Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
File: YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft (raw, json)
Hash identifier: R0dVz3MkoDMnOii2yuXr2BwT/SNZw3RbsU9mcgOctNg=
Subject key identifier: 69:54:AD:4D:9D:E4:CB:C6:B8:3B:4C:CB:91:7A:C8:B1:7B:02:3B:68
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial: 01976DAB2ECB05F2AAC0CA3AF37B701D81FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
Manifest number: 0B22
Signing time: Sat 14 Jun 2025 09:00:24 +0000
Manifest this update: Sat 14 Jun 2025 09:00:24 +0000
Manifest next update: Sun 15 Jun 2025 09:00:24 +0000
Files and hashes: 1: 4ohGnWINC3iPFe6nDpOqBOx7d2s.roa (hash: 9AbJKb6HLl4DZwmq7R7PVZTsMXxo/QDCXs2EgLL85AU=)
2: YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl (hash: v/jiC+bZSRsgSQSGWi49PO7Int8doDQHLHQUBL/nuhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:2e:cb:05:f2:aa:c0:ca:3a:f3:7b:70:1d:81:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Validity
Not Before: Jun 14 09:00:24 2025 GMT
Not After : Jun 15 09:00:24 2025 GMT
Subject: CN=6954ad4d9de4cbc6b83b4ccb917ac8b17b023b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:5a:4d:95:7e:99:01:93:71:e0:ab:dd:74:
a5:38:59:37:ea:eb:7b:52:7b:aa:c9:51:54:b6:25:
98:d2:fd:f4:64:62:41:7a:a3:d7:d6:6c:a7:bb:fd:
55:c6:69:2b:ea:03:3c:9c:08:56:64:9f:76:5f:a5:
d6:41:71:a1:b1:04:69:0f:71:1d:fe:8c:97:c8:07:
29:cf:08:5f:cd:5e:65:ee:ec:0f:dd:75:8b:6a:48:
df:d2:09:01:43:3a:2d:16:4b:ac:40:3f:10:f0:e8:
7c:d7:79:31:50:b9:a9:ec:be:d1:da:2d:57:11:bb:
9c:2a:24:8d:cc:a6:d9:b7:2b:14:7c:22:63:78:af:
0f:d9:16:34:66:90:a8:9f:ae:23:d3:f3:f2:f9:1f:
1a:17:26:88:30:91:b6:0e:4e:7c:6e:04:38:7a:d6:
fd:c6:13:0a:b2:2f:02:2a:0f:6c:82:e8:37:ab:f0:
95:e9:75:12:bb:5c:df:9c:31:10:7c:a7:c2:19:fa:
a6:ac:8a:d2:a3:3e:e1:70:29:cf:39:10:60:55:60:
dc:ae:42:58:31:42:b0:50:a6:b5:e7:cb:42:1c:82:
c8:1c:cc:bf:43:2e:01:1b:7e:68:d8:3c:32:ee:6a:
34:59:bd:90:8b:16:f9:86:b1:bd:e4:17:eb:0c:45:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:54:AD:4D:9D:E4:CB:C6:B8:3B:4C:CB:91:7A:C8:B1:7B:02:3B:68
X509v3 Authority Key Identifier:
keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:4f:a8:c4:85:af:1b:5c:34:6b:86:b8:5d:40:5d:a7:31:
25:c8:98:3b:b1:9d:e0:b8:49:99:a0:4f:aa:d4:54:90:b3:f6:
9e:e5:56:96:9d:ac:f4:96:01:c1:1b:f6:0c:90:c8:46:30:69:
79:57:2c:03:57:df:bc:0c:dd:23:92:0b:9b:ca:57:88:c4:da:
55:46:af:70:d2:65:55:fe:65:07:d1:54:8d:dc:75:46:ff:11:
a6:75:f6:34:61:af:fd:c9:a3:49:79:bc:32:b6:55:67:bd:f0:
aa:25:6c:b4:d0:c4:01:75:59:e0:34:ef:af:75:97:c8:60:e3:
8c:49:0c:aa:3a:55:11:28:a9:27:4c:83:cb:d0:c9:df:e9:2b:
7e:91:f9:5e:53:9f:99:22:09:f3:1d:1d:e1:0b:d7:39:6b:6e:
cd:31:f1:7b:8e:5d:f3:80:d7:3b:b9:2b:e1:7b:79:a0:59:57:
88:07:78:b4:1d:0f:ba:8a:50:04:60:45:7b:62:7f:c9:25:9f:
c3:40:03:8e:70:cb:bd:97:da:c2:62:5b:0e:1b:a8:33:22:95:
e1:0c:9c:bf:82:94:3d:dc:71:a9:78:f8:c1:13:11:2c:b5:90:
d4:a9:4a:40:9b:69:85:c3:fe:8d:73:6b:aa:c6:9a:a4:33:8f:
6d:8c:8d:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqy7LBfKqwMo683twHYH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTJlMTU5MmIxMmFkMmNkMzlmNWJlNTdjMDU4NTM1ZWRi
MTJiOWMwHhcNMjUwNjE0MDkwMDI0WhcNMjUwNjE1MDkwMDI0WjAzMTEwLwYDVQQD
Eyg2OTU0YWQ0ZDlkZTRjYmM2YjgzYjRjY2I5MTdhYzhiMTdiMDIzYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeVaTZV+mQGTceCr3XSlOFk36ut7
UnuqyVFUtiWY0v30ZGJBeqPX1mynu/1Vxmkr6gM8nAhWZJ92X6XWQXGhsQRpD3Ed
/oyXyAcpzwhfzV5l7uwP3XWLakjf0gkBQzotFkusQD8Q8Oh813kxULmp7L7R2i1X
EbucKiSNzKbZtysUfCJjeK8P2RY0ZpCon64j0/Py+R8aFyaIMJG2Dk58bgQ4etb9
xhMKsi8CKg9sgug3q/CV6XUSu1zfnDEQfKfCGfqmrIrSoz7hcCnPORBgVWDcrkJY
MUKwUKa158tCHILIHMy/Qy4BG35o2Dwy7mo0Wb2Qixb5hrG95BfrDEVJmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlUrU2d5MvGuDtMy5F6yLF7AjtoMB8GA1UdIwQY
MBaAFGBS4VkrEq0s059b5XwFhTXtsSucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ODNhMmMtOTQ2ZC00NTE3LTgwODMt
MjY5ODVjZTQ1OTc4LzEvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ODNhMmMtOTQ2ZC00NTE3LTgwODMtMjY5ODVjZTQ1OTc4
LzEvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGBPqMSF
rxtcNGuGuF1AXacxJciYO7Gd4LhJmaBPqtRUkLP2nuVWlp2s9JYBwRv2DJDIRjBp
eVcsA1ffvAzdI5ILm8pXiMTaVUavcNJlVf5lB9FUjdx1Rv8RpnX2NGGv/cmjSXm8
MrZVZ73wqiVstNDEAXVZ4DTvr3WXyGDjjEkMqjpVESipJ0yDy9DJ3+krfpH5XlOf
mSIJ8x0d4QvXOWtuzTHxe45d84DXO7kr4Xt5oFlXiAd4tB0PuopQBGBFe2J/ySWf
w0ADjnDLvZfawmJbDhuoMyKV4Qycv4KUPdxxqXj4wRMRLLWQ1KlKQJtphcP+jXNr
qsaapDOPbYyNYw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:08:44 2025 by rpki-client