Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: Ng5n2IDsAU7Lu638MeRJC0MHlW3LOLvrOWcDs2PZJEE=
Subject key identifier: AB:B9:13:3B:20:F6:17:77:95:F2:AD:E2:D8:A9:E8:28:8E:82:1B:C1
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 01974D4514D8F72092CCD0FE0CA08AED3047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 05DA
Signing time: Sun 08 Jun 2025 02:01:02 +0000
Manifest this update: Sun 08 Jun 2025 02:01:02 +0000
Manifest next update: Mon 09 Jun 2025 02:01:02 +0000
Files and hashes: 1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=)
2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: sFnZhS3ZmKXprgng11VG4NkZQZr8DeZw13TfOXYRdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:14:d8:f7:20:92:cc:d0:fe:0c:a0:8a:ed:30:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Jun 8 02:01:02 2025 GMT
Not After : Jun 9 02:01:02 2025 GMT
Subject: CN=abb9133b20f6177795f2ade2d8a9e8288e821bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:26:6d:dd:c1:91:6b:5a:6d:e8:b1:1b:e8:
5c:7a:5e:7e:f7:53:c5:6f:97:d0:3b:bc:44:f6:99:
07:d2:74:96:f9:2d:e3:9c:04:d6:e5:a7:e5:8e:da:
46:05:3e:79:38:e6:ee:fd:ca:10:26:f0:a9:db:1b:
a0:f3:11:03:ba:6a:7a:7b:77:fb:90:6b:31:4a:b8:
08:9a:1d:a5:09:5e:be:41:08:5f:e6:40:5e:81:8a:
07:30:1b:80:0e:c1:3d:1e:f5:ea:77:8c:45:d3:d9:
dd:f1:d7:b2:fb:c8:97:4d:ba:6f:5e:d0:1a:d8:c4:
3b:14:9e:81:de:32:95:99:b8:85:80:63:d2:6d:9a:
f7:0f:3d:d5:3f:81:84:0a:74:f5:1f:4d:48:2b:a2:
84:ed:e8:f8:89:8b:43:b1:04:8b:46:17:38:a3:d8:
5d:03:1c:a6:63:43:49:76:5c:26:1b:d1:be:3f:12:
78:08:ff:70:e9:c8:cb:01:34:3c:12:a7:38:02:83:
34:07:1f:43:79:63:88:d2:82:5c:fd:03:e6:37:2a:
4e:f5:7d:3c:f3:1b:60:58:46:73:d3:56:7f:bc:4f:
7b:60:6e:fc:37:63:7c:52:4d:b9:78:a9:08:53:18:
8f:2e:25:38:49:f0:34:44:a8:28:ca:26:09:af:99:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B9:13:3B:20:F6:17:77:95:F2:AD:E2:D8:A9:E8:28:8E:82:1B:C1
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8d:95:41:89:83:e3:25:86:f6:8d:cf:a6:81:72:b1:74:25:
0b:98:5d:23:9c:5d:e7:e0:14:c9:b8:63:53:f4:41:34:78:35:
94:aa:52:40:dd:11:18:0f:b7:b3:74:d5:0c:c4:f4:74:94:5c:
e0:ba:48:89:ad:54:5f:df:d3:83:85:4c:bb:f1:e4:70:8c:7c:
eb:0f:98:81:ce:5a:e7:90:f7:74:2f:a9:b3:61:a3:e6:06:0b:
65:5f:21:04:b3:fc:f6:15:6a:60:44:57:44:6c:c9:8b:5b:75:
85:90:27:21:0b:57:3b:d9:a9:62:ef:51:5e:67:ae:e5:7f:2a:
98:67:5a:4c:b9:6f:08:a7:8c:86:43:76:4b:80:da:76:a3:10:
df:4b:3f:30:d2:79:73:a2:05:f1:7a:f6:30:0d:cb:c4:32:48:
0c:64:4d:63:44:a9:e3:9f:88:58:ee:2b:4d:d1:83:6e:ae:42:
49:3b:4c:f1:95:5b:94:72:76:29:0d:0e:49:c4:e4:6d:69:3d:
0e:25:46:8f:98:79:7f:44:ab:be:9c:bf:9b:0c:e9:16:69:8d:
0e:c4:cc:7c:0e:42:bf:9b:87:97:cf:6d:ac:ef:a3:8e:0f:37:
a0:a4:58:89:61:6e:6e:17:c6:b3:0e:36:06:61:03:28:95:14:
19:96:67:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRRTY9yCSzND+DKCK7TBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmQ1NzBiNTQyZTczMDI4ODVkMzY3NDE4ZGY4MDJmOTk0
OTRmMjYwHhcNMjUwNjA4MDIwMTAyWhcNMjUwNjA5MDIwMTAyWjAzMTEwLwYDVQQD
EyhhYmI5MTMzYjIwZjYxNzc3OTVmMmFkZTJkOGE5ZTgyODhlODIxYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLImbd3BkWtabeixG+hcel5+91PF
b5fQO7xE9pkH0nSW+S3jnATW5afljtpGBT55OObu/coQJvCp2xug8xEDump6e3f7
kGsxSrgImh2lCV6+QQhf5kBegYoHMBuADsE9HvXqd4xF09nd8dey+8iXTbpvXtAa
2MQ7FJ6B3jKVmbiFgGPSbZr3Dz3VP4GECnT1H01IK6KE7ej4iYtDsQSLRhc4o9hd
AxymY0NJdlwmG9G+PxJ4CP9w6cjLATQ8Eqc4AoM0Bx9DeWOI0oJc/QPmNypO9X08
8xtgWEZz01Z/vE97YG78N2N8Uk25eKkIUxiPLiU4SfA0RKgoyiYJr5k7zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKu5Ezsg9hd3lfKt4tip6CiOghvBMB8GA1UdIwQY
MBaAFGAtVwtULnMCiF02dBjfgC+ZSU8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zN2EwYWYtYzNmNi00NWQ2LWExNDQt
YTNkM2RlZGIyNjA4LzEvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zN2EwYWYtYzNmNi00NWQ2LWExNDQtYTNkM2RlZGIyNjA4
LzEvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeY2VQYmD
4yWG9o3PpoFysXQlC5hdI5xd5+AUybhjU/RBNHg1lKpSQN0RGA+3s3TVDMT0dJRc
4LpIia1UX9/Tg4VMu/HkcIx86w+Ygc5a55D3dC+ps2Gj5gYLZV8hBLP89hVqYERX
RGzJi1t1hZAnIQtXO9mpYu9RXmeu5X8qmGdaTLlvCKeMhkN2S4DadqMQ30s/MNJ5
c6IF8Xr2MA3LxDJIDGRNY0Sp45+IWO4rTdGDbq5CSTtM8ZVblHJ2KQ0OScTkbWk9
DiVGj5h5f0Srvpy/mwzpFmmNDsTMfA5Cv5uHl89trO+jjg83oKRYiWFubhfGsw42
BmEDKJUUGZZn2w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:28:33 2025 by rpki-client