Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: fRWiJlaW8ic+IiboOix4x6D+itExu9YVJRc/SrTWUio=
Subject key identifier: 72:8A:3B:6D:8B:8A:4F:4F:26:AB:72:3F:F3:D0:27:7C:19:23:51:D5
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 019655A62CA7C66B7DC1B5374EEDAC4159CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 016B
Signing time: Mon 21 Apr 2025 00:01:15 +0000
Manifest this update: Mon 21 Apr 2025 00:01:15 +0000
Manifest next update: Tue 22 Apr 2025 00:01:15 +0000
Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: 7o8gIvycbD/9Jd/9IbrxkFokgxrc/QdaWUXcNRbdS/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:2c:a7:c6:6b:7d:c1:b5:37:4e:ed:ac:41:59:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Apr 21 00:01:15 2025 GMT
Not After : Apr 22 00:01:15 2025 GMT
Subject: CN=728a3b6d8b8a4f4f26ab723ff3d0277c192351d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:0a:7c:ed:05:70:02:fb:8b:1c:e9:f0:8d:
74:68:11:48:ac:8a:dc:4a:86:a8:30:53:21:7f:70:
16:a5:55:3c:17:76:8a:ac:dc:2a:2d:66:dc:e0:9d:
28:09:c0:72:87:4c:29:5c:8f:40:70:c7:03:12:9a:
c9:17:4c:9d:3a:6f:b7:c0:5a:18:29:49:bf:41:4f:
12:af:9f:31:b0:05:4b:e5:69:9e:97:8e:07:81:dc:
c2:70:5b:9c:91:b0:07:62:ce:d1:06:c0:f3:79:e5:
9f:c6:a1:e2:8c:8b:96:dd:8a:f5:34:d5:58:12:60:
b0:81:04:b4:7e:17:c6:04:3c:b0:3b:d5:ac:f4:f5:
e0:62:8d:68:b7:78:16:45:4d:ee:f9:b5:cf:a2:05:
29:fd:a7:e2:17:e4:ec:91:85:c1:c5:95:96:6f:4a:
3c:96:31:1c:b0:81:bf:27:32:ae:97:86:50:af:80:
ed:b2:e3:b5:b0:4d:62:f1:36:49:8f:33:69:5d:c7:
b8:f0:9d:38:f1:2d:a8:09:83:c1:cd:9b:15:13:00:
cf:47:c0:47:e5:1a:a7:61:9d:53:75:c2:a4:cf:0f:
a8:12:07:7c:6f:f9:d9:11:83:8f:83:a5:18:0f:22:
20:4c:87:c8:61:20:ed:6d:c8:6b:0e:c5:7f:47:d3:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8A:3B:6D:8B:8A:4F:4F:26:AB:72:3F:F3:D0:27:7C:19:23:51:D5
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1a:cb:f6:c4:4e:22:5b:ad:63:78:5c:ba:71:32:61:a0:31:
80:7b:4a:25:d9:44:3b:77:6e:1f:41:78:9e:f6:13:92:80:83:
24:00:ec:0e:1b:b7:0c:2b:f0:37:d5:e5:27:04:74:1a:31:b7:
9f:a5:bd:c4:a6:04:4e:b7:b8:fa:91:a8:2c:31:c1:15:c1:a1:
96:c8:91:18:53:0e:84:e6:13:0a:12:51:3f:46:a7:43:c0:ec:
af:1b:ea:06:b7:2d:5b:9f:51:51:81:48:ef:2f:99:ff:79:2d:
60:cc:4f:0a:f4:92:71:bd:5e:d8:88:82:2a:b9:e1:fe:a5:93:
3a:03:97:b3:04:45:49:c7:7d:fb:84:ca:f8:d2:46:b5:b2:39:
a6:8b:53:48:94:da:2c:56:13:d1:ee:7b:c9:f0:e2:ca:4d:28:
6c:d9:0d:1d:83:8d:50:45:6b:34:b1:61:36:63:6a:83:75:ad:
eb:82:9f:c0:20:91:22:04:5b:57:fe:ca:84:28:af:19:4a:83:
2b:7e:8e:92:87:67:f7:ec:a2:cf:50:7a:54:93:99:f9:9d:e4:
56:d8:99:c0:67:be:88:76:73:2b:3f:82:ee:95:46:2a:6b:6a:
5d:a9:01:a5:c2:00:86:44:6d:53:fc:19:bd:1c:dd:75:20:0e:
8e:e5:ef:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpiynxmt9wbU3Tu2sQVnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm
ZTI2MWQwHhcNMjUwNDIxMDAwMTE1WhcNMjUwNDIyMDAwMTE1WjAzMTEwLwYDVQQD
Eyg3MjhhM2I2ZDhiOGE0ZjRmMjZhYjcyM2ZmM2QwMjc3YzE5MjM1MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyoKfO0FcAL7ixzp8I10aBFIrIrc
SoaoMFMhf3AWpVU8F3aKrNwqLWbc4J0oCcByh0wpXI9AcMcDEprJF0ydOm+3wFoY
KUm/QU8Sr58xsAVL5Wmel44HgdzCcFuckbAHYs7RBsDzeeWfxqHijIuW3Yr1NNVY
EmCwgQS0fhfGBDywO9Ws9PXgYo1ot3gWRU3u+bXPogUp/afiF+TskYXBxZWWb0o8
ljEcsIG/JzKul4ZQr4DtsuO1sE1i8TZJjzNpXce48J048S2oCYPBzZsVEwDPR8BH
5RqnYZ1TdcKkzw+oEgd8b/nZEYOPg6UYDyIgTIfIYSDtbchrDsV/R9MatQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKKO22Lik9PJqtyP/PQJ3wZI1HVMB8GA1UdIwQY
MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt
NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw
LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBrL9sRO
IlutY3hcunEyYaAxgHtKJdlEO3duH0F4nvYTkoCDJADsDhu3DCvwN9XlJwR0GjG3
n6W9xKYETre4+pGoLDHBFcGhlsiRGFMOhOYTChJRP0anQ8DsrxvqBrctW59RUYFI
7y+Z/3ktYMxPCvSScb1e2IiCKrnh/qWTOgOXswRFScd9+4TK+NJGtbI5potTSJTa
LFYT0e57yfDiyk0obNkNHYONUEVrNLFhNmNqg3Wt64KfwCCRIgRbV/7KhCivGUqD
K36Okodn9+yiz1B6VJOZ+Z3kVtiZwGe+iHZzKz+C7pVGKmtqXakBpcIAhkRtU/wZ
vRzddSAOjuXvQg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:14 2025 by rpki-client