Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: gArWJXTJ8opkjV//gWvU1DPm5r/oRb0mwEhG3xOQc0E=
Subject key identifier: 21:78:7A:67:94:FA:0B:82:47:8D:AD:47:23:F5:B2:F8:3D:49:E6:BD
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 0196C80481B9ED78F4C99168B09338AB09B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0B1B
Signing time: Tue 13 May 2025 05:01:00 +0000
Manifest this update: Tue 13 May 2025 05:01:00 +0000
Manifest next update: Wed 14 May 2025 05:01:00 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: VqQlXaOisJ8oRVvu21g+UeqmzT/SZCA9Mh78QsXntX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:81:b9:ed:78:f4:c9:91:68:b0:93:38:ab:09:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: May 13 05:01:00 2025 GMT
Not After : May 14 05:01:00 2025 GMT
Subject: CN=21787a6794fa0b82478dad4723f5b2f83d49e6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:65:7f:69:21:3c:53:fb:0a:40:fc:98:24:
12:e6:36:52:9f:73:28:7b:a7:ff:a6:24:dd:17:a1:
63:af:9a:a8:3e:fe:b8:22:99:37:c7:c8:5f:3c:89:
ab:de:40:d0:91:dd:ea:73:df:77:d5:26:e2:c6:35:
f7:38:a3:15:de:9a:c9:97:61:f1:8b:ea:5a:2b:5c:
a5:5b:42:41:1a:c2:72:e4:be:bd:ae:1d:5c:2a:a8:
31:96:2d:cf:e5:1d:21:de:e3:90:ed:b0:b8:84:70:
62:ba:02:58:1d:6e:9b:20:ae:a5:98:7b:13:87:d7:
d5:a9:16:14:94:33:0d:1b:81:3d:1e:91:52:81:d7:
64:1c:15:a3:fb:85:c8:dd:a7:91:7e:7d:d8:67:c3:
c1:2a:aa:46:16:26:da:c0:ed:53:4b:5d:a5:be:da:
9d:34:52:d3:47:82:1b:ae:62:e3:96:de:a7:45:fa:
cc:e1:de:fc:d2:75:33:da:98:68:cf:ac:4b:22:0a:
98:3e:9e:4f:69:c9:8b:91:9d:e4:f6:4d:93:b3:48:
82:58:b1:c4:e2:96:54:a8:95:62:ba:96:8a:1b:39:
b6:09:91:6d:e1:7b:05:c9:1c:6b:18:bb:dd:b9:e9:
99:c7:ab:76:75:58:3a:f9:1d:02:a9:d5:8c:e9:cb:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:7A:67:94:FA:0B:82:47:8D:AD:47:23:F5:B2:F8:3D:49:E6:BD
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0e:d8:9f:88:f4:c1:97:ab:09:dc:1c:27:31:40:5b:40:07:
46:c8:d9:a5:04:df:fb:c9:c7:9e:1a:09:47:96:88:98:d6:5c:
38:b2:1e:be:f3:8b:75:db:6b:a0:c4:71:d0:82:e5:e4:f1:02:
23:cb:93:7a:32:a6:35:1c:12:71:ef:18:8b:87:85:2a:89:4c:
59:d0:ee:1f:70:a8:91:12:bd:ec:12:af:12:8b:c9:cd:58:20:
5c:55:ba:7c:4b:9c:e2:18:62:3b:51:0f:dd:97:ff:ef:b6:53:
96:36:19:23:16:38:ef:3d:26:70:75:56:0f:e3:16:35:49:2a:
f1:f2:0c:22:81:21:ec:3f:26:0b:54:b2:c6:f9:a0:02:f9:f3:
83:90:67:76:71:f3:d8:0a:7f:8a:05:8e:e7:a1:e4:6b:43:9c:
bf:93:03:3e:eb:f6:3f:9d:65:3a:ce:0b:20:38:d4:3c:63:60:
86:a2:25:25:18:cd:15:d1:8c:76:d3:16:74:fb:c9:11:52:b7:
ef:70:5a:66:95:af:c1:d3:a4:99:73:11:85:bb:05:10:70:7f:
db:50:c5:cf:40:8f:17:17:30:8d:cd:0d:8a:ef:61:94:8e:6a:
a9:3e:5f:7b:42:8b:02:0d:7e:de:6b:a5:49:27:5d:c4:fe:b6:
a0:e5:65:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIBIG57Xj0yZFosJM4qwmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzc2NDdiNzI4ZjdjNTlmNjEzZTg5MDQ3NTQyZmE3ODU1
ZmEzNTUwHhcNMjUwNTEzMDUwMTAwWhcNMjUwNTE0MDUwMTAwWjAzMTEwLwYDVQQD
EygyMTc4N2E2Nzk0ZmEwYjgyNDc4ZGFkNDcyM2Y1YjJmODNkNDllNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+tlf2khPFP7CkD8mCQS5jZSn3Mo
e6f/piTdF6Fjr5qoPv64Ipk3x8hfPImr3kDQkd3qc9931SbixjX3OKMV3prJl2Hx
i+paK1ylW0JBGsJy5L69rh1cKqgxli3P5R0h3uOQ7bC4hHBiugJYHW6bIK6lmHsT
h9fVqRYUlDMNG4E9HpFSgddkHBWj+4XI3aeRfn3YZ8PBKqpGFibawO1TS12lvtqd
NFLTR4IbrmLjlt6nRfrM4d780nUz2phoz6xLIgqYPp5PacmLkZ3k9k2Ts0iCWLHE
4pZUqJViupaKGzm2CZFt4XsFyRxrGLvduemZx6t2dVg6+R0CqdWM6cv5XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF4emeU+guCR42tRyP1svg9Sea9MB8GA1UdIwQY
MBaAFGDHZHtyj3xZ9hPokEdUL6eFX6NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wZmY2OTAtODE2Ni00M2IyLTk4YTEt
YTlkZTRhMzFmZTExLzEvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wZmY2OTAtODE2Ni00M2IyLTk4YTEtYTlkZTRhMzFmZTEx
LzEvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQ7Yn4j0
wZerCdwcJzFAW0AHRsjZpQTf+8nHnhoJR5aImNZcOLIevvOLddtroMRx0ILl5PEC
I8uTejKmNRwSce8Yi4eFKolMWdDuH3CokRK97BKvEovJzVggXFW6fEuc4hhiO1EP
3Zf/77ZTljYZIxY47z0mcHVWD+MWNUkq8fIMIoEh7D8mC1SyxvmgAvnzg5BndnHz
2Ap/igWO56Hka0Ocv5MDPuv2P51lOs4LIDjUPGNghqIlJRjNFdGMdtMWdPvJEVK3
73BaZpWvwdOkmXMRhbsFEHB/21DFz0CPFxcwjc0Niu9hlI5qqT5fe0KLAg1+3mul
SSddxP62oOVlPA==
-----END CERTIFICATE-----
Generated at Tue May 13 06:29:39 2025 by rpki-client