Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
File: YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft (raw, json)
Hash identifier: BkZFIAot5rXPNEqGjVhWSuG62eocshr0kPBpEzde1lE=
Subject key identifier: AF:E0:9F:2D:C2:91:34:7A:68:58:1A:24:6D:04:29:63:FD:AF:B2:61
Authority key identifier: 60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
Certificate issuer: /CN=6034561c039ac6450bec8fd595c148cc770aa036
Certificate serial: 01976CCFC382ECEB4F2BD2C0979EA169AC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
Manifest number: 026D
Signing time: Sat 14 Jun 2025 05:00:44 +0000
Manifest this update: Sat 14 Jun 2025 05:00:44 +0000
Manifest next update: Sun 15 Jun 2025 05:00:44 +0000
Files and hashes: 1: 7xDyuzwf2JBogicNs1WCGieFUKo.roa (hash: KauAldM8NLiLBGjbpKvhWpk4brd0+mLiraKkETNshfA=)
2: YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl (hash: TG+q3PJjttl84fCDRtQxDzj3/0LXQ9FrElwaeueGNJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:c3:82:ec:eb:4f:2b:d2:c0:97:9e:a1:69:ac:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6034561c039ac6450bec8fd595c148cc770aa036
Validity
Not Before: Jun 14 05:00:44 2025 GMT
Not After : Jun 15 05:00:44 2025 GMT
Subject: CN=afe09f2dc291347a68581a246d042963fdafb261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:fc:7c:b4:07:9f:f6:ca:45:05:f8:3a:1b:
c9:34:61:70:7e:e1:58:bf:5a:36:41:ee:73:8a:10:
ea:fb:06:2e:d8:75:55:c1:4f:d9:b1:11:df:84:75:
1e:e8:ea:d7:37:cd:0d:b9:74:5e:7b:a4:cc:8b:61:
cd:b6:2c:53:18:dd:9e:b5:9c:83:22:83:dc:c0:2b:
b5:b2:7f:8e:00:ad:c5:f1:e3:e1:91:33:2c:d5:67:
b8:89:ff:5c:1d:7b:1d:e4:13:b1:af:1a:05:80:7e:
08:55:0a:f2:64:51:c0:e5:e1:ca:f6:d8:65:7d:0d:
ad:ff:03:ce:00:25:27:20:4f:b4:35:17:91:d7:23:
88:2b:9d:43:73:2f:58:af:da:8e:6b:ba:c8:85:48:
a7:fb:b2:91:37:a2:f2:4a:42:61:a0:f6:ea:32:62:
1a:6b:e6:3d:b7:f6:0e:c6:25:be:49:86:8a:fb:7a:
fd:5d:50:c9:5a:cf:a7:39:0a:18:0d:28:05:9c:f4:
90:e8:a6:6a:3a:ff:47:41:a0:44:38:28:a1:f4:d2:
c4:79:17:13:9e:e8:25:8a:39:31:3c:7f:8d:e0:5d:
8a:79:e3:8b:c3:4a:2d:25:39:b3:aa:d2:93:a1:81:
53:d0:f7:5a:27:6f:39:a3:ab:55:84:59:58:60:fe:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:9F:2D:C2:91:34:7A:68:58:1A:24:6D:04:29:63:FD:AF:B2:61
X509v3 Authority Key Identifier:
keyid:60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:35:97:84:a8:18:ae:be:b9:ca:7a:bd:76:57:c1:f0:79:
3c:fd:b3:cf:04:bd:68:ab:cb:d0:7b:44:ce:a7:b1:0d:6c:a9:
81:32:f2:3f:d7:11:d7:88:7a:e5:b3:8b:83:90:b2:41:75:4c:
56:2f:cc:d4:40:6a:a4:a6:0b:26:8e:a9:42:6c:da:ee:5b:09:
78:0d:24:46:cb:ab:55:bd:76:0c:c4:67:3a:79:39:93:c2:ba:
b4:76:f8:2c:e3:16:c6:7e:33:f4:14:99:26:78:f7:25:38:06:
e2:81:49:13:ec:c6:a6:94:96:39:4e:cf:15:02:2b:df:61:27:
e7:29:93:c3:de:cd:5f:a3:73:29:c0:5b:3d:4f:b7:bd:c0:f4:
88:f6:26:c9:60:88:60:bd:ad:10:b9:52:c5:2f:15:0b:22:b6:
2d:24:eb:41:83:10:b4:bf:cb:f8:23:94:c8:d9:e8:38:f1:dc:
fe:46:20:a3:45:0f:61:97:65:3d:d0:ff:17:91:50:bf:64:eb:
f5:11:19:2e:a0:57:bf:a3:ca:2a:ce:a0:88:48:c9:ca:8b:cf:
2f:0a:19:34:30:87:e7:20:7e:c7:1e:b5:25:e4:bb:57:c7:23:
39:ec:63:18:8c:85:d6:fe:75:c2:61:8c:55:c4:ac:8b:d7:9c:
02:d3:60:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz8OC7OtPK9LAl56haaxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzQ1NjFjMDM5YWM2NDUwYmVjOGZkNTk1YzE0OGNjNzcw
YWEwMzYwHhcNMjUwNjE0MDUwMDQ0WhcNMjUwNjE1MDUwMDQ0WjAzMTEwLwYDVQQD
EyhhZmUwOWYyZGMyOTEzNDdhNjg1ODFhMjQ2ZDA0Mjk2M2ZkYWZiMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9P8fLQHn/bKRQX4OhvJNGFwfuFY
v1o2Qe5zihDq+wYu2HVVwU/ZsRHfhHUe6OrXN80NuXRee6TMi2HNtixTGN2etZyD
IoPcwCu1sn+OAK3F8ePhkTMs1We4if9cHXsd5BOxrxoFgH4IVQryZFHA5eHK9thl
fQ2t/wPOACUnIE+0NReR1yOIK51Dcy9Yr9qOa7rIhUin+7KRN6LySkJhoPbqMmIa
a+Y9t/YOxiW+SYaK+3r9XVDJWs+nOQoYDSgFnPSQ6KZqOv9HQaBEOCih9NLEeRcT
nuglijkxPH+N4F2KeeOLw0otJTmzqtKToYFT0PdaJ285o6tVhFlYYP6WIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/gny3CkTR6aFgaJG0EKWP9r7JhMB8GA1UdIwQY
MBaAFGA0VhwDmsZFC+yP1ZXBSMx3CqA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURSV0hBT2F4a1VMN0lfVmxjRkl6SGNLb0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wYTIwNmYtMWFjZC00OTVkLWE4Yjct
NjQ5NGUyMGUyYjA1LzEvWURSV0hBT2F4a1VMN0lfVmxjRkl6SGNLb0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wYTIwNmYtMWFjZC00OTVkLWE4YjctNjQ5NGUyMGUyYjA1
LzEvWURSV0hBT2F4a1VMN0lfVmxjRkl6SGNLb0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1U1l4So
GK6+ucp6vXZXwfB5PP2zzwS9aKvL0HtEzqexDWypgTLyP9cR14h65bOLg5CyQXVM
Vi/M1EBqpKYLJo6pQmza7lsJeA0kRsurVb12DMRnOnk5k8K6tHb4LOMWxn4z9BSZ
Jnj3JTgG4oFJE+zGppSWOU7PFQIr32En5ymTw97NX6NzKcBbPU+3vcD0iPYmyWCI
YL2tELlSxS8VCyK2LSTrQYMQtL/L+COUyNnoOPHc/kYgo0UPYZdlPdD/F5FQv2Tr
9REZLqBXv6PKKs6giEjJyovPLwoZNDCH5yB+xx61JeS7V8cjOexjGIyF1v51wmGM
VcSsi9ecAtNg6w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:44:21 2025 by rpki-client