Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: bcapoK88qdo06jB8+GRfx9DaZmzROpr1B1hYYsKrNCY=
Subject key identifier: E5:F4:89:AA:F7:29:A8:59:B9:1B:C0:2E:DB:C5:2B:4C:2D:72:D8:97
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 01979180E0BF74C146E4EE4E556C71802AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 0618
Signing time: Sat 21 Jun 2025 08:00:31 +0000
Manifest this update: Sat 21 Jun 2025 08:00:31 +0000
Manifest next update: Sun 22 Jun 2025 08:00:31 +0000
Files and hashes: 1: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: FNvggHHP2c2w0vVGlJs1Dw0pLJcTBFEpAvYzQDDpFFE=)
2: aAUDoOMiIkIoTxqpgiR2vBHCYiA.roa (hash: bEbrJBN9qOyrrJrbKszXph6Dv/8oZGFIwIyFCbBw1tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:80:e0:bf:74:c1:46:e4:ee:4e:55:6c:71:80:2a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Jun 21 08:00:31 2025 GMT
Not After : Jun 22 08:00:31 2025 GMT
Subject: CN=e5f489aaf729a859b91bc02edbc52b4c2d72d897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:e6:6b:eb:99:07:45:c3:01:75:e7:5a:c8:
4c:e0:d1:01:f9:00:28:81:12:16:72:21:8a:82:0f:
ce:50:17:90:9d:c4:6c:dc:22:3b:45:46:83:6a:d8:
a8:98:70:5c:b1:d9:4f:3a:ba:82:67:fb:98:af:ca:
9b:87:c3:40:09:43:e1:a6:9f:c9:8d:c0:50:89:3f:
05:3d:7d:49:72:da:fb:2f:d8:82:7b:9c:37:cf:31:
47:06:6d:6b:e6:aa:b9:20:85:e3:0b:5b:ba:cb:a3:
49:2d:ac:0c:86:4b:36:da:b0:b0:74:7a:36:c0:8f:
68:5d:80:f9:d2:9e:c0:d3:70:e4:9f:a8:9a:2a:f8:
ca:df:47:06:f7:a6:3a:bc:2d:88:62:90:95:48:2e:
49:10:d3:33:f8:7a:e0:05:be:bd:1c:ff:5b:a8:d4:
21:53:95:ac:4c:4f:eb:b4:5f:49:e4:fb:a5:09:c9:
f3:60:12:a7:fe:89:6e:1b:90:d7:23:c3:d4:b2:a9:
9e:3b:9c:d5:0c:a6:8f:a5:42:ed:b7:8e:91:a5:3a:
c2:7c:9f:93:0a:fc:94:60:52:cc:60:4c:a0:e8:d4:
83:04:8b:c1:05:2c:7b:67:60:c5:42:03:fd:17:23:
39:f7:57:86:c5:99:9b:87:83:4b:93:23:10:24:77:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F4:89:AA:F7:29:A8:59:B9:1B:C0:2E:DB:C5:2B:4C:2D:72:D8:97
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b0:43:17:85:c5:d9:5a:88:84:25:61:5b:93:ee:24:04:61:
77:d5:f5:78:7b:d6:da:2a:aa:26:7d:e4:e6:df:a0:8d:8b:fc:
48:71:1f:53:28:93:76:9e:7f:44:56:5a:bc:b8:27:48:7a:5b:
34:19:92:8c:16:6d:85:3a:79:85:f8:40:c7:92:ab:73:44:19:
c0:cf:dc:78:b4:08:91:b1:6c:99:6a:a7:f3:40:b9:69:eb:ce:
f3:de:10:eb:22:8d:3c:e5:da:fc:e1:f9:33:be:7a:99:b8:35:
dd:58:20:40:51:97:07:fc:51:67:29:b7:46:ba:3e:a1:79:a7:
b5:1d:e8:d9:09:b2:3c:33:7d:a9:37:ca:a7:5d:99:fc:04:2f:
61:2e:91:e4:6a:cf:b7:18:51:d4:7c:ae:ac:19:53:c8:61:01:
2f:2a:dc:30:d9:b8:d5:5b:c4:8d:5c:18:f2:75:c5:ac:bf:01:
74:eb:02:b2:8d:83:6e:cc:60:7f:1f:89:85:38:dd:ae:51:19:
45:0a:93:e7:98:bd:4f:d7:91:0f:6d:79:9f:e7:0e:71:93:6b:
18:2f:4f:2d:4a:28:27:02:9b:82:01:dc:f2:18:cf:a9:d4:59:
eb:58:2b:06:9f:ed:3a:01:0d:df:ce:ca:f7:72:a8:db:72:4c:
dc:9d:a7:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeRgOC/dMFG5O5OVWxxgCrtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4
ZTYxZTUwHhcNMjUwNjIxMDgwMDMxWhcNMjUwNjIyMDgwMDMxWjAzMTEwLwYDVQQD
EyhlNWY0ODlhYWY3MjlhODU5YjkxYmMwMmVkYmM1MmI0YzJkNzJkODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroHma+uZB0XDAXXnWshM4NEB+QAo
gRIWciGKgg/OUBeQncRs3CI7RUaDatiomHBcsdlPOrqCZ/uYr8qbh8NACUPhpp/J
jcBQiT8FPX1Jctr7L9iCe5w3zzFHBm1r5qq5IIXjC1u6y6NJLawMhks22rCwdHo2
wI9oXYD50p7A03Dkn6iaKvjK30cG96Y6vC2IYpCVSC5JENMz+HrgBb69HP9bqNQh
U5WsTE/rtF9J5PulCcnzYBKn/oluG5DXI8PUsqmeO5zVDKaPpULtt46RpTrCfJ+T
CvyUYFLMYEyg6NSDBIvBBSx7Z2DFQgP9FyM591eGxZmbh4NLkyMQJHfLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOX0iar3KahZuRvALtvFK0wtctiXMB8GA1UdIwQY
MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt
ZjVhZjYxNmI1NDgzLzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz
LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbBDF4XF
2VqIhCVhW5PuJARhd9X1eHvW2iqqJn3k5t+gjYv8SHEfUyiTdp5/RFZavLgnSHpb
NBmSjBZthTp5hfhAx5Krc0QZwM/ceLQIkbFsmWqn80C5aevO894Q6yKNPOXa/OH5
M756mbg13VggQFGXB/xRZym3Rro+oXmntR3o2QmyPDN9qTfKp12Z/AQvYS6R5GrP
txhR1HyurBlTyGEBLyrcMNm41VvEjVwY8nXFrL8BdOsCso2Dbsxgfx+JhTjdrlEZ
RQqT55i9T9eRD215n+cOcZNrGC9PLUooJwKbggHc8hjPqdRZ61grBp/tOgEN387K
93Ko23JM3J2nGw==
-----END CERTIFICATE-----
Generated at Sat Jun 21 14:07:15 2025 by rpki-client