Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
File: YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft (raw, json)
Hash identifier: 2ysDrA9ul5NA7tiuGfNHvAAnHJzdfMiZOHRsv+Y9kIM=
Subject key identifier: 98:6E:C2:AD:5F:39:D2:47:2B:DC:3C:A1:F1:0A:AF:29:CE:75:7C:F3
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial: 019748F9D9F187F40448F5AFCE06F9485832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
Manifest number: 0B0F
Signing time: Sat 07 Jun 2025 06:00:23 +0000
Manifest this update: Sat 07 Jun 2025 06:00:23 +0000
Manifest next update: Sun 08 Jun 2025 06:00:23 +0000
Files and hashes: 1: 4ohGnWINC3iPFe6nDpOqBOx7d2s.roa (hash: 9AbJKb6HLl4DZwmq7R7PVZTsMXxo/QDCXs2EgLL85AU=)
2: YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl (hash: RACeGH775YTCwu6PtNHnU6tnf50f/G6zmWzTkMlxdO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:d9:f1:87:f4:04:48:f5:af:ce:06:f9:48:58:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Validity
Not Before: Jun 7 06:00:23 2025 GMT
Not After : Jun 8 06:00:23 2025 GMT
Subject: CN=986ec2ad5f39d2472bdc3ca1f10aaf29ce757cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:e7:3c:ab:68:fd:3c:d8:c9:9e:bd:72:5d:
b4:93:0b:6b:a4:f2:ec:f1:72:3f:c9:8b:03:b4:29:
ea:6b:8d:b7:45:4b:5d:4b:f3:76:2b:cd:fd:46:32:
8d:9d:64:99:1a:a8:ba:a2:f0:24:77:1b:43:b5:58:
05:a3:94:9d:5c:0b:28:72:94:10:04:9d:ec:71:61:
8f:0d:c3:ff:13:bf:3b:36:29:a6:c2:3a:60:64:49:
7c:c9:3a:8c:65:cd:cc:69:91:1d:28:7e:58:a5:6d:
0f:af:f1:85:bd:20:5d:fb:de:6b:69:48:ce:78:dd:
90:57:c6:c7:ec:bb:cf:ed:dd:25:f8:c0:38:6a:0d:
bc:ac:81:ba:9f:4d:f7:2c:02:f8:cf:e2:6f:03:26:
8a:8e:71:f9:2d:89:0b:03:e0:38:03:b1:20:a6:d5:
c0:ab:4c:af:67:a8:06:fd:63:1a:a9:5b:28:a0:dd:
a4:40:12:40:ef:d3:b0:24:38:a8:db:4b:b8:44:10:
40:c5:cb:ef:68:0d:44:e0:5d:9a:b7:7c:d7:82:99:
98:e0:fd:5d:43:d8:fc:36:0c:cb:52:5d:60:e4:db:
a7:a5:72:bc:00:89:3f:d8:d1:a9:69:18:75:10:c6:
d2:a4:2c:01:06:2d:04:23:5e:70:d1:36:7a:9b:50:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:C2:AD:5F:39:D2:47:2B:DC:3C:A1:F1:0A:AF:29:CE:75:7C:F3
X509v3 Authority Key Identifier:
keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:be:63:a1:93:ff:83:c8:6c:75:36:f8:e3:19:89:a0:c0:d4:
b1:f7:87:e7:e3:4a:2c:6d:ba:62:90:e6:63:be:51:07:83:b2:
c8:47:97:48:0c:de:24:bc:86:b2:47:8e:5d:8a:85:21:46:9b:
6e:70:ff:74:1f:3e:6f:a0:da:ad:84:55:94:1c:f0:b3:22:78:
cb:2a:d6:cc:06:c7:81:ba:f9:0a:13:07:8f:9c:37:65:eb:88:
ce:4a:21:84:9b:b2:14:dc:95:4c:ec:7a:77:68:ee:9f:5f:1c:
cd:81:5f:8d:36:9a:c4:0e:0e:be:a0:6d:fa:65:23:d3:45:6b:
3c:d5:7b:1e:96:fa:20:75:fe:76:6a:63:09:c6:fb:0f:44:30:
22:ed:21:95:e3:96:75:cb:f1:cf:46:c0:03:d3:32:93:84:ef:
d7:4f:5b:4e:d3:16:82:27:35:dc:51:db:67:d5:6e:10:19:07:
ff:a4:fa:a0:fc:2a:cf:a7:cd:f2:aa:3d:2d:a0:42:73:d4:67:
a2:e5:ef:bf:53:ed:c8:39:78:da:bb:3f:2d:ee:5b:5e:62:8f:
3e:ef:74:4e:9f:3f:d7:5f:c9:b7:ce:ff:96:f9:8a:af:37:38:
93:e7:32:af:40:79:4f:2f:71:d7:c4:d9:53:b7:9a:d3:a9:cd:
b4:6a:f8:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+dnxh/QESPWvzgb5SFgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTJlMTU5MmIxMmFkMmNkMzlmNWJlNTdjMDU4NTM1ZWRi
MTJiOWMwHhcNMjUwNjA3MDYwMDIzWhcNMjUwNjA4MDYwMDIzWjAzMTEwLwYDVQQD
Eyg5ODZlYzJhZDVmMzlkMjQ3MmJkYzNjYTFmMTBhYWYyOWNlNzU3Y2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUjnPKto/TzYyZ69cl20kwtrpPLs
8XI/yYsDtCnqa423RUtdS/N2K839RjKNnWSZGqi6ovAkdxtDtVgFo5SdXAsocpQQ
BJ3scWGPDcP/E787NimmwjpgZEl8yTqMZc3MaZEdKH5YpW0Pr/GFvSBd+95raUjO
eN2QV8bH7LvP7d0l+MA4ag28rIG6n033LAL4z+JvAyaKjnH5LYkLA+A4A7EgptXA
q0yvZ6gG/WMaqVsooN2kQBJA79OwJDio20u4RBBAxcvvaA1E4F2at3zXgpmY4P1d
Q9j8NgzLUl1g5NunpXK8AIk/2NGpaRh1EMbSpCwBBi0EI15w0TZ6m1ACTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhuwq1fOdJHK9w8ofEKrynOdXzzMB8GA1UdIwQY
MBaAFGBS4VkrEq0s059b5XwFhTXtsSucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ODNhMmMtOTQ2ZC00NTE3LTgwODMt
MjY5ODVjZTQ1OTc4LzEvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ODNhMmMtOTQ2ZC00NTE3LTgwODMtMjY5ODVjZTQ1OTc4
LzEvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL75joZP/
g8hsdTb44xmJoMDUsfeH5+NKLG26YpDmY75RB4OyyEeXSAzeJLyGskeOXYqFIUab
bnD/dB8+b6DarYRVlBzwsyJ4yyrWzAbHgbr5ChMHj5w3ZeuIzkohhJuyFNyVTOx6
d2jun18czYFfjTaaxA4OvqBt+mUj00VrPNV7Hpb6IHX+dmpjCcb7D0QwIu0hleOW
dcvxz0bAA9Myk4Tv109bTtMWgic13FHbZ9VuEBkH/6T6oPwqz6fN8qo9LaBCc9Rn
ouXvv1PtyDl42rs/Le5bXmKPPu90Tp8/11/Jt87/lvmKrzc4k+cyr0B5Ty9x18TZ
U7ea06nNtGr4ow==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:37 2025 by rpki-client