Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: 7LTK6f6/1Gd1bm8Fy9ZyLbW7nH4hAUDAHA5XJPkjA1k=
Subject key identifier: CB:2C:DF:58:18:F4:E2:E4:97:7C:64:28:6F:C0:44:85:FB:B8:85:6A
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019653B6EB64442EE3EDEAF4B1F8AD214946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1224
Signing time: Sun 20 Apr 2025 15:00:18 +0000
Manifest this update: Sun 20 Apr 2025 15:00:18 +0000
Manifest next update: Mon 21 Apr 2025 15:00:18 +0000
Files and hashes: 1: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: OVbaG3Vj7PApoHez+XA+n9VOZl/r/KDWFkVjVBYQRL0=)
2: faR7v_a9Va3-r60WSU_WaTJtc24.roa (hash: thaUHgZWvI2PC5jRMcEiFXRYLXPtomHvbvJ1x6LMOHg=)
3: zEjZI2nbs9NYU83i9nAA_qIX6Ls.roa (hash: NeJZaXwcRx4Bl+3WoFWMtQtTNrN4F35s8GQu8H57fPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:eb:64:44:2e:e3:ed:ea:f4:b1:f8:ad:21:49:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Apr 20 15:00:18 2025 GMT
Not After : Apr 21 15:00:18 2025 GMT
Subject: CN=cb2cdf5818f4e2e4977c64286fc04485fbb8856a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:5d:60:14:e7:4f:b9:89:dc:3b:e3:63:c2:
e5:39:34:f0:0d:7d:84:62:b8:40:75:2d:48:84:a4:
63:ab:68:9f:aa:65:83:dd:5a:fe:df:b2:54:e6:80:
6d:bb:72:8d:82:5d:da:d6:96:26:7c:68:c5:9c:38:
18:cb:a7:05:33:f2:92:0e:6a:2e:01:54:a0:aa:2c:
5d:94:1d:9b:f9:9d:f5:44:ae:85:52:6f:0f:5d:81:
79:ec:cf:70:3d:d1:84:07:94:4b:8e:15:ad:12:dd:
c6:dc:65:58:2f:73:97:34:23:68:3e:bb:e6:af:77:
2f:27:21:3b:87:f5:1f:d0:3c:b4:69:a7:de:e0:28:
1e:9e:85:cd:98:b3:1b:1d:90:fb:4b:bb:12:42:77:
1c:dd:d0:28:44:84:77:2c:28:79:ae:ba:65:78:55:
3b:d5:4d:3a:25:cd:8f:07:d9:3f:91:59:3c:f1:23:
74:8f:b7:c9:ce:bd:62:4a:df:e3:7d:f4:b2:ef:a7:
e3:1f:64:d2:47:25:f8:36:12:9d:86:da:95:55:39:
43:a0:8a:21:5e:8a:2d:d2:4c:19:83:f0:4a:f4:2e:
6d:da:cc:82:ce:cb:5d:e3:1a:eb:9b:23:bf:72:1b:
c7:45:91:92:8d:48:1f:db:40:e1:d4:94:b8:7f:f6:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2C:DF:58:18:F4:E2:E4:97:7C:64:28:6F:C0:44:85:FB:B8:85:6A
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:45:f2:53:fd:89:b8:71:c8:c3:6c:0f:07:b8:7e:95:85:1d:
0e:f3:0d:f6:4c:c8:ad:d5:b7:e2:89:2d:1a:d6:c1:2c:2a:61:
42:0d:42:73:09:d0:77:86:9f:ee:cb:07:5f:56:09:86:da:3a:
b2:ac:cd:00:04:6c:2f:53:af:d1:67:f1:d0:97:a6:fb:36:2a:
41:ef:55:72:10:5e:c5:5c:a4:c6:19:e0:e6:f2:1d:4c:70:3c:
e3:62:aa:54:23:fa:9a:7a:53:9e:28:8a:a9:84:3e:70:0d:df:
6c:d1:64:50:6b:76:8e:c7:49:dd:84:df:df:00:5f:07:2b:55:
3d:3d:88:64:80:12:a6:9a:2e:d3:ae:e0:fe:d2:41:4b:8d:97:
1e:d2:b4:b3:7f:6d:01:2e:c8:0a:35:57:c4:b3:e7:12:7f:c2:
b6:d5:a1:88:ae:dc:4c:d5:14:ee:c0:fa:09:af:b0:1e:0c:ce:
1b:b6:4a:63:25:b2:31:ee:3a:95:fb:37:f2:cc:49:aa:3e:15:
11:69:38:80:b8:fd:94:1f:8a:d4:b5:7c:8c:f6:41:ca:b6:87:
6d:c1:53:af:dd:2b:c4:a6:18:92:36:80:81:62:eb:4e:b6:b4:
33:02:9a:5c:97:80:db:92:ce:8f:a5:48:27:ef:9b:60:43:87:
fb:14:f1:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTtutkRC7j7er0sfitIUlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGM0OTRmNTYxOTNiNGU5YWRmM2RiNzJlNGYwMTk3OGM1
ODdmMTgwHhcNMjUwNDIwMTUwMDE4WhcNMjUwNDIxMTUwMDE4WjAzMTEwLwYDVQQD
EyhjYjJjZGY1ODE4ZjRlMmU0OTc3YzY0Mjg2ZmMwNDQ4NWZiYjg4NTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopxdYBTnT7mJ3DvjY8LlOTTwDX2E
YrhAdS1IhKRjq2ifqmWD3Vr+37JU5oBtu3KNgl3a1pYmfGjFnDgYy6cFM/KSDmou
AVSgqixdlB2b+Z31RK6FUm8PXYF57M9wPdGEB5RLjhWtEt3G3GVYL3OXNCNoPrvm
r3cvJyE7h/Uf0Dy0aafe4CgenoXNmLMbHZD7S7sSQncc3dAoRIR3LCh5rrpleFU7
1U06Jc2PB9k/kVk88SN0j7fJzr1iSt/jffSy76fjH2TSRyX4NhKdhtqVVTlDoIoh
Xoot0kwZg/BK9C5t2syCzstd4xrrmyO/chvHRZGSjUgf20Dh1JS4f/a8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMss31gY9OLkl3xkKG/ARIX7uIVqMB8GA1UdIwQY
MBaAFGJMSU9WGTtOmt89ty5PAZeMWH8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2Mt
N2FhYjZlZjk1NWExLzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2MtN2FhYjZlZjk1NWEx
LzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUXyU/2J
uHHIw2wPB7h+lYUdDvMN9kzIrdW34oktGtbBLCphQg1CcwnQd4af7ssHX1YJhto6
sqzNAARsL1Ov0Wfx0Jem+zYqQe9VchBexVykxhng5vIdTHA842KqVCP6mnpTniiK
qYQ+cA3fbNFkUGt2jsdJ3YTf3wBfBytVPT2IZIASppou067g/tJBS42XHtK0s39t
AS7ICjVXxLPnEn/CttWhiK7cTNUU7sD6Ca+wHgzOG7ZKYyWyMe46lfs38sxJqj4V
EWk4gLj9lB+K1LV8jPZByraHbcFTr90rxKYYkjaAgWLrTra0MwKaXJeA25LOj6VI
J++bYEOH+xTxUw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:56 2025 by rpki-client