Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: MVQ/jfrUQDCr/xRuYCmHM2BD5VFBM3PEQ6bkI5hIP28=
Subject key identifier: CC:CA:5C:6E:89:9D:00:3E:D2:9B:86:A7:9C:1B:89:20:4B:AF:52:05
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 019776E5C455C156160B10AC83BB7A22C135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 063B
Signing time: Mon 16 Jun 2025 04:00:58 +0000
Manifest this update: Mon 16 Jun 2025 04:00:58 +0000
Manifest next update: Tue 17 Jun 2025 04:00:58 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: 9G4RSO2ZcapHSaVtRhdf6iEiosQVPZeOD3gP38Uo8Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:c4:55:c1:56:16:0b:10:ac:83:bb:7a:22:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Jun 16 04:00:58 2025 GMT
Not After : Jun 17 04:00:58 2025 GMT
Subject: CN=ccca5c6e899d003ed29b86a79c1b89204baf5205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:41:6b:a2:1a:0b:c6:e9:3a:0f:e4:2d:cd:
3a:10:a6:4a:11:9c:c8:7d:51:72:f8:74:00:e2:f2:
26:1a:8f:64:c7:e7:bf:89:6c:33:cd:f6:e5:2e:2f:
b0:f2:e7:20:56:8a:27:9c:2b:ce:43:28:0e:2d:97:
7d:e4:a0:49:c7:23:83:46:82:26:59:c9:15:c5:ad:
34:cf:e4:92:4d:f6:07:51:1b:3c:85:b1:2f:0d:33:
0b:6a:b0:34:f8:ff:4b:41:f9:88:41:db:48:a6:b4:
1f:85:91:15:72:8a:b6:f4:b7:b3:74:2b:0f:1b:c8:
27:2f:16:8e:35:55:f6:80:e4:b7:68:2b:af:3b:ff:
a3:9a:31:8c:d1:15:88:37:6c:e6:a3:4b:d8:e1:18:
5e:a2:be:cb:2d:99:3d:c6:1e:0a:15:f1:d7:e4:df:
4e:77:e7:9d:aa:7c:4a:6e:4f:2d:e5:f9:d9:64:2a:
df:c5:18:70:e8:8c:45:f2:4f:b3:07:5e:3a:f7:15:
79:29:d5:10:fe:d8:a9:43:2b:f3:19:ad:0f:4d:d9:
98:55:0e:31:b3:37:62:75:16:fc:34:ed:74:6f:8c:
b3:4e:1b:81:31:f0:ed:e6:42:4b:0a:c2:48:d0:8d:
bc:90:e2:0e:79:5e:19:93:f4:e2:76:df:bd:1c:5e:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CA:5C:6E:89:9D:00:3E:D2:9B:86:A7:9C:1B:89:20:4B:AF:52:05
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:68:26:ad:3b:57:d7:ab:23:5f:bd:ed:19:97:96:43:50:2b:
f6:50:3c:32:0a:4c:c7:54:6b:7a:ed:69:54:e9:ef:9b:ae:01:
f2:a9:e8:34:b8:1d:d5:07:a8:6a:0c:4b:91:12:85:05:49:6d:
24:e5:ba:3e:d8:30:b5:27:59:96:8b:b1:3c:52:cb:d6:ec:27:
50:49:a2:34:49:a9:3a:c4:58:2c:e4:83:ed:35:ec:54:40:05:
98:4b:f3:f7:64:78:33:0c:c6:9e:b4:ff:c6:b8:49:f2:f0:d7:
9c:91:86:68:3a:2c:91:85:15:5a:34:fc:43:c8:a6:ac:2d:83:
bd:5f:d5:1c:28:b1:14:b2:26:00:64:5f:8e:5f:2e:d9:dc:c4:
ff:8c:d7:33:c5:d0:6d:1b:da:8c:09:22:11:69:19:0f:c9:bd:
e3:c6:6b:20:16:c9:11:1c:65:c9:f0:9b:42:8f:f6:c5:a9:8d:
91:74:96:63:bf:20:b5:65:9e:1f:f5:65:ab:24:79:1b:36:66:
f7:99:8d:66:9f:20:9a:c3:da:38:e5:68:84:d3:18:32:c3:ed:
43:21:70:c9:1c:f0:9c:34:ee:e4:dd:ff:3b:87:87:bd:d1:c5:
96:48:ff:7d:7c:b9:29:5f:bd:0c:93:55:b0:01:a0:86:3f:cd:
e7:17:3d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25cRVwVYWCxCsg7t6IsE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YWRjZjhjZWZhNTk2NTk4YjI0YjliNmFiNjUwNzBkZDkx
Y2E3OWMwHhcNMjUwNjE2MDQwMDU4WhcNMjUwNjE3MDQwMDU4WjAzMTEwLwYDVQQD
EyhjY2NhNWM2ZTg5OWQwMDNlZDI5Yjg2YTc5YzFiODkyMDRiYWY1MjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzNBa6IaC8bpOg/kLc06EKZKEZzI
fVFy+HQA4vImGo9kx+e/iWwzzfblLi+w8ucgVoonnCvOQygOLZd95KBJxyODRoIm
WckVxa00z+SSTfYHURs8hbEvDTMLarA0+P9LQfmIQdtIprQfhZEVcoq29LezdCsP
G8gnLxaONVX2gOS3aCuvO/+jmjGM0RWIN2zmo0vY4Rheor7LLZk9xh4KFfHX5N9O
d+edqnxKbk8t5fnZZCrfxRhw6IxF8k+zB1469xV5KdUQ/tipQyvzGa0PTdmYVQ4x
szdidRb8NO10b4yzThuBMfDt5kJLCsJI0I28kOIOeV4Zk/Tidt+9HF7K/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzKXG6JnQA+0puGp5wbiSBLr1IFMB8GA1UdIwQY
MBaAFMmtz4zvpZZZiyS5tqtlBw3ZHKecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWEzUGpPLWxsbG1MSkxtMnEyVUhEZGtjcDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iMDA1N2MtNTQ3Mi00OGQ1LWIxMDct
YzU1MzcyZmFiMzM1LzEveWEzUGpPLWxsbG1MSkxtMnEyVUhEZGtjcDV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iMDA1N2MtNTQ3Mi00OGQ1LWIxMDctYzU1MzcyZmFiMzM1
LzEveWEzUGpPLWxsbG1MSkxtMnEyVUhEZGtjcDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmgmrTtX
16sjX73tGZeWQ1Ar9lA8MgpMx1Rreu1pVOnvm64B8qnoNLgd1QeoagxLkRKFBUlt
JOW6PtgwtSdZlouxPFLL1uwnUEmiNEmpOsRYLOSD7TXsVEAFmEvz92R4MwzGnrT/
xrhJ8vDXnJGGaDoskYUVWjT8Q8imrC2DvV/VHCixFLImAGRfjl8u2dzE/4zXM8XQ
bRvajAkiEWkZD8m948ZrIBbJERxlyfCbQo/2xamNkXSWY78gtWWeH/VlqyR5GzZm
95mNZp8gmsPaOOVohNMYMsPtQyFwyRzwnDTu5N3/O4eHvdHFlkj/fXy5KV+9DJNV
sAGghj/N5xc9VA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:31:38 2025 by rpki-client