Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: cqJKMOsB7WsLv1XQ5AJxn1Qvaf9mvPlrlybDuVrRnpE=
Subject key identifier: 3A:9E:FC:EC:66:08:55:9D:19:2B:D5:E2:71:57:E4:12:3A:5F:D8:B1
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 0197703EF5193DD35430F61E512C8061F64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 1153
Signing time: Sat 14 Jun 2025 21:01:03 +0000
Manifest this update: Sat 14 Jun 2025 21:01:03 +0000
Manifest next update: Sun 15 Jun 2025 21:01:03 +0000
Files and hashes: 1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: /gETsJbv8xpdnqIK4OAL4QrgQZ2K3TRIVxKqtmoGqSg=)
2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:f5:19:3d:d3:54:30:f6:1e:51:2c:80:61:f6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Jun 14 21:01:03 2025 GMT
Not After : Jun 15 21:01:03 2025 GMT
Subject: CN=3a9efcec6608559d192bd5e27157e4123a5fd8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:72:85:4c:9d:90:4a:0c:67:fd:6c:ec:58:
96:a1:69:d3:be:11:cd:01:01:fd:20:a9:69:74:4d:
f0:be:b7:f1:38:bf:05:cc:3d:8e:19:86:ff:eb:7e:
cf:92:77:66:ba:86:d5:3f:0d:fe:26:f7:e7:c3:c7:
3a:99:e5:9a:ed:3d:47:d3:79:e6:54:d2:78:be:e4:
57:1f:53:95:d4:0d:12:3e:f1:4a:9f:80:f6:b6:ea:
71:dd:50:55:c5:1f:35:fc:c6:35:08:3e:ef:c2:1e:
9e:9e:08:1b:12:5c:17:01:4c:36:e2:45:85:e2:60:
cf:c7:ee:3a:4c:d2:71:b4:a8:4f:a5:0c:a0:fc:52:
ef:58:f7:65:14:9e:1a:87:7f:09:0a:65:e4:84:18:
99:71:d9:1a:04:10:f1:ea:2d:d3:d1:0c:e2:e8:47:
68:73:ef:c6:30:18:fe:5c:54:a7:bf:f8:71:70:8b:
e0:f5:fe:d8:0c:80:42:04:a3:22:97:7e:70:00:02:
31:6e:7b:94:16:ad:ad:2b:83:04:29:e2:72:dc:4f:
4f:7d:cb:62:97:61:d0:04:32:89:68:f8:3c:29:44:
e7:1e:6e:2b:6c:81:85:14:99:eb:ae:e4:2d:15:7a:
5e:fe:3a:e0:70:2c:d6:f7:27:1f:d0:90:e1:3b:76:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9E:FC:EC:66:08:55:9D:19:2B:D5:E2:71:57:E4:12:3A:5F:D8:B1
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c8:6e:99:8c:26:a7:e2:55:01:ec:e3:2a:47:c6:64:ba:d7:
a1:b6:1f:10:59:59:5c:b0:3e:f9:82:16:7a:49:73:a9:a2:c2:
e0:28:53:97:fb:c3:04:a2:d0:c1:e1:61:38:67:95:62:f5:47:
d9:47:9f:74:13:c1:ab:89:24:f7:2f:ce:d3:b7:e6:95:d2:34:
fa:e9:a3:83:84:7c:52:c8:14:3b:39:07:b4:a5:52:af:a9:1b:
fe:fe:14:7b:6b:59:4f:79:fc:5e:c6:de:d2:90:5d:50:9d:12:
89:0e:b1:ae:dd:ab:81:71:19:4e:a3:63:e2:5d:ed:fb:48:fb:
2f:04:bc:73:0b:6e:6c:70:1e:c5:11:8e:ef:19:29:b4:6b:e7:
35:6e:2f:e7:14:5b:84:20:37:60:f5:78:52:09:d7:fb:90:7b:
07:9c:60:d7:fc:7b:1a:b6:c9:09:19:db:52:8a:81:22:f0:71:
00:9c:8b:8c:f9:66:89:e1:73:64:bd:ac:57:78:93:55:dd:45:
e3:a7:e7:f4:82:e0:3e:5a:f9:61:ba:5f:02:a4:f9:cb:f4:fb:
9f:26:c4:b6:6a:32:13:45:91:6d:e3:28:f8:db:ec:f7:41:a8:
da:c8:c4:c2:2c:77:e4:75:36:0c:7c:12:6d:7d:14:fa:9e:4d:
b7:55:1b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPvUZPdNUMPYeUSyAYfZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2Q3YjBlNWZlNmQ2OWI0ZDc5N2RlYzNkMTEyYzQ3Yjhh
MTkyMjQwHhcNMjUwNjE0MjEwMTAzWhcNMjUwNjE1MjEwMTAzWjAzMTEwLwYDVQQD
EygzYTllZmNlYzY2MDg1NTlkMTkyYmQ1ZTI3MTU3ZTQxMjNhNWZkOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmolyhUydkEoMZ/1s7FiWoWnTvhHN
AQH9IKlpdE3wvrfxOL8FzD2OGYb/637PkndmuobVPw3+Jvfnw8c6meWa7T1H03nm
VNJ4vuRXH1OV1A0SPvFKn4D2tupx3VBVxR81/MY1CD7vwh6enggbElwXAUw24kWF
4mDPx+46TNJxtKhPpQyg/FLvWPdlFJ4ah38JCmXkhBiZcdkaBBDx6i3T0Qzi6Edo
c+/GMBj+XFSnv/hxcIvg9f7YDIBCBKMil35wAAIxbnuUFq2tK4MEKeJy3E9Pfcti
l2HQBDKJaPg8KUTnHm4rbIGFFJnrruQtFXpe/jrgcCzW9ycf0JDhO3aGswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqe/OxmCFWdGSvV4nFX5BI6X9ixMB8GA1UdIwQY
MBaAFGB9ew5f5tabTXl97D0RLEe4oZIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUt
YWUwNWFlMTI5MWYyLzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUtYWUwNWFlMTI5MWYy
LzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwchumYwm
p+JVAezjKkfGZLrXobYfEFlZXLA++YIWeklzqaLC4ChTl/vDBKLQweFhOGeVYvVH
2UefdBPBq4kk9y/O07fmldI0+umjg4R8UsgUOzkHtKVSr6kb/v4Ue2tZT3n8Xsbe
0pBdUJ0SiQ6xrt2rgXEZTqNj4l3t+0j7LwS8cwtubHAexRGO7xkptGvnNW4v5xRb
hCA3YPV4UgnX+5B7B5xg1/x7GrbJCRnbUoqBIvBxAJyLjPlmieFzZL2sV3iTVd1F
46fn9ILgPlr5YbpfAqT5y/T7nybEtmoyE0WRbeMo+Nvs90Go2sjEwix35HU2DHwS
bX0U+p5Nt1Ubuw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:50:41 2025 by rpki-client