Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: OT7I/ANkrYwPyEiZMk/38qeqgCssJSyNUII9LIqFk4s=
Subject key identifier: B3:E3:7B:0F:59:2F:F6:8E:B0:09:C1:A8:05:72:57:01:62:CA:44:2F
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 01977AC309C5008BF63570D063B30B285722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0A21
Signing time: Mon 16 Jun 2025 22:01:31 +0000
Manifest this update: Mon 16 Jun 2025 22:01:31 +0000
Manifest next update: Tue 17 Jun 2025 22:01:31 +0000
Files and hashes: 1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=)
2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: y38Y1606szDT7Wa4yKYIt8aidioH8AYXzV65w8RFOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c3:09:c5:00:8b:f6:35:70:d0:63:b3:0b:28:57:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Jun 16 22:01:31 2025 GMT
Not After : Jun 17 22:01:31 2025 GMT
Subject: CN=b3e37b0f592ff68eb009c1a80572570162ca442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:7e:5e:88:f2:fb:a8:74:eb:11:f8:da:c2:
94:6d:d7:e3:fd:41:46:e0:0b:17:8b:81:53:ff:a9:
91:74:bd:88:6f:54:6d:32:07:eb:9a:f3:bc:c0:11:
38:f2:c8:44:87:c5:e9:83:23:3f:1e:35:ec:b8:17:
0b:78:2d:a1:4f:9b:c8:ea:d5:17:83:1c:f8:fa:dd:
7d:94:90:fd:04:f5:ba:ab:54:be:a8:d5:28:65:c7:
6d:a7:73:d0:eb:f0:6b:5a:8a:d2:5b:3a:fd:e2:ed:
0d:b4:bf:e9:d0:3e:aa:66:52:86:56:a2:29:70:e9:
70:f7:5a:80:20:78:47:50:33:58:e7:33:0c:bb:82:
34:e0:9d:2b:e0:49:36:b0:21:67:98:65:c3:8a:29:
b7:e4:57:1b:1d:f9:8d:c7:2b:5e:93:d2:c9:b1:4c:
02:ef:8e:61:3d:df:ac:e6:cb:60:6c:ee:ba:bc:f1:
25:2b:d1:f4:91:e6:59:84:b0:2c:25:49:6a:04:62:
04:e9:0a:ed:05:86:6f:03:12:bb:6b:15:8b:48:a1:
37:fe:67:52:ea:27:a8:72:70:4e:2b:d9:43:b9:48:
e2:ad:03:7d:75:1b:ab:b8:c9:df:10:36:76:b0:56:
40:a5:f9:5e:2f:a9:a3:b4:32:89:5f:87:3e:6e:9e:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:7B:0F:59:2F:F6:8E:B0:09:C1:A8:05:72:57:01:62:CA:44:2F
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b6:b5:df:35:99:46:ae:92:ef:30:24:e0:62:63:52:a4:a8:
e5:34:5d:2d:0b:fc:dc:31:47:75:c4:8e:28:e3:f6:ec:62:37:
0e:40:ee:86:92:8b:72:78:c2:6e:60:5e:0f:69:e8:0c:3f:37:
7b:e8:b6:be:51:8b:24:70:4b:9a:1b:37:94:01:89:2c:98:77:
3b:38:4f:87:fc:34:c2:12:73:05:98:bf:5a:84:88:4e:3f:bf:
c8:08:d3:bb:d4:f1:cc:7c:61:be:d9:ed:26:66:85:92:32:ff:
61:0f:c4:27:b3:7d:c9:6e:84:58:8d:3c:47:2a:ea:cb:20:cf:
c5:65:9a:1b:1b:60:11:e8:b3:98:19:e6:57:27:b5:3b:23:46:
7b:fc:8c:78:8b:3c:00:de:92:66:3d:e5:08:f8:85:25:cd:28:
89:13:6c:65:ca:f7:f2:c2:5a:2c:7e:8c:3e:0d:f1:07:e1:8a:
6b:ef:d8:1e:cd:e3:87:a5:97:ee:a0:cb:b0:3a:6d:ee:11:da:
7c:89:51:eb:6b:5a:d2:bf:cf:ba:6a:09:bc:d3:02:37:82:55:
4c:cf:2b:cf:e0:f2:0e:f7:9a:84:97:78:df:c2:d1:aa:b2:be:
e1:11:14:c2:89:7a:d8:60:24:7e:fe:3a:86:dd:f0:d2:57:e8:
6a:b0:af:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6wwnFAIv2NXDQY7MLKFciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDM4YjM3OTgwYTBkZmFlOWNmOWEyYzViNTZhZGU5N2Zh
ZjUwMmUwHhcNMjUwNjE2MjIwMTMxWhcNMjUwNjE3MjIwMTMxWjAzMTEwLwYDVQQD
EyhiM2UzN2IwZjU5MmZmNjhlYjAwOWMxYTgwNTcyNTcwMTYyY2E0NDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSt+Xojy+6h06xH42sKUbdfj/UFG
4AsXi4FT/6mRdL2Ib1RtMgfrmvO8wBE48shEh8XpgyM/HjXsuBcLeC2hT5vI6tUX
gxz4+t19lJD9BPW6q1S+qNUoZcdtp3PQ6/BrWorSWzr94u0NtL/p0D6qZlKGVqIp
cOlw91qAIHhHUDNY5zMMu4I04J0r4Ek2sCFnmGXDiim35FcbHfmNxytek9LJsUwC
745hPd+s5stgbO66vPElK9H0keZZhLAsJUlqBGIE6QrtBYZvAxK7axWLSKE3/mdS
6ieocnBOK9lDuUjirQN9dRuruMnfEDZ2sFZApfleL6mjtDKJX4c+bp6D0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPjew9ZL/aOsAnBqAVyVwFiykQvMB8GA1UdIwQY
MBaAFGHTizeYCg366c+aLFtWrel/r1AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRPTE41Z0tEZnJwejVvc1cxYXQ2WC12VUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OTc0NmMtNTAxYS00M2U4LWI4ODct
N2Q0NDhiMzk2Nzc2LzEvWWRPTE41Z0tEZnJwejVvc1cxYXQ2WC12VUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OTc0NmMtNTAxYS00M2U4LWI4ODctN2Q0NDhiMzk2Nzc2
LzEvWWRPTE41Z0tEZnJwejVvc1cxYXQ2WC12VUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7a13zWZ
Rq6S7zAk4GJjUqSo5TRdLQv83DFHdcSOKOP27GI3DkDuhpKLcnjCbmBeD2noDD83
e+i2vlGLJHBLmhs3lAGJLJh3OzhPh/w0whJzBZi/WoSITj+/yAjTu9TxzHxhvtnt
JmaFkjL/YQ/EJ7N9yW6EWI08RyrqyyDPxWWaGxtgEeizmBnmVye1OyNGe/yMeIs8
AN6SZj3lCPiFJc0oiRNsZcr38sJaLH6MPg3xB+GKa+/YHs3jh6WX7qDLsDpt7hHa
fIlR62ta0r/PumoJvNMCN4JVTM8rz+DyDveahJd438LRqrK+4REUwol62GAkfv46
ht3w0lfoarCvDw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:24:46 2025 by rpki-client