Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: OXOnmtNpQFQ5Kobh/UHcT807mcAgwGBSCx+b7+k55dg=
Subject key identifier: EB:9F:6C:DE:E7:0D:F3:C5:3B:42:FA:54:48:83:AC:5C:E4:EA:30:66
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019658019805897C65210920D0D7C93D9F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0892
Signing time: Mon 21 Apr 2025 11:00:21 +0000
Manifest this update: Mon 21 Apr 2025 11:00:21 +0000
Manifest next update: Tue 22 Apr 2025 11:00:21 +0000
Files and hashes: 1: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: OKZnD4GqbcNEjhe1xakUByqSc2vGIEyoOoCCmZA39Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:98:05:89:7c:65:21:09:20:d0:d7:c9:3d:9f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Apr 21 11:00:21 2025 GMT
Not After : Apr 22 11:00:21 2025 GMT
Subject: CN=eb9f6cdee70df3c53b42fa544883ac5ce4ea3066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:72:2e:50:2e:5a:51:81:c1:d7:28:ed:78:
f3:7b:63:03:8e:44:ea:91:cb:65:15:51:cc:81:44:
22:3c:bf:14:a7:61:7b:b1:b0:7b:63:32:1b:89:7b:
4e:17:d1:f4:b0:99:f0:72:af:cb:0e:d5:09:a8:78:
cc:15:63:a2:c0:b8:ee:79:65:0e:68:0b:cb:be:98:
52:1f:1e:48:22:37:db:12:82:1c:1b:65:70:52:f8:
b5:a6:69:95:23:20:fd:40:71:52:1a:9b:6e:9f:ed:
b6:7c:95:20:24:0e:c6:d5:3f:53:78:91:fa:f1:d3:
d5:ab:16:e8:fe:2e:20:56:69:12:16:52:bf:b7:5a:
d7:b4:cb:43:52:ee:0a:bd:62:d7:90:f9:d2:4a:67:
7d:32:d2:75:f5:35:5b:ad:17:7a:b3:4d:b9:cc:3a:
a1:ca:9b:69:9e:b8:d7:f9:61:b9:20:fd:93:59:43:
e7:30:92:cc:89:f3:f2:95:3a:4a:4f:13:bc:dd:58:
3d:f0:4c:30:f8:fb:59:12:e2:e4:3f:70:30:8b:7e:
f2:6f:07:3e:27:c9:66:1f:8f:fd:bd:76:b8:49:0b:
1d:8f:d8:dc:83:11:22:c1:ca:0f:bc:40:10:27:57:
71:5a:7f:50:f0:fa:ae:1d:81:79:18:bf:17:a6:e0:
78:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9F:6C:DE:E7:0D:F3:C5:3B:42:FA:54:48:83:AC:5C:E4:EA:30:66
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0b:73:c1:88:35:4b:a3:01:ba:58:e2:49:d4:1a:e2:67:9a:
33:ff:1b:05:f5:96:ea:8f:97:cf:95:7b:bb:ae:5e:70:19:25:
6e:c3:50:f4:cb:41:74:3d:2b:08:c2:59:76:79:a2:ef:b0:82:
d6:aa:07:37:b3:ab:c8:32:f3:c4:77:cd:1f:26:1e:2a:e0:19:
bb:86:da:58:c8:e5:94:d6:e2:f2:75:bd:bc:b3:87:ef:b9:82:
c8:ab:ec:2e:71:78:2a:1e:63:30:63:3f:06:c9:76:36:0d:b5:
66:f1:6e:9a:41:1c:4a:d4:37:10:14:f1:e5:06:13:2e:ea:15:
fe:1c:a1:8c:a3:89:96:9d:1f:08:e7:6f:8e:5e:ed:a5:9e:48:
ed:65:ad:9a:c2:87:5d:dd:d6:52:40:5b:f2:dd:8d:01:01:39:
fe:ae:10:d4:2b:87:e5:fd:85:74:1e:f5:da:8d:fc:2f:19:e1:
38:69:26:ca:e0:7b:2a:f8:76:c2:b9:c7:07:19:63:48:92:aa:
72:b4:4e:d8:f8:e6:cc:ce:6f:b8:20:9d:78:15:13:5d:f9:83:
d2:23:c7:18:a0:60:6a:57:c4:f5:dd:f7:d7:ad:7b:b9:e8:83:
74:6f:68:fd:7d:4b:94:b7:7d:e5:e7:7c:b8:33:7a:05:7d:94:
3f:24:c4:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAZgFiXxlIQkg0NfJPZ8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTc0MTNlZDc0YTM3MTYxZThiYjNmNjE1NjI1NDFkZDI4
OTA1YmUwHhcNMjUwNDIxMTEwMDIxWhcNMjUwNDIyMTEwMDIxWjAzMTEwLwYDVQQD
EyhlYjlmNmNkZWU3MGRmM2M1M2I0MmZhNTQ0ODgzYWM1Y2U0ZWEzMDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYxyLlAuWlGBwdco7Xjze2MDjkTq
kctlFVHMgUQiPL8Up2F7sbB7YzIbiXtOF9H0sJnwcq/LDtUJqHjMFWOiwLjueWUO
aAvLvphSHx5IIjfbEoIcG2VwUvi1pmmVIyD9QHFSGptun+22fJUgJA7G1T9TeJH6
8dPVqxbo/i4gVmkSFlK/t1rXtMtDUu4KvWLXkPnSSmd9MtJ19TVbrRd6s025zDqh
yptpnrjX+WG5IP2TWUPnMJLMifPylTpKTxO83Vg98Eww+PtZEuLkP3Awi37ybwc+
J8lmH4/9vXa4SQsdj9jcgxEiwcoPvEAQJ1dxWn9Q8PquHYF5GL8XpuB4jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOufbN7nDfPFO0L6VEiDrFzk6jBmMB8GA1UdIwQY
MBaAFMmXQT7XSjcWHouz9hViVB3SiQW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgt
ZTQ5ZDQ2MWMzMTU0LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgtZTQ5ZDQ2MWMzMTU0
LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQtzwYg1
S6MBuljiSdQa4meaM/8bBfWW6o+Xz5V7u65ecBklbsNQ9MtBdD0rCMJZdnmi77CC
1qoHN7OryDLzxHfNHyYeKuAZu4baWMjllNbi8nW9vLOH77mCyKvsLnF4Kh5jMGM/
Bsl2Ng21ZvFumkEcStQ3EBTx5QYTLuoV/hyhjKOJlp0fCOdvjl7tpZ5I7WWtmsKH
Xd3WUkBb8t2NAQE5/q4Q1CuH5f2FdB712o38LxnhOGkmyuB7Kvh2wrnHBxljSJKq
crRO2PjmzM5vuCCdeBUTXfmD0iPHGKBgalfE9d331617ueiDdG9o/X1LlLd95ed8
uDN6BX2UPyTEdA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:40:46 2025 by rpki-client