Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: D7FC00knd+YQZ7KJuI3MzsGkCYPByEaWqwWreSVmX/c=
Subject key identifier: 53:9B:03:F9:01:ED:FA:AE:8A:C0:19:2E:53:CE:EF:C5:0D:FE:55:37
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 019747794C515F4A10A5BCCB3A4E1D7A73D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 23:00:20 +0000
Manifest this update: Fri 06 Jun 2025 23:00:20 +0000
Manifest next update: Sat 07 Jun 2025 23:00:20 +0000
Files and hashes: 1: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: RhR0fw+xk3yJA9HjP5RS1NubtfrFcgWWvsKQGFogQmw=)
2: lpQpCVUUyuieF-my1hQ69F4PEZk.roa (hash: WA4/OyJVwgJx0ERp2sKecmZzmYmPwtki2xCkuF+SczM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:4c:51:5f:4a:10:a5:bc:cb:3a:4e:1d:7a:73:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Jun 6 23:00:20 2025 GMT
Not After : Jun 7 23:00:20 2025 GMT
Subject: CN=539b03f901edfaae8ac0192e53ceefc50dfe5537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:a6:ec:93:86:da:c9:15:30:a5:f0:30:c7:
4d:e9:f5:49:5b:1e:c3:4e:9d:5f:4f:b3:86:06:31:
20:bc:4c:3d:94:cd:8c:c3:90:7b:b4:72:0a:61:15:
60:58:ce:0f:6c:7e:a4:ab:9b:22:57:c0:05:02:0b:
e8:a2:8c:4f:52:9f:24:bf:2f:27:43:2b:06:8c:78:
b3:21:d9:41:6e:e9:0b:91:6b:b3:68:2c:fc:8a:3c:
b1:a4:49:84:1c:64:b6:17:0d:b1:91:10:d2:f6:1a:
d3:1a:f7:c4:e0:08:53:1c:8b:41:7c:7c:db:d6:a9:
d3:2f:d5:95:ac:6e:52:64:a4:75:9d:e2:c7:ba:0d:
5d:27:5a:d2:b9:a7:8b:d8:1e:ff:7b:dd:66:c7:a3:
7f:61:f2:0d:1e:96:f7:d4:c3:8b:54:7a:cd:38:bf:
93:7a:eb:06:0c:0b:60:f0:ab:86:9f:45:f6:7f:6d:
3e:ef:0f:d8:9b:0e:e3:30:4e:5b:af:2e:87:00:f6:
d5:ba:27:39:07:76:6e:f8:64:93:c3:02:93:cb:25:
7a:55:68:d3:d3:51:e9:76:90:fb:ce:b7:51:cc:de:
9b:c3:b1:34:61:51:1f:6a:85:5d:a0:1f:4f:26:d0:
32:07:3a:89:b8:a0:90:02:02:52:b1:a4:f1:99:7a:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9B:03:F9:01:ED:FA:AE:8A:C0:19:2E:53:CE:EF:C5:0D:FE:55:37
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:83:8f:dd:61:93:d0:94:b6:3e:de:be:87:55:e6:41:61:c9:
df:c9:74:d1:57:3a:38:ed:67:2a:78:f1:e4:12:9c:ab:64:2c:
bd:ad:ad:af:3b:90:87:59:cf:39:c8:b7:32:59:56:33:f4:ff:
49:9b:c8:77:ad:87:3c:67:76:68:5b:1b:ad:76:e3:43:79:8e:
87:dd:c4:16:94:fe:9d:a3:7d:55:c8:30:de:c2:37:1e:9a:d5:
89:94:f2:09:58:cb:fc:e1:4b:5f:44:1b:8e:78:3a:4e:93:8a:
64:ce:5b:20:03:61:65:e4:48:a0:de:c2:c0:e6:72:ff:7c:5f:
1c:45:b9:b5:54:d6:31:51:3b:b5:43:5a:f2:1b:74:ad:6e:54:
3e:0e:70:44:e4:35:08:bc:88:9c:55:f5:df:ac:a5:21:77:56:
f4:41:37:5c:bc:8d:3d:06:18:bf:02:c5:b5:fe:50:e7:26:1e:
d8:6f:1e:41:00:c6:f8:d3:dc:b4:11:91:ea:5a:4c:86:bf:60:
69:11:b4:fa:5f:54:7f:c2:23:b5:51:72:b0:6a:ec:1b:1e:f6:
c5:da:60:9b:ff:4f:bc:43:b1:63:ba:ad:8c:93:a0:b6:f6:cc:
5e:df:9c:b8:ab:7e:b6:eb:ae:09:a6:39:e6:c9:bd:f7:b5:61:
37:91:16:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeUxRX0oQpbzLOk4denPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMmFlZjRjN2JmZTdlMDcyZjYyZDJkZDUwNWFiNTdlMzdl
YTM4NWUwHhcNMjUwNjA2MjMwMDIwWhcNMjUwNjA3MjMwMDIwWjAzMTEwLwYDVQQD
Eyg1MzliMDNmOTAxZWRmYWFlOGFjMDE5MmU1M2NlZWZjNTBkZmU1NTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAam7JOG2skVMKXwMMdN6fVJWx7D
Tp1fT7OGBjEgvEw9lM2Mw5B7tHIKYRVgWM4PbH6kq5siV8AFAgvoooxPUp8kvy8n
QysGjHizIdlBbukLkWuzaCz8ijyxpEmEHGS2Fw2xkRDS9hrTGvfE4AhTHItBfHzb
1qnTL9WVrG5SZKR1neLHug1dJ1rSuaeL2B7/e91mx6N/YfINHpb31MOLVHrNOL+T
eusGDAtg8KuGn0X2f20+7w/Ymw7jME5bry6HAPbVuic5B3Zu+GSTwwKTyyV6VWjT
01HpdpD7zrdRzN6bw7E0YVEfaoVdoB9PJtAyBzqJuKCQAgJSsaTxmXqYMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFObA/kB7fquisAZLlPO78UN/lU3MB8GA1UdIwQY
MBaAFGEq70x7/n4HL2LS3VBatX436jheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgt
YTIwN2M3YTE5ZWQyLzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgtYTIwN2M3YTE5ZWQy
LzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4OP3WGT
0JS2Pt6+h1XmQWHJ38l00Vc6OO1nKnjx5BKcq2Qsva2trzuQh1nPOci3MllWM/T/
SZvId62HPGd2aFsbrXbjQ3mOh93EFpT+naN9Vcgw3sI3HprViZTyCVjL/OFLX0Qb
jng6TpOKZM5bIANhZeRIoN7CwOZy/3xfHEW5tVTWMVE7tUNa8ht0rW5UPg5wROQ1
CLyInFX136ylIXdW9EE3XLyNPQYYvwLFtf5Q5yYe2G8eQQDG+NPctBGR6lpMhr9g
aRG0+l9Uf8IjtVFysGrsGx72xdpgm/9PvEOxY7qtjJOgtvbMXt+cuKt+tuuuCaY5
5sm997VhN5EWiw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:34:57 2025 by rpki-client