Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
File: ySyVKWqMqBGSh-IWpGlTwjowm-s.mft (raw, json)
Hash identifier: AaQQYOKSTl/YkrgkJR3GnLM5loO5XTGKnPdwLHOkxKw=
Subject key identifier: D7:61:E3:6F:BC:79:59:DB:79:F1:F1:ED:66:3F:DB:4C:D6:59:47:E1
Authority key identifier: C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
Certificate issuer: /CN=c92c95296a8ca8119287e216a46953c23a309beb
Certificate serial: 0197B6A0A716743861CB0601F62337C5C7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
Manifest number: 69
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: ySyVKWqMqBGSh-IWpGlTwjowm-s.crl (hash: VDTLTPHjmUkgzc3msI+O0HQ5jk1ICL7eZEFLwcAdGQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a7:16:74:38:61:cb:06:01:f6:23:37:c5:c7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92c95296a8ca8119287e216a46953c23a309beb
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=d761e36fbc7959db79f1f1ed663fdb4cd65947e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:24:ff:d2:7b:ce:b8:6a:b9:97:7e:d1:7b:
0d:be:03:ad:11:50:7e:39:56:0e:69:cf:35:97:9b:
c3:c8:c3:86:38:06:17:f0:b7:f6:ab:12:69:74:dc:
7f:38:2d:39:6c:d4:3c:3b:f6:b6:7b:ab:f6:ee:d3:
3d:f9:aa:f8:a3:f4:d7:0c:9b:68:59:f8:bc:12:e7:
9f:44:5e:45:b1:d9:cc:bd:c9:12:78:d5:a6:31:75:
c6:69:e5:0d:5c:56:0a:71:d3:c9:c9:7c:24:a1:1d:
8e:9d:9e:52:03:72:25:70:46:32:f3:d7:21:30:67:
5b:05:81:88:fc:ff:7a:d0:d1:34:1c:f9:5c:87:16:
fa:e0:a6:27:9b:b3:05:89:5b:37:eb:34:ac:ce:28:
04:79:af:e5:59:25:e4:6c:92:b7:71:fb:e3:3b:12:
4b:63:8c:16:60:1a:3c:6c:a6:12:38:89:02:84:6b:
2f:f2:53:eb:0c:45:e4:2c:eb:3a:b5:7b:04:bd:47:
f6:a4:a5:67:36:50:a4:14:83:35:cf:bf:3d:12:43:
76:4b:48:96:56:1c:81:6b:cb:fb:b9:1b:19:cd:89:
ab:84:f0:c2:5a:ec:da:1e:0c:8c:db:a5:89:c6:bc:
ad:ba:6f:d2:15:c6:b9:2c:59:2f:ab:2e:21:e1:3f:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:E3:6F:BC:79:59:DB:79:F1:F1:ED:66:3F:DB:4C:D6:59:47:E1
X509v3 Authority Key Identifier:
keyid:C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:18:b1:90:41:f3:72:13:f5:6b:21:47:d2:6c:5b:b7:38:2a:
2c:51:c4:4b:18:84:86:34:05:4a:e2:3d:33:16:46:69:ec:83:
d9:ee:e4:01:2c:87:11:03:32:cf:93:f4:0c:c3:48:72:da:62:
65:c1:3d:9f:4a:36:d5:dd:0a:46:43:1a:e4:2a:14:1e:b2:04:
fb:47:91:6d:37:92:6c:9a:b1:84:eb:ad:07:27:9d:04:af:15:
fd:f9:6e:fd:0c:11:ae:23:4e:87:4e:52:f5:45:66:4e:44:d8:
74:5c:ac:49:87:e7:e1:35:04:ec:7b:af:7e:dd:d6:ce:b2:0e:
6b:09:42:e0:ec:cb:b1:f0:3d:c9:57:7d:11:51:8d:f5:47:e2:
45:59:f4:29:ca:b1:eb:38:24:82:bc:cd:fc:19:b7:52:30:e2:
0f:1f:76:bf:e4:ea:25:e2:61:a1:f4:78:a2:ee:53:c0:69:f6:
b0:72:8c:f1:4f:f5:05:16:0a:b8:95:17:0d:46:fc:be:12:c8:
40:a0:de:32:78:4a:50:1d:51:e3:a8:a5:ba:0a:ac:2d:6e:12:
3e:9e:b1:f5:4f:98:0d:3a:03:20:8a:2a:bc:dd:bc:65:39:c1:
1a:55:d7:f4:4b:6f:35:9e:59:31:15:00:48:ea:94:fc:2c:f1:
64:62:a5:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKcWdDhhywYB9iM3xcfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MmM5NTI5NmE4Y2E4MTE5Mjg3ZTIxNmE0Njk1M2MyM2Ez
MDliZWIwHhcNMjUwNjI4MTMwMTExWhcNMjUwNjI5MTMwMTExWjAzMTEwLwYDVQQD
EyhkNzYxZTM2ZmJjNzk1OWRiNzlmMWYxZWQ2NjNmZGI0Y2Q2NTk0N2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/sk/9J7zrhquZd+0XsNvgOtEVB+
OVYOac81l5vDyMOGOAYX8Lf2qxJpdNx/OC05bNQ8O/a2e6v27tM9+ar4o/TXDJto
Wfi8EuefRF5FsdnMvckSeNWmMXXGaeUNXFYKcdPJyXwkoR2OnZ5SA3IlcEYy89ch
MGdbBYGI/P960NE0HPlchxb64KYnm7MFiVs36zSszigEea/lWSXkbJK3cfvjOxJL
Y4wWYBo8bKYSOIkChGsv8lPrDEXkLOs6tXsEvUf2pKVnNlCkFIM1z789EkN2S0iW
VhyBa8v7uRsZzYmrhPDCWuzaHgyM26WJxrytum/SFca5LFkvqy4h4T+UuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdh42+8eVnbefHx7WY/20zWWUfhMB8GA1UdIwQY
MBaAFMkslSlqjKgRkofiFqRpU8I6MJvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVN5VktXcU1xQkdTaC1JV3BHbFR3am93bS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iOWIzYjQtY2M5ZS00MDAzLTk3MmQt
ZjE1MDQ4ZWUwZjIyLzEveVN5VktXcU1xQkdTaC1JV3BHbFR3am93bS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iOWIzYjQtY2M5ZS00MDAzLTk3MmQtZjE1MDQ4ZWUwZjIy
LzEveVN5VktXcU1xQkdTaC1JV3BHbFR3am93bS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBixkEHz
chP1ayFH0mxbtzgqLFHESxiEhjQFSuI9MxZGaeyD2e7kASyHEQMyz5P0DMNIctpi
ZcE9n0o21d0KRkMa5CoUHrIE+0eRbTeSbJqxhOutByedBK8V/flu/QwRriNOh05S
9UVmTkTYdFysSYfn4TUE7Huvft3WzrIOawlC4OzLsfA9yVd9EVGN9UfiRVn0Kcqx
6zgkgrzN/Bm3UjDiDx92v+TqJeJhofR4ou5TwGn2sHKM8U/1BRYKuJUXDUb8vhLI
QKDeMnhKUB1R46ilugqsLW4SPp6x9U+YDToDIIoqvN28ZTnBGlXX9EtvNZ5ZMRUA
SOqU/CzxZGKlPQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:55 2025 by rpki-client