Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: hyXVyLD7dKe0eqa9a56c8WRiOy7OqFOKqlvMclXVZHA=
Subject key identifier: 7E:EA:F7:A6:BB:20:12:AE:B4:E9:E4:70:91:AD:6F:E4:13:CE:34:88
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 01974A7AB949C9037E96B9AC24060684D77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 11D5
Signing time: Sat 07 Jun 2025 13:00:46 +0000
Manifest this update: Sat 07 Jun 2025 13:00:46 +0000
Manifest next update: Sun 08 Jun 2025 13:00:46 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: rVg/Z5Bp8wxRlJLMQp7MHebR8f0t5KK9FEhnxSgvlHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:b9:49:c9:03:7e:96:b9:ac:24:06:06:84:d7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Jun 7 13:00:46 2025 GMT
Not After : Jun 8 13:00:46 2025 GMT
Subject: CN=7eeaf7a6bb2012aeb4e9e47091ad6fe413ce3488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:d3:bf:a0:e5:b3:87:1f:8f:90:43:7b:04:
14:ba:06:b6:e6:eb:6d:43:64:30:12:35:0f:1d:d4:
e7:96:85:85:15:38:0a:3d:a7:70:49:24:29:64:1c:
09:e5:b9:61:90:e5:28:1b:3a:e6:b9:0f:35:d3:2b:
5d:97:ba:d7:83:0f:e9:df:f5:6f:9a:89:3c:79:ea:
f0:29:0c:09:58:8c:c5:fe:37:cf:13:66:9a:02:45:
0d:be:aa:58:3d:b4:66:d3:ef:e1:b0:79:c2:11:30:
e7:0a:72:5d:2b:ad:96:02:8d:6d:d2:a6:2f:63:85:
c8:4c:48:bc:2a:50:cb:7b:30:36:ee:42:18:1d:24:
93:81:ce:87:eb:df:ac:18:f7:cb:30:be:b1:eb:3c:
73:43:6d:98:51:a2:c5:d7:de:ea:88:86:28:2d:22:
61:0a:0e:fc:fb:03:f3:ba:e4:25:56:54:e1:4f:a8:
af:a7:20:b2:ff:2e:9a:6e:0f:d8:3a:dd:10:9e:83:
7a:a0:43:14:30:ee:90:98:c2:0f:fa:f1:1d:e0:f0:
00:75:26:ca:cc:95:3f:82:c0:51:01:92:b0:6a:eb:
dc:f7:0c:f8:f1:58:a8:1e:a4:f2:e1:e3:67:38:d4:
12:67:79:c1:87:ca:ba:69:53:78:34:89:6d:de:66:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EA:F7:A6:BB:20:12:AE:B4:E9:E4:70:91:AD:6F:E4:13:CE:34:88
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7a:ef:bf:05:5a:16:5a:c2:3d:38:07:59:ae:33:d9:95:7b:
bd:d6:9b:c7:5c:35:93:1e:ab:df:f2:95:06:e5:db:fd:cf:3c:
d0:99:d6:3a:e0:de:69:92:38:1a:cc:ee:8f:27:2e:64:0e:07:
e2:7c:97:2e:10:67:30:f1:93:34:0f:90:67:ae:32:5f:fd:61:
65:1c:a2:d6:7b:3e:74:55:c1:6a:ff:fd:10:2d:43:28:51:d4:
fa:15:f8:93:fb:a3:17:bb:5e:76:d9:6b:53:c2:8a:d9:3b:06:
27:2e:0c:98:04:c2:ff:3e:3c:67:78:31:10:48:e4:75:51:f3:
4a:53:ca:c0:a7:d4:8b:6d:9c:05:e1:b2:84:f2:07:52:16:4e:
ca:69:cf:81:d0:d9:31:a1:7a:f5:5c:6b:78:ca:9a:32:81:30:
45:71:78:9b:05:76:92:ed:56:cc:37:5b:6e:ab:b6:a0:3a:4c:
c3:c8:ad:97:8d:e7:f2:53:1c:79:e3:28:ae:78:43:c8:2a:e5:
0e:25:bd:bd:fa:ce:19:34:7a:63:2f:b5:5a:98:0f:70:be:1b:
56:03:a6:13:6f:a9:54:31:c8:12:8e:b7:2f:0d:af:a6:1b:40:
06:b4:fa:9f:61:6d:fb:d3:fd:cc:c2:2c:cd:98:ab:ef:06:70:
80:b7:36:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKerlJyQN+lrmsJAYGhNd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjU2Njg0M2UwM2Q2MzlhNDYwYjFiZDg2YmY2OWMxYzM5
ZjhiMTEwHhcNMjUwNjA3MTMwMDQ2WhcNMjUwNjA4MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg3ZWVhZjdhNmJiMjAxMmFlYjRlOWU0NzA5MWFkNmZlNDEzY2UzNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9LTv6Dls4cfj5BDewQUuga25utt
Q2QwEjUPHdTnloWFFTgKPadwSSQpZBwJ5blhkOUoGzrmuQ810ytdl7rXgw/p3/Vv
mok8eerwKQwJWIzF/jfPE2aaAkUNvqpYPbRm0+/hsHnCETDnCnJdK62WAo1t0qYv
Y4XITEi8KlDLezA27kIYHSSTgc6H69+sGPfLML6x6zxzQ22YUaLF197qiIYoLSJh
Cg78+wPzuuQlVlThT6ivpyCy/y6abg/YOt0QnoN6oEMUMO6QmMIP+vEd4PAAdSbK
zJU/gsBRAZKwauvc9wz48VioHqTy4eNnONQSZ3nBh8q6aVN4NIlt3mYqYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7q96a7IBKutOnkcJGtb+QTzjSIMB8GA1UdIwQY
MBaAFMslZoQ+A9Y5pGCxvYa/acHDn4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYt
MDZiODEyODk4OGY4LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYtMDZiODEyODk4OGY4
LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHrvvwVa
FlrCPTgHWa4z2ZV7vdabx1w1kx6r3/KVBuXb/c880JnWOuDeaZI4GszujycuZA4H
4nyXLhBnMPGTNA+QZ64yX/1hZRyi1ns+dFXBav/9EC1DKFHU+hX4k/ujF7tedtlr
U8KK2TsGJy4MmATC/z48Z3gxEEjkdVHzSlPKwKfUi22cBeGyhPIHUhZOymnPgdDZ
MaF69VxreMqaMoEwRXF4mwV2ku1WzDdbbqu2oDpMw8itl43n8lMceeMornhDyCrl
DiW9vfrOGTR6Yy+1WpgPcL4bVgOmE2+pVDHIEo63Lw2vphtABrT6n2Ft+9P9zMIs
zZir7wZwgLc2cQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:11 2025 by rpki-client