Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier: UxiItC7fkWJ5JWwPqBs5GsvY9LDEIU/iEp090kSWjJ8=
Subject key identifier: B6:62:7A:85:A3:D8:1C:D6:4F:6C:17:EB:01:6C:AA:2E:4F:26:D8:0D
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 0197B7456BF8221824C839F7A73129D2C33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number: 107D
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: nd3zlr8nop/bGeG6u1PKDCO145JHhG9oqrm02e2WVQw=)
2: rs5a3rW2E-ThNoq2t8O4hGc6590.roa (hash: YMDJkD8/KCkGFvxJ1si+V/dSXJflYLlhdawvNihd//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6b:f8:22:18:24:c8:39:f7:a7:31:29:d2:c3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=b6627a85a3d81cd64f6c17eb016caa2e4f26d80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:0e:67:e1:c5:53:16:e6:8c:a6:60:2d:e2:
ae:87:fd:af:c3:7e:80:bd:c8:c6:7a:a2:32:2a:2e:
56:c3:f2:9d:76:0f:3d:47:e3:39:27:1f:e7:51:bf:
67:45:20:cc:01:4b:79:67:bc:01:4b:c7:07:94:7d:
9b:27:8b:77:1d:34:40:07:b1:a2:96:bb:0a:f0:0a:
1e:de:cd:fa:6f:39:26:7a:67:75:4d:ee:74:03:e0:
24:e8:8b:d1:13:5b:af:42:79:54:d9:f5:d1:ac:9d:
e1:4f:a3:d8:e2:9c:8d:01:e0:cc:87:b4:86:f0:5c:
ad:71:95:cf:f1:b9:a7:f1:0f:7a:ce:b2:ac:57:1b:
af:e6:38:90:dd:1f:f7:cf:68:90:f1:78:81:ac:03:
fe:2f:2c:c3:8c:60:9b:cd:b4:86:f8:5a:6d:67:33:
2a:4f:44:1e:f9:dc:48:38:6d:1b:6b:94:7e:37:8f:
c4:71:30:0d:3a:7a:cb:3d:bb:c2:82:57:49:f8:04:
23:5d:c2:73:4b:85:6c:04:24:6c:f9:ef:23:3b:b7:
41:19:e3:6e:c0:23:9d:8b:20:82:b7:05:0d:99:21:
4a:5a:d7:67:b2:b2:a9:13:e2:01:40:72:8d:35:d5:
dc:78:5c:5e:0f:35:84:30:0a:b7:2a:9d:9d:83:4c:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:7A:85:A3:D8:1C:D6:4F:6C:17:EB:01:6C:AA:2E:4F:26:D8:0D
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:21:1c:df:20:fd:fe:2e:fa:6c:a2:4f:50:f8:46:df:eb:80:
1a:c8:10:58:a9:e4:00:28:ac:5e:8a:47:62:94:c9:a8:89:7a:
82:c8:2c:68:ff:bf:43:21:4b:fc:3e:21:c1:14:6d:50:8a:7f:
98:aa:49:a2:ad:4e:91:61:f2:ce:49:9c:73:90:59:77:74:d7:
89:29:40:be:60:15:de:52:1a:7e:db:a9:d6:2c:60:6f:43:56:
8d:d8:5d:fd:fb:d4:13:ab:ec:73:0a:89:97:41:08:82:b6:85:
c0:a8:68:48:bc:57:44:17:7d:26:36:77:80:3b:eb:50:f7:3e:
a4:fa:14:f5:7a:54:5f:bc:ab:d0:35:13:9b:fa:3c:13:19:a9:
27:c3:57:7b:cc:1b:d6:88:d4:b5:ff:38:f1:53:55:49:ea:9d:
a6:67:c4:01:84:63:c3:0f:b6:eb:45:d4:df:5c:0a:f4:16:3a:
b3:a4:d5:2f:2c:ae:ab:83:51:33:27:56:60:f7:ae:82:b1:cb:
f4:ec:fb:f3:49:29:9e:fe:44:69:d0:01:10:1c:8c:48:09:83:
b5:3a:5b:38:96:dd:10:31:62:5c:6b:c3:fd:8e:5c:c1:61:9f:
ff:e8:3e:79:05:6b:27:61:2d:aa:41:bf:f3:29:f3:d9:3e:f9:
2a:c0:2e:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RWv4IhgkyDn3pzEp0sM7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDM5ZDc0YjE3ZTY5MWRkMWIwNTIyMWM2MDk4Y2FmNWVl
OTNhMzYwHhcNMjUwNjI4MTYwMTA5WhcNMjUwNjI5MTYwMTA5WjAzMTEwLwYDVQQD
EyhiNjYyN2E4NWEzZDgxY2Q2NGY2YzE3ZWIwMTZjYWEyZTRmMjZkODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtoOZ+HFUxbmjKZgLeKuh/2vw36A
vcjGeqIyKi5Ww/Kddg89R+M5Jx/nUb9nRSDMAUt5Z7wBS8cHlH2bJ4t3HTRAB7Gi
lrsK8Aoe3s36bzkmemd1Te50A+Ak6IvRE1uvQnlU2fXRrJ3hT6PY4pyNAeDMh7SG
8FytcZXP8bmn8Q96zrKsVxuv5jiQ3R/3z2iQ8XiBrAP+LyzDjGCbzbSG+FptZzMq
T0Qe+dxIOG0ba5R+N4/EcTANOnrLPbvCgldJ+AQjXcJzS4VsBCRs+e8jO7dBGeNu
wCOdiyCCtwUNmSFKWtdnsrKpE+IBQHKNNdXceFxeDzWEMAq3Kp2dg0ywgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZieoWj2BzWT2wX6wFsqi5PJtgNMB8GA1UdIwQY
MBaAFGHTnXSxfmkd0bBSIcYJjK9e6To2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQt
OTgwNTExZGMwNWFlLzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQtOTgwNTExZGMwNWFl
LzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiEc3yD9
/i76bKJPUPhG3+uAGsgQWKnkACisXopHYpTJqIl6gsgsaP+/QyFL/D4hwRRtUIp/
mKpJoq1OkWHyzkmcc5BZd3TXiSlAvmAV3lIaftup1ixgb0NWjdhd/fvUE6vscwqJ
l0EIgraFwKhoSLxXRBd9JjZ3gDvrUPc+pPoU9XpUX7yr0DUTm/o8ExmpJ8NXe8wb
1ojUtf848VNVSeqdpmfEAYRjww+260XU31wK9BY6s6TVLyyuq4NRMydWYPeugrHL
9Oz780kpnv5EadABEByMSAmDtTpbOJbdEDFiXGvD/Y5cwWGf/+g+eQVrJ2EtqkG/
8ynz2T75KsAuvA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:36 2025 by rpki-client