Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: R3plvfoVJO34gEZYstXbQKGNARlxlfYPgWIj7/7jxnk=
Subject key identifier: 49:71:E0:9A:37:A4:DB:23:32:0B:FC:0E:7E:33:88:D3:46:20:DF:82
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 01964D7EDE359809B81E11100F75C04C7ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: 01BA
Signing time: Sat 19 Apr 2025 10:01:21 +0000
Manifest this update: Sat 19 Apr 2025 10:01:21 +0000
Manifest next update: Sun 20 Apr 2025 10:01:21 +0000
Files and hashes: 1: 1-mbK63EZxL8v4V6vFmj_lwXzRxM.roa (hash: JWU55a5ri6Rn4UB9DqsCMDblGiRbnZJJXlkoHYetX7A=)
2: tUPB9TmrvRG46ngHubaYKYvn04E.roa (hash: rsksbLJqTJnjomTHQ1GVXbsT6pXd/mYYQ2loIuCMTYg=)
3: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: dcY5XUIzJUrFYi8TgiLQBApOjGanZefPRgkmhqCO/H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:de:35:98:09:b8:1e:11:10:0f:75:c0:4c:7e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Apr 19 10:01:21 2025 GMT
Not After : Apr 20 10:01:21 2025 GMT
Subject: CN=4971e09a37a4db23320bfc0e7e3388d34620df82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:4b:52:60:bf:c9:a5:51:62:b8:14:7d:64:
96:11:4c:c1:ec:ad:57:a9:5f:cd:c8:2e:49:98:65:
d8:ef:b7:98:71:dc:d0:e2:a1:48:67:51:fc:28:5c:
be:db:9e:be:6d:ea:78:cf:2a:4d:ab:3a:b7:ee:fe:
51:ef:26:ca:6c:ca:31:62:6a:60:9c:d9:a0:c6:39:
1c:db:68:77:f1:20:69:bd:6f:2f:35:9e:e3:16:10:
5f:a9:df:5e:10:3a:36:be:10:35:a0:be:23:c1:8c:
41:64:65:dc:13:32:d1:aa:9e:b6:fa:5b:41:8e:28:
76:a8:85:4b:12:19:44:4c:79:4d:8b:36:31:21:01:
a3:f7:f4:87:d6:9a:d7:9a:71:bc:5e:aa:f7:d3:91:
57:31:37:21:47:8e:45:12:57:c9:96:ad:e4:d1:18:
1e:6a:94:ea:4e:0d:f8:1f:d8:15:07:57:04:bb:85:
7e:65:93:4f:d6:64:e3:9e:b7:43:5e:cd:0a:60:78:
2a:65:26:68:f0:7b:f1:cd:29:45:1c:ac:4b:8c:80:
e6:8c:61:a3:1b:f1:0b:db:42:2f:5e:10:4f:3a:dd:
59:8f:4a:d9:e1:aa:25:a8:29:38:2c:e6:c7:16:6a:
a4:2e:3f:e7:be:4c:27:1c:34:5a:72:47:1b:8c:f0:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:E0:9A:37:A4:DB:23:32:0B:FC:0E:7E:33:88:D3:46:20:DF:82
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5c:a5:cc:f8:22:3a:01:1b:38:99:fa:ca:e3:0c:fb:d9:90:
bf:7f:86:7d:8f:42:2e:f0:f5:32:f8:60:c7:c1:cd:5e:ee:e0:
fc:d7:c1:2c:43:8e:c5:e8:a8:1a:d5:06:0f:63:8f:8a:3a:e4:
5d:59:9a:fb:b2:25:8c:f5:98:1d:b2:00:76:5a:3e:d0:75:63:
ce:9a:ac:59:dd:cd:a3:ee:e4:86:ca:88:21:ef:04:20:42:4d:
83:b7:48:55:e6:60:26:b2:d6:b0:df:3d:14:61:03:ad:dc:db:
7b:e4:54:0d:75:46:bb:ba:8a:a9:33:8e:84:4b:9e:b5:79:a8:
db:14:21:6c:ed:57:d2:64:56:ff:b3:8e:ec:c6:31:45:79:37:
30:25:9b:9c:15:54:b4:dd:52:61:70:6c:b6:49:c9:10:f1:9d:
fb:de:fb:a2:30:52:8f:ed:07:bb:85:be:5e:89:29:be:e7:4a:
3b:62:12:a5:ef:0f:d8:a7:08:63:b2:32:2c:f3:f1:28:b4:d2:
7f:94:9b:9c:e8:18:83:12:8f:f7:d6:70:03:8e:49:24:9e:30:
f8:c3:cd:76:fa:8e:71:a2:6a:46:34:92:09:e0:28:8a:59:1d:
6f:ec:ab:69:5f:be:19:f3:b5:c5:c3:de:1b:0b:f6:6b:ab:71:
99:3b:13:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNft41mAm4HhEQD3XATH7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YWVmODcxNjc1ODVkMjg5ODMxNWFhMzc1M2YzZmE2OGRh
ZDJjNmQwHhcNMjUwNDE5MTAwMTIxWhcNMjUwNDIwMTAwMTIxWjAzMTEwLwYDVQQD
Eyg0OTcxZTA5YTM3YTRkYjIzMzIwYmZjMGU3ZTMzODhkMzQ2MjBkZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ5LUmC/yaVRYrgUfWSWEUzB7K1X
qV/NyC5JmGXY77eYcdzQ4qFIZ1H8KFy+256+bep4zypNqzq37v5R7ybKbMoxYmpg
nNmgxjkc22h38SBpvW8vNZ7jFhBfqd9eEDo2vhA1oL4jwYxBZGXcEzLRqp62+ltB
jih2qIVLEhlETHlNizYxIQGj9/SH1prXmnG8Xqr305FXMTchR45FElfJlq3k0Rge
apTqTg34H9gVB1cEu4V+ZZNP1mTjnrdDXs0KYHgqZSZo8HvxzSlFHKxLjIDmjGGj
G/EL20IvXhBPOt1Zj0rZ4aolqCk4LObHFmqkLj/nvkwnHDRackcbjPD/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElx4Jo3pNsjMgv8Dn4ziNNGIN+CMB8GA1UdIwQY
MBaAFMmu+HFnWF0omDFao3U/P6aNrSxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODIt
ZGIxMGRjZmVjNGJmLzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODItZGIxMGRjZmVjNGJm
LzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFylzPgi
OgEbOJn6yuMM+9mQv3+GfY9CLvD1Mvhgx8HNXu7g/NfBLEOOxeioGtUGD2OPijrk
XVma+7IljPWYHbIAdlo+0HVjzpqsWd3No+7khsqIIe8EIEJNg7dIVeZgJrLWsN89
FGEDrdzbe+RUDXVGu7qKqTOOhEuetXmo2xQhbO1X0mRW/7OO7MYxRXk3MCWbnBVU
tN1SYXBstknJEPGd+977ojBSj+0Hu4W+XokpvudKO2ISpe8P2KcIY7IyLPPxKLTS
f5SbnOgYgxKP99ZwA45JJJ4w+MPNdvqOcaJqRjSSCeAoilkdb+yraV++GfO1xcPe
Gwv2a6txmTsT7g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:49:54 2025 by rpki-client