Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier: lZCVaEGfRjzgArLtZ96qqcCPASjyQuJVy1jggQvMEYY=
Subject key identifier: B1:C3:E0:10:4E:D6:C2:5A:B4:68:DC:74:00:03:BE:68:E0:D8:DF:60
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 0197B70E535C7FCB21727399619BFB8C747D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number: 085B
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: COcUW0x5kxM0ZoYaE6bjH_ilI5I.roa (hash: DiDBhNFDOT29doleyEuXM5Xz1UWaH+5+crJRRQCdBnI=)
2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: 96x00XdI8hISvGQBsYH6ZAQuGyD640BKwxcVLwm5cT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:53:5c:7f:cb:21:72:73:99:61:9b:fb:8c:74:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=b1c3e0104ed6c25ab468dc740003be68e0d8df60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:4e:f5:9c:9d:c0:36:a1:a9:f4:69:11:7c:
06:ec:e7:a9:ed:28:a4:a4:fb:46:7d:62:8f:fe:de:
c1:5a:81:32:99:19:f4:2c:a2:c5:eb:69:11:8f:06:
79:2a:30:5b:d4:9e:74:0d:81:a2:1f:73:41:d0:79:
52:7b:4d:8b:c7:65:77:ab:2f:6d:d8:35:5f:65:1d:
31:9d:3e:58:f9:33:69:51:d3:47:ee:50:c3:72:75:
8d:97:68:10:3c:93:16:29:5d:2a:69:6f:a4:e9:ed:
e0:f3:ff:1f:0a:ed:32:b3:bb:b7:c9:71:c2:a7:30:
9f:13:3c:af:13:21:fe:14:dd:68:93:7d:d6:88:89:
bf:11:e6:fe:19:7f:cd:f7:b3:1f:0c:b1:ae:e3:3b:
07:c3:d8:40:26:f8:b6:a2:96:dd:8e:78:5d:d0:2d:
3f:55:df:fe:13:10:0f:07:c9:13:73:f8:65:3b:89:
09:e0:0d:24:24:e8:ee:fd:e3:cb:96:5b:76:19:1f:
c4:19:8a:1d:68:72:9e:e8:89:2b:02:b5:f6:8b:4c:
89:98:ba:d8:d7:ba:5b:4c:ae:e3:01:2f:f6:99:72:
23:ab:9d:24:a7:03:28:9e:3a:7b:34:54:ba:ca:d4:
f0:41:86:a6:b9:9d:7b:1a:45:7b:65:c7:52:f8:4d:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C3:E0:10:4E:D6:C2:5A:B4:68:DC:74:00:03:BE:68:E0:D8:DF:60
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f2:9c:09:cc:86:7d:65:50:b0:03:5e:35:ae:07:79:a8:f3:
2f:1a:d5:57:93:38:85:64:8e:14:00:b9:ac:b8:37:c7:b4:8b:
bc:92:2f:17:ee:03:94:8d:09:c9:04:9c:26:c9:36:df:7d:cd:
bb:7f:c2:4e:f6:c8:9d:7b:49:56:d4:bc:18:ae:6e:50:ac:01:
09:e1:a6:a9:61:d3:10:18:d4:8a:de:e0:74:c7:8b:a5:d6:f0:
69:f9:dc:a2:2b:fc:6b:26:6b:76:c8:ae:6b:7d:fd:03:3b:82:
0b:87:41:7e:dc:3d:7c:e1:be:f2:32:55:bd:46:f8:2d:56:04:
52:c5:fc:a4:a3:69:8d:ab:c0:62:f0:87:6d:3d:a0:9d:e8:f2:
d9:b5:a3:d2:dd:ae:a2:d4:5a:82:2e:25:29:eb:72:5b:6f:54:
b2:98:35:79:d8:64:74:44:9e:8c:6e:24:dc:de:73:3d:6f:d1:
fa:ac:c6:3e:80:1f:64:18:44:4d:c9:13:18:2f:ee:21:d0:4c:
2b:33:0c:df:c2:d1:51:2d:bf:78:13:5f:d4:06:19:70:c3:d4:
90:a5:27:9a:e2:71:c6:34:d8:25:51:f0:3b:2b:a7:d1:4a:43:
31:72:a3:ed:57:e3:bc:30:9f:ab:47:95:c2:ad:b8:b2:0f:9b:
c9:73:34:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DlNcf8shcnOZYZv7jHR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzNlYzFhMjQwMTQzZGFlMTExYmI5MmQxOTJkYWJmNzc1
ZDgxZWMwHhcNMjUwNjI4MTUwMDU4WhcNMjUwNjI5MTUwMDU4WjAzMTEwLwYDVQQD
EyhiMWMzZTAxMDRlZDZjMjVhYjQ2OGRjNzQwMDAzYmU2OGUwZDhkZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqBO9ZydwDahqfRpEXwG7Oep7Sik
pPtGfWKP/t7BWoEymRn0LKLF62kRjwZ5KjBb1J50DYGiH3NB0HlSe02Lx2V3qy9t
2DVfZR0xnT5Y+TNpUdNH7lDDcnWNl2gQPJMWKV0qaW+k6e3g8/8fCu0ys7u3yXHC
pzCfEzyvEyH+FN1ok33WiIm/Eeb+GX/N97MfDLGu4zsHw9hAJvi2opbdjnhd0C0/
Vd/+ExAPB8kTc/hlO4kJ4A0kJOju/ePLllt2GR/EGYodaHKe6IkrArX2i0yJmLrY
17pbTK7jAS/2mXIjq50kpwMonjp7NFS6ytTwQYamuZ17GkV7ZcdS+E2f5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHD4BBO1sJatGjcdAADvmjg2N9gMB8GA1UdIwQY
MBaAFGEz7BokAUPa4RG7ktGS2r93XYHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUt
YzVmZTQ0NDIwYzA5LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUtYzVmZTQ0NDIwYzA5
LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivKcCcyG
fWVQsANeNa4HeajzLxrVV5M4hWSOFAC5rLg3x7SLvJIvF+4DlI0JyQScJsk2333N
u3/CTvbInXtJVtS8GK5uUKwBCeGmqWHTEBjUit7gdMeLpdbwafncoiv8ayZrdsiu
a339AzuCC4dBftw9fOG+8jJVvUb4LVYEUsX8pKNpjavAYvCHbT2gnejy2bWj0t2u
otRagi4lKetyW29Uspg1edhkdESejG4k3N5zPW/R+qzGPoAfZBhETckTGC/uIdBM
KzMM38LRUS2/eBNf1AYZcMPUkKUnmuJxxjTYJVHwOyun0UpDMXKj7VfjvDCfq0eV
wq24sg+byXM0cg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:12 2025 by rpki-client