Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
File: yrjSpYc51mIvFaU8wb1U-dsIAcY.mft (raw, json)
Hash identifier: LkWKaY4RTdJCaK8kpgNkhi6SNeLVaUrUcibzo5tXQTM=
Subject key identifier: 60:A8:DD:2C:27:18:F6:26:93:AB:89:16:F9:E2:C2:E4:96:E1:34:3E
Authority key identifier: CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
Certificate issuer: /CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Certificate serial: 01974EFC04EA15B23B43E726E148543C03BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
Manifest number: 03B6
Signing time: Sun 08 Jun 2025 10:00:28 +0000
Manifest this update: Sun 08 Jun 2025 10:00:28 +0000
Manifest next update: Mon 09 Jun 2025 10:00:28 +0000
Files and hashes: 1: yrjSpYc51mIvFaU8wb1U-dsIAcY.crl (hash: QdB2pjjMdxO4qm0pwCGZB84jh2XVvWi/m4jjKhAui3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:04:ea:15:b2:3b:43:e7:26:e1:48:54:3c:03:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Validity
Not Before: Jun 8 10:00:28 2025 GMT
Not After : Jun 9 10:00:28 2025 GMT
Subject: CN=60a8dd2c2718f62693ab8916f9e2c2e496e1343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:7b:84:ca:ad:76:5d:7f:64:4a:b2:39:f8:
ac:01:8e:bb:a4:5a:e2:91:7b:0c:71:d3:2b:95:a6:
aa:59:52:6c:d0:e1:e0:d8:73:b2:e0:21:d8:12:16:
5d:2e:f0:f9:73:64:59:b5:01:2f:37:35:ae:11:f3:
f3:78:db:00:8b:d3:5a:31:35:1e:1e:19:0c:fa:89:
45:5e:38:d1:c7:8b:09:e8:39:a9:53:a1:a7:3b:8b:
ec:44:5f:bd:1f:5f:fd:51:b6:c1:b6:ae:d5:18:6b:
20:d1:4f:d4:5c:dc:20:6d:11:7f:d5:dd:65:50:69:
c5:24:e3:17:c2:75:f0:3a:75:a1:85:f6:9c:b1:e1:
6f:a7:51:1b:3a:22:f2:f9:67:f1:1c:bc:7c:53:6c:
af:6f:82:3d:c1:13:8d:fd:bc:16:cf:59:9f:f2:43:
5b:15:6f:e8:68:0c:16:76:86:86:66:61:26:47:70:
1e:52:c4:94:63:d3:8f:f9:f4:7e:d4:cc:64:cb:d9:
d8:18:39:74:6e:9e:50:44:c3:e1:00:be:db:d0:b0:
fd:41:03:9c:45:4d:c0:3c:70:e3:7a:7c:2b:0c:24:
84:52:13:e4:e3:94:e0:f6:29:75:11:99:aa:81:69:
83:e9:21:ec:eb:27:a7:b1:a7:5a:ed:43:35:67:f6:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:DD:2C:27:18:F6:26:93:AB:89:16:F9:E2:C2:E4:96:E1:34:3E
X509v3 Authority Key Identifier:
keyid:CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ca:5b:e0:bd:75:c4:30:1a:fc:7a:cc:50:4e:a7:91:79:e4:
16:d2:99:75:53:15:3d:af:86:1a:1a:c4:31:08:71:01:89:3e:
53:2e:88:60:af:ad:9c:2a:63:8f:36:9c:00:a7:6e:f5:13:fb:
9e:2c:d5:d1:ff:6a:e0:aa:03:a9:16:a9:79:c5:17:83:33:5f:
81:2e:d0:17:46:51:de:5e:16:4a:75:16:7e:53:fd:af:72:83:
93:ce:50:19:df:4f:22:6a:49:bc:18:19:49:7b:e6:23:be:32:
f3:de:36:0d:d2:c7:ca:b2:1f:5b:9f:e3:32:60:7d:19:2a:61:
0e:19:99:d4:37:42:98:86:10:f0:66:c4:79:fc:a4:e9:27:4a:
86:66:d3:e8:e3:a2:f8:64:2e:c7:14:e6:a9:81:3d:72:c3:46:
6e:38:fd:56:19:f0:81:3b:79:97:a9:51:a5:42:8d:f4:9f:dd:
83:89:e8:d4:9f:26:2d:47:e6:67:23:c9:9f:24:d2:99:f7:72:
4d:e4:5b:05:58:ac:23:f0:5b:f7:07:01:fb:39:ab:b1:e5:63:
38:c6:45:71:53:aa:cc:88:4d:d4:3d:0e:b1:dc:fb:31:e8:6f:
7a:55:76:7d:21:74:c6:53:14:b6:f9:3c:ec:92:db:62:4b:f1:
3d:6d:dd:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/ATqFbI7Q+cm4UhUPAO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjhkMmE1ODczOWQ2NjIyZjE1YTUzY2MxYmQ1NGY5ZGIw
ODAxYzYwHhcNMjUwNjA4MTAwMDI4WhcNMjUwNjA5MTAwMDI4WjAzMTEwLwYDVQQD
Eyg2MGE4ZGQyYzI3MThmNjI2OTNhYjg5MTZmOWUyYzJlNDk2ZTEzNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3h7hMqtdl1/ZEqyOfisAY67pFri
kXsMcdMrlaaqWVJs0OHg2HOy4CHYEhZdLvD5c2RZtQEvNzWuEfPzeNsAi9NaMTUe
HhkM+olFXjjRx4sJ6DmpU6GnO4vsRF+9H1/9UbbBtq7VGGsg0U/UXNwgbRF/1d1l
UGnFJOMXwnXwOnWhhfacseFvp1EbOiLy+WfxHLx8U2yvb4I9wRON/bwWz1mf8kNb
FW/oaAwWdoaGZmEmR3AeUsSUY9OP+fR+1Mxky9nYGDl0bp5QRMPhAL7b0LD9QQOc
RU3APHDjenwrDCSEUhPk45Tg9il1EZmqgWmD6SHs6yensada7UM1Z/ZrPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCo3SwnGPYmk6uJFvniwuSW4TQ+MB8GA1UdIwQY
MBaAFMq40qWHOdZiLxWlPMG9VPnbCAHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJqU3BZYzUxbUl2RmFVOHdiMVUtZHNJQWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82NmNlY2YtYmRmYy00Mjc4LWFlMDMt
YWQxY2RlMWI4NTQyLzEveXJqU3BZYzUxbUl2RmFVOHdiMVUtZHNJQWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82NmNlY2YtYmRmYy00Mjc4LWFlMDMtYWQxY2RlMWI4NTQy
LzEveXJqU3BZYzUxbUl2RmFVOHdiMVUtZHNJQWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcspb4L11
xDAa/HrMUE6nkXnkFtKZdVMVPa+GGhrEMQhxAYk+Uy6IYK+tnCpjjzacAKdu9RP7
nizV0f9q4KoDqRapecUXgzNfgS7QF0ZR3l4WSnUWflP9r3KDk85QGd9PImpJvBgZ
SXvmI74y8942DdLHyrIfW5/jMmB9GSphDhmZ1DdCmIYQ8GbEefyk6SdKhmbT6OOi
+GQuxxTmqYE9csNGbjj9VhnwgTt5l6lRpUKN9J/dg4no1J8mLUfmZyPJnyTSmfdy
TeRbBVisI/Bb9wcB+zmrseVjOMZFcVOqzIhN1D0Osdz7MehvelV2fSF0xlMUtvk8
7JLbYkvxPW3dFg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:40:07 2025 by rpki-client