Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
File: Y5-G_U81pnvLwn-OtveHq4veSfk.mft (raw, json)
Hash identifier: 604fcN2Qdq4FJpNM8NXW/z3eHS1NPop+NZlDClooM4w=
Subject key identifier: BB:8D:9F:94:43:D2:34:4B:3B:1E:9F:DC:37:8A:DD:9D:D8:C5:D9:A9
Authority key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
Certificate issuer: /CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Certificate serial: 0197B9D9317AEDF34A83F12AE5ABC6DB085B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
Manifest number: 0FAE
Signing time: Sun 29 Jun 2025 04:01:48 +0000
Manifest this update: Sun 29 Jun 2025 04:01:48 +0000
Manifest next update: Mon 30 Jun 2025 04:01:48 +0000
Files and hashes: 1: Y5-G_U81pnvLwn-OtveHq4veSfk.crl (hash: X1jn2/xe8/PmDcDXN6rk6l90y0aXqpbjaN/R1yLpGU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:31:7a:ed:f3:4a:83:f1:2a:e5:ab:c6:db:08:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Validity
Not Before: Jun 29 04:01:48 2025 GMT
Not After : Jun 30 04:01:48 2025 GMT
Subject: CN=bb8d9f9443d2344b3b1e9fdc378add9dd8c5d9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:b8:b7:b5:9e:9a:3a:c5:fc:e5:8d:38:2b:
80:be:82:58:0a:a7:bd:d9:bf:3e:92:79:a0:b1:38:
02:6a:11:a4:8c:6c:c3:b7:2a:f5:2d:9d:da:e9:14:
1f:df:39:12:c2:4a:4c:b0:9f:d1:1a:53:67:db:48:
89:88:6a:ea:54:99:e6:96:ce:f5:24:a6:cb:38:eb:
d8:3b:6a:d8:8d:f6:5d:4d:ae:ed:f6:23:ce:c1:c1:
40:01:7f:40:ae:c0:86:13:78:0b:2b:c3:8b:47:d8:
a1:1d:18:c1:63:89:41:41:d6:e2:4d:e6:68:9e:64:
5c:b7:6a:d5:1b:66:9f:cd:b7:ba:ca:5e:32:68:2b:
98:2a:b7:bd:ff:e6:6b:12:8f:3d:17:fd:9a:37:84:
6d:8d:fc:f7:bc:d9:3e:36:bb:cf:0d:e8:3d:fe:5f:
5c:b3:ff:77:fc:49:2c:64:f8:64:4d:d1:03:4c:9e:
59:4a:90:74:7c:5e:96:1e:a2:cf:6e:ac:1d:7e:93:
e1:19:96:9e:2a:62:a7:fb:71:95:ae:86:56:9b:e4:
b3:e5:3c:38:79:b4:3c:c9:d5:dc:9f:12:cc:c2:f8:
88:d5:43:ea:7f:ae:93:63:42:65:f0:69:31:8a:4c:
89:ed:77:32:c8:17:84:7d:ec:ec:0e:75:d2:ab:ff:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8D:9F:94:43:D2:34:4B:3B:1E:9F:DC:37:8A:DD:9D:D8:C5:D9:A9
X509v3 Authority Key Identifier:
keyid:63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d8:45:be:91:19:aa:76:e8:b4:38:90:25:89:6d:b4:37:14:
9d:78:2f:76:0c:3a:f0:0e:8a:df:3c:10:cc:cc:b2:56:bb:98:
8e:1e:f2:60:b6:7d:e2:7a:bd:6c:56:dd:e0:a6:7b:52:33:d5:
da:b4:0e:c1:56:2d:be:a4:d9:db:9e:bf:ce:5c:78:23:cf:92:
b9:38:d7:f7:25:0d:fb:fe:93:5c:68:c2:17:d1:fd:2e:c0:76:
2b:b4:87:a7:d5:75:01:40:7b:d3:e9:d4:89:8d:f5:f1:65:ed:
73:8c:09:dc:8a:0c:19:a8:9b:b0:9a:bd:f9:f6:71:e2:6d:89:
3d:07:31:0c:71:6f:49:8e:6e:12:fa:47:16:cf:59:74:b1:87:
f4:94:e6:64:51:7e:7f:dd:bb:51:cf:cb:a7:8a:b3:5e:01:31:
26:41:3d:9a:cc:d0:8d:2b:6a:df:9a:d6:e5:ee:8d:a0:9f:fe:
d3:22:22:8c:d7:1c:d7:28:ef:8d:ec:bd:10:74:53:7a:1a:d6:
7c:94:d3:ce:4c:e0:8b:e0:dc:a5:31:e0:31:f7:a5:0a:a6:7e:
75:8d:68:90:92:bd:f7:db:31:0d:af:c3:c6:8d:23:49:88:02:
1d:78:86:7a:41:ab:81:01:e2:fb:80:61:f8:b9:28:f0:7e:61:
cf:82:35:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52TF67fNKg/Eq5avG2whbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOWY4NmZkNGYzNWE2N2JjYmMyN2Y4ZWI2Zjc4N2FiOGJk
ZTQ5ZjkwHhcNMjUwNjI5MDQwMTQ4WhcNMjUwNjMwMDQwMTQ4WjAzMTEwLwYDVQQD
EyhiYjhkOWY5NDQzZDIzNDRiM2IxZTlmZGMzNzhhZGQ5ZGQ4YzVkOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5e4t7WemjrF/OWNOCuAvoJYCqe9
2b8+knmgsTgCahGkjGzDtyr1LZ3a6RQf3zkSwkpMsJ/RGlNn20iJiGrqVJnmls71
JKbLOOvYO2rYjfZdTa7t9iPOwcFAAX9ArsCGE3gLK8OLR9ihHRjBY4lBQdbiTeZo
nmRct2rVG2afzbe6yl4yaCuYKre9/+ZrEo89F/2aN4Rtjfz3vNk+NrvPDeg9/l9c
s/93/EksZPhkTdEDTJ5ZSpB0fF6WHqLPbqwdfpPhGZaeKmKn+3GVroZWm+Sz5Tw4
ebQ8ydXcnxLMwviI1UPqf66TY0Jl8GkxikyJ7XcyyBeEfezsDnXSq/9i2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuNn5RD0jRLOx6f3DeK3Z3YxdmpMB8GA1UdIwQY
MBaAFGOfhv1PNaZ7y8J/jrb3h6uL3kn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTUtR19VODFwbnZMd24tT3R2ZUhxNHZlU2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xM2UyNTMtMzQ0YS00ZGI3LWJhY2Yt
MGYxMWRhMjg5ZTFmLzEvWTUtR19VODFwbnZMd24tT3R2ZUhxNHZlU2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xM2UyNTMtMzQ0YS00ZGI3LWJhY2YtMGYxMWRhMjg5ZTFm
LzEvWTUtR19VODFwbnZMd24tT3R2ZUhxNHZlU2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdhFvpEZ
qnbotDiQJYlttDcUnXgvdgw68A6K3zwQzMyyVruYjh7yYLZ94nq9bFbd4KZ7UjPV
2rQOwVYtvqTZ256/zlx4I8+SuTjX9yUN+/6TXGjCF9H9LsB2K7SHp9V1AUB70+nU
iY318WXtc4wJ3IoMGaibsJq9+fZx4m2JPQcxDHFvSY5uEvpHFs9ZdLGH9JTmZFF+
f927Uc/Lp4qzXgExJkE9mszQjStq35rW5e6NoJ/+0yIijNcc1yjvjey9EHRTehrW
fJTTzkzgi+DcpTHgMfelCqZ+dY1okJK999sxDa/Dxo0jSYgCHXiGekGrgQHi+4Bh
+Lko8H5hz4I1nw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:51:24 2025 by rpki-client