Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: oNRLaBNVwxs9SzMtCf9OtT+dzNpJJNsb12HEw5fEBFw=
Subject key identifier: 56:A8:13:3B:2F:31:11:E8:DB:D1:49:02:21:D8:8D:46:E3:69:FE:58
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 0197B7EAA860C5148D0644AE83E9FE45A085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 19:01:38 +0000
Manifest this update: Sat 28 Jun 2025 19:01:38 +0000
Manifest next update: Sun 29 Jun 2025 19:01:38 +0000
Files and hashes: 1: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (hash: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=)
2: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: BMtjeD1/0oZ42wITtMLTMUnKGJ6ctkl4jeFQ0fVAu7w=)
3: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (hash: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a8:60:c5:14:8d:06:44:ae:83:e9:fe:45:a0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Jun 28 19:01:38 2025 GMT
Not After : Jun 29 19:01:38 2025 GMT
Subject: CN=56a8133b2f3111e8dbd1490221d88d46e369fe58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:46:85:24:e2:a1:b5:fb:0e:18:46:92:6c:
b3:d4:ac:4d:b8:5d:f6:31:01:81:b3:35:23:1b:f8:
69:56:a8:2a:42:ec:99:ab:6d:9e:f0:e1:64:5a:8b:
e0:cd:c4:1d:42:ec:89:2e:30:ac:40:7d:6c:10:22:
5c:5d:cb:e1:d7:a2:4d:f7:e1:39:8b:66:59:f4:bb:
92:ea:f5:a4:25:9e:2f:7a:1d:30:c7:04:cd:67:cb:
36:63:e1:22:80:22:bd:79:e0:aa:9b:b2:f8:7c:0d:
1c:8f:4e:86:7f:f4:d5:d7:63:ca:12:df:ca:04:ab:
9c:95:3d:2c:16:e7:5f:5f:17:a8:52:b6:f4:ea:ed:
f6:41:9b:76:0b:e5:30:dd:7b:4d:fd:1b:b6:60:85:
a7:29:06:fa:3c:37:08:1a:4d:08:76:15:6a:cc:01:
32:58:4e:79:47:50:ff:b7:f1:e3:27:14:8f:03:31:
eb:b7:d8:cc:5a:3a:05:dc:da:7c:4c:03:c1:3a:b4:
73:ae:fc:98:0a:bd:2f:b7:ad:85:0c:fd:b3:a1:a3:
b6:01:98:83:a9:52:55:01:e0:48:79:28:f1:56:39:
58:7c:22:a9:2e:e7:44:09:46:5e:d7:21:97:39:37:
1b:af:99:b1:c9:1a:73:79:39:b6:14:fa:90:74:bc:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:13:3B:2F:31:11:E8:DB:D1:49:02:21:D8:8D:46:E3:69:FE:58
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d7:d1:b6:46:eb:99:e5:20:0b:b6:89:60:0f:9c:2c:4e:8b:
a4:16:49:cb:0a:7b:4b:40:62:0d:35:60:2b:2b:bd:35:8f:bd:
ef:4f:fe:c5:ee:e2:a3:a8:6b:b8:cf:0f:57:55:f3:b1:e4:a8:
2b:4d:95:0a:69:cc:55:2d:c6:7b:cd:28:7a:56:c4:2e:4a:03:
e6:b6:6d:65:18:dd:4e:37:c8:3c:f2:8f:b5:f1:95:19:bd:ad:
66:36:02:47:1d:52:80:65:70:a2:05:bd:28:f8:2d:c0:8d:6a:
67:6a:49:14:8b:18:68:a3:8a:c3:c2:76:f8:31:9f:f0:b0:ef:
fd:d4:28:41:2e:02:1d:91:42:15:03:cb:3f:3c:ab:76:a8:48:
79:70:73:91:fc:d7:77:47:09:21:10:7e:57:2d:f9:7e:a3:e2:
a7:5c:50:3b:dd:d6:37:d6:cf:1a:92:e1:6c:1a:64:5c:1b:3d:
13:cd:94:0e:83:09:4b:39:6e:f5:d0:35:6f:e6:67:a0:f2:ab:
19:ba:75:28:bc:2c:a8:bf:51:a1:2c:b7:75:f3:59:b2:26:73:
32:de:eb:9b:e2:61:60:a5:9a:15:c9:80:de:d4:96:36:a1:c3:
10:bf:5c:0c:f3:ef:7c:c2:ad:82:91:e4:7f:02:4c:b0:30:9d:
47:2d:37:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36qhgxRSNBkSug+n+RaCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZDBiMDIwNzYwM2JlNDNkODQ5MmU5ODUxMzc4YjhiNGYw
OTU5NGYwHhcNMjUwNjI4MTkwMTM4WhcNMjUwNjI5MTkwMTM4WjAzMTEwLwYDVQQD
Eyg1NmE4MTMzYjJmMzExMWU4ZGJkMTQ5MDIyMWQ4OGQ0NmUzNjlmZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8NGhSTiobX7DhhGkmyz1KxNuF32
MQGBszUjG/hpVqgqQuyZq22e8OFkWovgzcQdQuyJLjCsQH1sECJcXcvh16JN9+E5
i2ZZ9LuS6vWkJZ4veh0wxwTNZ8s2Y+EigCK9eeCqm7L4fA0cj06Gf/TV12PKEt/K
BKuclT0sFudfXxeoUrb06u32QZt2C+Uw3XtN/Ru2YIWnKQb6PDcIGk0IdhVqzAEy
WE55R1D/t/HjJxSPAzHrt9jMWjoF3Np8TAPBOrRzrvyYCr0vt62FDP2zoaO2AZiD
qVJVAeBIeSjxVjlYfCKpLudECUZe1yGXOTcbr5mxyRpzeTm2FPqQdLzbOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaoEzsvMRHo29FJAiHYjUbjaf5YMB8GA1UdIwQY
MBaAFGDQsCB2A75D2EkumFE3i4tPCVlPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTc5NGEtYjE5MS00NjQ2LWE4NDIt
ZjQ5ZmVhNTQ1ZTc4LzEvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9mNTc5NGEtYjE5MS00NjQ2LWE4NDItZjQ5ZmVhNTQ1ZTc4
LzEvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONfRtkbr
meUgC7aJYA+cLE6LpBZJywp7S0BiDTVgKyu9NY+970/+xe7io6hruM8PV1XzseSo
K02VCmnMVS3Ge80oelbELkoD5rZtZRjdTjfIPPKPtfGVGb2tZjYCRx1SgGVwogW9
KPgtwI1qZ2pJFIsYaKOKw8J2+DGf8LDv/dQoQS4CHZFCFQPLPzyrdqhIeXBzkfzX
d0cJIRB+Vy35fqPip1xQO93WN9bPGpLhbBpkXBs9E82UDoMJSzlu9dA1b+ZnoPKr
Gbp1KLwsqL9RoSy3dfNZsiZzMt7rm+JhYKWaFcmA3tSWNqHDEL9cDPPvfMKtgpHk
fwJMsDCdRy03bA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:13 2025 by rpki-client