Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier: 9AT/+2QGrDryFlcyJI60RuYNXM/8cUSJk0AHZUq4IOc=
Subject key identifier: EC:36:AC:30:E7:87:6B:D1:D7:87:BA:FA:74:F3:3C:12:94:72:73:5B
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 0197481E1BA3C7E5A216A8A5E81CC4F9DE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 02:00:22 +0000
Manifest this update: Sat 07 Jun 2025 02:00:22 +0000
Manifest next update: Sun 08 Jun 2025 02:00:22 +0000
Files and hashes: 1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: Z9GjLhelb3Fg3ViwGhucLwo91+MjE8zGPvw215OZ1bU=)
2: YP_ojssdziwcanJcHJab_qTOmuY.roa (hash: U3A2fg6Wi6oAAnLmfskViTy7rAEB6sn2k8/iuWaNKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:1b:a3:c7:e5:a2:16:a8:a5:e8:1c:c4:f9:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Jun 7 02:00:22 2025 GMT
Not After : Jun 8 02:00:22 2025 GMT
Subject: CN=ec36ac30e7876bd1d787bafa74f33c129472735b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:ec:1b:6e:19:ee:cd:25:bf:4c:3d:bf:72:
3f:51:9b:7f:f3:cf:0c:9c:57:03:a6:83:fd:4a:3b:
48:d1:11:8c:8d:54:c7:22:44:02:93:80:d4:b4:bc:
4f:c5:b6:0a:d8:76:05:3e:4a:d5:fc:45:8f:bf:18:
fe:f6:78:9a:54:2f:75:cb:0c:1a:2b:88:15:29:26:
c4:15:bd:9c:08:db:04:4d:c1:05:bd:12:69:b2:0c:
df:8d:0f:f7:40:64:d0:8d:f2:e6:1c:cd:c6:1e:75:
45:59:90:d5:3b:70:a5:99:a4:27:c2:d1:4c:d9:7b:
31:76:70:a4:53:a5:da:53:df:a9:c0:04:d6:c4:08:
b8:33:80:dd:47:cd:bb:50:70:f6:66:fc:a3:61:3e:
9a:9e:75:cf:0d:1b:51:a0:35:59:d7:1f:1f:4d:5c:
bc:c9:e6:e6:25:b2:d4:d7:0f:71:62:14:7d:66:b1:
90:24:14:36:65:5e:29:c9:30:e3:22:8f:ad:a4:fb:
cb:79:c0:e0:a0:13:3d:74:9d:40:3e:48:6b:ad:52:
bf:18:14:26:07:7f:dc:95:e2:13:8b:21:16:68:5d:
ed:45:26:94:c0:b5:5f:39:bb:a1:36:48:ce:f9:ef:
64:f0:0f:5d:04:4e:3c:35:09:56:1a:29:53:78:fa:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:AC:30:E7:87:6B:D1:D7:87:BA:FA:74:F3:3C:12:94:72:73:5B
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d2:76:6b:26:d5:e4:d4:e0:2a:2d:b5:36:41:05:9d:26:5d:
78:1a:cb:9e:d0:b2:8c:bc:64:28:54:42:2e:a5:f6:13:b5:71:
24:6e:9c:05:f0:e7:76:8e:94:d9:8c:6e:27:62:54:a5:50:90:
69:51:cf:c6:b0:21:15:d7:2c:0f:d4:77:8a:2b:70:b1:a4:09:
4a:c5:69:0b:54:6c:93:a0:72:16:8e:eb:be:9e:c0:2b:bc:ce:
d2:d0:6f:32:20:da:2d:4a:d5:be:4a:45:23:7f:35:30:cb:72:
43:03:e4:ea:52:f0:e4:4f:2f:f7:db:55:99:98:08:2c:a7:c6:
70:19:52:c4:55:84:58:25:32:dc:53:f8:6c:ed:fe:f6:8b:79:
4c:8d:c6:78:5f:ea:ac:c9:6f:00:31:ca:42:5d:71:a3:c1:99:
15:eb:dd:bc:2c:cf:9d:1d:40:6a:4c:67:89:f6:5c:ab:c7:91:
b3:56:44:c7:a0:08:a0:c8:39:db:12:f7:66:da:69:14:8c:7a:
e4:62:7b:e9:6a:e1:86:13:14:3a:c6:7f:74:bf:80:3f:04:15:
66:e4:c1:27:1d:20:26:6d:65:17:1e:17:ac:d5:06:db:fb:67:
45:9c:02:2a:23:52:b9:b0:3f:6d:8d:af:64:c9:95:cc:2d:8b:
d8:f2:d5:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHhujx+WiFqil6BzE+d4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2MwZTk0MmJmODBhN2Q1NzQ5MGNjN2JiMDQyODViMDJh
ZWZmN2EwHhcNMjUwNjA3MDIwMDIyWhcNMjUwNjA4MDIwMDIyWjAzMTEwLwYDVQQD
EyhlYzM2YWMzMGU3ODc2YmQxZDc4N2JhZmE3NGYzM2MxMjk0NzI3MzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw7sG24Z7s0lv0w9v3I/UZt/888M
nFcDpoP9SjtI0RGMjVTHIkQCk4DUtLxPxbYK2HYFPkrV/EWPvxj+9niaVC91ywwa
K4gVKSbEFb2cCNsETcEFvRJpsgzfjQ/3QGTQjfLmHM3GHnVFWZDVO3ClmaQnwtFM
2XsxdnCkU6XaU9+pwATWxAi4M4DdR827UHD2ZvyjYT6annXPDRtRoDVZ1x8fTVy8
yebmJbLU1w9xYhR9ZrGQJBQ2ZV4pyTDjIo+tpPvLecDgoBM9dJ1APkhrrVK/GBQm
B3/cleITiyEWaF3tRSaUwLVfObuhNkjO+e9k8A9dBE48NQlWGilTePpkzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOw2rDDnh2vR14e6+nTzPBKUcnNbMB8GA1UdIwQY
MBaAFGB8DpQr+Ap9V0kMx7sEKFsCrv96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUh3T2xDdjRDbjFYU1F6SHV3UW9Xd0t1XzNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kZjE1MTItM2ZhNC00MGZjLThkY2Et
NjQzN2FjZDhhM2NmLzEvWUh3T2xDdjRDbjFYU1F6SHV3UW9Xd0t1XzNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kZjE1MTItM2ZhNC00MGZjLThkY2EtNjQzN2FjZDhhM2Nm
LzEvWUh3T2xDdjRDbjFYU1F6SHV3UW9Xd0t1XzNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdJ2aybV
5NTgKi21NkEFnSZdeBrLntCyjLxkKFRCLqX2E7VxJG6cBfDndo6U2YxuJ2JUpVCQ
aVHPxrAhFdcsD9R3iitwsaQJSsVpC1Rsk6ByFo7rvp7AK7zO0tBvMiDaLUrVvkpF
I381MMtyQwPk6lLw5E8v99tVmZgILKfGcBlSxFWEWCUy3FP4bO3+9ot5TI3GeF/q
rMlvADHKQl1xo8GZFevdvCzPnR1AakxnifZcq8eRs1ZEx6AIoMg52xL3ZtppFIx6
5GJ76WrhhhMUOsZ/dL+APwQVZuTBJx0gJm1lFx4XrNUG2/tnRZwCKiNSubA/bY2v
ZMmVzC2L2PLVTA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:35 2025 by rpki-client