Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
File: Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft (raw, json)
Hash identifier: Jx/17A4mqlm1QSiB1M/u0RTYb/UPMtIk+qYN0vsK69E=
Subject key identifier: 59:5B:BE:4A:79:3B:38:DC:28:15:49:2D:AF:BA:2B:27:9D:AB:83:8B
Authority key identifier: 62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
Certificate issuer: /CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Certificate serial: 01974E5738580F7C63D6CC8447C8B6439D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
Manifest number: 1158
Signing time: Sun 08 Jun 2025 07:00:28 +0000
Manifest this update: Sun 08 Jun 2025 07:00:28 +0000
Manifest next update: Mon 09 Jun 2025 07:00:28 +0000
Files and hashes: 1: Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl (hash: D21AVaDILXmy3C6SVKuW7PFQ4HeK6Zc6R2xrhL7Oksg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:38:58:0f:7c:63:d6:cc:84:47:c8:b6:43:9d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Validity
Not Before: Jun 8 07:00:28 2025 GMT
Not After : Jun 9 07:00:28 2025 GMT
Subject: CN=595bbe4a793b38dc2815492dafba2b279dab838b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:66:c3:8e:04:de:b5:69:f7:c1:de:46:79:
16:d1:0b:1f:d7:d9:d3:08:d8:ff:c9:77:28:3d:ed:
03:92:ae:41:75:08:a9:68:15:c4:6f:5a:a7:f5:12:
b3:7b:c2:e0:96:69:51:7c:82:43:3c:9a:08:56:00:
36:ca:88:0d:5a:cc:dc:c8:a0:22:99:a5:f3:81:6b:
77:b0:16:83:fc:09:77:c7:10:1c:c4:7e:dc:5b:fc:
51:a8:86:2d:73:21:83:63:ee:87:1e:ac:46:f4:2b:
ee:4a:a2:5c:fe:4c:f9:b5:57:80:3d:f0:c8:d4:98:
96:6c:fb:0c:56:a8:ff:6b:e7:3a:4c:1c:8f:99:20:
d6:2b:b0:52:40:20:7c:3b:63:7a:38:b4:46:9e:9f:
7c:c0:c3:1d:6c:1e:6f:bd:c8:97:84:4c:16:56:04:
cf:17:07:b3:81:fa:6e:a5:09:3f:ea:de:0b:c3:d0:
91:a4:3e:9b:d4:8a:cc:01:2b:06:0c:3c:ef:11:42:
8c:11:df:b0:21:e2:b1:aa:be:89:cb:51:7f:6d:73:
c1:82:26:47:32:af:81:ca:7f:7b:da:11:49:66:31:
05:46:af:1a:b9:22:73:21:90:99:d2:1d:21:1b:f7:
5f:8b:ed:ec:ca:47:d4:41:9b:b6:80:9c:63:83:86:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5B:BE:4A:79:3B:38:DC:28:15:49:2D:AF:BA:2B:27:9D:AB:83:8B
X509v3 Authority Key Identifier:
keyid:62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2d:6c:5d:c2:39:b8:67:b5:d1:ec:0e:8c:b0:8d:d5:0c:c7:
23:f3:2e:ee:2e:f3:1a:3e:93:24:5c:9a:cd:6c:8a:eb:0c:97:
79:d2:54:e4:6f:f9:fe:b4:0b:bd:e3:f6:bb:ee:ea:87:96:e5:
50:6e:65:1e:cd:b5:63:73:0b:7e:5b:25:ba:90:20:73:27:dc:
99:43:8e:85:80:e6:c2:f2:39:4e:14:17:4e:db:59:7c:17:e5:
f3:fb:ed:19:8f:42:4a:f7:96:65:17:88:6c:21:b9:d8:f2:0c:
66:d2:7c:f0:7a:b0:fc:79:cf:da:93:bb:3e:df:b5:85:58:6c:
36:fc:94:e6:58:41:fb:b0:94:18:dd:c7:15:e7:6a:b0:af:4d:
58:25:6a:51:c5:9a:66:fc:bd:63:98:78:d4:02:3f:7e:29:3e:
61:9a:4e:ad:05:db:c4:99:d0:8d:16:04:d4:cc:cb:d7:b5:6d:
51:ef:5c:93:df:dc:ae:57:06:4a:27:dc:6d:39:37:73:bf:1b:
c2:30:5f:93:29:5a:15:2f:96:2f:e9:34:10:f4:66:fb:39:d8:
5c:2f:8c:94:23:8e:b0:da:9a:00:c3:02:06:e0:95:a5:0b:5e:
e6:aa:eb:27:09:32:73:9a:33:b0:a0:3f:ad:ea:64:e3:86:6e:
78:fc:59:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOVzhYD3xj1syER8i2Q50CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGE3ZjI1MDdmY2FkYmVjZDNkMmI2Mjk4ZTcwZjVkNGJm
ZTA0YjQwHhcNMjUwNjA4MDcwMDI4WhcNMjUwNjA5MDcwMDI4WjAzMTEwLwYDVQQD
Eyg1OTViYmU0YTc5M2IzOGRjMjgxNTQ5MmRhZmJhMmIyNzlkYWI4MzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCJmw44E3rVp98HeRnkW0Qsf19nT
CNj/yXcoPe0Dkq5BdQipaBXEb1qn9RKze8LglmlRfIJDPJoIVgA2yogNWszcyKAi
maXzgWt3sBaD/Al3xxAcxH7cW/xRqIYtcyGDY+6HHqxG9CvuSqJc/kz5tVeAPfDI
1JiWbPsMVqj/a+c6TByPmSDWK7BSQCB8O2N6OLRGnp98wMMdbB5vvciXhEwWVgTP
FwezgfpupQk/6t4Lw9CRpD6b1IrMASsGDDzvEUKMEd+wIeKxqr6Jy1F/bXPBgiZH
Mq+Byn972hFJZjEFRq8auSJzIZCZ0h0hG/dfi+3sykfUQZu2gJxjg4ZtrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlbvkp5OzjcKBVJLa+6Kyedq4OLMB8GA1UdIwQY
MBaAFGJKfyUH/K2+zT0rYpjnD11L/gS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtwX0pRZjhyYjdOUFN0aW1PY1BYVXYtQkxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yNzBlMWEtMDg5YS00MDkwLThhOWIt
YzgyMmM4MzhkZmU5LzEvWWtwX0pRZjhyYjdOUFN0aW1PY1BYVXYtQkxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yNzBlMWEtMDg5YS00MDkwLThhOWItYzgyMmM4MzhkZmU5
LzEvWWtwX0pRZjhyYjdOUFN0aW1PY1BYVXYtQkxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAi1sXcI5
uGe10ewOjLCN1QzHI/Mu7i7zGj6TJFyazWyK6wyXedJU5G/5/rQLveP2u+7qh5bl
UG5lHs21Y3MLflslupAgcyfcmUOOhYDmwvI5ThQXTttZfBfl8/vtGY9CSveWZReI
bCG52PIMZtJ88Hqw/HnP2pO7Pt+1hVhsNvyU5lhB+7CUGN3HFedqsK9NWCVqUcWa
Zvy9Y5h41AI/fik+YZpOrQXbxJnQjRYE1MzL17VtUe9ck9/crlcGSifcbTk3c78b
wjBfkylaFS+WL+k0EPRm+znYXC+MlCOOsNqaAMMCBuCVpQte5qrrJwkyc5ozsKA/
repk44ZuePxZDw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:02:24 2025 by rpki-client