Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier: 07AavpHy4sYVLbzS9TTRsYB4JRcOQEWP0HslBgMRBQ0=
Subject key identifier: 59:F3:58:DA:99:15:48:29:EA:DC:4E:8F:59:C5:0B:16:DA:25:DE:35
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 019745F8FD07C5FFC3A2CE9F29938C6F710D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number: 150E
Signing time: Fri 06 Jun 2025 16:00:34 +0000
Manifest this update: Fri 06 Jun 2025 16:00:34 +0000
Manifest next update: Sat 07 Jun 2025 16:00:34 +0000
Files and hashes: 1: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: jeuThHLMdNoCVoSIir4w1e+QLVVa3pFVnvoOJVmR3vM=)
2: hD0ar_tHc7p3YZ1QwpI7BJcBiok.roa (hash: wT7KNqysLUSBZ2MK1PEYcvNRcVleye9t9OdQ04Vtz2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:fd:07:c5:ff:c3:a2:ce:9f:29:93:8c:6f:71:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Jun 6 16:00:34 2025 GMT
Not After : Jun 7 16:00:34 2025 GMT
Subject: CN=59f358da99154829eadc4e8f59c50b16da25de35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:02:f6:da:2e:30:bf:e3:89:00:b1:cc:c4:
1b:85:a6:98:f2:a5:17:ee:01:02:54:25:5c:6d:86:
95:a6:e2:9b:39:1f:44:0d:5f:91:0d:47:96:ec:30:
60:56:7b:7b:d2:fe:1a:fb:ba:e6:0c:13:3b:f4:3d:
88:21:7c:82:83:9e:e0:31:83:63:c0:91:3a:3a:78:
09:f0:43:6c:46:10:fb:04:0f:66:9f:39:54:25:bd:
f4:f4:65:65:04:62:ff:2e:cb:bf:6f:d8:ea:64:59:
30:28:f7:61:7a:77:3d:da:df:0e:0f:d1:b9:88:79:
ff:2f:e7:a8:8f:13:ba:15:00:df:22:36:ab:c7:17:
8c:23:d2:00:45:4c:aa:24:fd:8b:f2:b0:4c:c8:ec:
44:16:a0:69:94:d5:89:59:27:b8:ae:82:71:ac:e7:
85:30:8e:c2:e8:97:1e:08:6e:82:cd:3f:d6:db:ae:
8d:67:3f:4a:12:eb:d2:88:72:66:0a:cc:60:81:d1:
05:c3:75:6d:3d:74:bb:61:4d:15:ad:12:bc:1f:1b:
b9:0d:29:3d:e5:44:84:d1:fc:ac:56:45:69:33:7a:
b7:fb:1a:27:f5:44:6c:fa:3e:4b:b8:f4:07:2d:20:
ac:29:ba:ce:4f:5c:c7:1e:20:2f:c2:5c:17:30:43:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F3:58:DA:99:15:48:29:EA:DC:4E:8F:59:C5:0B:16:DA:25:DE:35
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:29:d1:1e:ac:cc:51:23:9c:7b:d6:c5:1a:8e:a7:98:16:9c:
d9:f9:7c:d1:62:f2:4e:c4:d5:9b:fc:89:b0:d9:5c:d8:3d:8b:
8a:ef:e3:20:98:1b:17:4b:54:9e:e8:20:61:19:01:91:8a:48:
d1:34:70:24:4e:34:31:c0:17:d1:6d:80:cc:4e:87:c3:a6:f0:
53:d6:87:5e:15:d2:1d:e1:21:d5:47:eb:8c:ff:ad:d2:3d:9a:
6e:d1:c6:02:b4:c2:52:42:81:ea:6b:5a:f4:bc:22:9a:e1:3a:
6f:8c:dc:3b:51:ef:7c:30:4c:20:51:6d:b2:49:b9:bb:2f:09:
46:a3:bf:ee:9c:d0:9b:f8:44:a4:7a:d3:32:c7:87:49:26:75:
ef:e9:9f:a7:6f:35:37:30:25:82:b5:e7:85:33:9c:57:10:6a:
c6:21:2b:fc:6a:50:31:b3:e4:fa:ee:75:84:5a:9f:01:9e:1c:
2a:e5:5f:01:dc:6b:4d:3d:01:ca:a1:23:a1:72:11:b8:b7:48:
8a:3e:a7:4e:3d:38:98:98:93:df:fb:fa:d6:37:e3:be:bf:ca:
6e:1b:b9:71:5b:fb:63:9f:95:7b:7a:7a:4d:24:74:30:38:4e:
76:af:97:3e:cf:93:dc:f2:a2:a6:b2:f5:cb:41:1c:e7:34:7d:
8e:ff:a9:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+P0Hxf/Dos6fKZOMb3ENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODYyMTYyM2FjNmNhYjhmNmJkZTU1MjZlN2EyOTMxZDYy
NmZlOGMwHhcNMjUwNjA2MTYwMDM0WhcNMjUwNjA3MTYwMDM0WjAzMTEwLwYDVQQD
Eyg1OWYzNThkYTk5MTU0ODI5ZWFkYzRlOGY1OWM1MGIxNmRhMjVkZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4oC9touML/jiQCxzMQbhaaY8qUX
7gECVCVcbYaVpuKbOR9EDV+RDUeW7DBgVnt70v4a+7rmDBM79D2IIXyCg57gMYNj
wJE6OngJ8ENsRhD7BA9mnzlUJb309GVlBGL/Lsu/b9jqZFkwKPdhenc92t8OD9G5
iHn/L+eojxO6FQDfIjarxxeMI9IARUyqJP2L8rBMyOxEFqBplNWJWSe4roJxrOeF
MI7C6JceCG6CzT/W266NZz9KEuvSiHJmCsxggdEFw3VtPXS7YU0VrRK8Hxu5DSk9
5USE0fysVkVpM3q3+xon9URs+j5LuPQHLSCsKbrOT1zHHiAvwlwXMENFVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnzWNqZFUgp6txOj1nFCxbaJd41MB8GA1UdIwQY
MBaAFHWGIWI6xsq49r3lUm56KTHWJv6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDct
ZjAyMTE2MjI2YTg4LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDctZjAyMTE2MjI2YTg4
LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASnRHqzM
USOce9bFGo6nmBac2fl80WLyTsTVm/yJsNlc2D2Liu/jIJgbF0tUnuggYRkBkYpI
0TRwJE40McAX0W2AzE6Hw6bwU9aHXhXSHeEh1UfrjP+t0j2abtHGArTCUkKB6mta
9LwimuE6b4zcO1HvfDBMIFFtskm5uy8JRqO/7pzQm/hEpHrTMseHSSZ17+mfp281
NzAlgrXnhTOcVxBqxiEr/GpQMbPk+u51hFqfAZ4cKuVfAdxrTT0ByqEjoXIRuLdI
ij6nTj04mJiT3/v61jfjvr/Kbhu5cVv7Y5+Ve3p6TSR0MDhOdq+XPs+T3PKiprL1
y0Ec5zR9jv+ptg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:29 2025 by rpki-client