Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: 1heADm6PitmLJKsNGDQZRNMf+UxIQ8jtgRQl+Yiqf4M=
Subject key identifier: B6:4B:85:98:87:06:87:A8:C9:B9:2F:3E:D5:7F:25:2F:63:09:C9:5A
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 01976D3E14AFFC6231812677DE1F238C04C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 120C
Signing time: Sat 14 Jun 2025 07:01:14 +0000
Manifest this update: Sat 14 Jun 2025 07:01:14 +0000
Manifest next update: Sun 15 Jun 2025 07:01:14 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: 7Vmmyo8vUn7a0DohNUQtU+vBEK65dCYXfP9UCYOzYpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:14:af:fc:62:31:81:26:77:de:1f:23:8c:04:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: Jun 14 07:01:14 2025 GMT
Not After : Jun 15 07:01:14 2025 GMT
Subject: CN=b64b8598870687a8c9b92f3ed57f252f6309c95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:d4:4f:6d:3d:62:07:b3:ad:e1:4b:0f:9a:
28:86:da:15:4b:df:00:ce:56:3a:bc:f3:9b:e5:b3:
75:18:32:0e:b8:24:50:3f:ca:c6:01:41:36:06:92:
79:43:7c:f2:25:98:69:8e:ff:6f:5f:c3:e1:81:05:
9f:b3:8d:ab:57:7a:32:c8:7e:bf:26:a0:3c:28:85:
17:db:80:c0:18:10:f5:b8:22:bc:05:8d:b1:2d:37:
00:68:0c:ff:26:da:bc:e8:f4:ec:3b:86:b3:b8:59:
78:32:f5:6c:cd:7e:46:81:d8:5e:54:a3:4b:23:70:
9e:32:38:4b:10:ff:10:d8:db:9d:31:16:70:98:7b:
8c:8f:b2:a2:f7:9b:53:3e:65:cb:bd:3d:2a:52:92:
80:f9:a0:4d:5b:8d:b8:72:e1:bd:91:b8:37:6c:8a:
6b:69:52:1d:2b:fb:f0:7e:2c:c9:bd:36:15:d0:a8:
34:a8:fa:91:be:e7:42:38:1b:aa:dc:7e:46:52:77:
35:bd:cf:b2:e4:27:37:0a:74:99:aa:f3:aa:db:49:
d7:81:b1:b0:1e:7e:73:16:a0:2e:a7:1f:46:77:19:
2d:05:38:d6:f4:cf:1e:02:a5:97:95:25:f6:94:da:
9e:7d:9d:62:92:f3:68:c2:f3:2a:e4:e7:fa:09:6b:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4B:85:98:87:06:87:A8:C9:B9:2F:3E:D5:7F:25:2F:63:09:C9:5A
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bf:19:45:97:cc:a3:2d:2d:ea:26:11:5b:6b:44:2e:24:9f:
83:31:be:99:fa:f2:f0:1d:d9:2b:cb:2b:77:46:c6:38:74:49:
6f:69:dd:eb:8f:12:9c:df:31:ea:9d:12:8f:cc:e0:1e:48:a2:
36:90:08:14:76:2c:8d:bb:84:0a:1b:89:b4:30:97:f5:3e:2f:
3d:e4:e4:7b:be:e1:1c:55:fe:7d:6f:3f:4f:0d:1d:9e:ab:cb:
93:7e:ce:27:d3:f6:d0:3b:01:fc:16:e3:32:c9:e6:1a:88:64:
99:0e:bd:a9:c0:74:41:2e:65:2e:6d:97:1a:81:91:b1:9a:08:
da:86:69:28:a8:d3:14:96:6c:93:73:b9:d8:e7:dd:d6:ea:01:
cc:c2:51:60:3f:56:80:c0:78:84:d5:7f:58:f1:97:76:9e:2c:
4e:53:57:99:86:d9:7a:b3:88:f5:82:23:08:2c:29:74:31:3e:
f7:f1:8f:27:a5:88:7a:7c:14:ac:3c:e3:69:6f:da:67:0a:69:
a6:eb:2a:33:5f:64:d5:e1:ae:4d:23:b1:e4:7e:d5:8a:e3:21:
46:76:eb:a0:be:b2:09:b9:1d:99:95:e7:fd:40:92:25:f9:cf:
da:44:19:87:ce:56:4a:74:d2:58:a5:db:e3:5d:9d:c7:fd:9f:
78:d1:67:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPhSv/GIxgSZ33h8jjATBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGIxMTNlMDYyZDE3ZWEyMzA4MDZiMzRhMjFkZWI1NjI3
YjY3NzQwHhcNMjUwNjE0MDcwMTE0WhcNMjUwNjE1MDcwMTE0WjAzMTEwLwYDVQQD
EyhiNjRiODU5ODg3MDY4N2E4YzliOTJmM2VkNTdmMjUyZjYzMDljOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YzUT209YgezreFLD5oohtoVS98A
zlY6vPOb5bN1GDIOuCRQP8rGAUE2BpJ5Q3zyJZhpjv9vX8PhgQWfs42rV3oyyH6/
JqA8KIUX24DAGBD1uCK8BY2xLTcAaAz/Jtq86PTsO4azuFl4MvVszX5GgdheVKNL
I3CeMjhLEP8Q2NudMRZwmHuMj7Ki95tTPmXLvT0qUpKA+aBNW424cuG9kbg3bIpr
aVIdK/vwfizJvTYV0Kg0qPqRvudCOBuq3H5GUnc1vc+y5Cc3CnSZqvOq20nXgbGw
Hn5zFqAupx9GdxktBTjW9M8eAqWXlSX2lNqefZ1ikvNowvMq5Of6CWs9ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZLhZiHBoeoybkvPtV/JS9jCclaMB8GA1UdIwQY
MBaAFGALET4GLRfqIwgGs0oh3rVie2d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xNGM4YzUtOWFmNS00MWIwLTk5MTct
YTBkYTQ1Mjk5YzZlLzEvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xNGM4YzUtOWFmNS00MWIwLTk5MTctYTBkYTQ1Mjk5YzZl
LzEvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKL8ZRZfM
oy0t6iYRW2tELiSfgzG+mfry8B3ZK8srd0bGOHRJb2nd648SnN8x6p0Sj8zgHkii
NpAIFHYsjbuEChuJtDCX9T4vPeTke77hHFX+fW8/Tw0dnqvLk37OJ9P20DsB/Bbj
MsnmGohkmQ69qcB0QS5lLm2XGoGRsZoI2oZpKKjTFJZsk3O52Ofd1uoBzMJRYD9W
gMB4hNV/WPGXdp4sTlNXmYbZerOI9YIjCCwpdDE+9/GPJ6WIenwUrDzjaW/aZwpp
pusqM19k1eGuTSOx5H7ViuMhRnbroL6yCbkdmZXn/UCSJfnP2kQZh85WSnTSWKXb
412dx/2feNFnjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:48 2025 by rpki-client