Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File: YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier: 7OIFFPv3t9tHyJDSm4Ksp/tkMI8Ix6vhJUxrJsRMB/Q=
Subject key identifier: CA:6A:88:C3:BC:09:16:C2:83:EA:75:50:81:55:EF:82:F3:88:BB:5C
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 01976C988C83153630BA213739B78511F574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number: 0E3F
Signing time: Sat 14 Jun 2025 04:00:26 +0000
Manifest this update: Sat 14 Jun 2025 04:00:26 +0000
Manifest next update: Sun 15 Jun 2025 04:00:26 +0000
Files and hashes: 1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: l7A//L6IXw3aJwB/jah+lvomUEKGa5ns1nOXi6arEW8=)
2: v4bbx4Tyrv4mjtMYql77jSIvfEA.roa (hash: A4gl29evMU8HAtsdqZFfkRY14UgWdfJ98W4DA9n97zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:8c:83:15:36:30:ba:21:37:39:b7:85:11:f5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Jun 14 04:00:26 2025 GMT
Not After : Jun 15 04:00:26 2025 GMT
Subject: CN=ca6a88c3bc0916c283ea75508155ef82f388bb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:25:08:a1:17:c2:07:07:54:3f:ce:2b:a5:
22:48:92:07:94:c4:55:2b:09:28:0e:fc:d3:4f:38:
87:f4:0e:ef:45:3e:cc:ca:88:ba:74:47:86:76:87:
01:bd:7f:ef:df:65:1b:2a:81:15:be:59:78:33:b7:
e8:60:f9:33:c7:df:03:e1:d9:1b:96:a5:3c:21:38:
9b:b4:ce:03:36:c8:4a:bc:8d:df:a9:fc:1a:1f:5b:
20:ae:47:38:76:41:68:9b:d7:5d:41:1b:2f:76:fd:
c7:5c:bc:09:94:a0:1c:39:78:3b:88:5d:96:f4:71:
3f:95:c9:fd:7d:65:ff:ab:03:a7:1e:0f:0a:d5:72:
ba:bf:34:37:58:ed:69:b5:d4:4a:3b:73:12:1e:91:
43:75:1b:c9:a2:a0:78:b2:2e:da:8f:18:47:6d:bd:
88:fa:ae:c1:cd:8d:cf:8c:c9:5a:4a:3a:e2:f1:21:
20:60:04:d2:ed:68:d0:a9:19:6d:65:3d:66:2a:e9:
08:58:f8:2f:42:5b:94:b2:4e:46:d2:b3:40:35:e6:
57:2a:10:11:5c:a5:ab:b6:f4:52:1b:92:3b:77:2d:
9d:81:19:a6:3a:ba:77:4b:4b:28:25:17:0d:d1:ac:
06:8e:5d:5e:cf:59:df:a5:7f:ce:3e:a2:b5:e8:71:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6A:88:C3:BC:09:16:C2:83:EA:75:50:81:55:EF:82:F3:88:BB:5C
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:03:fe:59:7a:24:91:e6:3d:86:41:3c:2b:8f:f3:67:11:45:
3a:33:ae:11:38:c8:f0:6e:d4:27:17:5a:08:0a:dc:4b:e0:4e:
23:e2:25:97:42:5c:12:8f:73:3b:6a:ee:cd:dc:6e:14:1b:eb:
4e:37:12:8f:b6:94:83:96:86:45:77:ef:bf:02:53:ce:f0:03:
f1:14:1d:77:4d:21:17:a3:5b:67:90:15:a8:b2:77:59:c3:30:
80:86:f6:d0:b7:7f:43:67:cc:f1:49:00:70:6e:ab:23:2b:7e:
bf:69:49:c8:7d:02:8c:73:45:2e:33:9d:34:11:70:06:d6:2a:
14:8d:54:7a:32:08:8b:db:f3:4f:be:d6:71:77:52:9c:7f:be:
66:81:f6:44:88:ee:a9:42:b8:b2:b2:93:51:ac:c5:71:9f:cd:
60:aa:3a:3d:f9:09:96:25:7f:eb:b0:81:55:b2:8a:60:6f:ec:
2d:05:32:83:0e:fc:77:1e:20:7b:03:c6:f0:a2:24:5b:d6:39:
7a:9c:a0:d0:d4:5d:17:98:48:da:a6:33:bc:14:4d:e4:5c:26:
84:31:32:04:6b:47:ca:4e:10:bc:77:f7:30:c3:7b:6d:1a:de:
d0:a9:e4:9d:7d:ba:2f:b3:21:30:f7:c6:46:94:fe:f6:d1:09:
fc:d1:b7:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmIyDFTYwuiE3ObeFEfV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTUyMmUzN2RlMjZiMGQ1Njg5NWFjMThhYjA3ZDdjNzg0
YWI5M2MwHhcNMjUwNjE0MDQwMDI2WhcNMjUwNjE1MDQwMDI2WjAzMTEwLwYDVQQD
EyhjYTZhODhjM2JjMDkxNmMyODNlYTc1NTA4MTU1ZWY4MmYzODhiYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziAlCKEXwgcHVD/OK6UiSJIHlMRV
KwkoDvzTTziH9A7vRT7Myoi6dEeGdocBvX/v32UbKoEVvll4M7foYPkzx98D4dkb
lqU8ITibtM4DNshKvI3fqfwaH1sgrkc4dkFom9ddQRsvdv3HXLwJlKAcOXg7iF2W
9HE/lcn9fWX/qwOnHg8K1XK6vzQ3WO1ptdRKO3MSHpFDdRvJoqB4si7ajxhHbb2I
+q7BzY3PjMlaSjri8SEgYATS7WjQqRltZT1mKukIWPgvQluUsk5G0rNANeZXKhAR
XKWrtvRSG5I7dy2dgRmmOrp3S0soJRcN0awGjl1ez1nfpX/OPqK16HFpdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpqiMO8CRbCg+p1UIFV74LziLtcMB8GA1UdIwQY
MBaAFGBVIuN94msNVolawYqwfXx4Srk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZVaTQzM2lhdzFXaVZyQmlyQjlmSGhLdVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8wOTYxZjktZDg1ZC00OTc2LWE0Y2Qt
YTE4ZWQxOWM0OWUzLzEvWUZVaTQzM2lhdzFXaVZyQmlyQjlmSGhLdVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8wOTYxZjktZDg1ZC00OTc2LWE0Y2QtYTE4ZWQxOWM0OWUz
LzEvWUZVaTQzM2lhdzFXaVZyQmlyQjlmSGhLdVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwP+WXok
keY9hkE8K4/zZxFFOjOuETjI8G7UJxdaCArcS+BOI+Ill0JcEo9zO2ruzdxuFBvr
TjcSj7aUg5aGRXfvvwJTzvAD8RQdd00hF6NbZ5AVqLJ3WcMwgIb20Ld/Q2fM8UkA
cG6rIyt+v2lJyH0CjHNFLjOdNBFwBtYqFI1UejIIi9vzT77WcXdSnH++ZoH2RIju
qUK4srKTUazFcZ/NYKo6PfkJliV/67CBVbKKYG/sLQUygw78dx4gewPG8KIkW9Y5
epyg0NRdF5hI2qYzvBRN5FwmhDEyBGtHyk4QvHf3MMN7bRre0KnknX26L7MhMPfG
RpT+9tEJ/NG3LA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:41 2025 by rpki-client