7 08:00:55 2025 GMT
Not After : Jun 8 08:00:55 2025 GMT
Subject: CN=e868cffb4db963625189902cec11c1fbd1989b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:6a:3c:3b:a1:c4:49:b9:2f:f9:3d:4d:c1:
6e:31:f4:1e:8f:33:e1:57:d8:93:72:ea:88:55:af:
5b:a4:33:c2:d9:d0:f1:0a:82:68:6c:dd:8c:c3:7c:
6f:a4:16:99:14:53:ee:e6:41:19:65:69:75:b6:4b:
d0:9c:d5:6d:23:98:8f:e8:45:29:db:65:29:91:86:
5c:9d:82:68:bd:c5:e4:1c:2f:70:da:2a:24:95:e1:
24:23:94:21:d2:19:2e:f7:8b:31:be:e7:ae:8d:f6:
ec:2a:22:b0:d1:0b:0f:80:24:31:f1:40:2a:58:26:
3d:a0:3d:da:8f:0c:ab:35:52:ae:b9:b7:c9:f2:8b:
35:11:ac:5c:f4:9b:e3:8a:53:51:06:f0:88:f2:b1:
f4:78:41:4c:e6:a5:e4:67:26:03:99:9d:6a:33:fc:
e9:16:42:11:0a:b8:87:f0:33:07:4a:4f:58:ef:a6:
a6:27:50:da:a9:2e:83:24:67:ea:01:b9:ee:d3:74:
30:a8:a3:85:67:f4:2b:1b:e3:51:63:f5:5d:db:45:
da:f3:a1:ba:99:21:fa:9d:04:f4:83:4c:bc:af:70:
4a:c0:6c:a6:e1:b9:e5:ad:3b:79:fc:6c:16:78:93:
75:50:e9:4d:eb:d8:87:9b:8b:69:4d:42:66:eb:bb:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:CF:FB:4D:B9:63:62:51:89:90:2C:EC:11:C1:FB:D1:98:9B:65
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:92:25:bd:7c:57:3c:10:54:23:fd:10:e1:96:e3:01:05:d8:
95:aa:78:e7:a4:6b:48:94:d6:2e:b1:2a:02:49:e6:40:db:70:
49:2c:06:cc:37:b9:0c:f4:ea:26:b1:93:ac:67:6b:ee:37:c8:
d8:b0:ca:78:d6:0a:b3:6c:51:bd:7b:a7:21:f5:06:33:8c:29:
89:4b:b4:25:07:9c:cb:d6:e7:3c:88:c1:4b:33:2d:54:06:15:
e5:d1:1b:da:8d:1f:0e:1b:b1:54:f7:94:5e:a0:19:3b:31:b2:
e1:17:6f:df:61:fb:d7:29:eb:89:9a:f4:a3:17:b9:bf:fc:82:
c4:1b:b6:6b:e2:4c:7a:51:89:18:2a:5b:53:78:fe:18:e8:72:
51:63:55:6a:a3:2d:37:27:a8:4a:42:64:9b:a3:c4:d4:c8:55:
d7:c3:19:31:5f:84:ca:c1:57:1d:49:12:ec:4f:00:52:7a:3d:
c7:49:39:6c:6a:24:42:5d:26:13:9a:af:46:13:70:b4:46:05:
70:95:52:2a:4d:38:f0:32:5d:64:e8:dc:10:30:9b:8c:dd:a3:
b8:d6:8f:31:fd:16:ef:0e:15:53:4a:6d:37:79:4c:d5:03:68:
3f:ae:f7:5f:10:46:3f:da:86:0a:ab:22:fe:85:ad:28:a5:95:
02:53:d7:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaDNDDlfp91uX1zf73d9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OGNjODUwNmZlZGJiNTA2MWRlOTkyNWIwN2Q2NDk5MThh
MTk5MjYwHhcNMjUwNjA3MDgwMDU1WhcNMjUwNjA4MDgwMDU1WjAzMTEwLwYDVQQD
EyhlODY4Y2ZmYjRkYjk2MzYyNTE4OTkwMmNlYzExYzFmYmQxOTg5YjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRpqPDuhxEm5L/k9TcFuMfQejzPh
V9iTcuqIVa9bpDPC2dDxCoJobN2Mw3xvpBaZFFPu5kEZZWl1tkvQnNVtI5iP6EUp
22UpkYZcnYJovcXkHC9w2iokleEkI5Qh0hku94sxvueujfbsKiKw0QsPgCQx8UAq
WCY9oD3ajwyrNVKuubfJ8os1Eaxc9JvjilNRBvCI8rH0eEFM5qXkZyYDmZ1qM/zp
FkIRCriH8DMHSk9Y76amJ1DaqS6DJGfqAbnu03QwqKOFZ/QrG+NRY/Vd20Xa86G6
mSH6nQT0g0y8r3BKwGym4bnlrTt5/GwWeJN1UOlN69iHm4tpTUJm67v3bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhoz/tNuWNiUYmQLOwRwfvRmJtlMB8GA1UdIwQY
MBaAFNWMyFBv7btQYd6ZJbB9ZJkYoZkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEt
YmIzZTgxOWYzZGRjLzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEtYmIzZTgxOWYzZGRj
LzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpIlvXxX
PBBUI/0Q4ZbjAQXYlap456RrSJTWLrEqAknmQNtwSSwGzDe5DPTqJrGTrGdr7jfI
2LDKeNYKs2xRvXunIfUGM4wpiUu0JQecy9bnPIjBSzMtVAYV5dEb2o0fDhuxVPeU
XqAZOzGy4Rdv32H71ynriZr0oxe5v/yCxBu2a+JMelGJGCpbU3j+GOhyUWNVaqMt
NyeoSkJkm6PE1MhV18MZMV+EysFXHUkS7E8AUno9x0k5bGokQl0mE5qvRhNwtEYF
cJVSKk048DJdZOjcEDCbjN2juNaPMf0W7w4VU0ptN3lM1QNoP673XxBGP9qGCqsi
/oWtKKWVAlPXig==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:19 2025 by rpki-client