Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
File: PYyo-vPO4aXlGlxc2_lIKgACe2U.mft (raw, json)
Hash identifier: ir2bUzvdPkRsFllOmlFCy7WNDIDor5SgtggxPwf2yo4=
Subject key identifier: F3:5C:86:5B:98:27:7F:DE:0A:2C:9B:E9:94:07:0E:E7:7F:13:71:53
Authority key identifier: 3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
Certificate issuer: /CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Certificate serial: 01977AC21409D9FE108DCDB2EB7C161B9D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
Manifest number: 0B03
Signing time: Mon 16 Jun 2025 22:00:28 +0000
Manifest this update: Mon 16 Jun 2025 22:00:28 +0000
Manifest next update: Tue 17 Jun 2025 22:00:28 +0000
Files and hashes: 1: PYyo-vPO4aXlGlxc2_lIKgACe2U.crl (hash: vEYnhRhRUutwlwTOq3zNlvOzhxGITbVjKFzd4o64eic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:14:09:d9:fe:10:8d:cd:b2:eb:7c:16:1b:9d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Validity
Not Before: Jun 16 22:00:28 2025 GMT
Not After : Jun 17 22:00:28 2025 GMT
Subject: CN=f35c865b98277fde0a2c9be994070ee77f137153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:47:0f:f1:06:c9:d6:16:15:6e:50:39:7f:
d0:59:e9:73:81:82:4c:a8:50:ad:07:df:25:bb:39:
00:8b:97:46:2f:1f:48:39:9d:e2:1d:4d:08:c4:cd:
32:25:79:ca:81:69:bf:ef:ce:c3:58:2b:8e:6a:d2:
fe:86:4f:43:27:d2:0a:c8:f5:22:a6:67:0f:1d:98:
90:70:95:cb:89:ac:d6:df:56:5f:92:fe:b5:a5:08:
a2:1f:55:71:7e:a1:7c:a8:e0:d0:25:7c:d7:49:e6:
a5:d2:5f:fa:b6:7e:b9:c1:38:7b:e0:1d:ca:8f:0d:
ce:f2:b3:9d:6d:79:5c:c4:fc:2c:6f:2c:d1:83:d1:
b7:60:5b:bf:29:20:ec:ab:68:87:e1:22:aa:0e:96:
ff:ba:e9:1e:2b:db:c0:e7:4d:c4:60:71:d7:91:2c:
6c:a3:bc:e1:ae:c0:fe:fd:8d:35:ec:45:75:24:d2:
1c:3b:8c:2c:3b:f0:26:eb:59:e2:ed:96:8f:db:c6:
f7:11:75:9a:9d:a5:ac:07:b7:b8:ec:13:b4:f7:f3:
30:ea:67:9e:51:77:fd:71:70:bb:a3:d0:27:59:fb:
a0:13:a1:46:0c:af:06:7c:e6:d2:c7:01:58:77:9c:
79:e7:ce:78:f3:e3:6b:94:0e:e8:b1:74:d2:a0:39:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:86:5B:98:27:7F:DE:0A:2C:9B:E9:94:07:0E:E7:7F:13:71:53
X509v3 Authority Key Identifier:
keyid:3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c7:4b:06:d1:e1:f8:9d:45:7f:4b:d5:ef:cd:72:b4:33:4d:
6d:dd:8a:ba:f8:95:d4:75:ab:c9:79:9d:9b:b4:cb:d4:69:d6:
81:83:00:3a:e2:1f:ca:2f:a2:52:f7:99:0b:6a:39:c9:e2:07:
3b:d9:cf:fa:a0:d0:96:2f:6e:d4:e8:21:0d:6c:0a:9c:cc:72:
a2:23:d8:62:78:eb:c0:58:5f:2e:08:dc:8d:65:cb:a5:1e:76:
7b:da:c3:d6:b7:ad:de:25:d9:65:50:5c:41:39:92:11:15:eb:
98:aa:c6:b6:76:d4:79:00:ac:de:49:42:3b:8d:82:e4:93:1c:
54:ba:f9:97:a4:cc:3e:42:6f:a6:6e:6d:d6:81:66:64:a9:92:
b7:42:7e:1f:18:ae:5b:2b:ac:2d:09:b9:ba:5b:d1:b2:3f:1d:
53:a4:28:37:33:f2:74:9f:8c:64:ef:98:67:9b:ef:99:ea:d8:
79:af:bc:dd:85:a7:d9:21:93:83:8b:df:86:44:f2:92:58:ba:
b0:89:60:fd:45:8f:c5:fd:46:0f:1d:f7:16:33:c0:d5:cf:cf:
67:b8:4d:51:11:a1:3d:85:f2:7f:5f:75:b1:74:2b:ae:46:7a:
b5:86:6c:b8:04:7c:9a:66:93:75:6e:9b:98:95:49:6e:6f:16:
31:8f:cd:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6whQJ2f4Qjc2y63wWG50MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGNhOGZhZjNjZWUxYTVlNTFhNWM1Y2RiZjk0ODJhMDAw
MjdiNjUwHhcNMjUwNjE2MjIwMDI4WhcNMjUwNjE3MjIwMDI4WjAzMTEwLwYDVQQD
EyhmMzVjODY1Yjk4Mjc3ZmRlMGEyYzliZTk5NDA3MGVlNzdmMTM3MTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvVHD/EGydYWFW5QOX/QWelzgYJM
qFCtB98luzkAi5dGLx9IOZ3iHU0IxM0yJXnKgWm/787DWCuOatL+hk9DJ9IKyPUi
pmcPHZiQcJXLiazW31Zfkv61pQiiH1VxfqF8qODQJXzXSeal0l/6tn65wTh74B3K
jw3O8rOdbXlcxPwsbyzRg9G3YFu/KSDsq2iH4SKqDpb/uukeK9vA503EYHHXkSxs
o7zhrsD+/Y017EV1JNIcO4wsO/Am61ni7ZaP28b3EXWanaWsB7e47BO09/Mw6mee
UXf9cXC7o9AnWfugE6FGDK8GfObSxwFYd5x558548+NrlA7osXTSoDkjEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNchluYJ3/eCiyb6ZQHDud/E3FTMB8GA1UdIwQY
MBaAFD2MqPrzzuGl5RpcXNv5SCoAAntlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFl5by12UE80YVhsR2x4YzJfbElLZ0FDZTJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xMTIzN2QtYzY5ZC00MGQ0LWI0ZDct
NGUxNWI4NGVlNzA2LzEvUFl5by12UE80YVhsR2x4YzJfbElLZ0FDZTJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xMTIzN2QtYzY5ZC00MGQ0LWI0ZDctNGUxNWI4NGVlNzA2
LzEvUFl5by12UE80YVhsR2x4YzJfbElLZ0FDZTJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMdLBtHh
+J1Ff0vV781ytDNNbd2KuviV1HWryXmdm7TL1GnWgYMAOuIfyi+iUveZC2o5yeIH
O9nP+qDQli9u1OghDWwKnMxyoiPYYnjrwFhfLgjcjWXLpR52e9rD1ret3iXZZVBc
QTmSERXrmKrGtnbUeQCs3klCO42C5JMcVLr5l6TMPkJvpm5t1oFmZKmSt0J+Hxiu
WyusLQm5ulvRsj8dU6QoNzPydJ+MZO+YZ5vvmerYea+83YWn2SGTg4vfhkTykli6
sIlg/UWPxf1GDx33FjPA1c/PZ7hNURGhPYXyf191sXQrrkZ6tYZsuAR8mmaTdW6b
mJVJbm8WMY/NAQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 03:26:38 2025 by rpki-client