Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
File: yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json)
Hash identifier: 13bFFGlWmH2ZEV8YwwyoQuveMqNf/2GjEV1Wc2ZzcFE=
Subject key identifier: 48:89:B7:6A:A5:60:A2:A5:3C:BC:1A:F0:D1:89:4B:9B:58:E3:EE:14
Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Certificate issuer: /CN=c8f180dd489675d4793525fee6cfff46972ff33c
Certificate serial: 0197B8FD2C9FAFA39D7988ED35BB5B87CD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 00:01:29 +0000
Manifest this update: Sun 29 Jun 2025 00:01:29 +0000
Manifest next update: Mon 30 Jun 2025 00:01:29 +0000
Files and hashes: 1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: 5cyYNUuVrfPSTtOIRbauoTXu+VVos0JFsj/MBL+jZVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:2c:9f:af:a3:9d:79:88:ed:35:bb:5b:87:cd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c
Validity
Not Before: Jun 29 00:01:29 2025 GMT
Not After : Jun 30 00:01:29 2025 GMT
Subject: CN=4889b76aa560a2a53cbc1af0d1894b9b58e3ee14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:f3:7f:b7:74:be:96:90:97:f2:b9:13:c4:
36:4f:51:56:ee:5a:04:a9:e4:42:b6:0c:ae:71:31:
3d:19:97:1d:47:2f:da:6f:f1:d0:e0:d8:7d:11:e6:
32:1f:29:6a:75:46:1e:c9:8f:8c:55:f2:2c:25:57:
69:57:7a:0f:49:92:8a:0a:a0:47:d0:53:7c:15:3c:
1c:a3:20:ae:12:b8:e6:cb:dd:6a:d7:83:47:6a:fc:
5c:e0:6e:7e:99:d6:ec:eb:3e:79:3e:2f:2f:03:28:
2f:a4:2a:29:b4:2b:e4:51:0f:97:f7:92:29:ff:97:
ac:e5:7e:84:e4:6f:74:bc:31:cb:5c:a9:83:10:d5:
1e:e8:bd:84:28:83:4a:02:dd:2a:68:9d:0d:ea:7f:
e3:61:45:f9:b7:ea:8e:6c:89:1f:9d:6e:46:3b:40:
b9:ba:8b:09:49:aa:cf:01:7e:7e:4e:86:c9:76:e2:
10:56:9f:3f:28:33:72:b4:19:2f:55:7e:98:77:e1:
4d:6f:ab:3b:57:88:a8:8e:80:bc:81:71:bf:67:9b:
f6:5e:e6:0e:c5:b9:bc:27:f7:7e:d4:fb:0b:5c:77:
aa:12:35:64:9b:a1:3c:c4:61:6c:9d:99:85:82:0b:
c1:12:f4:42:c7:21:5b:ab:ce:5a:8e:35:aa:2c:92:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:B7:6A:A5:60:A2:A5:3C:BC:1A:F0:D1:89:4B:9B:58:E3:EE:14
X509v3 Authority Key Identifier:
keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:be:38:78:2a:dd:39:21:93:99:a5:75:bd:2b:bc:e4:ba:be:
eb:59:c7:4a:1e:ca:a9:83:a5:83:11:64:77:8a:96:12:5f:dd:
29:03:80:35:94:32:cd:79:d9:36:54:4a:e9:fb:be:af:d5:72:
e3:36:40:bf:d1:57:ae:91:ef:fb:79:49:55:29:87:2b:fc:9b:
c7:4e:18:48:b8:a9:04:51:80:ff:9c:4c:e6:ff:70:7f:1c:72:
20:58:86:95:6d:29:63:b9:d3:b6:f4:27:39:eb:41:d3:f9:da:
68:c1:18:82:c9:06:05:53:68:fe:69:6b:04:ac:f8:a2:41:8b:
16:2f:9a:ec:2d:9a:2e:fb:da:eb:db:bc:d1:cc:04:54:cf:b5:
38:e4:ac:87:7f:a8:95:cf:dd:5f:af:b4:12:b4:8c:40:70:a5:
ad:95:3c:b6:91:61:12:ed:1d:3d:5d:d2:31:c3:62:7f:84:71:
04:fb:64:20:ca:5d:77:83:16:cf:d1:87:dd:02:98:20:11:03:
2d:30:a6:26:be:cf:ad:a6:5a:63:14:b0:f3:f9:eb:cd:e3:04:
32:42:a3:85:c7:b6:d5:a4:ea:b6:b4:68:90:42:34:f4:e7:98:
c7:25:8d:1a:86:72:1e:3b:16:07:55:f1:70:4e:98:28:8e:85:
7f:e5:81:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/Syfr6OdeYjtNbtbh82DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjE4MGRkNDg5Njc1ZDQ3OTM1MjVmZWU2Y2ZmZjQ2OTcy
ZmYzM2MwHhcNMjUwNjI5MDAwMTI5WhcNMjUwNjMwMDAwMTI5WjAzMTEwLwYDVQQD
Eyg0ODg5Yjc2YWE1NjBhMmE1M2NiYzFhZjBkMTg5NGI5YjU4ZTNlZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb3zf7d0vpaQl/K5E8Q2T1FW7loE
qeRCtgyucTE9GZcdRy/ab/HQ4Nh9EeYyHylqdUYeyY+MVfIsJVdpV3oPSZKKCqBH
0FN8FTwcoyCuErjmy91q14NHavxc4G5+mdbs6z55Pi8vAygvpCoptCvkUQ+X95Ip
/5es5X6E5G90vDHLXKmDENUe6L2EKINKAt0qaJ0N6n/jYUX5t+qObIkfnW5GO0C5
uosJSarPAX5+TobJduIQVp8/KDNytBkvVX6Yd+FNb6s7V4iojoC8gXG/Z5v2XuYO
xbm8J/d+1PsLXHeqEjVkm6E8xGFsnZmFggvBEvRCxyFbq85ajjWqLJLZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiJt2qlYKKlPLwa8NGJS5tY4+4UMB8GA1UdIwQY
MBaAFMjxgN1IlnXUeTUl/ubP/0aXL/M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82N2YxYzUtODIyOS00MTczLTk5YzEt
ZGJkNzYwMDQ1ZWI3LzEveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82N2YxYzUtODIyOS00MTczLTk5YzEtZGJkNzYwMDQ1ZWI3
LzEveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR744eCrd
OSGTmaV1vSu85Lq+61nHSh7KqYOlgxFkd4qWEl/dKQOANZQyzXnZNlRK6fu+r9Vy
4zZAv9FXrpHv+3lJVSmHK/ybx04YSLipBFGA/5xM5v9wfxxyIFiGlW0pY7nTtvQn
OetB0/naaMEYgskGBVNo/mlrBKz4okGLFi+a7C2aLvva69u80cwEVM+1OOSsh3+o
lc/dX6+0ErSMQHClrZU8tpFhEu0dPV3SMcNif4RxBPtkIMpdd4MWz9GH3QKYIBED
LTCmJr7PraZaYxSw8/nrzeMEMkKjhce21aTqtrRokEI09OeYxyWNGoZyHjsWB1Xx
cE6YKI6Ff+WBsg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:06 2025 by rpki-client