Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier: VpIaGC0aI57ttOcDhFRhMQyoARnZcIjvW/lrkDss/5A=
Subject key identifier: EA:D8:4E:B3:75:45:A0:9C:EF:1E:38:96:CD:73:05:99:F8:74:24:35
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial: 0197B77C53745EB22FCFBB4A30EDA66A0F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number: 0A17
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: WKajviLyzmEdq2nAR9JO9jRjore4FFFyoDcdny716Xk=)
2: jYlgI_qcApYE3RAZAnK4EbiyzdM.roa (hash: xXRxHK1q9xpKOQP7dBVRrylt76oRLGOFXjW/2uY1+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:53:74:5e:b2:2f:cf:bb:4a:30:ed:a6:6a:0f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=ead84eb37545a09cef1e3896cd730599f8742435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:ff:0f:a1:fa:c4:83:fc:db:33:cd:c7:7d:
55:af:9f:b2:90:ae:89:ef:02:7d:9e:2f:29:bc:c5:
39:b7:15:fb:67:e1:3b:c0:44:9a:8e:e4:0c:b2:a4:
9d:5a:e2:88:64:92:3c:be:f8:eb:7f:d8:f1:cc:30:
bd:c1:46:bc:ca:10:36:43:5e:92:67:47:b9:f5:df:
d6:a7:0e:b2:c7:b0:e5:06:f8:54:21:bf:8e:e6:3d:
0b:47:ff:66:ec:30:39:0f:58:94:4c:ec:9b:73:99:
4a:bd:35:8d:17:3a:fb:7b:5e:9a:4b:a5:fd:a3:f9:
72:ff:66:f5:33:49:16:2c:c0:1b:20:cc:03:b3:d4:
44:90:db:22:fb:36:58:6a:8a:16:ce:e2:52:98:8d:
83:9d:9e:09:3e:fc:3c:4f:bf:93:f5:be:36:19:98:
3f:ec:c6:6b:7b:54:4d:7e:2c:86:b5:49:73:75:2c:
bb:3e:29:c8:10:26:c3:a8:25:46:86:c8:e5:df:11:
f9:04:98:80:45:06:a4:97:87:fd:47:e4:28:2a:c8:
1d:6f:27:84:5f:84:50:f7:2b:dc:9c:85:dc:c4:e9:
10:31:4d:f6:da:23:cb:53:e3:37:43:90:79:98:b3:
d7:1f:c0:15:bf:00:0f:40:32:c7:d6:f5:25:15:f1:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D8:4E:B3:75:45:A0:9C:EF:1E:38:96:CD:73:05:99:F8:74:24:35
X509v3 Authority Key Identifier:
keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:15:12:7a:6f:20:ce:d2:37:9a:b6:97:ff:f7:f2:07:3c:79:
f9:0b:01:ff:bb:05:fc:92:dd:ef:ee:53:03:50:4c:2e:2c:af:
08:f5:63:37:41:b9:3d:7d:63:a3:2c:ac:4b:77:94:5f:48:94:
34:e0:56:96:34:d6:8c:0b:e0:33:c7:78:58:98:bd:24:7b:29:
d1:bf:5a:2b:81:44:6c:05:56:d2:f5:a4:c5:be:63:5b:40:d4:
cb:e1:c5:16:04:43:7c:72:86:be:99:b3:d6:e3:88:38:64:55:
17:b7:53:de:7a:8d:15:dc:15:53:37:61:6d:0a:04:f5:51:82:
20:be:10:1a:21:a5:d0:f4:50:3f:75:f9:77:bb:77:a4:d3:66:
34:49:00:e5:ca:59:b4:9d:6f:77:cb:45:da:58:aa:c3:99:00:
8b:ee:73:39:1d:6a:3e:06:54:b8:9d:29:40:dc:a7:9b:f3:36:
9d:c9:f9:6d:16:3f:19:5a:5c:36:47:e0:92:3a:e2:3c:05:eb:
b8:f8:f3:05:11:23:dc:1d:bc:2b:b4:b2:77:0f:3d:a3:5a:c1:
1b:12:03:af:ef:b2:0a:5d:b0:d9:ca:d7:98:d9:64:4f:eb:9d:
ec:0f:ca:6a:ef:bd:4c:09:5f:d4:0f:d9:cc:d3:05:c3:e5:f3:
c5:24:54:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fFN0XrIvz7tKMO2mag8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzQwODE4YTg2MzM5MDhjZjM3ZWExNDVkNjZkOTI0NTJm
YjczYWEwHhcNMjUwNjI4MTcwMTA3WhcNMjUwNjI5MTcwMTA3WjAzMTEwLwYDVQQD
EyhlYWQ4NGViMzc1NDVhMDljZWYxZTM4OTZjZDczMDU5OWY4NzQyNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshj/D6H6xIP82zPNx31Vr5+ykK6J
7wJ9ni8pvMU5txX7Z+E7wESajuQMsqSdWuKIZJI8vvjrf9jxzDC9wUa8yhA2Q16S
Z0e59d/Wpw6yx7DlBvhUIb+O5j0LR/9m7DA5D1iUTOybc5lKvTWNFzr7e16aS6X9
o/ly/2b1M0kWLMAbIMwDs9REkNsi+zZYaooWzuJSmI2DnZ4JPvw8T7+T9b42GZg/
7MZre1RNfiyGtUlzdSy7PinIECbDqCVGhsjl3xH5BJiARQakl4f9R+QoKsgdbyeE
X4RQ9yvcnIXcxOkQMU322iPLU+M3Q5B5mLPXH8AVvwAPQDLH1vUlFfFU5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrYTrN1RaCc7x44ls1zBZn4dCQ1MB8GA1UdIwQY
MBaAFGE0CBioYzkIzzfqFF1m2SRS+3OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zOTFkZDctNGI5Ni00NmE1LWFmYjQt
NmI2MTViN2RiZmUwLzEvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8zOTFkZDctNGI5Ni00NmE1LWFmYjQtNmI2MTViN2RiZmUw
LzEvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShUSem8g
ztI3mraX//fyBzx5+QsB/7sF/JLd7+5TA1BMLiyvCPVjN0G5PX1joyysS3eUX0iU
NOBWljTWjAvgM8d4WJi9JHsp0b9aK4FEbAVW0vWkxb5jW0DUy+HFFgRDfHKGvpmz
1uOIOGRVF7dT3nqNFdwVUzdhbQoE9VGCIL4QGiGl0PRQP3X5d7t3pNNmNEkA5cpZ
tJ1vd8tF2liqw5kAi+5zOR1qPgZUuJ0pQNynm/M2ncn5bRY/GVpcNkfgkjriPAXr
uPjzBREj3B28K7Sydw89o1rBGxIDr++yCl2w2crXmNlkT+ud7A/Kau+9TAlf1A/Z
zNMFw+XzxSRUfQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:13 2025 by rpki-client