Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: pomwQjlowl+VblewTHZ10PJgi4OVn8CIUfsOQ1eppZo=
Subject key identifier: D3:17:70:F2:17:8E:87:2F:DA:E8:2C:37:F8:79:77:75:35:5F:00:51
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 0197B632827B42F63D48B0C5F3C82C6D4221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 1162
Signing time: Sat 28 Jun 2025 11:00:52 +0000
Manifest this update: Sat 28 Jun 2025 11:00:52 +0000
Manifest next update: Sun 29 Jun 2025 11:00:52 +0000
Files and hashes: 1: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: RB3cB3mOytoxJJ9XtnGj0qQyrOznp9r3GCmLZ/e0R/4=)
2: shQWrGUmL_hnxXrykLqgxjUrJSo.roa (hash: WyhgYBiNi+KPH14FenrkvjOQfAHnL6lB02jl9DUrbbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:82:7b:42:f6:3d:48:b0:c5:f3:c8:2c:6d:42:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Jun 28 11:00:52 2025 GMT
Not After : Jun 29 11:00:52 2025 GMT
Subject: CN=d31770f2178e872fdae82c37f8797775355f0051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:0b:81:09:4b:75:d3:2d:92:e9:21:ab:33:
31:31:c9:fb:08:77:51:93:03:eb:51:4a:79:77:a4:
a1:4f:03:e8:7e:af:9c:a6:38:48:b2:57:4a:4e:38:
4f:46:3c:a0:15:80:1c:52:fb:56:d0:3f:1a:46:06:
b7:58:5a:fb:cd:fe:e5:b5:ff:f2:06:3b:df:7e:1b:
39:41:22:34:f6:24:65:ee:8d:c7:67:45:4e:cf:91:
15:a9:7d:97:69:88:e8:e7:af:37:8b:4d:7f:d1:20:
d0:70:37:5c:d6:e1:3d:43:52:ac:03:92:9c:47:2a:
ec:01:a2:26:65:38:b4:99:c3:e4:6a:c6:85:05:d5:
da:3a:49:70:cf:79:04:ff:08:1d:d2:19:6f:24:5d:
73:80:f3:2d:92:d4:2a:5c:ee:4b:3d:e4:93:d5:a4:
40:9d:84:89:78:6f:66:8c:9b:08:00:35:09:0b:17:
ff:2e:88:23:13:90:59:51:55:c5:4a:2b:1e:ca:eb:
94:0e:fd:d9:09:f4:18:99:75:20:ac:14:8a:52:8a:
38:4e:29:62:4b:63:57:4c:0c:23:92:c7:57:7d:f3:
2a:03:1b:ea:8d:7f:d7:4e:a7:6d:f3:0d:74:67:74:
30:e0:73:ef:7a:f6:c0:d9:3a:bc:52:38:2a:b2:1b:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:70:F2:17:8E:87:2F:DA:E8:2C:37:F8:79:77:75:35:5F:00:51
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:db:de:31:c8:d1:74:1b:81:f8:b0:6b:2c:d4:dc:66:4f:41:
f3:0e:4b:35:56:fc:cb:16:c9:4a:c1:fd:d5:f4:14:f2:79:26:
fb:73:0a:3a:0a:4a:f2:3d:dd:1a:70:bd:05:5c:17:d1:8d:cd:
e5:08:4e:15:22:97:37:69:af:4d:cd:65:64:0f:e1:14:d8:b9:
9f:23:ee:58:e5:3c:dd:f7:dc:07:93:52:35:fa:89:6c:d2:f5:
fa:4f:4e:36:6d:db:75:4e:96:f4:34:99:b0:45:dd:3b:5f:64:
77:73:7f:d2:56:60:65:0e:1b:17:1a:a7:86:55:08:42:5b:84:
2f:65:e0:7e:84:0f:c2:88:af:d3:d8:ea:d7:e1:ad:b6:76:5d:
e1:c4:30:dd:74:4f:a9:df:2d:ac:c3:06:0b:0e:ca:01:e4:62:
06:dd:4f:c7:b7:1d:1f:f1:11:7d:84:9f:5a:1a:b4:92:6d:22:
af:f9:87:d7:f4:3a:2e:c1:3d:ab:2c:c8:d9:71:29:9b:8d:14:
e5:e2:51:33:f5:ae:29:e8:bb:46:c0:c8:16:a3:23:62:96:f3:
27:a7:56:00:c6:76:0c:13:89:d5:08:d6:9b:60:d7:ad:b5:2b:
e5:18:c0:f1:18:c6:ce:27:db:8d:97:56:87:4c:cb:3a:a1:fc:
69:86:f9:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MoJ7QvY9SLDF88gsbUIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjA1Nzg5YTRlODI0YmU4MTAzZGU3NzBkYzI1YzU5M2Vm
M2ZkY2EwHhcNMjUwNjI4MTEwMDUyWhcNMjUwNjI5MTEwMDUyWjAzMTEwLwYDVQQD
EyhkMzE3NzBmMjE3OGU4NzJmZGFlODJjMzdmODc5Nzc3NTM1NWYwMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPQLgQlLddMtkukhqzMxMcn7CHdR
kwPrUUp5d6ShTwPofq+cpjhIsldKTjhPRjygFYAcUvtW0D8aRga3WFr7zf7ltf/y
Bjvffhs5QSI09iRl7o3HZ0VOz5EVqX2XaYjo5683i01/0SDQcDdc1uE9Q1KsA5Kc
RyrsAaImZTi0mcPkasaFBdXaOklwz3kE/wgd0hlvJF1zgPMtktQqXO5LPeST1aRA
nYSJeG9mjJsIADUJCxf/LogjE5BZUVXFSiseyuuUDv3ZCfQYmXUgrBSKUoo4Tili
S2NXTAwjksdXffMqAxvqjX/XTqdt8w10Z3Qw4HPvevbA2Tq8Ujgqshs8pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMXcPIXjocv2ugsN/h5d3U1XwBRMB8GA1UdIwQY
MBaAFGGwV4mk6CS+gQPedw3CXFk+8/3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzIt
ODYzMWZiZjVjNjIwLzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzItODYzMWZiZjVjNjIw
LzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndveMcjR
dBuB+LBrLNTcZk9B8w5LNVb8yxbJSsH91fQU8nkm+3MKOgpK8j3dGnC9BVwX0Y3N
5QhOFSKXN2mvTc1lZA/hFNi5nyPuWOU83ffcB5NSNfqJbNL1+k9ONm3bdU6W9DSZ
sEXdO19kd3N/0lZgZQ4bFxqnhlUIQluEL2XgfoQPwoiv09jq1+GttnZd4cQw3XRP
qd8trMMGCw7KAeRiBt1Px7cdH/ERfYSfWhq0km0ir/mH1/Q6LsE9qyzI2XEpm40U
5eJRM/WuKei7RsDIFqMjYpbzJ6dWAMZ2DBOJ1QjWm2DXrbUr5RjA8RjGzifbjZdW
h0zLOqH8aYb5vA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:43 2025 by rpki-client