Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json)
Hash identifier: APUcPcnneJe1bHR/Frpl5dLOdlwnQ0u15jqqV0ei/zE=
Subject key identifier: 0B:22:D7:C6:32:08:84:8B:E8:09:09:52:2E:DC:AF:3B:D2:FE:86:1A
Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74
Certificate serial: 019752A2446DBEB007A2EFFC009AF0C543B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
Manifest number: 030F
Signing time: Mon 09 Jun 2025 03:00:55 +0000
Manifest this update: Mon 09 Jun 2025 03:00:55 +0000
Manifest next update: Tue 10 Jun 2025 03:00:55 +0000
Files and hashes: 1: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: IxkUmT3mQ2+U937F9kL8y4aPLa7kdWR3RGF8ntJWT10=)
2: sqHnWw_DTKSgc5zNQG4iPku5PBw.roa (hash: w6R1JeMOp3KdC2WjMvic0T8urUWBQwEZKMQrdXTts0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:44:6d:be:b0:07:a2:ef:fc:00:9a:f0:c5:43:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Validity
Not Before: Jun 9 03:00:55 2025 GMT
Not After : Jun 10 03:00:55 2025 GMT
Subject: CN=0b22d7c63208848be80909522edcaf3bd2fe861a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:2e:15:e0:2a:9c:f4:2c:85:a3:b7:bb:78:
25:60:8b:4f:23:40:78:68:9d:d1:bf:26:27:c2:6f:
c0:19:ce:80:66:68:e5:ee:bb:ad:af:45:9f:8e:fc:
ba:b7:a1:a7:ec:19:6f:b7:2b:d4:90:a7:b7:3c:2e:
a8:96:29:c2:e0:94:45:24:b5:59:67:1c:90:e7:0d:
2f:91:64:e2:78:29:77:f5:c4:ff:a6:6b:04:a6:16:
5b:5c:5a:d8:68:f4:1a:7e:3b:fe:f1:7f:df:d8:30:
c2:a8:c3:1f:e8:fa:8b:15:3d:a7:3f:0a:e8:c2:f1:
06:41:99:37:53:09:2d:6c:0c:04:b4:af:05:fb:c1:
13:5a:b6:50:7a:16:39:8d:bb:d0:30:6d:ab:71:a2:
aa:91:c8:62:18:82:6f:bf:1c:37:07:2e:cc:f9:d9:
bd:a5:5a:e4:54:b4:19:84:6b:e3:e3:03:a1:db:33:
82:0d:47:3b:c6:c5:70:18:2e:7b:76:a8:72:b3:09:
51:e5:58:25:7c:85:ee:02:d8:26:ad:f2:5e:dd:61:
af:3d:ec:01:dd:f5:41:b4:05:da:a7:43:ac:e5:e5:
3e:20:b3:dd:16:a5:f1:70:ef:af:12:16:5f:74:f9:
87:d2:50:5f:2d:dc:3b:a2:ca:d1:17:40:83:f6:45:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:22:D7:C6:32:08:84:8B:E8:09:09:52:2E:DC:AF:3B:D2:FE:86:1A
X509v3 Authority Key Identifier:
keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:af:b2:9a:fc:2f:a8:33:a9:51:0a:ea:c8:2a:28:e7:f4:82:
df:d3:b7:0a:e8:79:2f:81:af:1e:f5:4c:ea:1f:9b:59:5d:3a:
de:a9:2e:62:5e:14:74:b9:84:48:5a:cc:67:bc:b7:45:d5:c7:
37:d3:99:fc:91:69:e6:48:30:68:3b:6b:84:5c:8d:84:5e:6d:
7d:19:d2:1c:4e:14:01:53:49:9b:92:5e:f8:17:64:63:83:e6:
9a:39:df:99:66:87:94:cf:66:1f:77:28:73:b9:e7:0b:8c:9e:
80:cb:d5:e2:46:33:48:35:48:6f:20:60:f5:68:75:c9:69:14:
24:02:65:ad:8f:a4:ee:cd:6b:10:fd:ba:10:3a:36:f4:b9:ed:
8c:91:46:29:2f:06:69:b0:25:48:fd:e7:ad:34:cf:a3:c7:ff:
14:58:0f:8e:dc:b1:70:b0:b0:72:9f:29:f8:a8:1a:93:44:98:
40:6f:7b:82:ab:f4:69:ea:a6:c2:b6:94:9d:4c:70:3d:1c:1b:
c4:91:55:73:ec:6d:5d:cb:12:45:51:06:21:b6:3b:bf:2f:29:
a1:25:ff:62:39:4f:53:e7:cf:64:b9:f1:45:d1:bd:fa:0f:7b:
67:b0:ae:07:66:2c:77:42:91:d6:84:1c:c9:3b:0f:79:1e:8f:
ab:08:d3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSokRtvrAHou/8AJrwxUOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjE2NWJmYjIzZGRhMWY5ODcwYjI0MTdmNDk2NDg1ZTZj
MDhhNzQwHhcNMjUwNjA5MDMwMDU1WhcNMjUwNjEwMDMwMDU1WjAzMTEwLwYDVQQD
EygwYjIyZDdjNjMyMDg4NDhiZTgwOTA5NTIyZWRjYWYzYmQyZmU4NjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEouFeAqnPQshaO3u3glYItPI0B4
aJ3RvyYnwm/AGc6AZmjl7rutr0Wfjvy6t6Gn7BlvtyvUkKe3PC6olinC4JRFJLVZ
ZxyQ5w0vkWTieCl39cT/pmsEphZbXFrYaPQafjv+8X/f2DDCqMMf6PqLFT2nPwro
wvEGQZk3UwktbAwEtK8F+8ETWrZQehY5jbvQMG2rcaKqkchiGIJvvxw3By7M+dm9
pVrkVLQZhGvj4wOh2zOCDUc7xsVwGC57dqhyswlR5VglfIXuAtgmrfJe3WGvPewB
3fVBtAXap0Os5eU+ILPdFqXxcO+vEhZfdPmH0lBfLdw7osrRF0CD9kXuTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsi18YyCISL6AkJUi7crzvS/oYaMB8GA1UdIwQY
MBaAFGJhZb+yPdofmHCyQX9JZIXmwIp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAt
NDYwZmI0YmFjMmRiLzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAtNDYwZmI0YmFjMmRi
LzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq+ymvwv
qDOpUQrqyCoo5/SC39O3Cuh5L4GvHvVM6h+bWV063qkuYl4UdLmESFrMZ7y3RdXH
N9OZ/JFp5kgwaDtrhFyNhF5tfRnSHE4UAVNJm5Je+BdkY4PmmjnfmWaHlM9mH3co
c7nnC4yegMvV4kYzSDVIbyBg9Wh1yWkUJAJlrY+k7s1rEP26EDo29LntjJFGKS8G
abAlSP3nrTTPo8f/FFgPjtyxcLCwcp8p+Kgak0SYQG97gqv0aeqmwraUnUxwPRwb
xJFVc+xtXcsSRVEGIbY7vy8poSX/YjlPU+fPZLnxRdG9+g97Z7CuB2Ysd0KR1oQc
yTsPeR6PqwjTzQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:25:49 2025 by rpki-client