Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: jKgLVvsPJ7TLA631xjWo2Jll/gsp+is8L9UOSghyhCI=
Subject key identifier: 20:3B:29:0F:C4:F3:C2:26:11:80:53:AA:08:68:1F:7B:4F:8C:F6:1E
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 0197B5FC31137A577233802D30A94436E054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 0F05
Signing time: Sat 28 Jun 2025 10:01:33 +0000
Manifest this update: Sat 28 Jun 2025 10:01:33 +0000
Manifest next update: Sun 29 Jun 2025 10:01:33 +0000
Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: 3Pz/EZW99hZmU3dylMTXckaUuoDc65rI5Zc5kPOfTIw=)
2: _DQ1KzWidoIdXZoVyvdN20rg8gM.roa (hash: EOelW7rq3NkXTukVpXSmytqfvzEOSEmblKrH2XLqMOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:31:13:7a:57:72:33:80:2d:30:a9:44:36:e0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Jun 28 10:01:33 2025 GMT
Not After : Jun 29 10:01:33 2025 GMT
Subject: CN=203b290fc4f3c226118053aa08681f7b4f8cf61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a2:72:e2:ba:e3:e4:9a:28:4b:a0:5c:f9:7c:
8c:28:c1:2e:e1:0a:f9:fa:a7:0e:71:95:d4:81:fb:
1b:7f:83:33:62:c7:b0:96:2f:0c:6d:4d:f7:41:6a:
db:b3:cb:07:5f:f2:7a:3a:4c:01:6b:b0:5e:a0:57:
f4:6b:ae:1e:a4:2e:06:b5:41:fb:5a:90:5e:46:43:
42:bf:75:7b:98:36:90:66:d6:55:72:92:3c:f4:b1:
b4:f5:5d:15:35:b6:5c:a3:f4:03:94:20:25:b8:b8:
45:e2:11:a9:5d:f4:16:a7:14:6f:e6:dd:a2:79:9d:
4f:7c:48:ff:aa:b1:41:32:a3:ae:7f:23:26:4f:0c:
ec:79:8d:10:7d:bb:f9:f3:dc:00:03:3b:0f:8f:5b:
69:2c:50:92:6e:d1:47:cf:ba:76:4d:d8:1c:7b:67:
18:87:bb:c2:e6:13:36:ab:04:97:b5:10:f1:33:a2:
13:80:54:07:9d:d2:4b:fc:da:5d:39:a5:4c:40:26:
29:42:09:66:cb:2a:e6:94:b2:38:bd:8f:70:11:bd:
b4:e6:90:9e:c1:bd:41:2c:93:15:4e:7e:ef:ac:93:
89:60:6e:c3:0e:6d:44:19:78:78:56:88:4c:5e:4c:
66:5a:5a:2a:34:11:a0:f0:51:5d:b3:38:c7:a0:80:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3B:29:0F:C4:F3:C2:26:11:80:53:AA:08:68:1F:7B:4F:8C:F6:1E
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:59:89:91:20:18:15:c1:f6:8a:33:a0:35:3a:c1:4e:f3:0b:
2e:b9:6d:25:89:a7:1c:93:e4:8e:fb:17:c9:cd:5e:99:30:e2:
ba:ab:0a:15:41:95:87:73:ad:44:66:96:9a:8b:2a:a9:9d:9b:
01:e3:81:be:2d:2e:8b:64:f6:1d:a9:72:19:a6:dc:cd:6e:c4:
e0:1f:7d:6d:22:66:d0:e5:81:c0:97:cd:3f:2a:ba:51:8f:6b:
61:d6:79:63:65:2d:6a:dd:58:82:13:61:b1:9b:e7:07:05:72:
1c:20:1f:85:e9:5c:a2:ea:fa:d4:0c:59:b8:6c:82:9a:bc:1c:
ef:b6:73:ba:1a:df:02:a9:7d:1b:09:28:32:9b:f3:06:4f:85:
1a:f4:8d:94:c2:1d:db:88:c8:a1:17:fd:27:c9:56:1e:b1:40:
3a:36:24:f8:0b:8c:b6:8c:c5:cd:ce:92:a0:98:c6:cc:d2:d7:
89:28:5f:86:3b:27:77:b8:26:4a:91:3d:76:da:3d:d2:3e:7f:
67:e0:25:94:80:d6:c7:bc:63:ac:2a:ad:f9:41:60:59:23:12:
4c:9d:c2:07:e3:b7:29:e7:43:c4:13:be:77:fe:8c:e9:ed:87:
fc:cd:64:78:38:cf:3a:17:50:51:7c:f3:c7:89:4c:58:fd:63:
cf:cc:19:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/DETeldyM4AtMKlENuBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYWVkZmRjNzEzM2U5NWY0MjQ5OGY3NzYwZjY4ZmI4MGZh
YTg0YWMwHhcNMjUwNjI4MTAwMTMzWhcNMjUwNjI5MTAwMTMzWjAzMTEwLwYDVQQD
EygyMDNiMjkwZmM0ZjNjMjI2MTE4MDUzYWEwODY4MWY3YjRmOGNmNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36Jy4rrj5JooS6Bc+XyMKMEu4Qr5
+qcOcZXUgfsbf4MzYsewli8MbU33QWrbs8sHX/J6OkwBa7BeoFf0a64epC4GtUH7
WpBeRkNCv3V7mDaQZtZVcpI89LG09V0VNbZco/QDlCAluLhF4hGpXfQWpxRv5t2i
eZ1PfEj/qrFBMqOufyMmTwzseY0Qfbv589wAAzsPj1tpLFCSbtFHz7p2Tdgce2cY
h7vC5hM2qwSXtRDxM6ITgFQHndJL/NpdOaVMQCYpQglmyyrmlLI4vY9wEb205pCe
wb1BLJMVTn7vrJOJYG7DDm1EGXh4VohMXkxmWloqNBGg8FFdszjHoIBWIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCA7KQ/E88ImEYBTqghoH3tPjPYeMB8GA1UdIwQY
MBaAFGGu39xxM+lfQkmPd2D2j7gPqoSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEt
OWYzZThmOWVmYzk5LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEtOWYzZThmOWVmYzk5
LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlmJkSAY
FcH2ijOgNTrBTvMLLrltJYmnHJPkjvsXyc1emTDiuqsKFUGVh3OtRGaWmosqqZ2b
AeOBvi0ui2T2HalyGabczW7E4B99bSJm0OWBwJfNPyq6UY9rYdZ5Y2Utat1YghNh
sZvnBwVyHCAfhelcour61AxZuGyCmrwc77ZzuhrfAql9GwkoMpvzBk+FGvSNlMId
24jIoRf9J8lWHrFAOjYk+AuMtozFzc6SoJjGzNLXiShfhjsnd7gmSpE9dto90j5/
Z+AllIDWx7xjrCqt+UFgWSMSTJ3CB+O3KedDxBO+d/6M6e2H/M1keDjPOhdQUXzz
x4lMWP1jz8wZzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:24 2025 by rpki-client