Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: l47jPIoMKEaslLlkqmoHcA253/T8DXCo/VZwfY8F8fg=
Subject key identifier: B3:00:4E:89:BE:8A:C6:16:4C:95:A0:DB:50:B5:1D:09:AB:14:E5:EA
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 0197B5C4C48D88635CB5C4E36B3B6E8C2DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 1177
Signing time: Sat 28 Jun 2025 09:01:00 +0000
Manifest this update: Sat 28 Jun 2025 09:01:00 +0000
Manifest next update: Sun 29 Jun 2025 09:01:00 +0000
Files and hashes: 1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: 0p/90KKSIUZURUiB8tIglit9BOSVmdA0kYoc/Z80fFU=)
2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:c4:8d:88:63:5c:b5:c4:e3:6b:3b:6e:8c:2d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Jun 28 09:01:00 2025 GMT
Not After : Jun 29 09:01:00 2025 GMT
Subject: CN=b3004e89be8ac6164c95a0db50b51d09ab14e5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:23:ad:6e:80:5a:f2:b1:d0:0b:16:a4:56:
12:28:82:79:80:ba:00:00:37:79:15:57:b0:16:0f:
48:37:73:43:9a:01:ef:95:c8:6a:6e:d2:5a:3d:24:
cd:40:45:e1:65:10:a4:ee:ab:ed:11:18:4d:75:a1:
f9:b2:0e:db:f3:0d:d4:04:25:03:8e:64:ba:52:5f:
fd:8f:6b:d8:20:1d:56:1d:9b:a5:9e:b8:06:b2:67:
af:0b:71:f8:0c:43:62:da:56:26:49:af:b7:30:02:
1f:5f:2d:bd:05:f7:35:f0:dc:b0:72:a0:74:e9:90:
f7:8c:ea:a3:31:4e:13:d7:a7:a3:be:03:0e:39:d2:
a3:f2:18:a0:44:49:25:a6:14:93:48:76:31:38:15:
e2:f7:67:d9:6f:a8:fd:97:51:e3:dd:3f:90:75:06:
5e:e0:c0:c2:5c:ec:a1:49:ed:c8:a5:8d:0f:fa:13:
82:e3:56:45:7c:02:24:5c:f0:96:29:73:bd:d3:8c:
ca:93:81:8d:a3:3b:e0:be:3a:ef:a1:b0:24:1b:3d:
31:5c:b8:ce:e2:f5:84:8f:e1:3e:2e:93:83:ac:ba:
ff:22:47:ef:fb:e2:05:fb:67:5a:b4:3a:a2:48:d9:
3e:5b:08:dd:5d:07:f8:b9:07:40:57:6e:d5:f6:b0:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:00:4E:89:BE:8A:C6:16:4C:95:A0:DB:50:B5:1D:09:AB:14:E5:EA
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5c:5e:09:1d:da:4a:d2:b4:22:f6:b9:d5:d6:f0:82:09:57:
f5:74:5b:f0:7a:3a:51:ca:85:75:aa:5e:cf:08:03:27:b0:f2:
9f:78:f8:df:60:ae:b9:db:fb:c8:ae:a7:22:a3:e9:b1:cf:b8:
b9:5b:77:c3:81:60:55:de:ce:89:32:5f:0f:b8:15:8e:ac:11:
9c:72:17:6d:7e:01:4e:07:a6:81:14:1d:ee:8f:83:75:e9:fc:
d9:17:ec:0f:d9:8f:43:d2:1d:34:d3:0b:25:df:f5:58:83:c5:
ef:f0:92:e7:be:f3:bc:b6:36:e4:1e:4b:c1:db:f7:06:35:43:
3a:ae:57:33:c9:0a:1d:47:81:f7:1f:44:26:eb:5e:e2:39:bb:
4d:7d:cf:e2:28:9b:f1:a6:d8:f0:b9:bb:fc:58:61:5d:28:82:
02:3b:ed:5c:7e:87:f6:fa:e7:b8:a9:ed:88:d9:f7:e7:ca:69:
2e:0e:d3:8f:58:d8:54:21:b9:ca:4c:3b:bc:2c:67:63:c5:96:
25:b9:60:39:5a:9a:a3:a8:38:84:d5:69:89:73:8e:bb:30:a1:
4a:15:c8:bd:9a:7c:18:23:56:df:16:ee:06:70:75:7c:30:5a:
89:d5:a1:b5:43:a2:9d:0c:1d:bf:a1:46:8b:32:b6:0e:ac:8b:
84:04:90:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xMSNiGNctcTjaztujC3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2Q3YjBlNWZlNmQ2OWI0ZDc5N2RlYzNkMTEyYzQ3Yjhh
MTkyMjQwHhcNMjUwNjI4MDkwMTAwWhcNMjUwNjI5MDkwMTAwWjAzMTEwLwYDVQQD
EyhiMzAwNGU4OWJlOGFjNjE2NGM5NWEwZGI1MGI1MWQwOWFiMTRlNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy10jrW6AWvKx0AsWpFYSKIJ5gLoA
ADd5FVewFg9IN3NDmgHvlchqbtJaPSTNQEXhZRCk7qvtERhNdaH5sg7b8w3UBCUD
jmS6Ul/9j2vYIB1WHZulnrgGsmevC3H4DENi2lYmSa+3MAIfXy29Bfc18NywcqB0
6ZD3jOqjMU4T16ejvgMOOdKj8higREklphSTSHYxOBXi92fZb6j9l1Hj3T+QdQZe
4MDCXOyhSe3IpY0P+hOC41ZFfAIkXPCWKXO904zKk4GNozvgvjrvobAkGz0xXLjO
4vWEj+E+LpODrLr/Ikfv++IF+2datDqiSNk+WwjdXQf4uQdAV27V9rDXywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMATom+isYWTJWg21C1HQmrFOXqMB8GA1UdIwQY
MBaAFGB9ew5f5tabTXl97D0RLEe4oZIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUt
YWUwNWFlMTI5MWYyLzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUtYWUwNWFlMTI5MWYy
LzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVxeCR3a
StK0Iva51dbwgglX9XRb8Ho6UcqFdapezwgDJ7Dyn3j432Cuudv7yK6nIqPpsc+4
uVt3w4FgVd7OiTJfD7gVjqwRnHIXbX4BTgemgRQd7o+Dden82RfsD9mPQ9IdNNML
Jd/1WIPF7/CS577zvLY25B5Lwdv3BjVDOq5XM8kKHUeB9x9EJute4jm7TX3P4iib
8abY8Lm7/FhhXSiCAjvtXH6H9vrnuKntiNn358ppLg7Tj1jYVCG5ykw7vCxnY8WW
JblgOVqao6g4hNVpiXOOuzChShXIvZp8GCNW3xbuBnB1fDBaidWhtUOinQwdv6FG
izK2DqyLhASQXA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:31 2025 by rpki-client