Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: zL8Tpya0rcgFH1Oq1sIhWBkiPham3e4fsxSehJXy4LQ=
Subject key identifier: C2:4D:E9:F2:1E:56:27:76:88:2B:08:D9:01:C0:AF:35:88:46:7D:AE
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 01987D8AC67EB0967B51ECF438EE6057E50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 1299
Signing time: Wed 06 Aug 2025 04:01:43 +0000
Manifest this update: Wed 06 Aug 2025 04:01:43 +0000
Manifest next update: Thu 07 Aug 2025 04:01:43 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: Tvx/jWX8ozpLKQnHXmuytAe/osbBQR3oz3btCUx/eA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:c6:7e:b0:96:7b:51:ec:f4:38:ee:60:57:e5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: Aug 6 04:01:43 2025 GMT
Not After : Aug 7 04:01:43 2025 GMT
Subject: CN=c24de9f21e562776882b08d901c0af3588467dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:38:19:e6:07:df:34:d4:31:d4:9c:68:1e:
8e:e7:5a:dc:5e:36:90:e0:74:f1:80:ab:28:0e:b5:
c9:6e:60:e5:c7:2d:38:fb:5d:6f:1d:82:e4:bc:2b:
f0:ba:19:de:1e:a5:c9:09:f8:e0:e9:c0:6e:49:a1:
35:7f:10:20:89:be:bd:81:4d:32:a8:db:59:fa:b6:
ef:82:bf:e9:21:63:d7:cc:3f:98:73:46:78:f9:f9:
40:ad:5f:88:8a:ea:5f:25:76:7d:e9:7d:9c:16:03:
06:59:2e:7f:bd:f9:63:29:7d:4c:53:43:b9:89:47:
6a:7e:4b:8c:6f:19:a7:03:65:23:04:6d:b4:af:d9:
c1:f8:4e:ba:00:84:de:ca:87:c3:71:87:bd:4a:18:
f0:63:87:ba:3e:82:90:c2:cd:af:60:97:be:dc:6d:
35:de:13:9e:1d:4b:f5:f1:02:5d:e3:a9:31:b0:ad:
22:a4:1e:df:30:3f:c3:b4:21:01:5e:ee:d3:c4:8f:
af:b4:f0:46:d8:81:ac:cb:cb:63:d2:a0:a0:05:bf:
e9:84:77:8d:7b:48:c3:15:1c:3f:b6:a7:f6:b4:a7:
ea:84:d7:0c:3f:ce:da:66:d6:fb:7c:79:c1:b8:3a:
2d:5e:a4:53:20:39:a2:c1:61:29:5d:40:07:02:d3:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4D:E9:F2:1E:56:27:76:88:2B:08:D9:01:C0:AF:35:88:46:7D:AE
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4f:56:07:1e:70:b5:ca:22:e4:cc:cc:dc:08:53:66:4a:54:
df:7c:ec:01:25:0b:0d:7e:25:c4:bc:4b:7d:3d:85:77:b6:77:
68:1e:0d:4d:59:22:2a:ac:4c:f3:6a:a1:9d:a4:bb:a3:6d:c0:
13:03:7f:27:26:a1:18:78:00:c4:aa:82:4e:c1:b7:51:d3:94:
7c:9a:d1:34:64:db:ff:18:16:d4:df:ba:2d:8e:25:c3:0d:d6:
37:4c:5a:07:70:e4:d4:e9:93:e0:c1:d4:33:cc:06:53:31:e6:
1a:58:d8:a5:55:5a:00:14:6b:e4:03:93:6f:e1:7e:69:37:b2:
50:c5:d9:12:bd:1a:b8:46:f8:ed:7b:19:81:5f:46:ce:c8:7b:
0e:dc:a2:26:ee:4b:47:08:c5:bd:0a:03:e2:e2:31:2f:1d:78:
44:df:68:4d:88:fd:a3:6c:2a:d4:90:d0:05:e5:be:23:42:0d:
34:e5:19:1d:00:c1:c0:00:45:84:34:33:24:f1:fc:13:3b:62:
1a:34:ba:9f:9d:05:c2:32:bd:46:c8:ec:1a:6f:7b:fb:af:c3:
d6:4e:08:a4:69:80:f0:0b:4c:24:b8:ca:52:c2:21:3e:e6:08:
80:6a:5e:83:6a:bb:bc:d9:ba:24:b1:89:d9:78:7d:6a:3e:c8:
33:bc:51:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9isZ+sJZ7Uez0OO5gV+UNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGIxMTNlMDYyZDE3ZWEyMzA4MDZiMzRhMjFkZWI1NjI3
YjY3NzQwHhcNMjUwODA2MDQwMTQzWhcNMjUwODA3MDQwMTQzWjAzMTEwLwYDVQQD
EyhjMjRkZTlmMjFlNTYyNzc2ODgyYjA4ZDkwMWMwYWYzNTg4NDY3ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGU4GeYH3zTUMdScaB6O51rcXjaQ
4HTxgKsoDrXJbmDlxy04+11vHYLkvCvwuhneHqXJCfjg6cBuSaE1fxAgib69gU0y
qNtZ+rbvgr/pIWPXzD+Yc0Z4+flArV+IiupfJXZ96X2cFgMGWS5/vfljKX1MU0O5
iUdqfkuMbxmnA2UjBG20r9nB+E66AITeyofDcYe9ShjwY4e6PoKQws2vYJe+3G01
3hOeHUv18QJd46kxsK0ipB7fMD/DtCEBXu7TxI+vtPBG2IGsy8tj0qCgBb/phHeN
e0jDFRw/tqf2tKfqhNcMP87aZtb7fHnBuDotXqRTIDmiwWEpXUAHAtNMMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJN6fIeVid2iCsI2QHArzWIRn2uMB8GA1UdIwQY
MBaAFGALET4GLRfqIwgGs0oh3rVie2d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xNGM4YzUtOWFmNS00MWIwLTk5MTct
YTBkYTQ1Mjk5YzZlLzEvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xNGM4YzUtOWFmNS00MWIwLTk5MTctYTBkYTQ1Mjk5YzZl
LzEvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhk9WBx5w
tcoi5MzM3AhTZkpU33zsASULDX4lxLxLfT2Fd7Z3aB4NTVkiKqxM82qhnaS7o23A
EwN/JyahGHgAxKqCTsG3UdOUfJrRNGTb/xgW1N+6LY4lww3WN0xaB3Dk1OmT4MHU
M8wGUzHmGljYpVVaABRr5AOTb+F+aTeyUMXZEr0auEb47XsZgV9Gzsh7DtyiJu5L
RwjFvQoD4uIxLx14RN9oTYj9o2wq1JDQBeW+I0INNOUZHQDBwABFhDQzJPH8Ezti
GjS6n50FwjK9RsjsGm97+6/D1k4IpGmA8AtMJLjKUsIhPuYIgGpeg2q7vNm6JLGJ
2Xh9aj7IM7xRuQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:02:49 2025 by rpki-client