Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File: _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier: Bp2rNv3HZ0bqYUuard44FDUFcf5ApCIWge7aqSVmcGg=
Subject key identifier: 58:26:62:8E:B0:9E:78:08:11:A2:3A:46:2C:37:85:54:C4:E8:DE:A3
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer: /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial: 0197711B3D3136B5F48A0E9E5988DA2D2419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number: 0D50
Signing time: Sun 15 Jun 2025 01:01:39 +0000
Manifest this update: Sun 15 Jun 2025 01:01:39 +0000
Manifest next update: Mon 16 Jun 2025 01:01:39 +0000
Files and hashes: 1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: 0AY1C7tsVTUWbuqKboKziSahyHZFSfK/QGnRVkuqDXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:3d:31:36:b5:f4:8a:0e:9e:59:88:da:2d:24:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
Validity
Not Before: Jun 15 01:01:39 2025 GMT
Not After : Jun 16 01:01:39 2025 GMT
Subject: CN=5826628eb09e780811a23a462c378554c4e8dea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:08:b6:46:33:51:d9:6e:43:38:3b:e8:25:
c2:ef:83:80:30:74:44:a8:86:05:01:ff:bd:da:ef:
a9:6b:47:b4:4a:e0:99:d2:ea:1a:63:0b:c2:a5:0f:
fc:29:b1:df:0f:45:cb:d1:ba:08:8c:80:6a:5b:89:
79:6e:8e:41:e3:c5:46:66:e7:00:ff:e6:c6:ac:6b:
41:10:3d:32:ef:0c:67:d9:7c:5f:02:4d:c2:ce:f3:
5e:c2:a1:3b:29:9f:0c:d1:d1:f9:89:e0:04:81:53:
4d:da:ad:97:7a:ca:11:fe:91:2c:1a:6c:ea:cd:6f:
de:c7:72:6c:7e:06:b0:36:40:43:de:e7:e6:b7:bb:
b8:92:82:47:d9:d0:1d:24:56:5c:c4:8b:59:03:db:
18:0c:45:ea:dc:39:42:65:45:40:ea:6a:b6:4a:6c:
09:a7:d1:2f:5a:c0:0e:a3:36:47:f8:e0:c4:2c:24:
2f:04:ef:40:f5:e7:0f:e6:d0:e9:5e:2b:c3:f1:77:
53:5f:62:c5:60:eb:76:68:96:d6:f3:ef:8f:55:1c:
7d:04:09:0f:d6:57:76:f5:37:6e:a9:cd:cc:ed:77:
b2:8f:be:19:af:73:2a:2b:52:75:69:4e:b8:a4:f5:
90:b1:09:99:ff:f1:e3:5a:91:43:9e:59:13:88:11:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:62:8E:B0:9E:78:08:11:A2:3A:46:2C:37:85:54:C4:E8:DE:A3
X509v3 Authority Key Identifier:
keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9a:51:06:47:f0:51:b4:21:20:f3:31:6b:c7:76:80:e0:52:
26:d7:3c:8d:7c:09:5d:f6:55:f1:aa:d7:5a:e3:fd:11:f2:a7:
6e:f0:cc:6c:f0:aa:b3:c4:17:aa:47:47:d1:e3:b7:83:ee:cf:
df:da:71:3d:11:55:71:ab:69:7c:f0:a8:54:a0:4b:02:98:f5:
49:fc:8d:77:c6:10:9c:5d:ae:fc:08:0d:21:63:20:8b:3c:2f:
2a:1c:fd:47:19:4f:29:d3:5c:92:b4:de:1d:0d:18:62:1b:a0:
b6:6a:0d:18:c9:35:55:26:f1:f7:01:66:91:26:c9:5b:c4:97:
b1:2c:59:d5:4b:31:5e:7f:28:09:cd:2f:76:6e:48:5e:0e:f9:
65:88:0d:6f:6c:d7:64:13:88:bb:e9:78:37:aa:04:50:87:16:
06:02:c4:e3:c6:7e:c9:7a:b1:e9:50:6d:51:3b:f6:48:61:1d:
73:8c:ea:5a:06:71:40:61:d9:b2:f6:c9:ea:86:68:25:f6:c3:
47:72:2d:a2:8d:d5:4b:0e:ac:a5:91:ef:75:c1:7d:9b:e1:9a:
c1:a5:c9:43:b8:20:f6:89:14:13:cf:50:62:e1:77:0d:7c:88:
9b:eb:4b:7e:d8:f9:f6:99:c2:ce:9b:56:30:4c:62:90:62:ad:
7b:f4:43:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGz0xNrX0ig6eWYjaLSQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjA2YmQxMDgzMWNhNzM3ODc1NmI1ZTE2MTczODk2YTYw
YjAxOTEwHhcNMjUwNjE1MDEwMTM5WhcNMjUwNjE2MDEwMTM5WjAzMTEwLwYDVQQD
Eyg1ODI2NjI4ZWIwOWU3ODA4MTFhMjNhNDYyYzM3ODU1NGM0ZThkZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iYItkYzUdluQzg76CXC74OAMHRE
qIYFAf+92u+pa0e0SuCZ0uoaYwvCpQ/8KbHfD0XL0boIjIBqW4l5bo5B48VGZucA
/+bGrGtBED0y7wxn2XxfAk3CzvNewqE7KZ8M0dH5ieAEgVNN2q2XesoR/pEsGmzq
zW/ex3JsfgawNkBD3ufmt7u4koJH2dAdJFZcxItZA9sYDEXq3DlCZUVA6mq2SmwJ
p9EvWsAOozZH+ODELCQvBO9A9ecP5tDpXivD8XdTX2LFYOt2aJbW8++PVRx9BAkP
1ld29Tduqc3M7Xeyj74Zr3MqK1J1aU64pPWQsQmZ//HjWpFDnlkTiBEsCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgmYo6wnngIEaI6Riw3hVTE6N6jMB8GA1UdIwQY
MBaAFP8ga9EIMcpzeHVrXhYXOJamCwGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMzVkMzctNzQ0Ny00Y2Y0LTk4MmYt
NTBmMzk4YmIyNmU5LzEvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hMzVkMzctNzQ0Ny00Y2Y0LTk4MmYtNTBmMzk4YmIyNmU5
LzEvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGppRBkfw
UbQhIPMxa8d2gOBSJtc8jXwJXfZV8arXWuP9EfKnbvDMbPCqs8QXqkdH0eO3g+7P
39pxPRFVcatpfPCoVKBLApj1SfyNd8YQnF2u/AgNIWMgizwvKhz9RxlPKdNckrTe
HQ0YYhugtmoNGMk1VSbx9wFmkSbJW8SXsSxZ1UsxXn8oCc0vdm5IXg75ZYgNb2zX
ZBOIu+l4N6oEUIcWBgLE48Z+yXqx6VBtUTv2SGEdc4zqWgZxQGHZsvbJ6oZoJfbD
R3Itoo3VSw6spZHvdcF9m+GawaXJQ7gg9okUE89QYuF3DXyIm+tLftj59pnCzptW
MExikGKte/RDqw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:08:05 2025 by rpki-client