Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier: N9gJoFOEAqVRCJEgcnR+UQCzKuDrOLDicX4qc2gzKXk=
Subject key identifier: A7:2F:61:C8:0B:08:D0:DC:C8:8A:33:F6:A4:ED:F2:BA:42:70:A0:51
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial: 0198A04EC758066A203B7B4D7E2084296007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number: 0712
Signing time: Tue 12 Aug 2025 22:02:53 +0000
Manifest this update: Tue 12 Aug 2025 22:02:53 +0000
Manifest next update: Wed 13 Aug 2025 22:02:53 +0000
Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: R1nlwbA+A3snsxmA2U0vHi14w+wLO9F5IHp170sO6Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:c7:58:06:6a:20:3b:7b:4d:7e:20:84:29:60:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Validity
Not Before: Aug 12 22:02:53 2025 GMT
Not After : Aug 13 22:02:53 2025 GMT
Subject: CN=a72f61c80b08d0dcc88a33f6a4edf2ba4270a051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:cd:18:60:dd:b2:69:b4:8b:24:f7:55:2f:
82:2b:62:83:73:b9:bd:5b:73:bc:37:eb:f5:51:b6:
8c:03:7e:02:e5:05:8e:92:32:41:f6:c8:19:c8:38:
3c:d7:fa:83:c1:49:5e:9c:f6:4b:e1:21:3a:6f:dc:
66:17:e8:ed:14:86:ed:19:3f:dd:34:6f:2e:71:f5:
ee:8a:82:59:5e:d8:c2:44:32:da:8c:12:0e:5b:02:
b4:66:dc:1e:5d:63:be:73:87:f4:ed:9c:91:8a:8b:
75:b8:6f:43:e0:67:69:3b:04:fd:1d:8d:2a:ad:0b:
79:1e:a4:5d:07:1d:52:c3:eb:2d:0f:ef:fb:78:d1:
56:10:11:3c:39:92:e2:16:76:35:b4:e7:91:f7:e5:
d6:f5:20:e8:c7:cd:c9:e4:90:45:fd:26:f5:eb:09:
1d:79:e6:6b:4a:6e:36:88:4b:b2:0e:f5:f3:74:36:
12:2b:da:ba:52:d4:fd:77:5a:5f:80:05:29:95:18:
ac:34:a4:05:6d:18:33:c9:51:e2:eb:d8:52:d4:ae:
57:67:9f:42:d3:50:b2:84:84:2f:21:83:00:10:15:
ef:66:20:0f:69:a3:5b:ee:93:01:22:6c:ec:d3:5e:
f7:9a:50:95:f0:3f:2f:f5:41:23:05:fc:73:53:4a:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:61:C8:0B:08:D0:DC:C8:8A:33:F6:A4:ED:F2:BA:42:70:A0:51
X509v3 Authority Key Identifier:
keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:09:c9:7b:bc:ca:f8:5e:9a:3d:ad:55:58:36:3a:a7:06:11:
25:87:16:c5:30:92:0a:8a:80:70:8c:a3:56:9a:13:43:12:80:
a6:f5:39:26:e1:67:0a:e6:75:92:a6:a0:b5:10:f6:ab:5d:82:
36:17:68:1c:63:05:2a:64:e8:16:1a:b8:e1:76:29:88:29:f6:
a5:b5:e2:87:09:47:bc:6e:c3:26:82:c5:f5:89:a6:7e:d0:2d:
6e:ab:52:b3:58:88:8e:c6:91:48:b7:bf:6a:4f:4e:e3:88:85:
8c:8a:cb:46:fc:db:bb:4a:7c:97:be:29:89:6e:8e:4e:8c:51:
96:81:5c:02:99:c0:03:d7:99:db:98:73:78:0f:c0:e8:f5:a1:
d0:86:54:cf:b9:1b:47:3c:35:ed:00:12:8f:54:51:28:a8:8f:
c2:ef:ba:d9:40:32:28:f6:15:bf:5d:58:ef:e6:69:45:66:9a:
c3:d2:69:a2:83:0a:62:2b:49:bf:87:ab:8b:2e:3b:ca:2f:3c:
4e:d7:37:7b:c4:10:09:26:ff:08:e4:f4:5e:0c:dd:98:21:a1:
bf:1e:33:35:2b:b0:c9:a1:9a:a9:a9:3c:11:30:57:3a:62:fa:
f5:76:df:37:b4:c1:33:d8:3e:ee:b6:1a:04:1a:4b:5b:8a:dd:
54:16:22:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTsdYBmogO3tNfiCEKWAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzBmYWQ4ODk3ZWEyNTgyZjk1MzA3NzllMGU2OGVhMDhj
Y2U2NDMwHhcNMjUwODEyMjIwMjUzWhcNMjUwODEzMjIwMjUzWjAzMTEwLwYDVQQD
EyhhNzJmNjFjODBiMDhkMGRjYzg4YTMzZjZhNGVkZjJiYTQyNzBhMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrHNGGDdsmm0iyT3VS+CK2KDc7m9
W3O8N+v1UbaMA34C5QWOkjJB9sgZyDg81/qDwUlenPZL4SE6b9xmF+jtFIbtGT/d
NG8ucfXuioJZXtjCRDLajBIOWwK0ZtweXWO+c4f07ZyRiot1uG9D4GdpOwT9HY0q
rQt5HqRdBx1Sw+stD+/7eNFWEBE8OZLiFnY1tOeR9+XW9SDox83J5JBF/Sb16wkd
eeZrSm42iEuyDvXzdDYSK9q6UtT9d1pfgAUplRisNKQFbRgzyVHi69hS1K5XZ59C
01CyhIQvIYMAEBXvZiAPaaNb7pMBImzs0173mlCV8D8v9UEjBfxzU0pNNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcvYcgLCNDcyIoz9qTt8rpCcKBRMB8GA1UdIwQY
MBaAFGLA+tiJfqJYL5Uwd54OaOoIzOZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81MWQwNGYtMjQ2ZS00MWYxLTk0MTIt
Y2VlMWIxZDFlYzA2LzEvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81MWQwNGYtMjQ2ZS00MWYxLTk0MTItY2VlMWIxZDFlYzA2
LzEvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAnJe7zK
+F6aPa1VWDY6pwYRJYcWxTCSCoqAcIyjVpoTQxKApvU5JuFnCuZ1kqagtRD2q12C
NhdoHGMFKmToFhq44XYpiCn2pbXihwlHvG7DJoLF9YmmftAtbqtSs1iIjsaRSLe/
ak9O44iFjIrLRvzbu0p8l74piW6OToxRloFcApnAA9eZ25hzeA/A6PWh0IZUz7kb
Rzw17QASj1RRKKiPwu+62UAyKPYVv11Y7+ZpRWaaw9JpooMKYitJv4eriy47yi88
Ttc3e8QQCSb/COT0XgzdmCGhvx4zNSuwyaGaqak8ETBXOmL69XbfN7TBM9g+7rYa
BBpLW4rdVBYi/g==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:18 2025 by rpki-client