Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: shMjssPMvCSkLPV6W86k0E+nDRTbecK2zRMS279lO+8=
Subject key identifier: 0F:53:4F:F7:F8:BD:AD:2D:15:2E:8B:4E:17:FD:5B:2F:C3:E9:2C:CD
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 01974B1FA7842CD3B7E16214D5DFF0557C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0B8B
Signing time: Sat 07 Jun 2025 16:00:55 +0000
Manifest this update: Sat 07 Jun 2025 16:00:55 +0000
Manifest next update: Sun 08 Jun 2025 16:00:55 +0000
Files and hashes: 1: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: YFu4TNWgvrs++si02p7q93Sso/bfEci9Y4CVUfGksA0=)
2: kVcJYJ6Q63B4lKtQ5vKu6QeoxFU.roa (hash: zBFFe6GTU3Rj12iW+TDrkgjiFgVWN+v43RC3XAW3nrQ=)
3: xBRxdmpfvYOwV2CG-TGZUb7lV80.roa (hash: BYeaby5+zBYzTYQvAAICT6cMk4h5pLzaoyyqUhm5i9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:a7:84:2c:d3:b7:e1:62:14:d5:df:f0:55:7c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jun 7 16:00:55 2025 GMT
Not After : Jun 8 16:00:55 2025 GMT
Subject: CN=0f534ff7f8bdad2d152e8b4e17fd5b2fc3e92ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:93:69:8f:3b:db:ac:28:0e:31:e3:4a:30:
b6:49:f6:d4:a1:32:d6:e8:f9:f4:42:18:8e:4d:d6:
50:2f:e8:1f:5e:1a:ff:12:79:f5:ee:ef:ae:91:b8:
26:be:2a:99:80:90:fc:c4:28:f6:f6:c8:2d:31:a7:
19:e2:66:1c:da:a9:e3:ed:6e:06:e7:0e:5e:5d:91:
d3:0f:16:45:49:83:5d:f6:ff:16:d4:93:18:94:f9:
20:c9:60:bb:99:23:db:85:cd:1e:62:16:f8:3a:52:
18:83:77:21:89:8f:e8:c9:15:06:f5:f2:b4:24:58:
3e:1b:1c:ab:e3:c6:e5:49:98:f1:78:e8:9c:56:2f:
00:17:39:b5:1b:a8:cd:04:7b:17:ef:99:18:49:af:
96:0a:d1:f9:d3:41:d7:41:c6:dc:80:e4:53:e1:f8:
0c:46:da:a4:db:d6:f5:80:1d:8d:5d:d9:10:e2:f6:
a6:d6:6b:6d:2c:33:99:92:49:cc:12:2e:d7:22:1f:
5e:c8:fc:b7:e0:68:6f:97:92:94:0f:af:88:7e:72:
08:81:c8:ea:8f:23:cd:c5:f3:ae:51:a8:96:83:ac:
b5:b5:65:41:03:ad:d5:fc:02:04:d0:8e:62:39:b0:
26:9b:f6:da:49:ed:a4:9a:f5:97:b7:c6:50:a2:e8:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:4F:F7:F8:BD:AD:2D:15:2E:8B:4E:17:FD:5B:2F:C3:E9:2C:CD
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a0:55:2d:f8:98:ab:dd:53:bf:2d:64:0d:1f:84:a1:3b:fd:
33:b4:d4:80:86:d5:54:2a:b8:bc:eb:08:2c:a4:8b:64:ae:b6:
10:14:b4:41:06:f6:03:0e:90:8d:17:1d:a9:08:ae:17:6a:0b:
26:3f:65:67:23:f1:d6:cb:bb:4f:a5:cf:f9:0a:4e:01:09:38:
42:50:34:07:4c:2e:4b:cf:a6:53:74:6e:71:93:9a:22:f6:56:
82:61:5c:f5:ef:c9:65:7f:9a:c5:aa:15:11:a7:28:e9:dc:90:
fa:80:20:23:d7:2b:1d:40:7c:05:51:60:1c:1a:dc:fe:3e:e2:
21:99:97:33:d8:7b:08:59:d8:cb:8b:69:bb:28:e9:e7:07:42:
f9:2c:ac:0e:2f:5e:4e:65:b9:e9:38:ae:2f:aa:3d:66:5d:30:
7e:f0:75:25:20:2a:7d:f1:11:b9:fd:51:20:3a:00:ab:74:c9:
f1:b0:d1:99:0e:24:f1:fd:d9:d9:09:a0:f4:d9:42:76:6b:f6:
08:31:02:2b:93:78:b3:74:f4:7c:77:d6:88:7e:79:ed:cf:ef:
0c:07:b2:ee:43:4b:e1:a8:e2:a0:53:82:32:5d:0e:fe:e0:c9:
22:a8:d3:99:19:c1:f8:68:9c:32:ff:b7:21:c6:ae:09:b4:7d:
3d:3b:43:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH6eELNO34WIU1d/wVXxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh
YWNhN2IwHhcNMjUwNjA3MTYwMDU1WhcNMjUwNjA4MTYwMDU1WjAzMTEwLwYDVQQD
EygwZjUzNGZmN2Y4YmRhZDJkMTUyZThiNGUxN2ZkNWIyZmMzZTkyY2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM2TaY8726woDjHjSjC2SfbUoTLW
6Pn0QhiOTdZQL+gfXhr/Enn17u+ukbgmviqZgJD8xCj29sgtMacZ4mYc2qnj7W4G
5w5eXZHTDxZFSYNd9v8W1JMYlPkgyWC7mSPbhc0eYhb4OlIYg3chiY/oyRUG9fK0
JFg+Gxyr48blSZjxeOicVi8AFzm1G6jNBHsX75kYSa+WCtH500HXQcbcgORT4fgM
Rtqk29b1gB2NXdkQ4vam1mttLDOZkknMEi7XIh9eyPy34Ghvl5KUD6+IfnIIgcjq
jyPNxfOuUaiWg6y1tWVBA63V/AIE0I5iObAmm/baSe2kmvWXt8ZQougBlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9TT/f4va0tFS6LThf9Wy/D6SzNMB8GA1UdIwQY
MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt
ODFjOGNlNzUwMTI0LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0
LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaBVLfiY
q91Tvy1kDR+EoTv9M7TUgIbVVCq4vOsILKSLZK62EBS0QQb2Aw6QjRcdqQiuF2oL
Jj9lZyPx1su7T6XP+QpOAQk4QlA0B0wuS8+mU3RucZOaIvZWgmFc9e/JZX+axaoV
Eaco6dyQ+oAgI9crHUB8BVFgHBrc/j7iIZmXM9h7CFnYy4tpuyjp5wdC+SysDi9e
TmW56TiuL6o9Zl0wfvB1JSAqffERuf1RIDoAq3TJ8bDRmQ4k8f3Z2Qmg9NlCdmv2
CDECK5N4s3T0fHfWiH557c/vDAey7kNL4ajioFOCMl0O/uDJIqjTmRnB+GicMv+3
IcauCbR9PTtDVw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:59 2025 by rpki-client