Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: 8P911zZPEV/OeOtP7pfPhbrM9vNkNTrj+7CTU9L1Nfg=
Subject key identifier: 6A:EA:DD:5D:F3:8C:AC:60:33:87:64:D2:29:4C:C4:20:6F:B3:0D:04
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 01976094D1CFC39029FC3D380554E27A3E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 20:00:55 +0000
Manifest this update: Wed 11 Jun 2025 20:00:55 +0000
Manifest next update: Thu 12 Jun 2025 20:00:55 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: aWBFmcVXPUei1Yh+2YlT47eEYStovizBVuREg8CTEJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:d1:cf:c3:90:29:fc:3d:38:05:54:e2:7a:3e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Jun 11 20:00:55 2025 GMT
Not After : Jun 12 20:00:55 2025 GMT
Subject: CN=6aeadd5df38cac60338764d2294cc4206fb30d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:d2:46:6d:9c:39:e9:5f:c0:97:cf:55:fd:
4a:04:df:9f:bb:79:81:43:7f:d9:a9:0f:6e:9b:4b:
b5:da:88:22:a8:f0:aa:b1:9a:2e:75:e1:d6:d4:b9:
02:54:f4:17:a3:43:22:18:33:df:ab:4c:57:f7:54:
b3:f9:20:e8:87:35:16:c1:a0:82:b9:6e:c9:23:ca:
8c:e5:ba:51:21:5c:78:71:03:d4:12:de:cf:b1:2e:
11:a8:56:4c:d7:c7:a3:e4:48:82:07:b0:c8:dc:f2:
bc:f2:34:f9:86:76:2d:1d:67:db:38:40:c7:c1:e3:
43:5f:bb:dc:c4:f1:2d:df:ed:3a:9b:31:0b:38:36:
d5:ea:ca:9c:1c:bd:0b:5b:a1:36:e9:d0:da:65:89:
65:59:3d:18:ae:16:d4:40:9c:18:b9:30:75:2a:7f:
f4:5f:82:f1:34:37:75:37:cc:4c:ef:73:5b:9d:f3:
44:63:de:70:d0:73:57:1b:15:b6:a7:ce:38:fa:ee:
c4:ac:4a:70:9b:de:d1:96:94:0b:22:8e:0a:1a:aa:
84:e2:69:6b:b7:12:07:db:89:53:c9:10:d7:41:fb:
bb:cd:4b:d9:d2:2d:ac:12:2d:c7:7e:35:66:e9:a5:
e1:58:3a:91:cd:45:fa:93:27:2b:7e:98:7c:72:43:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EA:DD:5D:F3:8C:AC:60:33:87:64:D2:29:4C:C4:20:6F:B3:0D:04
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:88:89:64:a3:18:24:74:cc:b7:c3:cd:08:b8:8e:64:8c:7f:
fe:70:1e:eb:34:db:5d:88:d6:67:f8:7a:c2:0e:ac:e2:9d:07:
a4:c8:f5:41:22:73:3d:2b:4f:71:f3:5c:2e:e5:1c:b5:e3:4c:
ac:34:0b:d3:2f:b5:fb:5c:6b:07:83:c6:7c:44:82:01:98:21:
4c:6b:15:61:41:36:4c:90:66:45:73:c1:fe:ef:92:35:39:1a:
fa:84:ff:a2:2f:a8:8d:6f:52:74:cb:a3:ca:f8:ed:37:1c:34:
b3:15:1d:21:8a:66:23:58:5b:47:fd:06:c4:6a:35:82:da:8e:
02:7c:a0:7e:8e:df:64:e0:84:d8:3b:2c:a4:88:76:b8:81:93:
11:1d:00:bb:ed:01:56:71:8f:b1:09:2a:b5:e3:09:9a:6f:6c:
bb:a0:19:0c:64:44:9a:20:93:ef:31:bb:94:3a:ab:51:47:3e:
8d:46:1d:3e:c3:77:25:58:f8:a4:37:41:ca:95:0d:df:ef:68:
c4:f6:e5:2b:65:07:a6:ca:b0:67:2f:6b:c0:1c:23:19:fb:6d:
9c:59:df:ba:80:0d:84:51:9d:d2:b4:40:b5:e4:92:fd:22:35:
cd:98:4f:9e:b9:d0:9b:1a:b1:f8:4c:73:43:c1:14:9e:a5:48:
13:1f:80:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdglNHPw5Ap/D04BVTiej4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODdkNGM5OGIzZWQ4YTcxN2M3ZDZlNDU1NTRkMzUzZWEz
ZTA1Y2EwHhcNMjUwNjExMjAwMDU1WhcNMjUwNjEyMjAwMDU1WjAzMTEwLwYDVQQD
Eyg2YWVhZGQ1ZGYzOGNhYzYwMzM4NzY0ZDIyOTRjYzQyMDZmYjMwZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJTSRm2cOelfwJfPVf1KBN+fu3mB
Q3/ZqQ9um0u12ogiqPCqsZoudeHW1LkCVPQXo0MiGDPfq0xX91Sz+SDohzUWwaCC
uW7JI8qM5bpRIVx4cQPUEt7PsS4RqFZM18ej5EiCB7DI3PK88jT5hnYtHWfbOEDH
weNDX7vcxPEt3+06mzELODbV6sqcHL0LW6E26dDaZYllWT0YrhbUQJwYuTB1Kn/0
X4LxNDd1N8xM73NbnfNEY95w0HNXGxW2p844+u7ErEpwm97RlpQLIo4KGqqE4mlr
txIH24lTyRDXQfu7zUvZ0i2sEi3HfjVm6aXhWDqRzUX6kycrfph8ckPtnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrq3V3zjKxgM4dk0ilMxCBvsw0EMB8GA1UdIwQY
MBaAFNGH1MmLPtinF8fW5FVU01PqPgXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMt
NTAyOTY3ZGZjYzQ4LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMtNTAyOTY3ZGZjYzQ4
LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4iJZKMY
JHTMt8PNCLiOZIx//nAe6zTbXYjWZ/h6wg6s4p0HpMj1QSJzPStPcfNcLuUcteNM
rDQL0y+1+1xrB4PGfESCAZghTGsVYUE2TJBmRXPB/u+SNTka+oT/oi+ojW9SdMuj
yvjtNxw0sxUdIYpmI1hbR/0GxGo1gtqOAnygfo7fZOCE2DsspIh2uIGTER0Au+0B
VnGPsQkqteMJmm9su6AZDGREmiCT7zG7lDqrUUc+jUYdPsN3JVj4pDdBypUN3+9o
xPblK2UHpsqwZy9rwBwjGfttnFnfuoANhFGd0rRAteSS/SI1zZhPnrnQmxqx+Exz
Q8EUnqVIEx+Abg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 23:49:14 2025 by rpki-client