Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: tW82FJQ08kF/6BGZmgO7B8w8TtBH+6Xh1JlbLZ2mJxY=
Subject key identifier: A2:5C:BA:E6:E4:9C:2E:77:C2:93:A7:04:0D:66:50:7E:74:16:2B:D5
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 01976DAC43ECCDEFE2507D30382E33CC5EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 09:01:35 +0000
Manifest this update: Sat 14 Jun 2025 09:01:35 +0000
Manifest next update: Sun 15 Jun 2025 09:01:35 +0000
Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: WZYwZku8iGORYHm0USIiTwos0CPAUExEMOghtjVcbP8=)
2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:43:ec:cd:ef:e2:50:7d:30:38:2e:33:cc:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Jun 14 09:01:35 2025 GMT
Not After : Jun 15 09:01:35 2025 GMT
Subject: CN=a25cbae6e49c2e77c293a7040d66507e74162bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:36:ad:22:67:f4:7a:29:b7:5b:3d:6b:1c:
c6:53:b4:40:f7:9a:12:5d:21:47:26:c9:37:e3:2a:
fd:87:70:ea:2b:9f:1b:55:90:dd:09:e2:a5:81:66:
71:29:fe:fb:83:b7:2f:6d:94:0b:7f:61:64:61:a1:
b0:a4:6f:4a:ee:45:ef:17:ef:f1:87:bb:6e:9b:15:
f2:0e:07:46:3a:c2:ec:77:7e:cb:75:73:26:8f:57:
e2:f9:c2:e0:2a:40:5e:98:10:48:20:2f:48:c1:82:
60:75:d8:83:bb:04:9e:9c:09:95:2b:4b:7b:43:6a:
ad:b2:b3:9c:4f:c0:63:05:d2:c1:88:13:f8:81:ee:
fa:0d:ec:09:da:09:72:8a:9a:47:c3:d9:82:66:1a:
18:11:8b:a4:97:4c:0c:6c:24:c9:17:14:a7:91:73:
92:13:01:28:1a:a7:ab:a1:22:c4:4f:06:e2:0e:ea:
db:87:1c:cc:6f:1c:e2:1e:77:c5:b0:b9:e9:39:85:
42:c1:31:39:46:89:fc:0d:ac:91:5f:ef:6d:fc:47:
2a:da:64:8d:3c:56:3c:b6:32:b9:2c:4a:ac:24:9b:
69:6b:86:7b:2e:b5:9a:f0:8b:0a:a6:2d:33:2a:42:
5a:12:ef:a2:6a:49:8f:64:ca:a1:1b:38:72:e3:6e:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5C:BA:E6:E4:9C:2E:77:C2:93:A7:04:0D:66:50:7E:74:16:2B:D5
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:03:09:24:6d:9e:82:ca:4e:e9:58:45:db:53:2f:3c:e8:03:
69:a8:2f:6d:69:57:52:a5:57:28:c1:e3:71:b8:ce:da:b6:55:
20:76:f9:5a:d1:da:11:ca:f2:13:14:95:67:0b:79:66:81:0f:
69:67:0c:34:44:c6:1b:c4:80:3d:28:b9:e5:4d:5f:9e:0a:0f:
ac:c6:29:c8:42:eb:1c:d5:3d:0d:44:9c:37:fb:28:59:d9:31:
19:9f:c5:93:c5:4f:59:dd:6d:bc:b0:f1:b9:10:f9:0a:9d:72:
5c:f2:33:72:dd:c3:83:f7:8f:bd:f7:da:04:62:ff:43:83:e8:
71:ca:4f:24:aa:0b:1c:99:95:9d:1c:c0:48:ad:96:aa:af:49:
24:f3:d5:d7:b9:1d:8a:06:e5:f6:10:2e:71:8c:26:44:58:21:
32:53:57:bf:d2:58:77:e5:63:53:99:db:1d:2d:94:1c:29:5d:
84:c9:51:d0:f8:83:c9:04:d0:d8:30:22:aa:3d:34:7a:41:96:
5b:d3:2b:ac:be:ad:18:1b:a0:19:8f:d2:1b:34:d0:d1:e2:24:
a8:ff:70:08:4d:75:5f:f2:8b:d6:2e:5f:5b:da:89:9e:7b:3d:
3a:5a:29:ed:55:04:70:15:d0:8b:24:5a:a4:3c:f1:5a:51:2c:
07:23:ac:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtrEPsze/iUH0wOC4zzF7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz
NWJlNGEwHhcNMjUwNjE0MDkwMTM1WhcNMjUwNjE1MDkwMTM1WjAzMTEwLwYDVQQD
EyhhMjVjYmFlNmU0OWMyZTc3YzI5M2E3MDQwZDY2NTA3ZTc0MTYyYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc82rSJn9Hopt1s9axzGU7RA95oS
XSFHJsk34yr9h3DqK58bVZDdCeKlgWZxKf77g7cvbZQLf2FkYaGwpG9K7kXvF+/x
h7tumxXyDgdGOsLsd37LdXMmj1fi+cLgKkBemBBIIC9IwYJgddiDuwSenAmVK0t7
Q2qtsrOcT8BjBdLBiBP4ge76DewJ2glyippHw9mCZhoYEYukl0wMbCTJFxSnkXOS
EwEoGqeroSLETwbiDurbhxzMbxziHnfFsLnpOYVCwTE5Ron8DayRX+9t/Ecq2mSN
PFY8tjK5LEqsJJtpa4Z7LrWa8IsKpi0zKkJaEu+iakmPZMqhGzhy426ejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJcuubknC53wpOnBA1mUH50FivVMB8GA1UdIwQY
MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt
MzlhZmQ5MzE2NTk4LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4
LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQMJJG2e
gspO6VhF21MvPOgDaagvbWlXUqVXKMHjcbjO2rZVIHb5WtHaEcryExSVZwt5ZoEP
aWcMNETGG8SAPSi55U1fngoPrMYpyELrHNU9DUScN/soWdkxGZ/Fk8VPWd1tvLDx
uRD5Cp1yXPIzct3Dg/ePvffaBGL/Q4PoccpPJKoLHJmVnRzASK2Wqq9JJPPV17kd
igbl9hAucYwmRFghMlNXv9JYd+VjU5nbHS2UHCldhMlR0PiDyQTQ2DAiqj00ekGW
W9MrrL6tGBugGY/SGzTQ0eIkqP9wCE11X/KL1i5fW9qJnns9Olop7VUEcBXQiyRa
pDzxWlEsByOsNA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:22:55 2025 by rpki-client