Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: 4ZUe1LoAIMqdCWwx3dQ1H8jpoqL7A+QFMLV2i+eW3yc=
Subject key identifier: E7:08:CA:07:82:63:87:A3:B7:C4:A4:CE:BD:F7:C9:8F:C8:95:35:C0
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 0197C1C929EFB4BAA882C2404DFD1D01B2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0A64
Signing time: Mon 30 Jun 2025 17:01:15 +0000
Manifest this update: Mon 30 Jun 2025 17:01:15 +0000
Manifest next update: Tue 01 Jul 2025 17:01:15 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: mVNUb3htUZGUC0FloP593WhivI7futtE+e8VPp8lhpY=)
2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c9:29:ef:b4:ba:a8:82:c2:40:4d:fd:1d:01:b2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Jun 30 17:01:15 2025 GMT
Not After : Jul 1 17:01:15 2025 GMT
Subject: CN=e708ca07826387a3b7c4a4cebdf7c98fc89535c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:5a:7d:22:f5:ee:70:b0:cc:c4:ba:44:d4:
df:87:b2:35:b0:0d:c9:3d:b5:83:a3:d0:28:a6:52:
09:41:66:2c:70:af:0c:b8:48:3b:c0:53:a2:f6:e7:
ea:fd:0b:26:b9:bd:9d:eb:bc:96:8c:a1:25:b2:03:
97:e5:ae:d8:ed:c5:e4:34:0e:ef:27:ee:63:dd:28:
62:1a:02:b6:c9:1e:c4:e9:1a:2a:6b:82:f7:be:5c:
89:a0:d4:88:21:4a:1a:d7:42:75:e3:87:cf:9e:1d:
e7:2e:f9:e1:6d:a8:78:3c:da:56:26:9f:07:b2:04:
60:75:50:1b:9d:cc:a9:88:8d:bf:24:3b:e5:f1:36:
f8:5f:ed:96:e6:c0:ae:4d:e1:32:a5:c6:40:bc:72:
ab:9f:99:45:ac:1b:d8:7d:12:b0:2c:3e:14:7a:ec:
bb:bc:ad:95:d5:4a:3b:5d:62:4e:63:d8:0f:1c:31:
57:7c:83:ae:0d:5c:4a:2d:d0:61:d4:7e:22:2d:2b:
38:d1:0d:1b:3c:d8:77:d1:69:dd:65:da:1b:3e:6d:
99:db:5c:bd:5c:fd:89:b4:aa:3d:e1:07:7b:25:1a:
af:16:0f:8d:e7:05:d5:6e:f1:6d:81:c1:c7:b5:11:
55:31:03:14:7b:0d:c6:d8:46:e8:25:59:4e:be:e7:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:08:CA:07:82:63:87:A3:B7:C4:A4:CE:BD:F7:C9:8F:C8:95:35:C0
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:38:92:3d:88:18:54:06:1d:3d:8a:59:f4:de:53:6b:af:1d:
23:87:f5:5c:b9:59:06:4d:ad:72:6c:f7:bb:a2:d9:0e:fd:9b:
e7:f5:a1:44:b2:2c:ff:e9:7e:d9:45:a1:0d:be:e3:c6:6e:f4:
b8:95:f6:ee:ca:b7:76:04:2b:d8:5b:4d:45:80:66:4c:42:43:
35:50:92:6f:1f:75:89:54:72:69:fb:6b:01:38:53:45:cd:2f:
82:33:71:f5:39:03:59:60:3a:f6:13:49:e9:68:e0:bb:e9:65:
44:5f:e9:29:81:ce:0e:11:b3:42:bc:18:44:56:ac:47:52:70:
47:96:40:9d:35:f8:02:16:97:94:33:0e:f0:8b:7f:3e:07:76:
c7:fa:bd:14:f6:f7:56:63:c5:9a:17:e2:99:00:eb:13:55:37:
e7:23:75:7d:2b:44:8f:3c:58:2d:77:bc:4e:fb:98:88:5f:e7:
6b:c1:76:32:24:58:e4:88:3e:1a:21:43:8e:59:b0:ec:cd:89:
61:fc:40:7f:08:34:fd:da:84:be:c6:0e:68:a3:89:d0:06:83:
d3:17:60:ef:88:d8:83:c7:c6:ed:4e:2c:05:d8:f8:77:9e:a0:
80:9f:49:2f:e8:39:e4:2b:e4:28:39:70:01:21:e5:db:78:cb:
9e:e2:b1:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfBySnvtLqogsJATf0dAbLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTAwOTllMzM1NDA5ZGIwM2FjMTEzM2QxNjRmMDJhMGQ1
ZGM2NmYwHhcNMjUwNjMwMTcwMTE1WhcNMjUwNzAxMTcwMTE1WjAzMTEwLwYDVQQD
EyhlNzA4Y2EwNzgyNjM4N2EzYjdjNGE0Y2ViZGY3Yzk4ZmM4OTUzNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMJafSL17nCwzMS6RNTfh7I1sA3J
PbWDo9AoplIJQWYscK8MuEg7wFOi9ufq/Qsmub2d67yWjKElsgOX5a7Y7cXkNA7v
J+5j3ShiGgK2yR7E6Roqa4L3vlyJoNSIIUoa10J144fPnh3nLvnhbah4PNpWJp8H
sgRgdVAbncypiI2/JDvl8Tb4X+2W5sCuTeEypcZAvHKrn5lFrBvYfRKwLD4Ueuy7
vK2V1Uo7XWJOY9gPHDFXfIOuDVxKLdBh1H4iLSs40Q0bPNh30WndZdobPm2Z21y9
XP2JtKo94Qd7JRqvFg+N5wXVbvFtgcHHtRFVMQMUew3G2EboJVlOvudkcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcIygeCY4ejt8Skzr33yY/IlTXAMB8GA1UdIwQY
MBaAFGBQCZ4zVAnbA6wRM9Fk8CoNXcZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUt
NGM2NWJkMzNkNmY2LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUtNGM2NWJkMzNkNmY2
LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTiSPYgY
VAYdPYpZ9N5Ta68dI4f1XLlZBk2tcmz3u6LZDv2b5/WhRLIs/+l+2UWhDb7jxm70
uJX27sq3dgQr2FtNRYBmTEJDNVCSbx91iVRyaftrAThTRc0vgjNx9TkDWWA69hNJ
6Wjgu+llRF/pKYHODhGzQrwYRFasR1JwR5ZAnTX4AhaXlDMO8It/Pgd2x/q9FPb3
VmPFmhfimQDrE1U35yN1fStEjzxYLXe8TvuYiF/na8F2MiRY5Ig+GiFDjlmw7M2J
YfxAfwg0/dqEvsYOaKOJ0AaD0xdg74jYg8fG7U4sBdj4d56ggJ9JL+g55CvkKDlw
ASHl23jLnuKxFg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:45:27 2025 by rpki-client