Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
File: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft (raw, json)
Hash identifier: 7mn3FxS/UFTCMjx1cFC6DrkLYtTgn8t4CeyikTkWpGA=
Subject key identifier: B9:33:44:F2:87:8D:BF:BD:61:01:28:B6:73:55:E1:0F:3B:0B:12:A0
Authority key identifier: 63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
Certificate issuer: /CN=63ef6bdbc42ad06defdad72679414346d8d048df
Certificate serial: 01965ACBB116285A8FA9F0735B156C836D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
Manifest number: 14FC
Signing time: Tue 22 Apr 2025 00:00:20 +0000
Manifest this update: Tue 22 Apr 2025 00:00:20 +0000
Manifest next update: Wed 23 Apr 2025 00:00:20 +0000
Files and hashes: 1: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl (hash: 9+MgnjgunlXXkfK1GEO17wbzuY/uxcMY2mFWXCIYD6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cb:b1:16:28:5a:8f:a9:f0:73:5b:15:6c:83:6d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ef6bdbc42ad06defdad72679414346d8d048df
Validity
Not Before: Apr 22 00:00:20 2025 GMT
Not After : Apr 23 00:00:20 2025 GMT
Subject: CN=b93344f2878dbfbd610128b67355e10f3b0b12a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:df:17:62:df:b1:5f:4b:cb:9f:60:84:a2:
f4:b1:86:c6:ad:ce:73:fe:36:e8:5c:09:de:a7:c3:
c4:be:c4:7b:ef:b1:04:53:79:67:e1:85:c8:16:25:
0c:99:36:53:ab:75:37:8e:97:10:f5:42:d1:69:88:
0b:e8:9d:92:8c:f0:b8:9e:38:3a:9e:21:31:a3:04:
2d:51:55:9b:cd:68:55:b6:10:ff:4d:86:a5:4f:97:
75:d4:2d:c4:7a:fb:21:21:49:f8:9d:b7:53:08:50:
08:ce:27:b9:56:3a:f7:ec:07:89:ac:b9:da:4b:44:
ff:5e:c2:ae:a6:b2:5f:7c:3d:c9:82:3c:90:14:92:
4f:ed:5a:63:dd:05:d3:36:a3:25:95:71:54:f9:6b:
60:39:3f:9b:ee:d7:01:99:d4:1e:a4:3d:0b:c6:6d:
2d:e8:97:5e:2e:18:84:4f:b9:ca:4a:61:e2:0c:a9:
49:f9:22:55:a6:b5:86:b8:16:e7:be:24:3f:a1:89:
07:40:79:a5:56:8a:bd:5f:e0:35:a6:28:99:5b:eb:
21:36:3a:51:4e:e4:ab:d5:3c:91:fc:f6:5e:37:14:
0a:6c:34:4e:dd:85:7d:1a:d6:80:fa:01:55:31:b5:
ad:9c:8d:ea:11:a3:1e:03:d4:ba:99:42:aa:a0:1e:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:33:44:F2:87:8D:BF:BD:61:01:28:B6:73:55:E1:0F:3B:0B:12:A0
X509v3 Authority Key Identifier:
keyid:63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f4:77:57:22:e6:d6:51:50:7a:0e:d3:f7:a9:6c:bc:db:28:
09:82:f6:59:94:76:6b:fd:7d:af:a7:a3:0e:61:d2:fe:67:1e:
1b:da:1b:b0:5a:0b:c6:4a:0f:75:20:13:ad:56:60:d6:c6:92:
76:f5:95:2d:e3:74:5b:16:7c:b8:8e:83:f9:5d:ea:b3:fb:74:
7d:c4:34:06:71:c2:5d:6e:a2:1a:e3:83:58:6f:0b:1f:24:40:
7f:90:2f:e1:98:8f:4a:f8:ac:61:e5:1c:52:18:8f:d4:22:48:
c3:9d:d9:7b:7d:c2:fc:3a:f5:1e:2f:7f:33:ec:c3:d9:e1:57:
fd:0a:15:4a:00:46:72:d7:c3:84:bc:88:f8:fa:cc:c3:60:62:
3b:e2:42:91:12:93:dd:ab:b7:02:a7:06:17:f4:f2:58:e3:83:
87:d7:88:67:5d:8c:33:d1:a1:5f:ad:5c:b1:17:3c:b5:11:97:
f3:5f:bc:62:0f:7d:a4:54:67:a7:53:1f:ca:e6:73:7d:b6:12:
73:f7:6c:0f:2c:17:94:b1:29:a5:59:1e:f8:29:20:e4:50:23:
1f:81:5f:f2:b9:d2:87:60:7d:9d:df:ee:72:e8:a8:a3:cb:e7:
ff:41:11:ac:5a:6c:06:f9:69:fd:80:6b:d5:34:a0:ad:5c:40:
46:d0:88:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZay7EWKFqPqfBzWxVsg21jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWY2YmRiYzQyYWQwNmRlZmRhZDcyNjc5NDE0MzQ2ZDhk
MDQ4ZGYwHhcNMjUwNDIyMDAwMDIwWhcNMjUwNDIzMDAwMDIwWjAzMTEwLwYDVQQD
EyhiOTMzNDRmMjg3OGRiZmJkNjEwMTI4YjY3MzU1ZTEwZjNiMGIxMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/jfF2LfsV9Ly59ghKL0sYbGrc5z
/jboXAnep8PEvsR777EEU3ln4YXIFiUMmTZTq3U3jpcQ9ULRaYgL6J2SjPC4njg6
niExowQtUVWbzWhVthD/TYalT5d11C3EevshIUn4nbdTCFAIzie5Vjr37AeJrLna
S0T/XsKuprJffD3JgjyQFJJP7Vpj3QXTNqMllXFU+WtgOT+b7tcBmdQepD0Lxm0t
6JdeLhiET7nKSmHiDKlJ+SJVprWGuBbnviQ/oYkHQHmlVoq9X+A1piiZW+shNjpR
TuSr1TyR/PZeNxQKbDRO3YV9GtaA+gFVMbWtnI3qEaMeA9S6mUKqoB5/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkzRPKHjb+9YQEotnNV4Q87CxKgMB8GA1UdIwQY
MBaAFGPva9vEKtBt79rXJnlBQ0bY0EjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YWI1MTItOTYwNi00MmRjLTllYjUt
MGM4MzY4ZGI5NTYzLzEvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81YWI1MTItOTYwNi00MmRjLTllYjUtMGM4MzY4ZGI5NTYz
LzEvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/R3VyLm
1lFQeg7T96lsvNsoCYL2WZR2a/19r6ejDmHS/mceG9obsFoLxkoPdSATrVZg1saS
dvWVLeN0WxZ8uI6D+V3qs/t0fcQ0BnHCXW6iGuODWG8LHyRAf5Av4ZiPSvisYeUc
UhiP1CJIw53Ze33C/Dr1Hi9/M+zD2eFX/QoVSgBGctfDhLyI+PrMw2BiO+JCkRKT
3au3AqcGF/TyWOODh9eIZ12MM9GhX61csRc8tRGX81+8Yg99pFRnp1MfyuZzfbYS
c/dsDywXlLEppVke+Ckg5FAjH4Ff8rnSh2B9nd/ucuioo8vn/0ERrFpsBvlp/YBr
1TSgrVxARtCIMA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:10 2025 by rpki-client