Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: aPMKGJLOXmBbbeJr5+aRkDm3Ho9yeNdJrkEw5VEtrG8=
Subject key identifier: BA:48:FF:2A:77:8A:0B:89:24:8D:B3:9E:6B:90:F8:5B:8A:74:31:16
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 01965E71DAA32A26DB529703897E7166891B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 09AC
Signing time: Tue 22 Apr 2025 17:00:41 +0000
Manifest this update: Tue 22 Apr 2025 17:00:41 +0000
Manifest next update: Wed 23 Apr 2025 17:00:41 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: bkOLSUQLsfh1/nO3+/5QOsRpqv0WWLqOZYecJBF1ZPM=)
2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:da:a3:2a:26:db:52:97:03:89:7e:71:66:89:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Apr 22 17:00:41 2025 GMT
Not After : Apr 23 17:00:41 2025 GMT
Subject: CN=ba48ff2a778a0b89248db39e6b90f85b8a743116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:f2:8d:23:d6:5d:4c:57:92:aa:ff:14:48:
c7:11:1d:2a:c7:b7:25:a7:d3:78:a2:51:05:11:76:
4e:bd:4f:91:73:ae:0e:36:98:a2:6c:69:55:b0:5b:
55:97:d6:04:e4:55:53:9e:b8:71:a9:05:19:74:9c:
da:a7:12:e2:b0:58:c5:fe:7f:57:01:fa:e1:d0:48:
71:1f:39:00:39:f5:19:12:2c:92:b9:5e:bc:44:91:
98:7f:e8:6e:90:d9:a7:e5:f2:eb:24:a8:16:b7:1a:
6d:e6:0e:c9:2b:fa:cc:0b:a1:d2:f0:17:62:1d:d1:
1d:07:fe:8e:3d:a9:2b:a7:d7:2e:58:67:7a:4c:49:
d3:67:48:2b:9d:ab:ce:b2:e5:3f:13:75:c0:ef:f4:
f0:22:81:bd:6d:27:d0:26:83:f0:39:5f:28:56:5a:
1a:32:18:4a:73:4e:e4:91:a5:bb:b9:a4:a8:31:f0:
54:27:c6:94:48:8e:1d:f8:3b:09:8a:ae:56:e1:d9:
d1:39:e4:08:9b:ab:ae:14:5b:9e:52:42:b8:28:d8:
4a:22:60:04:27:f2:cd:82:4c:c1:2d:0f:bd:b2:4f:
54:05:a8:63:3f:1b:42:9b:64:7b:85:9f:81:a9:b4:
58:49:64:ac:5b:79:eb:4b:f2:f2:a4:66:84:a2:d4:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:48:FF:2A:77:8A:0B:89:24:8D:B3:9E:6B:90:F8:5B:8A:74:31:16
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b3:2a:10:e3:14:e9:12:f5:bd:09:a1:51:62:08:b5:15:45:
15:fa:c8:e7:a6:d1:e4:42:1e:e4:cb:47:93:17:82:ad:09:4f:
a0:ed:ff:a9:09:97:16:4e:78:9e:ee:06:3b:7e:f0:ce:41:9f:
70:56:35:c6:41:72:db:e7:ca:d4:53:23:28:cc:a0:e7:63:21:
26:5a:99:45:19:17:69:73:92:60:a5:37:12:55:7f:6a:99:37:
7b:8b:ff:c9:10:7a:85:5e:22:c0:c3:d7:fe:ef:f9:97:ed:c3:
6b:02:c0:d4:62:fb:fc:18:54:1b:ef:92:9f:04:dc:86:84:a8:
e9:69:31:6a:6a:80:f0:b1:a2:db:bc:ed:66:5d:97:e8:ae:3b:
64:c4:d0:25:21:a8:b3:17:27:11:06:9b:03:b2:68:ce:62:55:
ae:9b:f7:f5:42:9e:ed:bc:ee:71:f0:82:be:cc:eb:04:fd:dc:
bb:d2:af:bb:ef:10:90:70:4b:03:ee:58:59:3a:89:76:98:4d:
34:eb:68:5a:2e:ac:2e:c2:e6:34:01:e1:0b:c3:21:bb:1f:0d:
1d:c0:8b:5c:a0:5c:09:7d:60:e9:87:cb:e6:f1:8a:c2:47:1e:
c4:c4:fb:89:53:ea:57:ae:7a:c0:13:0f:31:60:97:84:d9:ce:
eb:f3:2c:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZecdqjKibbUpcDiX5xZokbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTAwOTllMzM1NDA5ZGIwM2FjMTEzM2QxNjRmMDJhMGQ1
ZGM2NmYwHhcNMjUwNDIyMTcwMDQxWhcNMjUwNDIzMTcwMDQxWjAzMTEwLwYDVQQD
EyhiYTQ4ZmYyYTc3OGEwYjg5MjQ4ZGIzOWU2YjkwZjg1YjhhNzQzMTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLzyjSPWXUxXkqr/FEjHER0qx7cl
p9N4olEFEXZOvU+Rc64ONpiibGlVsFtVl9YE5FVTnrhxqQUZdJzapxLisFjF/n9X
Afrh0EhxHzkAOfUZEiySuV68RJGYf+hukNmn5fLrJKgWtxpt5g7JK/rMC6HS8Bdi
HdEdB/6OPakrp9cuWGd6TEnTZ0grnavOsuU/E3XA7/TwIoG9bSfQJoPwOV8oVloa
MhhKc07kkaW7uaSoMfBUJ8aUSI4d+DsJiq5W4dnROeQIm6uuFFueUkK4KNhKImAE
J/LNgkzBLQ+9sk9UBahjPxtCm2R7hZ+BqbRYSWSsW3nrS/LypGaEotQPVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpI/yp3iguJJI2znmuQ+FuKdDEWMB8GA1UdIwQY
MBaAFGBQCZ4zVAnbA6wRM9Fk8CoNXcZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUt
NGM2NWJkMzNkNmY2LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUtNGM2NWJkMzNkNmY2
LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7MqEOMU
6RL1vQmhUWIItRVFFfrI56bR5EIe5MtHkxeCrQlPoO3/qQmXFk54nu4GO37wzkGf
cFY1xkFy2+fK1FMjKMyg52MhJlqZRRkXaXOSYKU3ElV/apk3e4v/yRB6hV4iwMPX
/u/5l+3DawLA1GL7/BhUG++SnwTchoSo6WkxamqA8LGi27ztZl2X6K47ZMTQJSGo
sxcnEQabA7JozmJVrpv39UKe7bzucfCCvszrBP3cu9Kvu+8QkHBLA+5YWTqJdphN
NOtoWi6sLsLmNAHhC8Mhux8NHcCLXKBcCX1g6YfL5vGKwkcexMT7iVPqV656wBMP
MWCXhNnO6/MsBQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:25 2025 by rpki-client