Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: aCUrrQ/UA3vXwQADriw2W+PuA2DS/UKurNNIyqwgXWA=
Subject key identifier: 32:70:5B:B3:7E:AC:67:B7:CA:88:3B:C1:63:14:B5:96:4F:5C:AC:53
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 01974A7B88284B1529931411605275C3E30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 13:01:39 +0000
Manifest this update: Sat 07 Jun 2025 13:01:39 +0000
Manifest next update: Sun 08 Jun 2025 13:01:39 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: o+Vm1fY8e6T8pZxMTWjW01u+DSXdRqYPzneKxLITLdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:88:28:4b:15:29:93:14:11:60:52:75:c3:e3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Jun 7 13:01:39 2025 GMT
Not After : Jun 8 13:01:39 2025 GMT
Subject: CN=32705bb37eac67b7ca883bc16314b5964f5cac53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:57:f6:16:63:86:97:53:10:52:1f:c3:9e:
b7:29:9c:ac:ef:65:01:99:5c:64:0c:cf:36:29:80:
41:83:42:b2:d7:51:cd:94:aa:b8:a1:57:10:12:9f:
38:7a:f0:0e:71:f6:4c:1e:fa:b9:21:2f:61:62:fc:
7f:74:9d:ec:1c:f8:74:ee:ec:f4:b9:f9:91:65:17:
44:e2:e6:8f:18:b4:fc:53:08:be:cf:ac:5d:bd:15:
26:51:73:2e:b2:f6:3c:ea:ba:64:e0:74:93:fe:01:
d2:86:f1:46:13:aa:55:3c:b1:39:f2:9d:2e:4a:02:
24:71:35:2d:54:fc:07:b2:50:cd:a2:83:3b:f2:b8:
7a:f4:66:3b:9f:bb:94:46:a3:64:e7:7b:26:ba:ae:
03:75:8c:cf:cb:ef:f6:4a:4c:23:0b:9d:68:db:b9:
a8:da:1e:6f:6a:d4:dd:be:5f:a7:1d:5c:ba:bf:52:
05:6c:20:6b:5c:d5:a1:e1:c8:a0:39:c0:05:5a:63:
67:9e:38:7b:81:ec:29:92:a9:cb:99:84:76:33:c6:
b6:89:0b:1d:d0:32:5b:0e:f4:67:a8:f8:d6:82:59:
2a:37:0c:ce:55:03:fc:a6:8e:e2:26:58:f6:dd:67:
8f:94:b9:f2:cc:ae:56:43:d1:eb:a5:7d:2f:e6:25:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:70:5B:B3:7E:AC:67:B7:CA:88:3B:C1:63:14:B5:96:4F:5C:AC:53
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8e:0d:7a:2d:6e:07:be:74:d7:89:15:e8:80:42:16:d0:2d:
a2:e0:c3:7d:55:df:37:1d:ba:62:6d:42:d5:e8:46:e4:c3:e7:
34:b2:27:c7:1c:7b:f6:73:70:c1:cf:1c:50:56:f5:a0:a8:b7:
19:6f:88:c0:81:80:62:8c:d1:94:f3:23:bf:e3:d6:01:ef:78:
16:99:d0:58:36:c5:fc:8e:d3:e2:74:0c:cf:91:85:9f:50:d8:
70:cf:5f:05:49:05:df:67:86:3e:10:85:cc:90:42:6a:18:fe:
3d:42:07:96:9a:07:cc:b7:ae:ee:bb:c5:68:59:0a:b8:b0:6b:
ec:ab:0f:fa:0a:08:c4:3d:c7:12:5c:1f:e7:c0:1a:15:d6:c8:
f4:69:77:5a:c6:24:06:cd:7d:f0:f9:41:3b:fe:3b:d9:1a:be:
5f:4a:49:fe:22:07:32:55:21:c9:15:79:c4:5e:4e:39:9e:d9:
f0:4f:ed:3b:27:a7:72:29:53:42:39:bd:27:dc:a5:73:b3:99:
e9:69:82:15:44:85:88:73:da:32:92:67:b9:31:44:b1:b2:4f:
52:05:92:37:02:c7:9c:b6:15:67:d0:7b:75:d6:6e:8b:e2:c4:
d7:d3:c5:a1:bf:f9:03:52:09:6a:a9:0f:86:78:c9:78:1d:ed:
ba:b1:9a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe4goSxUpkxQRYFJ1w+MOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNWRkYjc3Yzc5MjZmNTc3YjAwYWJjZDNkNTJmNDJjOTIw
Mjc5Y2QwHhcNMjUwNjA3MTMwMTM5WhcNMjUwNjA4MTMwMTM5WjAzMTEwLwYDVQQD
EygzMjcwNWJiMzdlYWM2N2I3Y2E4ODNiYzE2MzE0YjU5NjRmNWNhYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k5X9hZjhpdTEFIfw563KZys72UB
mVxkDM82KYBBg0Ky11HNlKq4oVcQEp84evAOcfZMHvq5IS9hYvx/dJ3sHPh07uz0
ufmRZRdE4uaPGLT8Uwi+z6xdvRUmUXMusvY86rpk4HST/gHShvFGE6pVPLE58p0u
SgIkcTUtVPwHslDNooM78rh69GY7n7uURqNk53smuq4DdYzPy+/2SkwjC51o27mo
2h5vatTdvl+nHVy6v1IFbCBrXNWh4cigOcAFWmNnnjh7gewpkqnLmYR2M8a2iQsd
0DJbDvRnqPjWglkqNwzOVQP8po7iJlj23WePlLnyzK5WQ9HrpX0v5iWpyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJwW7N+rGe3yog7wWMUtZZPXKxTMB8GA1UdIwQY
MBaAFGFd23fHkm9XewCrzT1S9CySAnnNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYt
YjBkYzJlMjIxMWViLzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYtYjBkYzJlMjIxMWVi
LzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtY4Nei1u
B75014kV6IBCFtAtouDDfVXfNx26Ym1C1ehG5MPnNLInxxx79nNwwc8cUFb1oKi3
GW+IwIGAYozRlPMjv+PWAe94FpnQWDbF/I7T4nQMz5GFn1DYcM9fBUkF32eGPhCF
zJBCahj+PUIHlpoHzLeu7rvFaFkKuLBr7KsP+goIxD3HElwf58AaFdbI9Gl3WsYk
Bs198PlBO/472Rq+X0pJ/iIHMlUhyRV5xF5OOZ7Z8E/tOyencilTQjm9J9ylc7OZ
6WmCFUSFiHPaMpJnuTFEsbJPUgWSNwLHnLYVZ9B7ddZui+LE19PFob/5A1IJaqkP
hnjJeB3turGaHw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:40:14 2025 by rpki-client