Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json)
Hash identifier: hV9UssDB2Mx6oDFvDtdLj4q+ed2aM9aDarO3TzBnfVw=
Subject key identifier: 10:A4:B4:C8:61:23:45:0E:BC:70:6C:E6:D3:D0:71:95:9E:FB:FF:B6
Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74
Certificate serial: 01975E38CEBBEF672D2A7FE237593CBE68D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
Manifest number: 0315
Signing time: Wed 11 Jun 2025 09:01:10 +0000
Manifest this update: Wed 11 Jun 2025 09:01:10 +0000
Manifest next update: Thu 12 Jun 2025 09:01:10 +0000
Files and hashes: 1: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: SRaR2mGUao44eFiHY9kW26yM6aJSD9mP/wX6FDFZDQE=)
2: sqHnWw_DTKSgc5zNQG4iPku5PBw.roa (hash: w6R1JeMOp3KdC2WjMvic0T8urUWBQwEZKMQrdXTts0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:ce:bb:ef:67:2d:2a:7f:e2:37:59:3c:be:68:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Validity
Not Before: Jun 11 09:01:10 2025 GMT
Not After : Jun 12 09:01:10 2025 GMT
Subject: CN=10a4b4c86123450ebc706ce6d3d071959efbffb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4f:73:7b:7d:0f:50:a3:b8:fd:76:37:15:ee:
cd:7c:d4:39:41:0a:17:d4:0e:4c:2c:61:de:cf:8f:
8d:4d:92:c6:a9:ee:34:6a:12:fe:88:ff:e1:55:fe:
7b:35:89:ac:bf:22:81:d1:1a:b7:f4:52:54:d7:42:
92:86:67:a9:12:a0:08:30:e0:48:6b:35:28:55:19:
c9:43:86:56:12:c1:3d:49:92:63:bf:bc:6c:be:3d:
9f:9c:a6:9b:b6:83:f2:57:c7:01:ca:08:87:09:dd:
52:34:17:62:f6:dd:49:fa:90:26:8f:d1:05:9c:cc:
3e:2f:00:66:51:28:8c:b5:87:6e:f3:d0:60:9b:a6:
51:d1:cf:03:10:2e:a7:91:e9:e9:8f:9e:49:05:18:
42:99:11:0d:69:af:1e:01:ba:7b:98:2d:23:fd:d2:
e9:1b:db:db:a2:93:c8:3c:85:01:9b:30:48:70:1f:
26:64:50:c7:c6:55:32:aa:90:c5:89:82:c4:f7:a2:
f3:8e:d4:c5:59:fd:27:a6:80:d9:d7:b3:04:54:cb:
ee:6c:2c:64:5e:66:40:eb:ca:88:d3:d9:c8:c0:44:
9c:4c:60:4f:1c:d9:93:fa:c6:16:25:3a:7e:48:12:
21:cc:fc:55:f7:d6:07:9e:fc:f6:07:8f:b6:cb:8c:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A4:B4:C8:61:23:45:0E:BC:70:6C:E6:D3:D0:71:95:9E:FB:FF:B6
X509v3 Authority Key Identifier:
keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b5:76:e5:fd:bf:7a:f1:03:97:61:7f:78:66:c8:bd:af:07:
ca:cf:67:64:57:8f:24:1a:ce:8e:e9:9e:b1:67:9a:0b:f1:3f:
02:c3:87:c1:ae:fc:04:9b:e8:49:bb:6e:3d:94:09:11:2e:ed:
55:22:57:f2:63:0b:a1:0a:4c:7b:ab:fb:6f:96:52:0c:cc:0f:
ab:b3:95:26:83:5f:d8:b1:ab:f5:82:04:ce:36:ba:a1:c6:0b:
bc:9e:42:20:7a:ea:74:d7:df:fb:ab:a2:8e:5c:51:36:9b:ab:
ba:b1:32:51:ff:a8:5b:4d:f4:10:84:be:93:0f:5e:8a:2c:5a:
6e:43:a6:46:6e:83:5f:f2:d8:da:c4:10:53:f1:39:18:f7:77:
29:c7:47:90:fe:da:d2:f0:ad:3e:dc:60:a4:bb:12:c7:5a:06:
9d:10:e0:d4:85:3e:ae:fe:5c:b2:1d:c2:2e:15:ae:14:76:e7:
49:e1:59:63:57:2f:3b:05:6c:90:a5:64:9f:74:e1:a3:0e:b8:
e4:7f:ea:3c:40:89:25:4b:bb:90:7c:b6:c5:c4:c4:b6:07:c3:
cd:6a:cf:c9:20:6e:03:ef:ef:b4:07:79:30:bd:14:0c:98:cc:
79:f7:e0:f5:e5:e4:6d:53:61:3e:2b:6c:b7:5e:b9:ff:ac:4d:
de:5b:e8:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdeOM6772ctKn/iN1k8vmjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjE2NWJmYjIzZGRhMWY5ODcwYjI0MTdmNDk2NDg1ZTZj
MDhhNzQwHhcNMjUwNjExMDkwMTEwWhcNMjUwNjEyMDkwMTEwWjAzMTEwLwYDVQQD
EygxMGE0YjRjODYxMjM0NTBlYmM3MDZjZTZkM2QwNzE5NTllZmJmZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8U9ze30PUKO4/XY3Fe7NfNQ5QQoX
1A5MLGHez4+NTZLGqe40ahL+iP/hVf57NYmsvyKB0Rq39FJU10KShmepEqAIMOBI
azUoVRnJQ4ZWEsE9SZJjv7xsvj2fnKabtoPyV8cBygiHCd1SNBdi9t1J+pAmj9EF
nMw+LwBmUSiMtYdu89Bgm6ZR0c8DEC6nkenpj55JBRhCmRENaa8eAbp7mC0j/dLp
G9vbopPIPIUBmzBIcB8mZFDHxlUyqpDFiYLE96LzjtTFWf0npoDZ17MEVMvubCxk
XmZA68qI09nIwEScTGBPHNmT+sYWJTp+SBIhzPxV99YHnvz2B4+2y4y7EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCktMhhI0UOvHBs5tPQcZWe+/+2MB8GA1UdIwQY
MBaAFGJhZb+yPdofmHCyQX9JZIXmwIp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAt
NDYwZmI0YmFjMmRiLzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAtNDYwZmI0YmFjMmRi
LzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObV25f2/
evEDl2F/eGbIva8Hys9nZFePJBrOjumesWeaC/E/AsOHwa78BJvoSbtuPZQJES7t
VSJX8mMLoQpMe6v7b5ZSDMwPq7OVJoNf2LGr9YIEzja6ocYLvJ5CIHrqdNff+6ui
jlxRNpururEyUf+oW030EIS+kw9eiixabkOmRm6DX/LY2sQQU/E5GPd3KcdHkP7a
0vCtPtxgpLsSx1oGnRDg1IU+rv5csh3CLhWuFHbnSeFZY1cvOwVskKVkn3Thow64
5H/qPECJJUu7kHy2xcTEtgfDzWrPySBuA+/vtAd5ML0UDJjMeffg9eXkbVNhPits
t165/6xN3lvoYQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:04:44 2025 by rpki-client