
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
File: YmJJH6XuZw3MLCvhaY436ZMXSSM.mft (raw, json)
Hash identifier: OhpZmKhRrVoDHTkXLFxfPnW4oXWBI+EW2t2sz6tqNuA=
Subject key identifier: 7F:EF:57:71:1A:16:DA:09:7E:E4:EF:D1:ED:78:A9:38:C0:11:3E:13
Authority key identifier: 62:62:49:1F:A5:EE:67:0D:CC:2C:2B:E1:69:8E:37:E9:93:17:49:23
Certificate issuer: /CN=6262491fa5ee670dcc2c2be1698e37e993174923
Certificate serial: 0197B7452491A05E6D13FBA38C02AA1DBB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
Manifest number: 47
Signing time: Sat 28 Jun 2025 16:00:51 +0000
Manifest this update: Sat 28 Jun 2025 16:00:51 +0000
Manifest next update: Sun 29 Jun 2025 16:00:51 +0000
Files and hashes: 1: YmJJH6XuZw3MLCvhaY436ZMXSSM.crl (hash: PIBl9wCUjY+K0NOwU41OItwoLmmVpMvWZPeazHoXbyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:24:91:a0:5e:6d:13:fb:a3:8c:02:aa:1d:bb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6262491fa5ee670dcc2c2be1698e37e993174923
Validity
Not Before: Jun 28 16:00:51 2025 GMT
Not After : Jun 29 16:00:51 2025 GMT
Subject: CN=7fef57711a16da097ee4efd1ed78a938c0113e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:da:a4:cd:c6:ca:2f:a3:bd:c6:9e:97:32:
57:15:c6:1d:f0:bd:d7:e6:30:a2:80:48:e5:65:be:
8a:4b:4f:f0:42:a3:56:db:7c:20:8e:ef:6b:86:12:
7c:db:89:75:30:44:8c:62:df:83:56:5b:f8:58:15:
3e:40:f1:9b:6a:ae:8e:3f:26:93:1b:53:0e:3e:72:
52:9a:e3:9e:11:04:b2:04:43:dd:a8:c5:db:14:42:
5d:4d:47:67:0e:ee:7a:ad:64:58:38:23:fa:d3:67:
04:0e:14:67:11:3f:30:8b:2f:d8:b5:96:92:8d:0d:
b6:ae:83:82:62:61:0d:3e:0d:58:3e:fa:c0:2e:96:
6a:b1:6b:f8:40:dc:5c:cb:b8:34:b2:33:e3:ce:2a:
df:c4:e7:a1:95:ef:2c:50:3c:0b:35:cc:da:66:2a:
02:ce:3d:2e:a2:1e:c0:6d:b3:2a:1c:89:ba:f3:b0:
5f:81:06:52:48:e2:ff:e8:76:a6:e1:3c:a3:c3:f6:
e0:fb:7f:bf:f4:6a:1e:8e:a3:ff:52:cc:de:e4:e3:
bf:aa:31:a1:55:d0:7e:2a:6c:f2:d5:36:33:ba:12:
8f:2e:a1:8f:34:15:fe:44:31:8e:1f:07:3c:ac:e3:
f2:30:e4:4f:7b:45:48:a6:3e:60:4b:ed:e9:6e:6f:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EF:57:71:1A:16:DA:09:7E:E4:EF:D1:ED:78:A9:38:C0:11:3E:13
X509v3 Authority Key Identifier:
keyid:62:62:49:1F:A5:EE:67:0D:CC:2C:2B:E1:69:8E:37:E9:93:17:49:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:aa:61:7e:5a:ff:40:64:cb:e0:39:fc:c7:ef:3b:9e:1b:1a:
cd:82:18:23:e6:0e:53:55:01:26:29:db:94:78:f3:a1:b6:34:
e7:19:6f:64:a5:05:d9:db:a7:da:bd:00:80:34:d4:de:dc:b6:
6f:7a:4c:dd:bd:28:c0:fd:be:5b:99:3a:91:ca:fa:47:cb:0a:
a0:ca:ca:81:a4:17:a2:35:81:12:42:21:06:6d:ea:d1:4d:12:
76:00:d8:8f:39:58:ce:78:1e:fb:f6:69:f8:68:45:c1:58:8d:
e5:d7:c7:de:90:41:fc:bf:e6:e3:78:73:a8:c1:7a:54:8f:af:
60:65:34:a7:b0:88:7e:b5:ff:87:7c:ca:5b:f9:5b:bb:00:c1:
a6:2e:4e:f6:41:96:db:59:3d:22:92:6a:34:f2:d9:a1:ae:94:
f0:a6:66:b4:d1:66:c9:53:d6:6b:b6:9f:8d:d9:51:de:d5:f8:
37:32:0b:82:c1:a3:c6:61:af:24:9a:99:ab:ee:7c:75:50:d1:
3e:cb:77:80:81:d2:d9:11:5d:6e:fe:eb:98:ef:8f:05:74:05:
f9:d5:b8:4d:f9:75:32:fe:d3:ce:7e:84:e5:10:22:78:a0:54:
ce:db:9c:40:45:5d:25:e0:b2:c0:a5:0d:c9:a6:2f:77:4b:20:
43:9b:94:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSSRoF5tE/ujjAKqHbuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjI0OTFmYTVlZTY3MGRjYzJjMmJlMTY5OGUzN2U5OTMx
NzQ5MjMwHhcNMjUwNjI4MTYwMDUxWhcNMjUwNjI5MTYwMDUxWjAzMTEwLwYDVQQD
Eyg3ZmVmNTc3MTFhMTZkYTA5N2VlNGVmZDFlZDc4YTkzOGMwMTEzZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDbapM3Gyi+jvcaelzJXFcYd8L3X
5jCigEjlZb6KS0/wQqNW23wgju9rhhJ824l1MESMYt+DVlv4WBU+QPGbaq6OPyaT
G1MOPnJSmuOeEQSyBEPdqMXbFEJdTUdnDu56rWRYOCP602cEDhRnET8wiy/YtZaS
jQ22roOCYmENPg1YPvrALpZqsWv4QNxcy7g0sjPjzirfxOehle8sUDwLNczaZioC
zj0uoh7AbbMqHIm687BfgQZSSOL/6Ham4Tyjw/bg+3+/9GoejqP/Usze5OO/qjGh
VdB+Kmzy1TYzuhKPLqGPNBX+RDGOHwc8rOPyMORPe0VIpj5gS+3pbm/cnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/vV3EaFtoJfuTv0e14qTjAET4TMB8GA1UdIwQY
MBaAFGJiSR+l7mcNzCwr4WmON+mTF0kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1KSkg2WHVadzNNTEN2aGFZNDM2Wk1YU1NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85ZTkyNjItZDk1Ny00YzJmLTkwNzYt
NmU4OWJjNmQ0MzNiLzEvWW1KSkg2WHVadzNNTEN2aGFZNDM2Wk1YU1NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC85ZTkyNjItZDk1Ny00YzJmLTkwNzYtNmU4OWJjNmQ0MzNi
LzEvWW1KSkg2WHVadzNNTEN2aGFZNDM2Wk1YU1NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaphflr/
QGTL4Dn8x+87nhsazYIYI+YOU1UBJinblHjzobY05xlvZKUF2dun2r0AgDTU3ty2
b3pM3b0owP2+W5k6kcr6R8sKoMrKgaQXojWBEkIhBm3q0U0SdgDYjzlYznge+/Zp
+GhFwViN5dfH3pBB/L/m43hzqMF6VI+vYGU0p7CIfrX/h3zKW/lbuwDBpi5O9kGW
21k9IpJqNPLZoa6U8KZmtNFmyVPWa7afjdlR3tX4NzILgsGjxmGvJJqZq+58dVDR
Pst3gIHS2RFdbv7rmO+PBXQF+dW4Tfl1Mv7Tzn6E5RAieKBUztucQEVdJeCywKUN
yaYvd0sgQ5uUSw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:51 2025 by rpki-client