Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier: Q6aSAIxH2Hox/PS533WlgTtnak4XlWvSQynXN948y4w=
Subject key identifier: E5:3E:E6:E2:FB:61:D5:98:12:3C:32:C1:BA:F8:77:EE:4C:5A:95:E5
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 019655DCBCF08BF7F18E6BE671599196947C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number: 025E
Signing time: Mon 21 Apr 2025 01:00:51 +0000
Manifest this update: Mon 21 Apr 2025 01:00:51 +0000
Manifest next update: Tue 22 Apr 2025 01:00:51 +0000
Files and hashes: 1: q46mhqb037SisDm5N4bZ1WyfVUE.roa (hash: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=)
2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: 2foUPC+itER4wJmKXfprbtXPyGBpoQ/ER7Kb2vlxLWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:bc:f0:8b:f7:f1:8e:6b:e6:71:59:91:96:94:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Apr 21 01:00:51 2025 GMT
Not After : Apr 22 01:00:51 2025 GMT
Subject: CN=e53ee6e2fb61d598123c32c1baf877ee4c5a95e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:43:22:24:d5:11:f0:77:4c:f0:57:17:c1:
97:e5:ea:56:9d:c3:2c:73:07:c2:d2:01:fc:54:7a:
3c:f3:97:0e:ac:78:51:14:55:45:35:6b:00:4a:c2:
86:b6:38:6f:55:01:07:f0:8a:42:5f:81:f2:da:cb:
ad:c4:0d:b0:21:04:47:4f:20:00:67:6e:c9:c7:2a:
9d:3b:80:cc:d9:0d:85:99:24:e2:8f:8c:53:dd:9e:
46:fa:a8:d9:47:f2:d9:99:33:33:c4:26:8a:84:8e:
b6:80:9c:53:e4:c5:b9:81:4c:f8:4a:63:91:47:48:
96:9b:79:a9:7e:71:84:70:35:60:43:9e:b7:16:5b:
0f:3e:70:d5:b3:b4:04:5a:7b:bd:dc:6e:b9:44:88:
da:a9:b2:57:96:bf:7d:44:79:be:9a:e1:c4:cc:1f:
1d:44:e8:d5:2c:ae:a3:3e:0d:c7:12:cf:06:95:f5:
cb:ce:f5:dc:de:81:04:e8:ec:b4:01:8f:77:4a:88:
4f:ee:c1:62:87:bb:2f:d9:99:59:19:89:29:59:f5:
6f:ea:22:28:8f:ca:02:d9:69:d6:85:13:9d:9b:43:
4c:fc:01:ba:45:b5:f3:9a:1b:ad:5b:16:d8:13:9a:
02:36:fd:b7:64:99:11:65:aa:ef:f3:2d:dd:a3:aa:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3E:E6:E2:FB:61:D5:98:12:3C:32:C1:BA:F8:77:EE:4C:5A:95:E5
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:02:f2:a7:e6:02:ce:8d:cd:0d:b6:57:55:21:ce:f2:ea:1c:
0b:f4:ff:a8:98:75:ca:af:f3:0b:5e:b9:62:db:aa:8f:e9:dc:
5e:d9:c9:a7:08:49:10:76:ec:22:af:a9:45:d2:cf:58:72:56:
95:bc:d4:70:37:41:b5:14:14:01:0a:4e:1c:0f:28:bd:d1:13:
b8:a2:59:1f:f3:cb:cc:12:db:60:a9:cf:35:29:94:fc:4f:16:
87:37:e0:53:63:90:32:b6:3d:21:56:f4:37:82:c7:9d:60:50:
76:7a:1f:2f:a2:9b:9a:2f:ad:a4:5f:43:7a:36:0b:8e:05:fd:
e5:3a:21:6a:ca:7f:06:61:d4:ab:75:d0:c1:d3:14:76:b2:61:
54:80:6d:e6:56:5a:9c:d4:76:03:f7:e3:f7:4b:54:6b:c1:c1:
12:e5:22:42:d3:05:01:b7:fc:6d:2b:f1:9a:b3:72:7b:e6:06:
01:eb:93:12:0e:16:77:4f:56:67:76:05:05:d1:ce:f7:67:7a:
f0:44:2e:ed:cc:41:39:57:6d:f7:64:02:df:3c:a8:34:52:0b:
82:b3:00:0d:bf:be:68:9d:9a:ec:8c:66:2c:51:15:4f:60:0c:
59:bc:42:39:e5:e3:0a:f5:23:e7:2e:d9:69:7a:41:17:74:1f:
00:fb:8d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3Lzwi/fxjmvmcVmRlpR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTlmYzcyNWIwYzNlZjEwMzczNDYwZjliZjU5YmNlM2Vk
NTBhMzQwHhcNMjUwNDIxMDEwMDUxWhcNMjUwNDIyMDEwMDUxWjAzMTEwLwYDVQQD
EyhlNTNlZTZlMmZiNjFkNTk4MTIzYzMyYzFiYWY4NzdlZTRjNWE5NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxxDIiTVEfB3TPBXF8GX5epWncMs
cwfC0gH8VHo885cOrHhRFFVFNWsASsKGtjhvVQEH8IpCX4Hy2sutxA2wIQRHTyAA
Z27JxyqdO4DM2Q2FmSTij4xT3Z5G+qjZR/LZmTMzxCaKhI62gJxT5MW5gUz4SmOR
R0iWm3mpfnGEcDVgQ563FlsPPnDVs7QEWnu93G65RIjaqbJXlr99RHm+muHEzB8d
ROjVLK6jPg3HEs8GlfXLzvXc3oEE6Oy0AY93SohP7sFih7sv2ZlZGYkpWfVv6iIo
j8oC2WnWhROdm0NM/AG6RbXzmhutWxbYE5oCNv23ZJkRZarv8y3do6q0WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOU+5uL7YdWYEjwywbr4d+5MWpXlMB8GA1UdIwQY
MBaAFMvp/HJbDD7xA3NGD5v1m84+1Qo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDIt
NTVhNTRkZjE0MzRlLzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDItNTVhNTRkZjE0MzRl
LzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwLyp+YC
zo3NDbZXVSHO8uocC/T/qJh1yq/zC165Ytuqj+ncXtnJpwhJEHbsIq+pRdLPWHJW
lbzUcDdBtRQUAQpOHA8ovdETuKJZH/PLzBLbYKnPNSmU/E8WhzfgU2OQMrY9IVb0
N4LHnWBQdnofL6Kbmi+tpF9DejYLjgX95Tohasp/BmHUq3XQwdMUdrJhVIBt5lZa
nNR2A/fj90tUa8HBEuUiQtMFAbf8bSvxmrNye+YGAeuTEg4Wd09WZ3YFBdHO92d6
8EQu7cxBOVdt92QC3zyoNFILgrMADb++aJ2a7IxmLFEVT2AMWbxCOeXjCvUj5y7Z
aXpBF3QfAPuN8w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:14 2025 by rpki-client