Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: /ymE3j67Q1Y+MH05yLkcGzhk+j+8HnmNTEpqKhAnliQ=
Subject key identifier: 5F:5C:58:21:F2:B6:BA:75:1E:FE:55:00:8F:13:35:09:08:88:9D:32
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 0197B6A0C8F95EAED996C084F621683C5828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 1232
Signing time: Sat 28 Jun 2025 13:01:19 +0000
Manifest this update: Sat 28 Jun 2025 13:01:19 +0000
Manifest next update: Sun 29 Jun 2025 13:01:19 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: R6vzfy54AZjDCJgu+E6Gl9BRDHYLM72WkW4RKeeO6Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c8:f9:5e:ae:d9:96:c0:84:f6:21:68:3c:58:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: Jun 28 13:01:19 2025 GMT
Not After : Jun 29 13:01:19 2025 GMT
Subject: CN=5f5c5821f2b6ba751efe55008f13350908889d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:6b:03:24:2d:07:90:99:6f:a4:b4:dc:5e:
fb:0e:73:cd:1a:c8:a8:39:cb:aa:e2:6e:48:ef:1b:
6a:0c:5b:97:a2:aa:c3:20:10:70:58:99:7b:43:ec:
82:59:bd:9e:1e:41:31:a0:f2:3d:ba:0a:79:a8:3e:
1c:b4:be:3d:0a:1a:85:e5:66:12:98:9c:76:55:2f:
4b:a1:e1:ca:2d:d4:99:26:4d:c5:69:65:4d:2f:a0:
28:85:7f:c1:74:3e:03:5d:3e:df:52:c5:34:67:2a:
83:7b:d1:a2:0c:c6:44:f0:bf:06:2c:97:c0:0f:9c:
0e:b5:8e:3d:eb:cc:02:a0:d1:80:f7:cb:83:d3:9d:
71:cf:45:cc:6a:3e:35:74:c0:ec:8f:4f:7d:90:f5:
91:f1:58:f4:30:c1:55:f6:c8:05:4f:f4:93:7e:08:
d7:1b:58:d2:2f:43:c6:bd:85:e6:2c:0a:9c:f3:bb:
d4:a0:ff:c8:7c:71:36:27:65:f8:af:ae:b2:46:10:
4a:18:6d:5b:ba:d2:29:b6:a4:b6:2c:c0:d1:93:88:
43:9c:a8:1b:ef:1a:67:6a:26:d7:e3:c3:e8:45:52:
a4:65:83:8d:d7:72:35:8b:fc:f6:50:74:e0:8f:93:
55:d3:be:52:68:49:a0:9f:6c:51:f6:ff:d9:5b:b7:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5C:58:21:F2:B6:BA:75:1E:FE:55:00:8F:13:35:09:08:88:9D:32
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e1:ec:c4:03:09:5a:a2:cb:e4:96:32:5d:19:e5:8c:bf:a3:
33:05:1f:80:45:3e:de:97:61:9b:2b:f6:97:52:13:4b:cc:b9:
48:9d:b6:9c:a8:d7:f2:fa:a8:4a:18:09:1f:36:d3:80:81:bc:
04:d6:f7:24:6a:2c:e7:64:4d:1b:ce:c6:62:6d:de:86:f6:34:
77:d3:13:b5:7e:5e:82:bc:b0:bd:3e:c4:02:16:b9:4c:5f:d0:
0f:67:46:f9:2e:e6:95:8a:f3:fa:59:07:4f:05:a5:26:97:d8:
82:4f:4b:40:4c:00:ce:1d:3e:7e:22:b0:06:74:1f:e3:1e:d7:
54:22:c5:33:c3:ae:00:6b:af:22:ca:91:d9:60:d4:32:f6:3b:
9f:a7:c2:93:15:78:f6:d2:74:f9:f6:12:53:eb:6f:14:69:3f:
87:5c:a5:7d:e7:bd:b6:28:1d:0f:af:2a:68:f7:20:24:59:a2:
07:0c:48:33:f5:a5:6a:a2:a7:42:ae:d0:3d:3c:a9:57:b5:65:
0e:7d:c3:2c:1d:03:d7:64:ee:f2:97:8f:0b:9a:c6:e6:ff:83:
85:01:19:07:6b:1b:72:45:cc:6a:7d:6f:86:45:c5:6c:40:20:
97:e1:f6:dd:d1:91:2d:04:77:b7:14:e4:73:a1:a7:7e:cf:d1:
59:40:78:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oMj5Xq7ZlsCE9iFoPFgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGIxMTNlMDYyZDE3ZWEyMzA4MDZiMzRhMjFkZWI1NjI3
YjY3NzQwHhcNMjUwNjI4MTMwMTE5WhcNMjUwNjI5MTMwMTE5WjAzMTEwLwYDVQQD
Eyg1ZjVjNTgyMWYyYjZiYTc1MWVmZTU1MDA4ZjEzMzUwOTA4ODg5ZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7hrAyQtB5CZb6S03F77DnPNGsio
Ocuq4m5I7xtqDFuXoqrDIBBwWJl7Q+yCWb2eHkExoPI9ugp5qD4ctL49ChqF5WYS
mJx2VS9LoeHKLdSZJk3FaWVNL6AohX/BdD4DXT7fUsU0ZyqDe9GiDMZE8L8GLJfA
D5wOtY4968wCoNGA98uD051xz0XMaj41dMDsj099kPWR8Vj0MMFV9sgFT/STfgjX
G1jSL0PGvYXmLAqc87vUoP/IfHE2J2X4r66yRhBKGG1butIptqS2LMDRk4hDnKgb
7xpnaibX48PoRVKkZYON13I1i/z2UHTgj5NV075SaEmgn2xR9v/ZW7e1PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9cWCHytrp1Hv5VAI8TNQkIiJ0yMB8GA1UdIwQY
MBaAFGALET4GLRfqIwgGs0oh3rVie2d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xNGM4YzUtOWFmNS00MWIwLTk5MTct
YTBkYTQ1Mjk5YzZlLzEvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xNGM4YzUtOWFmNS00MWIwLTk5MTctYTBkYTQ1Mjk5YzZl
LzEvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuHsxAMJ
WqLL5JYyXRnljL+jMwUfgEU+3pdhmyv2l1ITS8y5SJ22nKjX8vqoShgJHzbTgIG8
BNb3JGos52RNG87GYm3ehvY0d9MTtX5egrywvT7EAha5TF/QD2dG+S7mlYrz+lkH
TwWlJpfYgk9LQEwAzh0+fiKwBnQf4x7XVCLFM8OuAGuvIsqR2WDUMvY7n6fCkxV4
9tJ0+fYSU+tvFGk/h1ylfee9tigdD68qaPcgJFmiBwxIM/WlaqKnQq7QPTypV7Vl
Dn3DLB0D12Tu8pePC5rG5v+DhQEZB2sbckXMan1vhkXFbEAgl+H23dGRLQR3txTk
c6Gnfs/RWUB4tQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:39 2025 by rpki-client