Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
File: YA09DkcUJu84PjkRODpJg78idkQ.mft (raw, json)
Hash identifier: XIGz5TozUwt3zFPJhJTbLzHz1cuuuk8XxB10JSH3n2M=
Subject key identifier: 7D:95:F9:93:5F:FD:49:00:E8:85:B0:D9:6F:00:0F:C2:95:F7:F6:02
Authority key identifier: 60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
Certificate issuer: /CN=600d3d0e471426ef383e3911383a4983bf227644
Certificate serial: 0197B7EA6F0AE181B68183972CAA689B5E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
Manifest number: 0287
Signing time: Sat 28 Jun 2025 19:01:23 +0000
Manifest this update: Sat 28 Jun 2025 19:01:23 +0000
Manifest next update: Sun 29 Jun 2025 19:01:23 +0000
Files and hashes: 1: YA09DkcUJu84PjkRODpJg78idkQ.crl (hash: xduGc8XuDoj9EDOaEubTLe+NAA9fb+msdSuP+X+qMOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6f:0a:e1:81:b6:81:83:97:2c:aa:68:9b:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600d3d0e471426ef383e3911383a4983bf227644
Validity
Not Before: Jun 28 19:01:23 2025 GMT
Not After : Jun 29 19:01:23 2025 GMT
Subject: CN=7d95f9935ffd4900e885b0d96f000fc295f7f602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:1f:d6:0e:ff:e1:90:a5:1b:da:76:3a:0c:
fd:78:3b:5b:83:68:0a:8b:14:14:c2:d3:1c:e3:27:
67:04:4c:1a:dd:81:45:f6:b0:eb:b9:56:7e:7f:97:
a6:3a:03:18:4b:0f:96:aa:3e:5d:89:8e:e0:cd:e9:
c9:01:c8:0a:43:7e:3f:28:ea:f4:00:a5:b7:ab:21:
e0:a8:f4:0f:25:3b:cc:1c:7c:be:e5:f2:a3:7e:f7:
a8:ab:cc:58:0b:70:df:aa:8e:ee:17:d2:c6:df:a0:
21:b9:6b:36:ea:19:9c:16:97:32:13:b8:eb:e1:0e:
1b:09:29:34:82:5d:5d:cf:f1:97:2f:50:fb:e6:d2:
38:80:b0:6f:7f:f8:1d:ac:31:fb:e8:b1:b6:ab:88:
09:95:e7:86:32:c0:33:08:a9:7b:7d:3f:7e:32:26:
ee:0c:00:96:f4:9f:1d:29:80:00:59:e0:91:52:94:
f7:df:b8:d2:54:2e:82:76:63:fb:6f:fb:d9:e3:34:
49:ae:e8:6e:65:a2:5f:31:f0:d9:6d:db:05:9b:e5:
57:50:81:85:30:ce:a1:56:49:78:a4:ee:49:3d:ec:
a8:c2:d1:a8:72:c4:6f:f1:56:88:02:fe:f4:08:58:
73:39:82:3f:ff:5c:d9:56:35:21:32:b2:dd:62:3e:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:95:F9:93:5F:FD:49:00:E8:85:B0:D9:6F:00:0F:C2:95:F7:F6:02
X509v3 Authority Key Identifier:
keyid:60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b9:16:f4:44:29:5f:7c:39:ec:fc:16:78:38:00:7a:84:7d:
24:70:63:33:86:a2:83:c6:4e:d3:25:e3:a2:7c:8b:44:2a:e9:
d6:d0:76:b2:10:50:bf:83:66:8e:cd:e2:34:4b:77:b1:50:8a:
bf:30:66:60:c0:2f:c9:48:1f:4d:80:b8:cd:59:fe:ce:d0:31:
9c:8a:4b:0d:5e:53:f2:b4:d0:e9:14:74:db:4c:d5:31:90:ec:
fa:a9:a8:f8:7c:73:6f:ba:2e:a2:9c:13:fe:89:d0:54:2e:a1:
bc:bc:aa:69:6f:7a:44:e3:0f:8e:2b:42:13:91:c4:17:12:e5:
8c:ae:82:2b:80:f6:70:8e:23:c2:6f:1c:9d:b1:5c:c7:fe:4a:
b7:b8:6d:81:f1:5b:37:d9:f3:e6:e7:3b:6f:d0:cb:b6:9e:b1:
ce:2e:86:11:4b:e5:d5:f1:01:93:40:ee:4a:df:e5:2a:64:52:
ab:51:81:98:7e:44:c1:08:5e:bc:a2:e2:99:48:d2:cc:11:26:
40:cd:fb:43:8c:50:fe:9e:cc:0f:66:2c:14:35:e2:73:48:a1:
80:33:fa:b1:71:f9:5d:27:89:0d:01:f9:ab:80:2a:63:d2:8b:
43:2f:8e:9e:cc:68:69:27:3d:5d:c4:4d:fb:52:0a:40:2d:f0:
fb:61:b0:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36m8K4YG2gYOXLKpom14AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGQzZDBlNDcxNDI2ZWYzODNlMzkxMTM4M2E0OTgzYmYy
Mjc2NDQwHhcNMjUwNjI4MTkwMTIzWhcNMjUwNjI5MTkwMTIzWjAzMTEwLwYDVQQD
Eyg3ZDk1Zjk5MzVmZmQ0OTAwZTg4NWIwZDk2ZjAwMGZjMjk1ZjdmNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlgf1g7/4ZClG9p2Ogz9eDtbg2gK
ixQUwtMc4ydnBEwa3YFF9rDruVZ+f5emOgMYSw+Wqj5diY7gzenJAcgKQ34/KOr0
AKW3qyHgqPQPJTvMHHy+5fKjfveoq8xYC3Dfqo7uF9LG36AhuWs26hmcFpcyE7jr
4Q4bCSk0gl1dz/GXL1D75tI4gLBvf/gdrDH76LG2q4gJleeGMsAzCKl7fT9+Mibu
DACW9J8dKYAAWeCRUpT337jSVC6CdmP7b/vZ4zRJruhuZaJfMfDZbdsFm+VXUIGF
MM6hVkl4pO5JPeyowtGocsRv8VaIAv70CFhzOYI//1zZVjUhMrLdYj4bAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2V+ZNf/UkA6IWw2W8AD8KV9/YCMB8GA1UdIwQY
MBaAFGANPQ5HFCbvOD45ETg6SYO/InZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xYWY1MWItN2IxNy00OTgwLTk4Yzct
M2MyZmE4YWFmMDMxLzEvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xYWY1MWItN2IxNy00OTgwLTk4YzctM2MyZmE4YWFmMDMx
LzEvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprkW9EQp
X3w57PwWeDgAeoR9JHBjM4aig8ZO0yXjonyLRCrp1tB2shBQv4Nmjs3iNEt3sVCK
vzBmYMAvyUgfTYC4zVn+ztAxnIpLDV5T8rTQ6RR020zVMZDs+qmo+Hxzb7ouopwT
/onQVC6hvLyqaW96ROMPjitCE5HEFxLljK6CK4D2cI4jwm8cnbFcx/5Kt7htgfFb
N9nz5uc7b9DLtp6xzi6GEUvl1fEBk0DuSt/lKmRSq1GBmH5EwQhevKLimUjSzBEm
QM37Q4xQ/p7MD2YsFDXic0ihgDP6sXH5XSeJDQH5q4AqY9KLQy+OnsxoaSc9XcRN
+1IKQC3w+2Gw6g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:08 2025 by rpki-client