Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
File: yGEQ5MdkHRgOjxkgrGX7788G18c.mft (raw, json)
Hash identifier: oYcrh1+foGREu4+WjhAEpzfGXKj465LaNAc1pA5hla0=
Subject key identifier: EB:90:7B:A3:59:A9:DD:9B:82:5A:BF:55:A0:B9:36:E3:EE:36:65:39
Authority key identifier: C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7
Certificate issuer: /CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7
Certificate serial: 0197B820E0A25830954F2CBE566CE315D3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
Manifest number: 49
Signing time: Sat 28 Jun 2025 20:00:51 +0000
Manifest this update: Sat 28 Jun 2025 20:00:51 +0000
Manifest next update: Sun 29 Jun 2025 20:00:51 +0000
Files and hashes: 1: yGEQ5MdkHRgOjxkgrGX7788G18c.crl (hash: ODlJgiuBBVWpkaN0dFnjYTohqYTZCJ72PjcTmZItN/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e0:a2:58:30:95:4f:2c:be:56:6c:e3:15:d3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7
Validity
Not Before: Jun 28 20:00:51 2025 GMT
Not After : Jun 29 20:00:51 2025 GMT
Subject: CN=eb907ba359a9dd9b825abf55a0b936e3ee366539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:62:c3:bd:87:01:3d:2d:fb:04:6e:46:5e:
6e:91:cf:1e:d1:a2:d6:66:66:9b:fe:0e:73:26:f2:
9b:a0:53:e3:e0:64:1a:29:ea:18:32:d2:dc:18:62:
1e:17:2e:2b:10:51:bf:05:8c:4f:fa:4f:99:18:df:
48:eb:05:fb:d6:38:15:71:57:94:f2:bd:92:a8:d8:
29:a7:65:39:ae:99:f0:6c:5c:57:84:61:6c:e9:01:
2b:a9:e6:d7:e2:c0:03:34:b1:67:f6:7b:e1:8a:08:
93:ac:21:c5:9b:5d:6a:f9:48:31:e2:57:d1:1b:ca:
4b:78:ad:d0:85:db:a9:22:54:ac:a6:05:d1:f1:4e:
4a:6c:82:c2:d2:29:50:10:32:54:c4:68:84:69:79:
1e:2c:ab:2a:45:10:3d:a1:f4:68:04:7c:80:85:7e:
49:96:51:ba:b3:f8:54:26:88:00:5f:72:75:f0:7a:
86:81:11:bb:20:3f:bd:c8:78:15:f0:49:05:3d:0e:
62:f1:fb:50:28:9e:de:24:3a:d9:ac:2a:53:d7:d4:
f0:94:59:d8:a8:e8:29:f3:e4:54:8c:52:61:67:50:
9b:9e:3c:30:be:b9:12:b1:ff:ec:42:36:a8:47:a3:
87:c3:8f:0a:de:a0:61:c0:82:0e:a1:f9:3b:9d:f4:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:7B:A3:59:A9:DD:9B:82:5A:BF:55:A0:B9:36:E3:EE:36:65:39
X509v3 Authority Key Identifier:
keyid:C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1d:2b:84:18:08:6a:fa:31:b0:e1:ec:fc:7d:b0:bf:0f:e7:
26:1d:5f:68:9f:70:56:7c:0e:33:d2:49:58:04:27:b7:fe:ca:
96:f8:66:39:80:f6:7e:e3:b8:ec:28:e2:46:68:76:2e:da:ac:
33:90:3f:80:a4:53:13:2d:75:ea:21:88:2e:50:c4:ec:1c:f0:
da:1e:64:3b:44:86:ca:30:a0:01:72:c1:9e:c3:da:76:68:be:
67:fd:c9:46:8d:52:ac:34:b0:bf:a1:cf:9b:af:f4:e8:46:3c:
b7:5b:24:0d:52:a7:db:91:42:d9:44:5e:0e:b9:9a:47:ee:a8:
fa:4e:47:6c:b8:f3:ea:6c:57:15:7b:ae:27:18:2f:f5:20:b4:
c9:17:c5:92:cf:c6:4a:44:c7:19:32:bd:21:5e:d0:de:a8:d8:
bd:10:25:c5:30:79:fa:44:ea:97:b3:06:8a:f7:12:48:ba:48:
5a:01:b2:7e:b3:4d:dc:16:15:4a:3a:b3:37:1a:34:a3:ce:7c:
db:91:3b:7b:ed:7a:b6:f4:32:9a:8b:6a:97:28:e8:a1:7e:fc:
5a:11:f1:e7:8d:51:36:ff:b0:1c:75:0a:c7:9f:e8:be:5b:7b:
e0:31:dd:3e:a4:2c:c8:36:d0:9e:4c:3b:01:9d:c6:d6:45:4b:
2c:d5:6a:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IOCiWDCVTyy+VmzjFdOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjExMGU0Yzc2NDFkMTgwZThmMTkyMGFjNjVmYmVmY2Yw
NmQ3YzcwHhcNMjUwNjI4MjAwMDUxWhcNMjUwNjI5MjAwMDUxWjAzMTEwLwYDVQQD
EyhlYjkwN2JhMzU5YTlkZDliODI1YWJmNTVhMGI5MzZlM2VlMzY2NTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzRiw72HAT0t+wRuRl5ukc8e0aLW
Zmab/g5zJvKboFPj4GQaKeoYMtLcGGIeFy4rEFG/BYxP+k+ZGN9I6wX71jgVcVeU
8r2SqNgpp2U5rpnwbFxXhGFs6QErqebX4sADNLFn9nvhigiTrCHFm11q+Ugx4lfR
G8pLeK3QhdupIlSspgXR8U5KbILC0ilQEDJUxGiEaXkeLKsqRRA9ofRoBHyAhX5J
llG6s/hUJogAX3J18HqGgRG7ID+9yHgV8EkFPQ5i8ftQKJ7eJDrZrCpT19TwlFnY
qOgp8+RUjFJhZ1CbnjwwvrkSsf/sQjaoR6OHw48K3qBhwIIOofk7nfRQ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuQe6NZqd2bglq/VaC5NuPuNmU5MB8GA1UdIwQY
MBaAFMhhEOTHZB0YDo8ZIKxl++/PBtfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdFUTVNZGtIUmdPanhrZ3JHWDc3ODhHMThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yMDhjMjUtZWRjZS00MTMxLWIzMWIt
NjZhNTJjN2M4YzAwLzEveUdFUTVNZGtIUmdPanhrZ3JHWDc3ODhHMThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yMDhjMjUtZWRjZS00MTMxLWIzMWItNjZhNTJjN2M4YzAw
LzEveUdFUTVNZGtIUmdPanhrZ3JHWDc3ODhHMThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGB0rhBgI
avoxsOHs/H2wvw/nJh1faJ9wVnwOM9JJWAQnt/7KlvhmOYD2fuO47CjiRmh2Ltqs
M5A/gKRTEy116iGILlDE7Bzw2h5kO0SGyjCgAXLBnsPadmi+Z/3JRo1SrDSwv6HP
m6/06EY8t1skDVKn25FC2UReDrmaR+6o+k5HbLjz6mxXFXuuJxgv9SC0yRfFks/G
SkTHGTK9IV7Q3qjYvRAlxTB5+kTql7MGivcSSLpIWgGyfrNN3BYVSjqzNxo0o858
25E7e+16tvQymotqlyjooX78WhHx541RNv+wHHUKx5/ovlt74DHdPqQsyDbQnkw7
AZ3G1kVLLNVq1g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:49 2025 by rpki-client