Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
File: YXe1tkvknoGZlf7n8-NiG9ymrow.mft (raw, json)
Hash identifier: kBVj+BfXKTFkmiHqHwFdf7y2eQrusuMVxP3vnI1G4NI=
Subject key identifier: B4:F3:FE:4B:2B:AF:C7:EE:3E:05:11:9A:73:10:E8:75:FA:B8:D6:A7
Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
Certificate issuer: /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Certificate serial: 01976EBE57095D8A4B167D24BCDF82AA623C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 14:00:57 +0000
Manifest this update: Sat 14 Jun 2025 14:00:57 +0000
Manifest next update: Sun 15 Jun 2025 14:00:57 +0000
Files and hashes: 1: YXe1tkvknoGZlf7n8-NiG9ymrow.crl (hash: +pK5eRK+2hcGEVMvKFo+Ey8NI7Wu8YF8rjvXqJvdl28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:57:09:5d:8a:4b:16:7d:24:bc:df:82:aa:62:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Validity
Not Before: Jun 14 14:00:57 2025 GMT
Not After : Jun 15 14:00:57 2025 GMT
Subject: CN=b4f3fe4b2bafc7ee3e05119a7310e875fab8d6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:91:eb:cf:62:a1:98:0a:aa:f7:d5:24:c5:22:
ca:a0:1f:50:b2:ce:6d:0a:97:9f:8b:19:5e:db:92:
fa:81:3b:d7:30:d6:da:df:ce:11:ed:84:3b:4d:03:
69:99:3c:6d:52:1b:d0:fc:b1:83:0d:64:b4:6f:d4:
37:5c:68:0c:c3:1a:ab:30:3c:71:8a:d0:b3:84:8a:
a6:54:5a:45:cf:2b:9d:ae:06:f4:65:7c:a9:fd:d1:
d0:80:22:31:6f:b6:0b:ba:1d:58:9a:d0:28:b7:4b:
d6:41:06:a7:f6:3c:32:ad:ff:58:f9:ce:72:2e:e4:
d0:2d:08:e4:a9:42:01:d1:d6:d7:ee:54:e8:a3:74:
cc:b8:ee:d0:0d:74:6a:ff:99:9e:17:59:3a:7a:ca:
a5:a6:4e:6a:83:db:b2:76:83:f4:48:f5:7d:60:f1:
7c:94:35:1e:77:ce:02:b9:49:da:7d:4a:b8:4e:d7:
d4:26:c5:5b:da:31:49:02:46:1d:4a:6e:b7:21:6d:
94:bd:00:f6:73:5a:7f:7e:d9:45:79:6b:8c:50:fd:
f7:06:2b:12:a9:6e:1e:24:6c:6b:e5:5c:0f:33:18:
d0:81:e3:41:6b:4f:6e:05:cd:ba:7f:50:7c:cf:30:
ea:72:3b:c9:36:e7:2f:10:fa:01:b4:9d:fc:2d:ef:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:FE:4B:2B:AF:C7:EE:3E:05:11:9A:73:10:E8:75:FA:B8:D6:A7
X509v3 Authority Key Identifier:
keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e7:bd:63:c4:03:c5:84:a0:96:ae:13:dd:7a:93:5e:b3:4c:
8a:7a:06:94:1e:14:52:0c:f8:fc:d5:9c:83:19:94:0f:89:02:
6b:fe:9e:18:76:f7:e5:e9:aa:7c:10:27:fd:2a:76:8d:2a:a3:
33:9c:4b:dd:b5:ef:e1:3b:ca:3a:82:d9:91:1c:dc:d6:9c:9f:
b6:e6:2f:5c:b4:00:6d:a9:0a:73:2d:05:f7:3f:4c:30:80:a9:
44:b0:95:7e:e6:46:71:44:43:0a:0a:b8:40:f8:a1:6b:d9:72:
80:6d:cd:99:f8:3c:da:b0:3e:ff:9a:0f:de:64:5f:fe:f2:81:
41:0a:7c:4f:f0:a1:1e:f1:4d:0b:7c:7f:df:e4:b9:1e:c2:43:
db:b3:28:9c:29:0e:39:c0:1f:5f:12:3f:61:cd:52:8c:fd:17:
82:89:6c:3f:b6:c3:45:8e:68:44:d8:de:b3:ab:06:3c:3e:1b:
a3:1d:f8:f8:36:ae:96:90:c7:98:90:51:c1:93:12:09:5d:8b:
ae:40:f1:8c:96:d0:fb:0d:bd:07:99:04:92:6d:ec:c6:b5:b6:
0d:97:92:5b:06:f2:b2:ad:5a:81:e4:51:d7:f9:d2:46:ce:5e:
e0:63:5e:3d:bf:a9:5d:e6:75:0a:2e:57:d4:0d:2d:f8:0e:91:
c6:63:fb:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvlcJXYpLFn0kvN+CqmI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNzdiNWI2NGJlNDllODE5OTk1ZmVlN2YzZTM2MjFiZGNh
NmFlOGMwHhcNMjUwNjE0MTQwMDU3WhcNMjUwNjE1MTQwMDU3WjAzMTEwLwYDVQQD
EyhiNGYzZmU0YjJiYWZjN2VlM2UwNTExOWE3MzEwZTg3NWZhYjhkNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZHrz2KhmAqq99UkxSLKoB9Qss5t
Cpefixle25L6gTvXMNba384R7YQ7TQNpmTxtUhvQ/LGDDWS0b9Q3XGgMwxqrMDxx
itCzhIqmVFpFzyudrgb0ZXyp/dHQgCIxb7YLuh1YmtAot0vWQQan9jwyrf9Y+c5y
LuTQLQjkqUIB0dbX7lToo3TMuO7QDXRq/5meF1k6esqlpk5qg9uydoP0SPV9YPF8
lDUed84CuUnafUq4TtfUJsVb2jFJAkYdSm63IW2UvQD2c1p/ftlFeWuMUP33BisS
qW4eJGxr5VwPMxjQgeNBa09uBc26f1B8zzDqcjvJNucvEPoBtJ38Le9KMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTz/ksrr8fuPgURmnMQ6HX6uNanMB8GA1UdIwQY
MBaAFGF3tbZL5J6BmZX+5/PjYhvcpq6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVhlMXRrdmtub0dabGY3bjgtTmlHOXltcm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83ZDljMTEtZTFhZC00N2I2LWFmMDkt
MTcxM2ZkM2VmN2E3LzEvWVhlMXRrdmtub0dabGY3bjgtTmlHOXltcm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC83ZDljMTEtZTFhZC00N2I2LWFmMDktMTcxM2ZkM2VmN2E3
LzEvWVhlMXRrdmtub0dabGY3bjgtTmlHOXltcm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMee9Y8QD
xYSglq4T3XqTXrNMinoGlB4UUgz4/NWcgxmUD4kCa/6eGHb35emqfBAn/Sp2jSqj
M5xL3bXv4TvKOoLZkRzc1pyftuYvXLQAbakKcy0F9z9MMICpRLCVfuZGcURDCgq4
QPiha9lygG3Nmfg82rA+/5oP3mRf/vKBQQp8T/ChHvFNC3x/3+S5HsJD27MonCkO
OcAfXxI/Yc1SjP0XgolsP7bDRY5oRNjes6sGPD4box34+DaulpDHmJBRwZMSCV2L
rkDxjJbQ+w29B5kEkm3sxrW2DZeSWwbysq1ageRR1/nSRs5e4GNePb+pXeZ1Ci5X
1A0t+A6RxmP7Iw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:31 2025 by rpki-client