Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: 1Npc3idDCeTK8ekNHGt6dDqLeQUeYjBRMZsNgxvFU7s=
Subject key identifier: 2E:10:2E:90:07:7D:3E:15:50:4C:53:1F:98:61:60:79:4D:A4:4F:A9
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 019748553AC26AB1E782D6A3C4C8A4A787EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 09B4
Signing time: Sat 07 Jun 2025 03:00:34 +0000
Manifest this update: Sat 07 Jun 2025 03:00:34 +0000
Manifest next update: Sun 08 Jun 2025 03:00:34 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: cZ6KchxVIFWs7ZFmdA8u185MrtNHM4a8MCyFr5sVnMs=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:3a:c2:6a:b1:e7:82:d6:a3:c4:c8:a4:a7:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Jun 7 03:00:34 2025 GMT
Not After : Jun 8 03:00:34 2025 GMT
Subject: CN=2e102e90077d3e15504c531f986160794da44fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:96:61:66:14:ca:e2:93:1c:fd:ab:53:0d:
b4:61:d0:18:db:cf:39:6b:d9:58:61:28:33:c2:1b:
6f:d4:88:23:93:c9:e2:65:8b:5d:15:a0:b7:ee:7a:
dd:8d:60:2c:11:37:2e:c6:19:bc:21:9a:a6:c7:e5:
5d:ce:34:c2:e0:7b:92:fd:ea:bd:ad:f7:df:39:44:
96:67:00:e9:45:2d:94:a4:b3:92:74:a3:03:e2:71:
f3:90:95:99:d4:ed:d8:fe:72:6f:6b:cb:38:1a:5d:
4b:74:f0:2c:4f:9e:1d:08:d8:79:14:78:5e:6f:54:
73:f4:d8:ab:33:88:5b:a5:1a:b2:96:e9:55:bf:e4:
05:1d:4d:95:c6:90:bc:66:cf:8d:5c:77:30:ac:09:
72:cc:78:3d:5d:b8:0b:80:63:25:09:ab:dd:9f:5a:
70:c5:3b:ef:ed:ca:b3:0a:00:09:cb:24:4b:ff:23:
e6:d7:1f:cc:3f:9d:ab:53:9d:57:aa:5f:fe:41:d0:
1d:f8:51:13:44:e2:11:7b:fe:ad:a7:8a:ad:97:79:
53:51:7c:1c:2f:09:0e:8b:2e:c2:0c:5b:6b:cd:85:
9d:f1:bd:d4:80:81:8c:1e:b4:ea:29:b3:a7:54:e4:
3f:83:21:bb:b4:ff:51:df:31:25:51:60:87:cb:2d:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:10:2E:90:07:7D:3E:15:50:4C:53:1F:98:61:60:79:4D:A4:4F:A9
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9c:e4:71:c9:ab:66:1d:60:fe:e8:0c:12:5c:8c:a8:58:c7:
e5:ec:9c:f9:64:42:6b:2d:a4:a6:76:9f:d4:14:12:e2:89:fb:
1e:2c:80:19:73:07:ac:12:d0:77:29:c4:4a:c0:26:57:7e:be:
a0:14:2a:bf:8e:8a:20:37:9a:7a:fb:fc:1c:de:41:ad:e7:ee:
b4:51:f3:2e:da:cc:a6:71:22:30:e5:66:55:20:37:46:9d:4f:
0e:87:f8:e4:fb:f7:b1:f2:ec:a4:42:fe:09:94:7f:cd:b0:3a:
c3:21:49:d4:6a:c7:94:82:f6:e3:19:71:6c:db:1e:d9:29:a1:
2b:0d:63:3c:53:2a:21:ab:8c:43:18:96:ee:ad:4a:76:a4:e9:
1c:6f:4a:2d:41:b3:49:db:f3:b5:00:29:62:f9:d8:0f:de:e9:
a4:0a:f3:ce:42:19:67:69:de:1b:4d:1d:27:2c:e1:11:c7:e5:
ff:55:86:c6:9b:9a:35:44:3e:c5:86:15:cd:d6:8f:c6:39:f9:
64:d2:ba:b9:cd:d5:c6:d4:c5:12:00:08:b9:a5:33:07:a7:e3:
a4:59:81:97:9b:45:d9:43:d6:2c:83:d2:b1:77:11:61:2a:ae:
fc:42:c5:86:01:5a:8a:b9:a2:12:8c:0f:36:d1:33:88:71:36:
17:13:98:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVTrCarHngtajxMikp4fuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkODE4ZDkzZTY4NTcxZjk1YzQ1ZWJjMjgxNTk4YzdjOThm
MzI1NzcwHhcNMjUwNjA3MDMwMDM0WhcNMjUwNjA4MDMwMDM0WjAzMTEwLwYDVQQD
EygyZTEwMmU5MDA3N2QzZTE1NTA0YzUzMWY5ODYxNjA3OTRkYTQ0ZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqCWYWYUyuKTHP2rUw20YdAY2885
a9lYYSgzwhtv1Igjk8niZYtdFaC37nrdjWAsETcuxhm8IZqmx+VdzjTC4HuS/eq9
rfffOUSWZwDpRS2UpLOSdKMD4nHzkJWZ1O3Y/nJva8s4Gl1LdPAsT54dCNh5FHhe
b1Rz9NirM4hbpRqylulVv+QFHU2VxpC8Zs+NXHcwrAlyzHg9XbgLgGMlCavdn1pw
xTvv7cqzCgAJyyRL/yPm1x/MP52rU51Xql/+QdAd+FETROIRe/6tp4qtl3lTUXwc
LwkOiy7CDFtrzYWd8b3UgIGMHrTqKbOnVOQ/gyG7tP9R3zElUWCHyy2M+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4QLpAHfT4VUExTH5hhYHlNpE+pMB8GA1UdIwQY
MBaAFP2BjZPmhXH5XEXrwoFZjHyY8yV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zZDM3MGMtMzI5NS00MzA2LTk4ZGMt
ZjY5OGIwNWJhOTcxLzEvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8zZDM3MGMtMzI5NS00MzA2LTk4ZGMtZjY5OGIwNWJhOTcx
LzEvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZzkccmr
Zh1g/ugMElyMqFjH5eyc+WRCay2kpnaf1BQS4on7HiyAGXMHrBLQdynESsAmV36+
oBQqv46KIDeaevv8HN5BrefutFHzLtrMpnEiMOVmVSA3Rp1PDof45Pv3sfLspEL+
CZR/zbA6wyFJ1GrHlIL24xlxbNse2SmhKw1jPFMqIauMQxiW7q1KdqTpHG9KLUGz
SdvztQApYvnYD97ppArzzkIZZ2neG00dJyzhEcfl/1WGxpuaNUQ+xYYVzdaPxjn5
ZNK6uc3VxtTFEgAIuaUzB6fjpFmBl5tF2UPWLIPSsXcRYSqu/ELFhgFairmiEowP
NtEziHE2FxOYBA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:50 2025 by rpki-client