Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: TNojromc2IitLUE2O0AINsPApAvEsgbhRo63zLlFMAc=
Subject key identifier: 99:5C:BD:49:37:CA:3E:74:14:D6:EE:E6:2D:AD:27:BC:A7:C6:60:88
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019748FA9767B36604A7E1AACD752A651895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:01:11 +0000
Manifest this update: Sat 07 Jun 2025 06:01:11 +0000
Manifest next update: Sun 08 Jun 2025 06:01:11 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: jSmtJTy10tPptVWu2LQu+F8uVOrJLE+TezLR+D8N+o0=)
2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:97:67:b3:66:04:a7:e1:aa:cd:75:2a:65:18:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Jun 7 06:01:11 2025 GMT
Not After : Jun 8 06:01:11 2025 GMT
Subject: CN=995cbd4937ca3e7414d6eee62dad27bca7c66088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:11:a8:ac:4c:c4:e6:5a:44:d5:3b:35:25:
81:e0:da:5c:db:32:bd:ff:47:76:06:48:57:f0:5c:
dc:ba:61:80:b4:de:05:b7:90:98:8c:8e:93:15:c8:
99:52:49:86:9f:6f:d7:19:28:f0:af:7c:6c:94:c2:
eb:15:54:b7:08:1d:10:d5:2c:80:90:40:6f:ce:ac:
aa:ef:0c:b7:e3:9a:6a:26:51:b4:2d:3b:d7:1f:b9:
9c:76:b2:94:ef:92:27:2a:96:f7:a6:06:3d:ba:8e:
11:28:52:fa:9f:c3:92:50:48:35:4b:55:da:15:e5:
01:0b:c9:49:ee:0c:8a:85:40:d6:1d:40:38:a9:06:
64:54:16:67:5a:7c:2b:3e:f4:3a:d4:46:a0:ca:f6:
fd:2c:57:77:9a:eb:f1:0d:0b:65:80:db:f0:a5:67:
12:db:b6:c5:60:08:25:92:7a:3b:8c:a5:7c:9c:d8:
17:7c:a6:86:e0:ae:f3:51:70:f2:a0:68:3c:62:1c:
8b:17:d4:ba:c1:a5:cc:ea:4e:18:22:14:cd:e4:29:
c9:cb:0e:8d:cb:c1:9b:71:e0:55:c7:ac:90:cd:9d:
2f:ca:64:ee:11:54:1e:a1:39:90:e7:b8:56:05:76:
49:be:f3:f1:a1:e8:1a:84:04:6d:aa:a8:d4:46:e6:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5C:BD:49:37:CA:3E:74:14:D6:EE:E6:2D:AD:27:BC:A7:C6:60:88
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:3e:1f:2a:49:85:ac:16:1c:ae:4c:38:7f:a4:62:ff:8f:
34:d7:b3:fd:ac:c6:74:b6:76:e7:22:6d:5f:23:48:b7:92:50:
a9:be:a3:e5:c4:f1:bc:be:9a:4b:a9:f6:77:d2:c4:57:03:34:
2c:c9:b6:1d:fb:f9:c0:6f:c2:7d:7e:73:eb:d8:d0:1e:a3:bc:
a0:71:aa:fa:ea:39:0d:6b:ef:58:08:f6:ad:0b:bc:be:10:31:
42:a7:1e:5a:54:54:1e:e8:c8:79:ca:f6:02:cd:a8:46:04:fb:
dd:f3:45:69:d8:d5:a3:e1:6a:c1:0e:fe:9e:66:74:9b:27:4e:
bc:5e:77:5c:8d:e3:d1:46:0f:f6:f0:1a:47:c6:05:dc:0c:04:
5b:ac:d5:6c:08:87:84:ff:91:1e:b0:e1:58:47:a8:98:45:6a:
58:00:02:7a:ad:2f:e2:d5:1f:a6:ec:bf:91:fb:64:a0:28:b3:
52:f7:19:9d:84:15:be:bd:26:61:5a:dd:81:ae:e8:28:fa:cd:
6e:1b:76:01:ff:3f:be:e2:13:8e:a9:c7:9e:ca:e1:4e:25:1e:
63:0c:35:b2:82:37:ee:8d:54:20:c3:76:4f:11:80:a3:2f:73:
fd:8b:0c:bf:67:e0:16:81:35:02:53:d2:72:87:05:e6:19:03:
4e:5f:ed:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+pdns2YEp+GqzXUqZRiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmY1MTdiMDgxODJjNmVkYTFiM2Y5ODhlZTAxODE2ZWUy
NjRkYzAwHhcNMjUwNjA3MDYwMTExWhcNMjUwNjA4MDYwMTExWjAzMTEwLwYDVQQD
Eyg5OTVjYmQ0OTM3Y2EzZTc0MTRkNmVlZTYyZGFkMjdiY2E3YzY2MDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql8RqKxMxOZaRNU7NSWB4Npc2zK9
/0d2BkhX8FzcumGAtN4Ft5CYjI6TFciZUkmGn2/XGSjwr3xslMLrFVS3CB0Q1SyA
kEBvzqyq7wy345pqJlG0LTvXH7mcdrKU75InKpb3pgY9uo4RKFL6n8OSUEg1S1Xa
FeUBC8lJ7gyKhUDWHUA4qQZkVBZnWnwrPvQ61Eagyvb9LFd3muvxDQtlgNvwpWcS
27bFYAglkno7jKV8nNgXfKaG4K7zUXDyoGg8YhyLF9S6waXM6k4YIhTN5CnJyw6N
y8GbceBVx6yQzZ0vymTuEVQeoTmQ57hWBXZJvvPxoegahARtqqjURuYyiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlcvUk3yj50FNbu5i2tJ7ynxmCIMB8GA1UdIwQY
MBaAFGIvUXsIGCxu2hs/mI7gGBbuJk3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgt
ZDkyZGFlODYxYTdkLzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgtZDkyZGFlODYxYTdk
LzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIA+HypJ
hawWHK5MOH+kYv+PNNez/azGdLZ25yJtXyNIt5JQqb6j5cTxvL6aS6n2d9LEVwM0
LMm2Hfv5wG/CfX5z69jQHqO8oHGq+uo5DWvvWAj2rQu8vhAxQqceWlRUHujIecr2
As2oRgT73fNFadjVo+FqwQ7+nmZ0mydOvF53XI3j0UYP9vAaR8YF3AwEW6zVbAiH
hP+RHrDhWEeomEVqWAACeq0v4tUfpuy/kftkoCizUvcZnYQVvr0mYVrdga7oKPrN
bht2Af8/vuITjqnHnsrhTiUeYww1soI37o1UIMN2TxGAoy9z/YsMv2fgFoE1AlPS
cocF5hkDTl/tZw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:07 2025 by rpki-client