Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
File: _ypds7oz42wW2_UmCy_idK5_siI.mft (raw, json)
Hash identifier: aKcLaSpj4mduUTsu5E8v/JrEfdTvbdn4vIYvGbnalV4=
Subject key identifier: 6E:A4:D1:B5:BE:A9:AE:DE:E6:D4:37:49:6F:EB:5B:DF:9E:DE:71:4B
Authority key identifier: FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
Certificate issuer: /CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Certificate serial: 0197B5FC18E7DCB815142F8ACCA76DDF4B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
Manifest number: 0C94
Signing time: Sat 28 Jun 2025 10:01:26 +0000
Manifest this update: Sat 28 Jun 2025 10:01:26 +0000
Manifest next update: Sun 29 Jun 2025 10:01:26 +0000
Files and hashes: 1: _ypds7oz42wW2_UmCy_idK5_siI.crl (hash: jhcTLx8SPJWO4fWvuBohmwZdMYftOmizjDIR9+Juizs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:18:e7:dc:b8:15:14:2f:8a:cc:a7:6d:df:4b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Validity
Not Before: Jun 28 10:01:26 2025 GMT
Not After : Jun 29 10:01:26 2025 GMT
Subject: CN=6ea4d1b5bea9aedee6d437496feb5bdf9ede714b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:83:10:02:55:94:f5:75:07:1a:67:f8:58:
1e:c8:67:99:7e:90:a9:18:16:5a:b3:99:95:1e:4d:
cf:13:79:11:cf:49:d7:5a:51:07:04:f1:74:2e:ce:
46:aa:2c:59:d6:fb:1a:a8:c9:65:2e:b1:c7:c2:10:
0e:da:7d:d9:84:45:73:c0:bd:39:ac:22:0c:21:fd:
37:74:7b:15:c9:c7:8d:de:86:95:f7:3d:70:8b:75:
a2:72:a3:47:06:7d:5e:f6:c4:3f:c6:fd:21:ee:1a:
f1:de:df:e9:b7:1d:50:a1:6a:41:aa:fc:8d:de:6d:
4a:6d:30:43:e3:06:e4:ca:40:08:51:95:af:2c:9b:
dc:02:bc:fc:ca:5c:91:a3:b7:49:63:15:7c:8e:12:
aa:03:c4:e9:5e:4a:59:d5:4c:19:b5:d4:a9:9b:51:
eb:b0:3f:d3:50:8b:24:90:d7:25:99:b0:c6:87:11:
da:32:b5:6b:8c:b1:97:54:2d:0f:25:db:51:b8:f4:
83:75:4c:5a:0e:0f:e8:7c:c5:c4:de:60:b0:47:b0:
10:5f:ac:a0:5e:90:c4:d3:4d:f0:cd:4b:40:07:38:
bc:22:a5:4c:ee:15:13:db:2d:11:71:f9:24:9e:b5:
6a:c2:17:ba:18:c9:d1:97:1e:77:e5:47:18:63:dd:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A4:D1:B5:BE:A9:AE:DE:E6:D4:37:49:6F:EB:5B:DF:9E:DE:71:4B
X509v3 Authority Key Identifier:
keyid:FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f6:6e:97:cd:6c:a4:33:e3:23:b6:1f:a8:ab:89:78:02:07:
1d:d0:5f:df:ea:80:a5:da:0a:88:d5:5f:2a:13:46:3d:eb:88:
47:cd:0b:cb:12:84:06:83:74:6f:67:15:e7:40:d3:02:ca:f2:
15:ea:80:1e:61:c3:4f:5a:03:7d:35:27:9d:b1:67:04:85:87:
52:d7:a5:21:41:da:66:76:b6:f2:5b:aa:2b:12:5d:e9:68:82:
1e:71:21:bb:dc:98:cc:9a:35:9c:87:74:83:31:4d:4d:36:6f:
cd:21:2e:18:58:7d:08:30:ef:61:c2:45:5a:46:4e:d0:d9:84:
0f:80:d8:38:17:a0:46:35:e8:fb:21:af:ef:63:09:46:55:4d:
8b:05:8d:75:1f:1e:70:05:59:37:a2:5a:ba:92:c0:ad:c1:37:
d4:ea:5c:08:29:7c:57:da:9d:82:28:1c:bc:c0:6e:14:57:ce:
ea:ac:78:fd:5f:e2:19:5c:1d:5e:51:8c:3f:38:58:3a:08:5d:
45:9b:db:3e:7a:7b:bc:2f:8c:1f:37:ec:79:1a:6e:bf:ab:d0:
89:a6:ad:80:c4:c0:a1:c9:26:26:e1:ba:e3:c2:cc:6c:6e:f0:
07:3d:d0:0e:40:a2:d9:bd:56:39:9a:05:0f:1c:cf:63:ec:36:
7e:82:b9:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/Bjn3LgVFC+KzKdt30taMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMmE1ZGIzYmEzM2UzNmMxNmRiZjUyNjBiMmZlMjc0YWU3
ZmIyMjIwHhcNMjUwNjI4MTAwMTI2WhcNMjUwNjI5MTAwMTI2WjAzMTEwLwYDVQQD
Eyg2ZWE0ZDFiNWJlYTlhZWRlZTZkNDM3NDk2ZmViNWJkZjllZGU3MTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArISDEAJVlPV1Bxpn+FgeyGeZfpCp
GBZas5mVHk3PE3kRz0nXWlEHBPF0Ls5GqixZ1vsaqMllLrHHwhAO2n3ZhEVzwL05
rCIMIf03dHsVyceN3oaV9z1wi3WicqNHBn1e9sQ/xv0h7hrx3t/ptx1QoWpBqvyN
3m1KbTBD4wbkykAIUZWvLJvcArz8ylyRo7dJYxV8jhKqA8TpXkpZ1UwZtdSpm1Hr
sD/TUIskkNclmbDGhxHaMrVrjLGXVC0PJdtRuPSDdUxaDg/ofMXE3mCwR7AQX6yg
XpDE003wzUtABzi8IqVM7hUT2y0RcfkknrVqwhe6GMnRlx535UcYY93YgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6k0bW+qa7e5tQ3SW/rW9+e3nFLMB8GA1UdIwQY
MBaAFP8qXbO6M+NsFtv1Jgsv4nSuf7IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81ZGY3MTAtZGY4Ni00MmMwLThhYTIt
NTI2MGNkNWMyNGMzLzEvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81ZGY3MTAtZGY4Ni00MmMwLThhYTItNTI2MGNkNWMyNGMz
LzEvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/Zul81s
pDPjI7YfqKuJeAIHHdBf3+qApdoKiNVfKhNGPeuIR80LyxKEBoN0b2cV50DTAsry
FeqAHmHDT1oDfTUnnbFnBIWHUtelIUHaZna28luqKxJd6WiCHnEhu9yYzJo1nId0
gzFNTTZvzSEuGFh9CDDvYcJFWkZO0NmED4DYOBegRjXo+yGv72MJRlVNiwWNdR8e
cAVZN6JaupLArcE31OpcCCl8V9qdgigcvMBuFFfO6qx4/V/iGVwdXlGMPzhYOghd
RZvbPnp7vC+MHzfseRpuv6vQiaatgMTAockmJuG648LMbG7wBz3QDkCi2b1WOZoF
DxzPY+w2foK5cQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:59 2025 by rpki-client