Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
File: Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft (raw, json)
Hash identifier: 46a4S8xcPiTOBPtUE77AwBN3OrBV2qmdZMKGcrRzPGw=
Subject key identifier: F7:7A:25:66:88:2D:68:7E:EA:F9:E1:C9:10:F0:A7:C2:22:35:7E:7B
Authority key identifier: 63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
Certificate issuer: /CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Certificate serial: 0197B6A131216A3D3F973D62DCFFD33E083B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
Manifest number: 0AA8
Signing time: Sat 28 Jun 2025 13:01:46 +0000
Manifest this update: Sat 28 Jun 2025 13:01:46 +0000
Manifest next update: Sun 29 Jun 2025 13:01:46 +0000
Files and hashes: 1: Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl (hash: IdiV/g/+obn3RKaU6ror6y9ICiNEM+RmoDnf8xBGezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:31:21:6a:3d:3f:97:3d:62:dc:ff:d3:3e:08:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Validity
Not Before: Jun 28 13:01:46 2025 GMT
Not After : Jun 29 13:01:46 2025 GMT
Subject: CN=f77a2566882d687eeaf9e1c910f0a7c222357e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:0c:9a:11:ba:84:04:b9:e8:96:ad:3c:b4:
19:c4:c2:95:1a:c4:67:0a:26:03:f1:82:a3:23:40:
33:af:f5:43:93:36:35:82:1a:60:21:92:92:b5:39:
4a:ca:78:07:f3:0c:02:59:eb:60:ff:7c:57:e0:79:
34:81:9f:55:1e:57:cf:7e:a7:66:e9:13:f7:81:1d:
de:88:53:3a:96:92:1e:93:f9:96:e9:2a:d6:2b:58:
90:af:a4:47:a1:9e:01:4c:ea:ed:60:52:b4:67:76:
6c:48:4f:78:38:13:d0:2d:80:1c:8e:ea:9b:a2:1b:
f7:c3:ca:41:bf:f9:f3:dd:3c:76:3e:9a:8b:4a:ae:
cd:2b:a8:01:e4:d8:ac:6c:ee:9b:b2:36:1a:16:7d:
96:e1:a0:f5:30:b6:6b:b0:9c:a9:09:c9:27:21:e5:
60:1a:0c:13:54:01:f4:7c:50:53:41:03:10:24:a4:
38:de:cc:73:3e:65:9c:db:04:0a:4c:cf:61:f0:36:
d7:41:7f:44:9c:0b:bf:84:c5:27:fb:1e:89:74:87:
8d:b2:67:0c:f5:28:af:db:01:3c:8c:f0:c8:a0:b7:
d5:fa:d3:fe:19:79:eb:09:91:d7:5f:bf:39:5a:45:
a3:8d:56:3d:b5:cb:7b:93:e8:2a:24:76:e8:e4:bd:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:25:66:88:2D:68:7E:EA:F9:E1:C9:10:F0:A7:C2:22:35:7E:7B
X509v3 Authority Key Identifier:
keyid:63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:87:d9:82:28:4b:cc:fb:a3:39:4a:cc:cc:25:1c:b9:95:47:
70:f1:60:fe:4a:e6:61:e1:cd:09:77:81:71:ff:bd:22:3e:46:
45:fa:36:a5:f1:8c:fd:97:ff:4c:fa:48:05:78:37:b9:e2:1f:
50:62:f0:a5:a8:d4:c4:11:12:d3:a1:54:dd:48:36:6e:af:79:
14:dd:3f:15:b4:a8:3e:a7:09:4f:7a:72:ed:b2:76:37:cc:03:
96:16:b4:ef:42:78:38:32:df:23:52:3a:39:32:74:18:9c:5c:
7b:f5:28:4f:a3:0c:7b:d7:92:6d:74:35:4f:82:26:69:b0:ed:
3e:99:65:4d:c5:7d:dc:09:b4:0d:9c:85:74:b6:c8:04:db:0e:
f6:91:79:d6:ab:36:d2:b1:ce:78:0b:0e:f4:e0:e4:63:37:8e:
0b:ab:92:48:90:6f:9e:e1:38:76:26:07:80:87:bf:96:53:17:
25:7e:57:ac:5a:81:3c:22:f6:19:7f:2e:ca:27:52:08:a2:a5:
a1:7e:41:be:8a:02:97:cf:6e:e5:e0:82:e1:e6:52:5b:15:46:
b6:74:b2:2b:b4:60:86:0f:0c:02:e6:e7:56:48:01:c5:8d:0b:
86:4b:bf:af:ae:a0:9d:a3:1c:95:f4:48:a9:e7:d5:9c:5e:c2:
20:d5:55:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oTEhaj0/lz1i3P/TPgg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGUwZmQxODgzMjQ3NTY5NTk5NWY0NTA3ZjhmY2ZkYWYx
YzFjZTUwHhcNMjUwNjI4MTMwMTQ2WhcNMjUwNjI5MTMwMTQ2WjAzMTEwLwYDVQQD
EyhmNzdhMjU2Njg4MmQ2ODdlZWFmOWUxYzkxMGYwYTdjMjIyMzU3ZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJwMmhG6hAS56JatPLQZxMKVGsRn
CiYD8YKjI0Azr/VDkzY1ghpgIZKStTlKyngH8wwCWetg/3xX4Hk0gZ9VHlfPfqdm
6RP3gR3eiFM6lpIek/mW6SrWK1iQr6RHoZ4BTOrtYFK0Z3ZsSE94OBPQLYAcjuqb
ohv3w8pBv/nz3Tx2PpqLSq7NK6gB5NisbO6bsjYaFn2W4aD1MLZrsJypCcknIeVg
GgwTVAH0fFBTQQMQJKQ43sxzPmWc2wQKTM9h8DbXQX9EnAu/hMUn+x6JdIeNsmcM
9Siv2wE8jPDIoLfV+tP+GXnrCZHXX785WkWjjVY9tct7k+gqJHbo5L0ziwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd6JWaILWh+6vnhyRDwp8IiNX57MB8GA1UdIwQY
MBaAFGOOD9GIMkdWlZlfRQf4/P2vHBzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUt
YjRlMjVkNDBhMzgzLzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUtYjRlMjVkNDBhMzgz
LzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYfZgihL
zPujOUrMzCUcuZVHcPFg/krmYeHNCXeBcf+9Ij5GRfo2pfGM/Zf/TPpIBXg3ueIf
UGLwpajUxBES06FU3Ug2bq95FN0/FbSoPqcJT3py7bJ2N8wDlha070J4ODLfI1I6
OTJ0GJxce/UoT6MMe9eSbXQ1T4ImabDtPpllTcV93Am0DZyFdLbIBNsO9pF51qs2
0rHOeAsO9ODkYzeOC6uSSJBvnuE4diYHgIe/llMXJX5XrFqBPCL2GX8uyidSCKKl
oX5BvooCl89u5eCC4eZSWxVGtnSyK7Rghg8MAubnVkgBxY0Lhku/r66gnaMclfRI
qefVnF7CINVVMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:26 2025 by rpki-client