Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json)
Hash identifier: YE8i81cnY4CMviR6AU/7SXM/an8UGPYIZtwT9VJJesA=
Subject key identifier: 32:BF:AF:7B:83:0D:C3:2F:8C:1E:6B:9D:EA:4D:31:64:0D:C9:B4:4E
Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511
Certificate serial: 0197C914A6628CCF8E6275C6F32BACCBA493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
Manifest number: CE
Signing time: Wed 02 Jul 2025 03:01:03 +0000
Manifest this update: Wed 02 Jul 2025 03:01:03 +0000
Manifest next update: Thu 03 Jul 2025 03:01:03 +0000
Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: KL8vwHxYZi/ex0bHOl5nxRL/G4NJjkNEO/B52fOSqmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:a6:62:8c:cf:8e:62:75:c6:f3:2b:ac:cb:a4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511
Validity
Not Before: Jul 2 03:01:03 2025 GMT
Not After : Jul 3 03:01:03 2025 GMT
Subject: CN=32bfaf7b830dc32f8c1e6b9dea4d31640dc9b44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:75:03:33:83:db:0e:bb:e4:3e:3c:9b:23:
48:ab:e6:16:8b:45:d1:74:37:63:ad:e6:24:e9:1e:
59:54:fb:1a:6d:57:4b:5e:9b:60:07:fd:2d:a0:df:
0a:81:f2:47:33:b2:2e:b7:1f:e2:52:d2:5b:8d:9c:
f3:16:66:6d:36:71:99:d8:70:69:94:d7:c8:38:fe:
9c:7b:8f:cb:3d:f7:d8:b2:43:ce:d7:8c:a9:2c:30:
e7:a4:36:cc:49:ce:a7:74:02:56:9b:fe:71:69:11:
49:12:d4:1c:ae:0c:5f:df:79:16:de:c6:22:d0:0d:
c5:0c:03:97:b5:e6:ab:77:45:c9:3c:7f:b4:d6:88:
ea:2c:9b:18:e9:93:4f:61:38:13:51:6a:3c:3b:96:
75:70:4c:6d:c8:1f:6d:bd:1d:5c:fc:33:f5:0f:b6:
c6:a7:e8:12:55:ea:18:cf:eb:c2:54:93:bd:45:5e:
de:8c:13:0f:84:9d:49:15:41:0b:22:eb:a1:13:23:
7c:51:bf:c8:5b:ef:f4:9d:d7:da:67:d5:29:56:b1:
d8:e4:33:90:a2:6e:c9:9a:80:b8:4a:7c:9e:9f:97:
c0:42:c9:1d:0c:d5:e0:93:65:fc:e9:aa:79:3a:81:
b9:7c:b3:1f:bf:a7:11:21:46:41:8e:9c:25:fc:e0:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BF:AF:7B:83:0D:C3:2F:8C:1E:6B:9D:EA:4D:31:64:0D:C9:B4:4E
X509v3 Authority Key Identifier:
keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a7:dd:12:5e:3d:68:66:28:bf:8a:13:f1:8f:56:da:a9:68:
e8:46:66:fd:a3:24:a8:33:f4:c2:5e:68:7b:ed:20:a2:b0:f6:
18:26:43:ed:df:20:06:30:dd:09:fe:40:7d:23:eb:72:69:8d:
90:c6:30:aa:4b:9c:eb:08:83:f2:39:3c:99:57:59:33:37:b0:
cc:b7:79:55:64:fe:e3:50:c8:1f:b9:54:5e:a8:f5:9f:8f:34:
07:2c:21:b5:be:89:a2:c7:e0:f4:8e:49:41:1d:59:2b:b5:1c:
f5:33:f1:e8:21:48:5a:65:48:98:b8:9d:d8:19:d1:30:b1:41:
24:0f:b9:7a:fa:bb:53:51:0d:50:df:e3:cc:ab:4d:d0:50:34:
f6:dc:ed:c8:62:6a:31:d3:8f:58:d2:09:ef:bf:e3:bb:86:0d:
d1:1b:27:55:1f:55:e7:5a:e6:43:53:d2:75:f0:99:3f:1d:f2:
4b:a4:33:18:d1:58:97:ed:59:56:e0:1e:ef:f8:34:82:d5:aa:
ee:b5:8f:33:ea:da:cc:52:25:6d:4e:09:14:0c:e7:73:b5:2c:
df:50:7f:a4:85:bd:3c:49:be:a8:40:e0:d7:aa:f8:02:d6:59:
d9:3c:13:2c:c8:6b:ae:70:df:64:52:a6:e6:7e:c0:41:9b:7d:
9b:1f:52:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJFKZijM+OYnXG8yusy6STMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTc1ODhjMTg0ZWRkNzIxZDA5MGEyZGE5NWMyNmUxYTI4
YzA1MTEwHhcNMjUwNzAyMDMwMTAzWhcNMjUwNzAzMDMwMTAzWjAzMTEwLwYDVQQD
EygzMmJmYWY3YjgzMGRjMzJmOGMxZTZiOWRlYTRkMzE2NDBkYzliNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1B1AzOD2w675D48myNIq+YWi0XR
dDdjreYk6R5ZVPsabVdLXptgB/0toN8KgfJHM7Iutx/iUtJbjZzzFmZtNnGZ2HBp
lNfIOP6ce4/LPffYskPO14ypLDDnpDbMSc6ndAJWm/5xaRFJEtQcrgxf33kW3sYi
0A3FDAOXteard0XJPH+01ojqLJsY6ZNPYTgTUWo8O5Z1cExtyB9tvR1c/DP1D7bG
p+gSVeoYz+vCVJO9RV7ejBMPhJ1JFUELIuuhEyN8Ub/IW+/0ndfaZ9UpVrHY5DOQ
om7JmoC4Snyen5fAQskdDNXgk2X86ap5OoG5fLMfv6cRIUZBjpwl/ODExwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK/r3uDDcMvjB5rnepNMWQNybROMB8GA1UdIwQY
MBaAFMmXWIwYTt1yHQkKLalcJuGijAURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82MWNjNzgtMGQ0MC00MDRhLTlkMWQt
YTBlOTQwZDI5OTFmLzEveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82MWNjNzgtMGQ0MC00MDRhLTlkMWQtYTBlOTQwZDI5OTFm
LzEveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqfdEl49
aGYov4oT8Y9W2qlo6EZm/aMkqDP0wl5oe+0gorD2GCZD7d8gBjDdCf5AfSPrcmmN
kMYwqkuc6wiD8jk8mVdZMzewzLd5VWT+41DIH7lUXqj1n480Bywhtb6Josfg9I5J
QR1ZK7Uc9TPx6CFIWmVImLid2BnRMLFBJA+5evq7U1ENUN/jzKtN0FA09tztyGJq
MdOPWNIJ77/ju4YN0RsnVR9V51rmQ1PSdfCZPx3yS6QzGNFYl+1ZVuAe7/g0gtWq
7rWPM+razFIlbU4JFAznc7Us31B/pIW9PEm+qEDg16r4AtZZ2TwTLMhrrnDfZFKm
5n7AQZt9mx9SIQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 12:06:03 2025 by rpki-client