Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: yNxQEqo8IUY4glN6djBZER3RJ8RlwNp1LE1CGTukuzo=
Subject key identifier: D7:57:F0:93:C8:D3:81:1B:CA:FC:CB:11:32:59:25:44:FC:9A:A8:67
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 0197B77C81D0540AD518C157445F448EAD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: NPa4uKxrefT4knvPTvqikDY59voA2CUpjzL6Hg7MKpg=)
2: lpQpCVUUyuieF-my1hQ69F4PEZk.roa (hash: WA4/OyJVwgJx0ERp2sKecmZzmYmPwtki2xCkuF+SczM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:81:d0:54:0a:d5:18:c1:57:44:5f:44:8e:ad:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=d757f093c8d3811bcafccb1132592544fc9aa867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:8a:be:5a:72:a1:15:97:30:7b:4f:e6:30:
c1:ed:93:9b:d8:2a:be:db:59:8d:c4:b7:d7:15:d6:
47:b9:d4:de:9b:56:25:62:68:4b:3c:ba:66:e3:64:
43:e5:1f:5c:dd:fc:d6:0e:06:a5:70:ac:b5:22:9b:
bc:10:6d:11:02:6f:7c:ab:86:cb:d3:0d:49:e8:05:
7f:fb:50:ff:95:e0:5f:bd:00:fc:4d:40:c5:35:cb:
4c:e7:a1:e0:f8:ab:3f:3d:87:51:f7:4f:60:d8:d5:
2d:0d:2e:61:d3:b0:66:90:cb:71:97:ae:f3:7f:84:
7d:5f:29:e2:33:ab:90:3a:a4:9d:98:63:41:24:2b:
fd:0f:99:62:71:87:a8:7d:1d:35:47:9d:2c:81:0c:
7d:e9:6b:af:50:f2:b2:2e:bd:9b:ea:2f:65:05:5e:
08:f2:ec:21:7e:8d:73:35:58:e8:41:bc:4e:81:59:
b2:19:ee:ef:94:10:26:d9:96:b6:d4:03:e0:0d:83:
b2:de:78:32:93:7a:f5:c8:2f:01:32:00:c5:25:d3:
3b:41:be:c4:0f:c9:53:d3:6f:10:24:8a:f5:9d:56:
cf:14:af:b1:4d:67:ed:a4:d9:fe:82:34:0b:9a:14:
0d:80:f8:7e:71:56:95:92:95:be:bd:f7:e5:8d:b3:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:57:F0:93:C8:D3:81:1B:CA:FC:CB:11:32:59:25:44:FC:9A:A8:67
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d0:a8:8e:c6:dc:84:29:c5:4b:61:77:e8:fb:3d:2f:f6:1a:
a7:45:6b:53:7f:2a:58:80:14:93:02:71:b7:37:30:b8:f3:f3:
c8:95:16:55:b9:de:2c:5f:85:75:fe:ea:bb:4d:40:ee:03:68:
01:3e:c8:66:be:f4:b9:4f:50:f1:95:59:74:5c:62:fc:77:d6:
ca:f9:40:38:d0:7c:08:47:d1:10:40:64:1d:df:cc:fd:4b:6a:
b7:01:b2:4e:ec:8a:ce:99:2c:0a:a2:b6:d5:61:f4:ab:f0:84:
81:42:a3:bb:d6:1f:ce:26:b2:71:72:e9:89:72:62:8f:99:b1:
95:08:be:79:12:23:b1:96:5e:4c:20:9c:41:d0:fe:4e:9b:61:
47:5c:d2:70:d2:d0:cf:1a:c8:d6:1b:6c:ff:52:8b:30:53:1a:
a6:58:75:29:d0:be:66:0e:27:21:c1:7b:b7:50:98:c8:03:f4:
12:e4:6f:d2:30:a2:72:1b:53:b5:4e:14:e3:b1:3b:47:5d:a3:
a3:cf:3b:2c:10:aa:30:8e:a3:c0:6e:78:ca:94:a7:61:fc:24:
e8:f9:d6:3e:b8:c2:68:b7:1a:8a:ca:9c:c0:ee:b7:66:91:c5:
12:94:71:73:29:9d:e7:84:ce:87:2e:2c:d5:95:22:3c:d9:05:
b5:8b:7e:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIHQVArVGMFXRF9Ejq0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMmFlZjRjN2JmZTdlMDcyZjYyZDJkZDUwNWFiNTdlMzdl
YTM4NWUwHhcNMjUwNjI4MTcwMTE5WhcNMjUwNjI5MTcwMTE5WjAzMTEwLwYDVQQD
EyhkNzU3ZjA5M2M4ZDM4MTFiY2FmY2NiMTEzMjU5MjU0NGZjOWFhODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKeKvlpyoRWXMHtP5jDB7ZOb2Cq+
21mNxLfXFdZHudTem1YlYmhLPLpm42RD5R9c3fzWDgalcKy1Ipu8EG0RAm98q4bL
0w1J6AV/+1D/leBfvQD8TUDFNctM56Hg+Ks/PYdR909g2NUtDS5h07BmkMtxl67z
f4R9XyniM6uQOqSdmGNBJCv9D5licYeofR01R50sgQx96WuvUPKyLr2b6i9lBV4I
8uwhfo1zNVjoQbxOgVmyGe7vlBAm2Za21APgDYOy3ngyk3r1yC8BMgDFJdM7Qb7E
D8lT028QJIr1nVbPFK+xTWftpNn+gjQLmhQNgPh+cVaVkpW+vffljbOeFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdX8JPI04EbyvzLETJZJUT8mqhnMB8GA1UdIwQY
MBaAFGEq70x7/n4HL2LS3VBatX436jheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgt
YTIwN2M3YTE5ZWQyLzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgtYTIwN2M3YTE5ZWQy
LzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtCojsbc
hCnFS2F36Ps9L/Yap0VrU38qWIAUkwJxtzcwuPPzyJUWVbneLF+Fdf7qu01A7gNo
AT7IZr70uU9Q8ZVZdFxi/HfWyvlAONB8CEfREEBkHd/M/UtqtwGyTuyKzpksCqK2
1WH0q/CEgUKju9YfziaycXLpiXJij5mxlQi+eRIjsZZeTCCcQdD+TpthR1zScNLQ
zxrI1hts/1KLMFMaplh1KdC+Zg4nIcF7t1CYyAP0EuRv0jCichtTtU4U47E7R12j
o887LBCqMI6jwG54ypSnYfwk6PnWPrjCaLcaisqcwO63ZpHFEpRxcymd54TOhy4s
1ZUiPNkFtYt+Yg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:49 2025 by rpki-client