Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier: 7tlB+m8Ah7tfr14eNvJnym8xeCfdn7y2a+kOzw2WEZ0=
Subject key identifier: E4:83:A7:3D:14:45:11:42:4E:6A:FF:1C:8E:D1:12:E7:9A:4E:D9:93
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial: 01974DE9F1CAC6C3C4647D9C912968CB32B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number: 01AA
Signing time: Sun 08 Jun 2025 05:01:06 +0000
Manifest this update: Sun 08 Jun 2025 05:01:06 +0000
Manifest next update: Mon 09 Jun 2025 05:01:06 +0000
Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: 2CrxOvQGymCKYfAIabpLckf7+jCMxgfcl/bCRzi/V2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:f1:ca:c6:c3:c4:64:7d:9c:91:29:68:cb:32:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
Validity
Not Before: Jun 8 05:01:06 2025 GMT
Not After : Jun 9 05:01:06 2025 GMT
Subject: CN=e483a73d144511424e6aff1c8ed112e79a4ed993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:9e:24:7b:52:f2:97:95:f7:4f:73:89:c2:
84:5d:4a:8f:7f:fd:d6:32:2b:b3:79:55:c2:ec:17:
11:97:d1:d2:4c:9f:e9:be:78:5a:fe:29:03:80:27:
65:c4:e1:32:cb:2c:4c:65:93:4e:31:85:da:d7:b2:
d8:2a:77:55:56:c1:4b:a6:45:c9:39:52:13:e9:99:
d7:e7:bc:24:16:de:1a:e4:5c:2b:64:b2:3a:0c:a2:
37:df:d6:c9:0d:b4:f9:3e:02:b0:cd:3c:9b:7b:57:
55:8f:02:dd:5e:3b:54:da:d5:e2:fb:f5:f0:d0:c4:
7b:55:34:cf:9b:bd:4f:10:bd:3c:ef:51:f5:e5:9a:
1d:30:f9:9a:9f:6f:44:63:56:7e:d7:58:41:3e:9d:
fc:18:f4:97:60:20:06:60:f3:d4:98:5b:ff:7f:5f:
d0:35:05:63:3c:bb:1c:90:a0:ea:1d:4f:be:59:43:
d0:bc:ff:f3:ef:5c:db:0f:9b:fd:6c:0a:29:cc:ef:
80:b0:69:81:d9:96:a2:91:13:50:7e:0d:96:f5:6a:
c6:a4:bd:ce:4b:5b:a7:da:71:2d:cf:b9:d0:fe:6d:
f1:44:25:fe:07:e9:08:33:53:85:91:4b:1a:bd:a5:
97:67:aa:e4:e2:46:af:d3:3e:84:50:98:a1:c6:d1:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:83:A7:3D:14:45:11:42:4E:6A:FF:1C:8E:D1:12:E7:9A:4E:D9:93
X509v3 Authority Key Identifier:
keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:35:6d:6d:e7:68:cd:82:9d:63:17:2e:08:bc:2b:41:95:75:
61:74:eb:42:1f:c8:34:75:2a:f6:c1:85:06:f1:86:6f:78:e3:
a0:ff:1e:65:38:c3:b1:dc:c6:12:c5:01:bb:b0:9d:99:90:14:
72:f8:9e:f9:b6:c9:73:0e:ad:8d:20:64:01:ee:df:db:73:ee:
96:27:8d:93:de:9f:b3:5a:aa:5c:c2:d5:59:09:c9:95:bf:3c:
56:18:5a:37:4a:15:d4:89:d4:aa:1c:7e:34:24:52:3d:cb:dc:
c6:2e:56:59:65:51:91:8b:d3:fe:02:d7:a4:9a:cd:e2:19:71:
05:72:9e:25:7e:3b:98:75:52:0f:59:14:54:4e:d6:cb:61:44:
3e:4b:8e:f9:17:f5:c4:bb:58:c4:0a:c9:3d:42:6d:61:38:b2:
19:39:1d:61:85:2f:cc:56:c3:4c:be:01:9b:f8:9d:13:0b:c2:
76:28:15:f9:45:7a:6e:4c:2a:35:fb:a5:9e:82:7e:36:61:36:
f7:7b:46:fb:a4:0c:bd:69:8c:07:4a:10:22:cf:f8:f9:7d:20:
68:cb:ed:29:e5:e7:36:f9:ea:97:86:79:0f:9c:73:0f:81:0a:
8e:d4:39:8b:fc:72:c5:c5:94:b9:47:89:79:9f:5f:aa:4f:08:
b3:b8:bc:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6fHKxsPEZH2ckSloyzKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDlhZWZmNmRmYTg5ZTY3NTgzN2U0NTQ1MjEyMzVjOTli
MWJlMmYwHhcNMjUwNjA4MDUwMTA2WhcNMjUwNjA5MDUwMTA2WjAzMTEwLwYDVQQD
EyhlNDgzYTczZDE0NDUxMTQyNGU2YWZmMWM4ZWQxMTJlNzlhNGVkOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbCeJHtS8peV909zicKEXUqPf/3W
MiuzeVXC7BcRl9HSTJ/pvnha/ikDgCdlxOEyyyxMZZNOMYXa17LYKndVVsFLpkXJ
OVIT6ZnX57wkFt4a5FwrZLI6DKI339bJDbT5PgKwzTybe1dVjwLdXjtU2tXi+/Xw
0MR7VTTPm71PEL0871H15ZodMPman29EY1Z+11hBPp38GPSXYCAGYPPUmFv/f1/Q
NQVjPLsckKDqHU++WUPQvP/z71zbD5v9bAopzO+AsGmB2ZaikRNQfg2W9WrGpL3O
S1un2nEtz7nQ/m3xRCX+B+kIM1OFkUsavaWXZ6rk4kav0z6EUJihxtEm1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSDpz0URRFCTmr/HI7REueaTtmTMB8GA1UdIwQY
MBaAFGMJrv9t+onmdYN+RUUhI1yZsb4vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdtdV8yMzZpZVoxZzM1RlJTRWpYSm14dmk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83OWM1OWQtZmRiMC00Yjc3LTlhNTEt
YjhkYWIyOTA4ZmYxLzEvWXdtdV8yMzZpZVoxZzM1RlJTRWpYSm14dmk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi83OWM1OWQtZmRiMC00Yjc3LTlhNTEtYjhkYWIyOTA4ZmYx
LzEvWXdtdV8yMzZpZVoxZzM1RlJTRWpYSm14dmk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzVtbedo
zYKdYxcuCLwrQZV1YXTrQh/INHUq9sGFBvGGb3jjoP8eZTjDsdzGEsUBu7CdmZAU
cvie+bbJcw6tjSBkAe7f23PulieNk96fs1qqXMLVWQnJlb88VhhaN0oV1InUqhx+
NCRSPcvcxi5WWWVRkYvT/gLXpJrN4hlxBXKeJX47mHVSD1kUVE7Wy2FEPkuO+Rf1
xLtYxArJPUJtYTiyGTkdYYUvzFbDTL4Bm/idEwvCdigV+UV6bkwqNfulnoJ+NmE2
93tG+6QMvWmMB0oQIs/4+X0gaMvtKeXnNvnql4Z5D5xzD4EKjtQ5i/xyxcWUuUeJ
eZ9fqk8Is7i8Cg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:43:51 2025 by rpki-client