Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft
File: yfcvcKzNptLmEzWoFzDm9u5RPMU.mft (raw, json)
Hash identifier: IE23EhPib5ZXLpS7F8oyX4sWDydLUrp4+tPVlFwd2mA=
Subject key identifier: A0:56:C5:C1:09:25:08:C7:C9:47:4C:12:08:A6:5C:34:99:63:F0:3C
Authority key identifier: C9:F7:2F:70:AC:CD:A6:D2:E6:13:35:A8:17:30:E6:F6:EE:51:3C:C5
Certificate issuer: /CN=c9f72f70accda6d2e61335a81730e6f6ee513cc5
Certificate serial: 0195903D583FD7B6F4BDDB54F28E17002AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft
Manifest number: 1494
Signing time: Thu 13 Mar 2025 16:01:34 +0000
Manifest this update: Thu 13 Mar 2025 16:01:34 +0000
Manifest next update: Fri 14 Mar 2025 16:01:34 +0000
Files and hashes: 1: yfcvcKzNptLmEzWoFzDm9u5RPMU.crl (hash: iFmba2y2kyPSIXI3gUYJ/6L60Fqo1LMZJtGvLFg5234=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:58:3f:d7:b6:f4:bd:db:54:f2:8e:17:00:2a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f72f70accda6d2e61335a81730e6f6ee513cc5
Validity
Not Before: Mar 13 16:01:34 2025 GMT
Not After : Mar 14 16:01:34 2025 GMT
Subject: CN=a056c5c1092508c7c9474c1208a65c349963f03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:31:b1:a4:95:7b:5f:dd:55:6b:ce:3c:21:
1c:dc:01:14:6a:a8:6d:e3:60:ac:49:84:1b:9e:fa:
3f:67:e8:ba:96:43:3f:de:72:d5:c7:26:d1:5f:cb:
df:7b:9c:2e:22:6f:31:fe:8f:1e:18:cd:fa:65:b1:
0d:cb:f5:af:a9:ac:89:bb:0d:46:25:62:66:6e:f1:
5a:19:a9:12:40:61:f5:66:84:a2:7a:88:34:5e:65:
92:c5:d8:29:40:27:ce:66:35:59:44:1a:a5:a9:ef:
09:4a:ea:4d:40:5e:e0:56:df:25:39:f8:2c:27:66:
aa:12:36:0c:7f:f1:1b:69:55:56:11:b1:bf:35:03:
80:52:23:28:c9:f6:34:df:94:26:f2:2e:2c:d7:e3:
dc:ea:f7:9a:7b:59:18:1c:59:c3:fe:46:7e:be:02:
9a:53:a8:a9:84:94:e3:4e:b1:3e:af:bd:69:b5:06:
00:83:89:c0:a7:ba:02:18:1d:e6:1f:e1:66:37:40:
df:6b:eb:aa:85:42:18:f7:a8:74:99:8d:bb:a7:f9:
1a:87:93:8e:cf:d1:8e:88:64:b8:2f:69:16:c6:8e:
b0:37:e5:7d:bf:1a:66:50:31:ab:b6:dd:c3:08:04:
e2:bc:ba:31:2a:71:09:d6:b7:e7:cc:0c:5b:c1:de:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:56:C5:C1:09:25:08:C7:C9:47:4C:12:08:A6:5C:34:99:63:F0:3C
X509v3 Authority Key Identifier:
keyid:C9:F7:2F:70:AC:CD:A6:D2:E6:13:35:A8:17:30:E6:F6:EE:51:3C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b0:49:d4:d4:89:a6:70:16:a2:62:dd:ea:f9:35:c0:30:11:
2e:bf:d9:be:2b:39:08:4c:d9:69:3b:d5:b7:b5:27:91:ca:40:
58:1d:ab:e0:c8:3e:aa:5d:2a:bc:ae:15:2d:8c:b6:ca:64:47:
90:c5:52:0d:9e:35:c8:f1:17:44:ea:69:f6:a0:d7:ea:01:7b:
8d:cf:6d:f6:51:38:15:62:d4:37:60:c8:79:b7:4a:38:45:22:
dd:28:4d:e0:1b:aa:f7:64:c5:bc:fd:05:d3:85:f4:f8:92:20:
79:ab:87:3c:33:97:c2:8f:f9:d4:94:7f:07:9f:23:af:69:8c:
e1:1f:21:9f:d6:b1:ae:81:83:53:48:30:b2:ea:44:76:75:b9:
6d:32:59:cf:c3:44:e7:85:c7:b9:e3:66:85:61:82:9a:16:2a:
1f:6e:73:4a:24:97:32:bb:ee:b5:b4:99:03:9e:cb:37:a9:9b:
71:12:62:67:26:84:8f:b2:4b:45:5e:b1:07:94:b2:95:9d:f1:
1e:33:33:79:5f:8e:bc:fa:4b:ff:8c:53:46:97:69:ba:aa:0d:
1b:fc:7e:ca:0b:7a:65:22:ad:8b:eb:ff:8c:93:bb:5c:75:80:
1e:ab:74:f2:a1:a6:c0:a1:cc:99:09:4d:59:d1:11:13:75:7a:
66:53:d6:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPVg/17b0vdtU8o4XACq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZjcyZjcwYWNjZGE2ZDJlNjEzMzVhODE3MzBlNmY2ZWU1
MTNjYzUwHhcNMjUwMzEzMTYwMTM0WhcNMjUwMzE0MTYwMTM0WjAzMTEwLwYDVQQD
EyhhMDU2YzVjMTA5MjUwOGM3Yzk0NzRjMTIwOGE2NWMzNDk5NjNmMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNQxsaSVe1/dVWvOPCEc3AEUaqht
42CsSYQbnvo/Z+i6lkM/3nLVxybRX8vfe5wuIm8x/o8eGM36ZbENy/WvqayJuw1G
JWJmbvFaGakSQGH1ZoSieog0XmWSxdgpQCfOZjVZRBqlqe8JSupNQF7gVt8lOfgs
J2aqEjYMf/EbaVVWEbG/NQOAUiMoyfY035Qm8i4s1+Pc6veae1kYHFnD/kZ+vgKa
U6iphJTjTrE+r71ptQYAg4nAp7oCGB3mH+FmN0Dfa+uqhUIY96h0mY27p/kah5OO
z9GOiGS4L2kWxo6wN+V9vxpmUDGrtt3DCATivLoxKnEJ1rfnzAxbwd4JSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBWxcEJJQjHyUdMEgimXDSZY/A8MB8GA1UdIwQY
MBaAFMn3L3CszabS5hM1qBcw5vbuUTzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWZjdmNLek5wdExtRXpXb0Z6RG05dTVSUE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hN2IyNjUtNTQ3Ni00OWY0LWJkNGEt
MmY5ZjgxZTkzMjk4LzEveWZjdmNLek5wdExtRXpXb0Z6RG05dTVSUE1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hN2IyNjUtNTQ3Ni00OWY0LWJkNGEtMmY5ZjgxZTkzMjk4
LzEveWZjdmNLek5wdExtRXpXb0Z6RG05dTVSUE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLBJ1NSJ
pnAWomLd6vk1wDARLr/Zvis5CEzZaTvVt7UnkcpAWB2r4Mg+ql0qvK4VLYy2ymRH
kMVSDZ41yPEXROpp9qDX6gF7jc9t9lE4FWLUN2DIebdKOEUi3ShN4Buq92TFvP0F
04X0+JIgeauHPDOXwo/51JR/B58jr2mM4R8hn9axroGDU0gwsupEdnW5bTJZz8NE
54XHueNmhWGCmhYqH25zSiSXMrvutbSZA57LN6mbcRJiZyaEj7JLRV6xB5SylZ3x
HjMzeV+OvPpL/4xTRpdpuqoNG/x+ygt6ZSKti+v/jJO7XHWAHqt08qGmwKHMmQlN
WdERE3V6ZlPW3A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:45:14 2025 by rpki-client