Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: OG2WdPXJkuO8VVzYph+ZxU1GX1l1uefMGnfIMD6tEFk=
Subject key identifier: 9A:09:3A:29:7D:79:5A:B7:6A:5C:0D:19:D3:30:73:58:84:99:87:03
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 0197C15B69D57985E73B8BA625063F38C673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 107E
Signing time: Mon 30 Jun 2025 15:01:22 +0000
Manifest this update: Mon 30 Jun 2025 15:01:22 +0000
Manifest next update: Tue 01 Jul 2025 15:01:22 +0000
Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: eR6veSkLSMMbPxhjn66jfDiT/jJABm9k+VfGdGJhw80=)
2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:69:d5:79:85:e7:3b:8b:a6:25:06:3f:38:c6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Jun 30 15:01:22 2025 GMT
Not After : Jul 1 15:01:22 2025 GMT
Subject: CN=9a093a297d795ab76a5c0d19d330735884998703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:2f:18:c3:ad:47:b0:b7:4f:87:c9:a2:fb:
be:34:61:51:ed:c9:25:ae:c4:59:fe:6a:7e:95:60:
03:24:2a:fb:40:08:25:13:04:ee:ff:d9:83:f3:a0:
ab:6a:33:5d:6c:c3:fc:b9:fa:9e:30:49:6d:51:29:
17:5f:37:bb:0c:c6:75:c0:b1:8e:cc:f8:5e:b3:36:
94:d4:dc:53:87:d8:12:85:f6:ec:15:95:41:50:90:
34:6f:6f:42:4f:b1:74:f8:ab:04:62:7d:1a:60:7a:
e8:9c:4e:7e:5d:af:ff:9c:8c:8a:4f:9c:4c:20:20:
c8:f4:f6:fc:57:57:22:53:f7:18:80:82:a0:f7:35:
13:fd:5e:c0:9f:98:03:af:37:f0:87:d4:4f:8b:bc:
77:ee:e5:4f:bd:53:79:d7:2b:ba:36:58:12:90:bf:
37:1f:59:81:32:be:f8:02:7e:2e:81:8a:d8:23:e3:
3d:3e:3e:9e:da:08:60:8e:be:a2:60:2d:75:44:8c:
d7:0f:e6:bf:ca:db:c7:8a:00:c1:74:23:52:ae:85:
99:95:00:cf:b5:98:cc:bb:b5:e9:c4:f8:dd:d5:b1:
fe:d1:fb:57:46:88:4a:16:19:0a:b8:78:c6:1f:e2:
a7:43:20:31:b6:c6:38:34:ad:14:7a:30:1e:74:91:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:3A:29:7D:79:5A:B7:6A:5C:0D:19:D3:30:73:58:84:99:87:03
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:16:07:0b:fc:8d:b1:c9:96:e2:7f:91:b5:2d:b9:36:02:a5:
86:e2:34:33:10:3f:56:73:2a:b1:25:0a:56:38:e3:5c:51:03:
33:29:fb:2f:36:1e:45:3e:7f:44:fe:55:cd:09:b5:29:07:ac:
5d:71:56:cd:ab:ff:26:36:5d:b8:13:1c:ff:98:95:fe:87:ba:
83:0c:cd:1b:89:64:58:9d:0d:c9:ff:72:6a:e6:6d:0c:5f:56:
72:d3:56:0d:bb:84:aa:00:ee:bf:69:fb:3d:bc:be:06:59:d2:
d2:3d:16:08:75:5b:cb:df:cf:a5:f5:44:a8:c3:1c:8d:41:d4:
76:38:ff:21:1c:1b:b6:3d:01:08:d6:18:02:27:7a:fd:f5:b1:
0e:f1:0c:fa:2e:74:cc:2e:81:7a:99:15:bb:dc:d1:b8:c7:c8:
ac:49:56:be:e6:c0:73:f3:22:66:72:16:82:7b:99:16:94:42:
55:cf:6c:e7:d9:ed:76:c1:1e:cf:f7:1a:64:3b:9c:dd:34:99:
e9:ec:7a:b3:1d:6d:b1:ed:c9:ac:cf:80:70:cd:e1:cc:db:68:
40:59:23:10:a3:37:ed:22:a9:19:e9:7a:0c:2c:8a:dc:ec:a0:
a7:88:b9:bb:9e:da:c2:f8:75:20:12:3a:6c:ea:a5:0b:13:ea:
35:21:91:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfBW2nVeYXnO4umJQY/OMZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTE5MDEyMjc1Nzc4MDdmNGI2OGM4YjhmMjVmYmVhOWM3
MjA3NjIwHhcNMjUwNjMwMTUwMTIyWhcNMjUwNzAxMTUwMTIyWjAzMTEwLwYDVQQD
Eyg5YTA5M2EyOTdkNzk1YWI3NmE1YzBkMTlkMzMwNzM1ODg0OTk4NzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLIvGMOtR7C3T4fJovu+NGFR7ckl
rsRZ/mp+lWADJCr7QAglEwTu/9mD86CrajNdbMP8ufqeMEltUSkXXze7DMZ1wLGO
zPheszaU1NxTh9gShfbsFZVBUJA0b29CT7F0+KsEYn0aYHronE5+Xa//nIyKT5xM
ICDI9Pb8V1ciU/cYgIKg9zUT/V7An5gDrzfwh9RPi7x37uVPvVN51yu6NlgSkL83
H1mBMr74An4ugYrYI+M9Pj6e2ghgjr6iYC11RIzXD+a/ytvHigDBdCNSroWZlQDP
tZjMu7XpxPjd1bH+0ftXRohKFhkKuHjGH+KnQyAxtsY4NK0UejAedJHr5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoJOil9eVq3alwNGdMwc1iEmYcDMB8GA1UdIwQY
MBaAFGIRkBInV3gH9LaMi48l++qccgdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYt
N2NmZGQ4NGY3MzRkLzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYtN2NmZGQ4NGY3MzRk
LzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRYHC/yN
scmW4n+RtS25NgKlhuI0MxA/VnMqsSUKVjjjXFEDMyn7LzYeRT5/RP5VzQm1KQes
XXFWzav/JjZduBMc/5iV/oe6gwzNG4lkWJ0Nyf9yauZtDF9WctNWDbuEqgDuv2n7
Pby+BlnS0j0WCHVby9/PpfVEqMMcjUHUdjj/IRwbtj0BCNYYAid6/fWxDvEM+i50
zC6BepkVu9zRuMfIrElWvubAc/MiZnIWgnuZFpRCVc9s59ntdsEez/caZDuc3TSZ
6ex6sx1tse3JrM+AcM3hzNtoQFkjEKM37SKpGel6DCyK3Oygp4i5u57awvh1IBI6
bOqlCxPqNSGRGQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:47:38 2025 by rpki-client