Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: DrpHsLCkQBzi60fUbecR/lY1csfIokWmRZmZRnefvJk=
Subject key identifier: 07:B3:E3:83:7C:74:EF:05:13:06:9D:69:9F:85:DF:C1:AA:6B:E0:53
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 0197B8FD50515FC3F7D09B207C51B836E532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 00:01:38 +0000
Manifest this update: Sun 29 Jun 2025 00:01:38 +0000
Manifest next update: Mon 30 Jun 2025 00:01:38 +0000
Files and hashes: 1: EwMUoWYW4dc0tRkkx15ciptmQak.roa (hash: IxyoruIJ2PWmvP6nW1K1qsmgYgo96Vwp6Gm5YCkQlWE=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: caa51EjKiRK1xn92hwq8FuKiFEgyb3kDC1h1+oeIL0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:50:51:5f:c3:f7:d0:9b:20:7c:51:b8:36:e5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Jun 29 00:01:38 2025 GMT
Not After : Jun 30 00:01:38 2025 GMT
Subject: CN=07b3e3837c74ef0513069d699f85dfc1aa6be053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:4c:f3:54:ac:e9:22:99:2c:2e:20:99:0b:
99:22:6b:c4:03:ed:b4:78:fe:7d:a8:3b:15:4d:95:
7f:bc:a7:77:ba:13:75:cc:8c:dc:d8:b9:13:90:20:
99:0d:12:37:11:cc:f3:3b:b6:75:39:66:38:9e:7f:
1a:3d:cd:d4:4c:5e:05:70:a8:74:5c:31:94:bd:d6:
1b:a4:98:fc:bf:73:78:a7:fd:f6:2c:79:3f:c3:47:
4d:67:2d:d7:1e:a3:65:cd:e4:a1:39:4c:07:f7:a6:
c7:89:99:1c:6f:9f:f1:19:d5:83:4c:0c:bf:03:77:
22:68:23:b0:78:77:dc:29:a8:47:d1:76:db:42:85:
2f:6a:09:26:ec:cc:71:cc:cc:cb:c4:13:32:52:3d:
82:12:43:44:75:28:8e:b6:5c:ba:3c:37:0e:24:3d:
d8:14:21:c2:7a:4c:c0:aa:d6:96:47:e0:a0:88:24:
28:1e:0e:f1:98:56:0b:f1:9a:04:31:de:21:68:45:
dd:95:42:ff:7c:65:96:75:a7:7f:08:14:0a:f7:30:
39:18:e3:1d:d6:83:26:f9:1c:c1:75:99:b6:b6:94:
58:ff:d5:67:fa:85:14:d7:30:8f:0e:6f:b9:e1:9f:
3c:f2:65:5b:49:9c:b0:57:79:2b:48:0d:1f:18:d1:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B3:E3:83:7C:74:EF:05:13:06:9D:69:9F:85:DF:C1:AA:6B:E0:53
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:70:78:fa:e0:56:f9:31:c5:d9:0a:df:3a:55:48:37:74:1f:
de:23:e9:35:56:18:55:85:0c:2a:22:5e:b5:0d:bc:6e:40:b3:
34:df:0f:9a:f6:c3:94:da:68:ab:86:19:5a:67:ad:32:67:85:
ca:08:cb:e9:90:79:16:dd:f9:d2:3a:f8:b2:08:a3:11:da:70:
f5:29:50:79:87:2a:2d:b1:6b:fc:2d:c4:3c:ad:fc:9c:63:58:
cb:39:e5:d7:17:03:31:d4:0d:fe:51:f1:8a:f0:8a:f0:47:b1:
fd:63:0e:db:31:7b:4c:43:f0:24:73:37:33:a7:de:cc:de:29:
fe:9d:6e:af:31:df:ca:b2:a7:1e:99:d2:67:38:d3:ce:de:a2:
55:16:d2:f7:6e:14:cc:9a:6b:58:2f:b1:e2:06:1a:b0:22:1f:
ad:02:b5:3c:62:eb:4b:df:04:d0:4f:d0:60:30:a5:72:b9:c2:
5f:0c:cc:fd:d9:e5:d4:4a:e9:0d:ea:98:ea:fc:33:c5:c8:4b:
dc:cf:ed:80:1b:5d:8d:35:14:88:fe:47:c2:f8:8f:2f:04:b6:
4b:6a:46:52:f2:4b:01:36:44:01:ae:54:72:0d:b0:24:51:49:
16:f0:39:fa:12:cc:e3:83:21:2b:3e:f9:88:6d:f4:05:8c:9c:
d3:76:74:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/VBRX8P30JsgfFG4NuUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDQxMTIxY2NjNmU2NWQ5MzM5NjFmZDU3MmQ1OWUyNjFm
MjFhMzEwHhcNMjUwNjI5MDAwMTM4WhcNMjUwNjMwMDAwMTM4WjAzMTEwLwYDVQQD
EygwN2IzZTM4MzdjNzRlZjA1MTMwNjlkNjk5Zjg1ZGZjMWFhNmJlMDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssVM81Ss6SKZLC4gmQuZImvEA+20
eP59qDsVTZV/vKd3uhN1zIzc2LkTkCCZDRI3EczzO7Z1OWY4nn8aPc3UTF4FcKh0
XDGUvdYbpJj8v3N4p/32LHk/w0dNZy3XHqNlzeShOUwH96bHiZkcb5/xGdWDTAy/
A3ciaCOweHfcKahH0XbbQoUvagkm7MxxzMzLxBMyUj2CEkNEdSiOtly6PDcOJD3Y
FCHCekzAqtaWR+CgiCQoHg7xmFYL8ZoEMd4haEXdlUL/fGWWdad/CBQK9zA5GOMd
1oMm+RzBdZm2tpRY/9Vn+oUU1zCPDm+54Z888mVbSZywV3krSA0fGNFfewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAez44N8dO8FEwadaZ+F38Gqa+BTMB8GA1UdIwQY
MBaAFGEEESHMxuZdkzlh/VctWeJh8hoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEt
ZGJhNmQ3NTk0YzE5LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEtZGJhNmQ3NTk0YzE5
LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnB4+uBW
+THF2QrfOlVIN3Qf3iPpNVYYVYUMKiJetQ28bkCzNN8PmvbDlNpoq4YZWmetMmeF
ygjL6ZB5Ft350jr4sgijEdpw9SlQeYcqLbFr/C3EPK38nGNYyznl1xcDMdQN/lHx
ivCK8Eex/WMO2zF7TEPwJHM3M6fezN4p/p1urzHfyrKnHpnSZzjTzt6iVRbS924U
zJprWC+x4gYasCIfrQK1PGLrS98E0E/QYDClcrnCXwzM/dnl1ErpDeqY6vwzxchL
3M/tgBtdjTUUiP5HwviPLwS2S2pGUvJLATZEAa5Ucg2wJFFJFvA5+hLM44MhKz75
iG30BYyc03Z0Cg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:23 2025 by rpki-client