Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: F7ZIAeaVUDFpCZAr87LBrkqaf3ZIXGM60cdM8R7FiJY=
Subject key identifier: 08:E8:DB:13:6F:2A:D2:A7:37:83:6B:48:7B:C7:67:47:BA:C0:41:6B
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 0198D6601D824D217F5AAA1A5D14B92031D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 12C7
Signing time: Sat 23 Aug 2025 10:01:19 +0000
Manifest this update: Sat 23 Aug 2025 10:01:19 +0000
Manifest next update: Sun 24 Aug 2025 10:01:19 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: n1lql2RcYOj0pE3VQCRwHAvnX0IGlr6PCnYcc0IT9Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1d:82:4d:21:7f:5a:aa:1a:5d:14:b9:20:31:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: Aug 23 10:01:19 2025 GMT
Not After : Aug 24 10:01:19 2025 GMT
Subject: CN=08e8db136f2ad2a737836b487bc76747bac0416b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:c5:9e:4f:ae:5d:0a:c2:4b:04:dd:0a:ce:
9b:78:4b:8f:e1:63:70:16:13:6c:ce:2c:81:aa:00:
c3:35:fc:a0:ae:6a:46:fb:c2:f6:66:2f:f6:7a:df:
b3:f3:bf:32:34:fb:3a:c0:09:ac:ec:cc:5a:9e:e5:
a5:7c:58:78:25:fb:c3:56:90:cf:be:6c:f1:13:63:
7a:ef:a6:d8:01:c2:fa:19:ee:4f:c4:10:73:e4:bb:
ef:0a:39:b7:01:89:46:3a:c4:96:95:97:e4:74:ce:
e2:be:c9:12:3b:9d:d6:0c:55:88:74:88:41:0b:45:
18:2c:ee:02:0a:ba:6f:db:f7:d8:6d:57:89:d7:9c:
75:5b:dd:4d:f7:d4:ed:a7:2a:65:a7:45:fe:bb:b9:
dd:b0:e7:1e:9a:3d:32:a1:ef:9f:86:6b:1d:65:73:
fb:78:bc:e7:4d:06:38:f4:3f:9b:f3:d9:8a:ab:f8:
82:67:20:ab:a1:cb:f0:28:52:97:d0:c7:46:d5:75:
dd:87:60:a1:b8:89:77:f5:bd:4f:14:e8:da:b3:6a:
91:bc:fc:78:5d:65:0b:9e:7a:fc:90:4b:f9:c6:8e:
fa:bc:75:bf:25:c4:e3:b1:51:39:a6:b1:53:1b:c5:
c4:dc:8a:a2:d8:dc:ba:1d:52:c7:45:d2:de:5a:ce:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:DB:13:6F:2A:D2:A7:37:83:6B:48:7B:C7:67:47:BA:C0:41:6B
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e4:2e:5d:32:c8:62:97:0f:62:9d:43:04:b2:ce:5a:98:42:
a1:1b:53:84:63:12:39:ee:82:3b:53:87:1d:fd:cf:e5:d2:4a:
c2:6b:d8:9b:da:72:5f:a6:8a:03:d7:1b:1b:83:c6:03:f1:96:
1f:db:70:29:d8:c1:31:8d:e1:13:80:43:6f:ab:ad:b4:fc:cd:
f7:9e:7d:92:6f:ba:4a:49:ee:c8:d6:e4:32:89:c8:be:73:b8:
fb:49:61:80:88:5c:4b:05:c8:48:d5:85:4a:35:3e:c1:98:e4:
ed:01:f9:cc:b5:14:9b:b9:2c:8a:ef:fe:99:eb:df:70:df:9d:
55:a0:64:96:69:75:1e:ce:c6:ec:91:27:8b:7b:99:b5:b8:26:
03:f0:54:b1:44:6c:cc:08:33:81:28:bf:88:36:26:88:05:15:
06:ef:aa:f3:5c:23:14:7c:ae:e8:33:43:dc:97:c3:c9:b0:c9:
ff:31:cc:f8:81:f4:12:34:88:c4:98:8d:b9:58:a6:6a:43:e4:
77:cb:0d:fa:fd:8b:bf:82:00:2c:3f:7d:e5:79:b5:28:01:f1:
45:05:53:06:8e:03:36:db:57:74:c0:88:94:d3:22:28:a7:69:
89:21:2e:97:1c:97:54:4f:4f:a5:ab:81:b3:8d:4e:6a:ec:75:
b8:29:d2:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYB2CTSF/WqoaXRS5IDHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGIxMTNlMDYyZDE3ZWEyMzA4MDZiMzRhMjFkZWI1NjI3
YjY3NzQwHhcNMjUwODIzMTAwMTE5WhcNMjUwODI0MTAwMTE5WjAzMTEwLwYDVQQD
EygwOGU4ZGIxMzZmMmFkMmE3Mzc4MzZiNDg3YmM3Njc0N2JhYzA0MTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6bFnk+uXQrCSwTdCs6beEuP4WNw
FhNsziyBqgDDNfygrmpG+8L2Zi/2et+z878yNPs6wAms7MxanuWlfFh4JfvDVpDP
vmzxE2N676bYAcL6Ge5PxBBz5LvvCjm3AYlGOsSWlZfkdM7ivskSO53WDFWIdIhB
C0UYLO4CCrpv2/fYbVeJ15x1W91N99Ttpyplp0X+u7ndsOcemj0yoe+fhmsdZXP7
eLznTQY49D+b89mKq/iCZyCrocvwKFKX0MdG1XXdh2ChuIl39b1PFOjas2qRvPx4
XWULnnr8kEv5xo76vHW/JcTjsVE5prFTG8XE3Iqi2Ny6HVLHRdLeWs43awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjo2xNvKtKnN4NrSHvHZ0e6wEFrMB8GA1UdIwQY
MBaAFGALET4GLRfqIwgGs0oh3rVie2d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xNGM4YzUtOWFmNS00MWIwLTk5MTct
YTBkYTQ1Mjk5YzZlLzEvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xNGM4YzUtOWFmNS00MWIwLTk5MTctYTBkYTQ1Mjk5YzZl
LzEvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOQuXTLI
YpcPYp1DBLLOWphCoRtThGMSOe6CO1OHHf3P5dJKwmvYm9pyX6aKA9cbG4PGA/GW
H9twKdjBMY3hE4BDb6uttPzN9559km+6SknuyNbkMonIvnO4+0lhgIhcSwXISNWF
SjU+wZjk7QH5zLUUm7ksiu/+mevfcN+dVaBklml1Hs7G7JEni3uZtbgmA/BUsURs
zAgzgSi/iDYmiAUVBu+q81wjFHyu6DND3JfDybDJ/zHM+IH0EjSIxJiNuVimakPk
d8sN+v2Lv4IALD995Xm1KAHxRQVTBo4DNttXdMCIlNMiKKdpiSEulxyXVE9PpauB
s41Oaux1uCnSPg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:22 2025 by rpki-client