Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: gcLXckETGyMUHEaFb9li00n2XHmWRZsnsklzPOFClpY=
Subject key identifier: CE:81:AD:96:E0:A7:C4:06:91:DA:34:5A:95:94:5B:12:12:F9:0F:E7
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 019655DCDEDD16E38AC5E81AF7E071D1702D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0B12
Signing time: Mon 21 Apr 2025 01:01:00 +0000
Manifest this update: Mon 21 Apr 2025 01:01:00 +0000
Manifest next update: Tue 22 Apr 2025 01:01:00 +0000
Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: JyPgx2WSZof140w4uKsJSEpdDwZGGA+IieQeQ5WSfKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:de:dd:16:e3:8a:c5:e8:1a:f7:e0:71:d1:70:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Apr 21 01:01:00 2025 GMT
Not After : Apr 22 01:01:00 2025 GMT
Subject: CN=ce81ad96e0a7c40691da345a95945b1212f90fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:9d:53:db:c7:08:49:26:52:da:b6:e2:a7:
dd:bf:36:7f:b3:11:0e:66:18:c2:4a:e1:07:73:67:
8c:bd:7e:3c:eb:6c:e2:96:01:82:8a:d2:fe:8c:12:
36:85:82:a2:95:ab:19:ec:0e:20:3a:fb:44:e3:97:
bb:58:fc:24:6e:95:68:d1:e2:84:da:da:2f:ab:7f:
43:8d:fd:6a:0d:54:16:7a:b5:62:57:b4:d8:a5:7c:
6e:cc:00:77:cc:af:9d:18:89:b7:4b:01:07:46:f7:
0a:3c:c1:fa:a8:56:d9:de:bf:a7:86:d7:77:ee:cd:
22:73:eb:d6:20:7a:1e:ca:16:27:c2:17:94:e4:20:
90:61:b2:6c:f4:87:f1:c2:9a:e9:b6:91:22:8a:0d:
cd:5a:60:74:ac:0d:76:8b:6b:3f:d6:8e:5c:45:a8:
87:00:1f:62:a8:bd:b5:bd:7f:6d:af:28:9a:4d:33:
d9:d9:8e:e1:b6:36:71:fc:81:99:e1:1a:6b:bf:27:
ad:fc:22:be:2c:0e:e5:0e:53:64:e0:c5:71:cf:f4:
80:23:5c:a3:bf:c5:18:09:05:e5:44:2c:9b:32:b2:
6a:f0:fe:03:a6:f9:c8:07:e5:d6:74:c9:f8:5f:69:
45:86:f0:43:97:ff:de:c7:a6:30:99:75:ad:0b:f8:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:AD:96:E0:A7:C4:06:91:DA:34:5A:95:94:5B:12:12:F9:0F:E7
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b2:62:53:66:6f:35:5e:dd:ea:00:43:58:f8:24:f7:27:29:
37:8d:3e:5c:bc:4b:e7:12:f2:05:61:1a:86:dc:6c:f1:ea:6a:
62:29:89:41:ec:94:2a:ca:0d:9a:50:ae:88:c8:e4:ef:7f:dd:
55:28:54:5e:84:82:9a:18:74:ad:0c:6d:43:ce:cc:60:9b:a6:
1a:f5:f9:44:ce:39:24:f0:63:5d:b1:8b:b3:9e:20:d0:e7:91:
dc:5b:68:0b:24:c1:37:72:ac:7c:1b:da:55:af:7b:06:70:9a:
33:7d:45:13:3d:da:9e:5f:3b:f1:97:2d:fb:de:2e:f1:b6:66:
d3:4b:44:f2:4d:d8:1a:1b:96:e0:2d:d7:4f:ca:55:c0:f3:f4:
1d:73:67:87:27:aa:cf:b1:bc:f5:79:6c:09:c1:5b:c9:3d:d6:
af:9a:51:78:21:1e:08:70:31:06:d7:7e:d1:cb:b2:0e:35:f1:
7f:76:12:94:c1:c3:bd:62:95:aa:3d:fa:61:b0:5d:18:34:b8:
5b:ff:4d:a7:0c:8c:bf:ff:d7:60:3c:76:a5:43:27:d4:fe:ee:
5a:dd:3d:a0:f8:59:51:24:fe:8f:82:47:d9:23:6c:ba:99:85:
dd:84:d4:09:e7:58:c2:f5:3b:aa:94:95:c6:94:f9:e8:4c:c0:
cc:cc:29:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3N7dFuOKxega9+Bx0XAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzA1YWZhMGRjOWE1ZjhmNjE4YzNlZDJlZWM2NzJlYzM4
ZjZmZWYwHhcNMjUwNDIxMDEwMTAwWhcNMjUwNDIyMDEwMTAwWjAzMTEwLwYDVQQD
EyhjZTgxYWQ5NmUwYTdjNDA2OTFkYTM0NWE5NTk0NWIxMjEyZjkwZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA332dU9vHCEkmUtq24qfdvzZ/sxEO
ZhjCSuEHc2eMvX4862zilgGCitL+jBI2hYKilasZ7A4gOvtE45e7WPwkbpVo0eKE
2tovq39Djf1qDVQWerViV7TYpXxuzAB3zK+dGIm3SwEHRvcKPMH6qFbZ3r+nhtd3
7s0ic+vWIHoeyhYnwheU5CCQYbJs9IfxwprptpEiig3NWmB0rA12i2s/1o5cRaiH
AB9iqL21vX9tryiaTTPZ2Y7htjZx/IGZ4Rprvyet/CK+LA7lDlNk4MVxz/SAI1yj
v8UYCQXlRCybMrJq8P4DpvnIB+XWdMn4X2lFhvBDl//ex6YwmXWtC/hXXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6BrZbgp8QGkdo0WpWUWxIS+Q/nMB8GA1UdIwQY
MBaAFGPAWvoNyaX49hjD7S7sZy7Dj2/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jNGE3MGUtZjdhOC00YWEwLTk4YzYt
MjNlMDk2NTJiM2Q4LzEvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jNGE3MGUtZjdhOC00YWEwLTk4YzYtMjNlMDk2NTJiM2Q4
LzEvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbJiU2Zv
NV7d6gBDWPgk9ycpN40+XLxL5xLyBWEahtxs8epqYimJQeyUKsoNmlCuiMjk73/d
VShUXoSCmhh0rQxtQ87MYJumGvX5RM45JPBjXbGLs54g0OeR3FtoCyTBN3KsfBva
Va97BnCaM31FEz3anl878Zct+94u8bZm00tE8k3YGhuW4C3XT8pVwPP0HXNnhyeq
z7G89XlsCcFbyT3Wr5pReCEeCHAxBtd+0cuyDjXxf3YSlMHDvWKVqj36YbBdGDS4
W/9NpwyMv//XYDx2pUMn1P7uWt09oPhZUST+j4JH2SNsupmF3YTUCedYwvU7qpSV
xpT56EzAzMwpeA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:37 2025 by rpki-client