Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
File: ypfglEx3smswKXwtScO-ausnNxE.mft (raw, json)
Hash identifier: JBqLrsVTUd2+8gZ+fzn0/b7/n4YOuMKV1uubwrqofvg=
Subject key identifier: 49:EC:96:32:2A:6C:BD:39:EC:84:FB:16:7F:EB:50:0F:E9:F8:A9:83
Authority key identifier: CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
Certificate issuer: /CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Certificate serial: 0197B6A0F72D889FD873E501DB2A1A3AE27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
Manifest number: 02CA
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: ypfglEx3smswKXwtScO-ausnNxE.crl (hash: GClF34SthOjktEC+1TkD9VS/HX8M8advlanOkuoM0Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f7:2d:88:9f:d8:73:e5:01:db:2a:1a:3a:e2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=49ec96322a6cbd39ec84fb167feb500fe9f8a983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:5f:0e:29:5f:d3:b9:55:23:52:b6:c9:ad:
4a:2a:85:ba:58:07:d2:12:b3:77:6a:98:9e:a0:79:
d4:9c:20:91:28:de:f6:ea:c9:75:ed:a8:f7:fe:53:
0a:64:04:e6:ac:9d:0d:c7:56:be:e2:10:a7:2d:ef:
1b:7f:84:d1:6d:bd:51:73:b2:46:64:33:69:66:8c:
a5:45:76:ae:a3:de:d2:38:79:57:8c:31:f6:cf:44:
e9:aa:a9:96:99:52:0b:c8:19:15:26:67:a3:74:54:
ba:1e:6d:bd:37:61:5f:a8:78:c2:94:cb:06:c8:04:
59:60:ce:c0:38:a0:f6:13:e1:7a:40:45:f8:b3:35:
2d:56:5c:98:c0:8a:9b:69:ec:54:f8:5a:ba:89:5e:
60:9e:e0:18:10:7f:d7:0c:75:fd:63:85:38:e0:f4:
9e:f0:34:06:1a:4b:58:31:e2:10:61:bc:ef:6a:ad:
6e:b1:d2:80:7f:58:b6:f8:c4:f9:22:3e:42:a9:ac:
41:24:16:48:fe:fb:3b:9c:d1:17:20:cf:96:37:19:
de:29:7f:39:87:96:72:55:62:a0:4d:0f:91:de:df:
38:76:f3:57:49:21:6c:ad:87:ed:e2:18:2c:6c:e8:
d8:79:cb:5b:d1:75:21:cf:31:9a:06:96:a0:ba:4e:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EC:96:32:2A:6C:BD:39:EC:84:FB:16:7F:EB:50:0F:E9:F8:A9:83
X509v3 Authority Key Identifier:
keyid:CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c3:00:f9:34:32:76:91:f3:e7:0e:60:0a:7a:c2:29:6a:36:
78:fb:86:a8:65:5e:c0:a7:96:c9:87:01:6d:52:9f:5d:f9:59:
ab:9a:50:7b:c0:b2:e0:dd:7c:84:5e:c8:1a:96:6a:9d:cb:59:
77:c1:ce:34:d7:fb:7e:fd:81:95:9f:2a:2d:14:f3:10:2f:b8:
37:a0:ec:0d:2d:4d:92:3d:fb:fd:79:55:3a:d3:c6:75:5d:dc:
e8:2d:d5:cf:c2:0e:98:2b:33:40:bc:bc:40:34:b2:e6:0f:37:
bf:59:a4:92:ba:31:cd:05:8d:0e:36:b7:ab:bc:1c:88:37:df:
22:ae:8a:30:4e:b8:e6:2a:b2:83:7f:97:29:4d:d6:c6:b8:94:
0e:3f:22:60:a8:47:2e:ec:bd:19:ec:45:45:c9:e5:07:fe:4e:
11:46:c1:6a:b0:c9:54:dc:5b:c6:77:bb:55:55:8c:0e:f4:c2:
1f:a6:51:2b:6c:96:2b:24:37:e0:43:8c:e0:51:57:3c:92:2c:
aa:f1:78:4a:ec:d7:29:b0:b7:ce:46:7e:d8:52:41:00:73:43:
1a:ac:47:e8:10:ae:2b:96:2e:75:07:d8:a7:69:c4:92:78:77:
26:00:af:0b:44:1d:bc:71:48:ed:67:b2:0d:ea:e3:8c:3f:0e:
35:92:5c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oPctiJ/Yc+UB2yoaOuJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTdlMDk0NGM3N2IyNmIzMDI5N2MyZDQ5YzNiZTZhZWIy
NzM3MTEwHhcNMjUwNjI4MTMwMTMxWhcNMjUwNjI5MTMwMTMxWjAzMTEwLwYDVQQD
Eyg0OWVjOTYzMjJhNmNiZDM5ZWM4NGZiMTY3ZmViNTAwZmU5ZjhhOTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb1fDilf07lVI1K2ya1KKoW6WAfS
ErN3apieoHnUnCCRKN726sl17aj3/lMKZATmrJ0Nx1a+4hCnLe8bf4TRbb1Rc7JG
ZDNpZoylRXauo97SOHlXjDH2z0TpqqmWmVILyBkVJmejdFS6Hm29N2FfqHjClMsG
yARZYM7AOKD2E+F6QEX4szUtVlyYwIqbaexU+Fq6iV5gnuAYEH/XDHX9Y4U44PSe
8DQGGktYMeIQYbzvaq1usdKAf1i2+MT5Ij5CqaxBJBZI/vs7nNEXIM+WNxneKX85
h5ZyVWKgTQ+R3t84dvNXSSFsrYft4hgsbOjYectb0XUhzzGaBpaguk40cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnsljIqbL057IT7Fn/rUA/p+KmDMB8GA1UdIwQY
MBaAFMqX4JRMd7JrMCl8LUnDvmrrJzcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBmZ2xFeDNzbXN3S1h3dFNjTy1hdXNuTnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMGUzODUtY2JlNS00N2YzLTgwOGQt
ZTY4NzY3YzE4ZjAyLzEveXBmZ2xFeDNzbXN3S1h3dFNjTy1hdXNuTnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMGUzODUtY2JlNS00N2YzLTgwOGQtZTY4NzY3YzE4ZjAy
LzEveXBmZ2xFeDNzbXN3S1h3dFNjTy1hdXNuTnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMMA+TQy
dpHz5w5gCnrCKWo2ePuGqGVewKeWyYcBbVKfXflZq5pQe8Cy4N18hF7IGpZqnctZ
d8HONNf7fv2BlZ8qLRTzEC+4N6DsDS1Nkj37/XlVOtPGdV3c6C3Vz8IOmCszQLy8
QDSy5g83v1mkkroxzQWNDja3q7wciDffIq6KME645iqyg3+XKU3WxriUDj8iYKhH
Luy9GexFRcnlB/5OEUbBarDJVNxbxne7VVWMDvTCH6ZRK2yWKyQ34EOM4FFXPJIs
qvF4SuzXKbC3zkZ+2FJBAHNDGqxH6BCuK5YudQfYp2nEknh3JgCvC0QdvHFI7Wey
DerjjD8ONZJc2A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:05 2025 by rpki-client