Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: 5zW0b3Ga5Ddh7FSYualovMIIRVRjHF7P42Y089NKIPo=
Subject key identifier: 25:A5:7E:F6:C3:C9:D1:FA:5C:C5:6E:9C:4F:F3:0B:DF:5D:7C:63:24
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 01964D7E4956F7E7996FA2AD50E175287038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 0449
Signing time: Sat 19 Apr 2025 10:00:43 +0000
Manifest this update: Sat 19 Apr 2025 10:00:43 +0000
Manifest next update: Sun 20 Apr 2025 10:00:43 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: Y0R6O9Ufg5SbN4eUWQC7QjEKwo4k6Eh+pl3sS+UGAxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:49:56:f7:e7:99:6f:a2:ad:50:e1:75:28:70:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Apr 19 10:00:43 2025 GMT
Not After : Apr 20 10:00:43 2025 GMT
Subject: CN=25a57ef6c3c9d1fa5cc56e9c4ff30bdf5d7c6324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:21:75:57:1d:4b:52:3d:51:d9:29:d7:6a:
2a:fe:d0:55:ee:f6:34:40:d4:77:39:32:93:0e:b5:
bc:7b:43:9b:5f:f1:5a:c3:45:24:5f:f6:0c:a7:4d:
ed:8a:3b:f4:c4:f7:32:e1:73:d5:12:c7:7b:e7:7e:
e8:16:e7:3c:40:8d:ef:fc:0f:ff:1e:a6:9b:3b:9b:
bb:fb:3e:e9:be:3e:8d:80:7d:c3:a7:c7:79:43:47:
91:3f:f4:ef:74:46:c2:23:65:82:56:67:f4:aa:50:
ce:68:73:f9:6f:0b:f8:59:f8:78:60:e9:0b:f9:8f:
5f:72:01:39:e3:88:39:cc:3a:ae:b1:c9:10:dc:c8:
a3:10:59:47:56:a3:f5:c3:02:2a:e4:79:6f:58:99:
2d:dd:f9:ba:58:ea:a2:66:c7:30:dd:d5:2c:74:62:
93:03:89:f9:6c:6d:80:c8:b8:13:d9:58:d3:95:3e:
23:58:01:6a:5f:f3:3f:bb:82:d9:a4:f8:21:3b:d7:
de:27:cd:a3:24:43:da:e1:8d:87:ce:5d:2d:97:23:
f8:92:86:06:f3:06:44:ba:bb:45:0e:92:2e:ba:7e:
b3:c6:e1:7f:74:60:7e:7a:b1:8d:0d:e3:0c:42:80:
54:dd:63:58:08:4e:9b:2d:7d:51:c5:ff:8a:00:ec:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:7E:F6:C3:C9:D1:FA:5C:C5:6E:9C:4F:F3:0B:DF:5D:7C:63:24
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:be:31:3e:39:40:1a:c1:3a:67:92:65:11:ec:db:49:0a:77:
55:e5:cf:18:83:c5:97:e1:77:42:83:cd:10:81:ff:6e:3a:67:
59:76:70:45:b4:a9:d2:7b:dc:96:75:21:81:ab:04:e4:00:5c:
65:8e:54:e9:60:be:6b:78:ad:73:d9:8c:09:5d:d1:f3:dd:ad:
e5:2a:aa:75:a6:7c:cf:a0:a8:94:55:0f:ab:6d:f7:9f:e4:9c:
a7:8e:74:30:1a:7a:c9:09:8d:15:27:b8:ef:56:2c:84:f0:15:
40:34:07:d0:27:8f:7d:0a:de:b1:35:fa:cb:d0:55:ed:58:e3:
ad:f0:67:f3:25:85:46:b1:df:62:c4:1b:7f:89:ad:3e:75:ae:
70:a8:79:bf:c2:b9:c5:cb:15:62:f8:a5:8c:f0:d8:d1:b4:3e:
75:76:f7:b4:30:7d:6c:fd:2d:28:6c:e0:f0:db:4f:63:94:62:
37:35:3b:5e:ea:e6:01:c8:90:95:87:c6:46:67:6c:2c:e6:f1:
37:c1:72:5d:d7:69:fa:ed:ff:ec:f2:52:79:42:3c:8c:1c:e3:
97:5b:be:7a:95:21:e2:9f:83:87:6e:fb:d5:ed:10:21:00:ef:
4d:44:5f:0d:15:0e:ae:65:db:30:31:ad:0e:6f:74:76:d2:fd:
40:01:16:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfklW9+eZb6KtUOF1KHA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzdkMmY2ZjBiNzhjMGVkNzViOGVmYzI4MDA5ZDc5Nzk2
MTQwMDMwHhcNMjUwNDE5MTAwMDQzWhcNMjUwNDIwMTAwMDQzWjAzMTEwLwYDVQQD
EygyNWE1N2VmNmMzYzlkMWZhNWNjNTZlOWM0ZmYzMGJkZjVkN2M2MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLUhdVcdS1I9Udkp12oq/tBV7vY0
QNR3OTKTDrW8e0ObX/Faw0UkX/YMp03tijv0xPcy4XPVEsd7537oFuc8QI3v/A//
HqabO5u7+z7pvj6NgH3Dp8d5Q0eRP/TvdEbCI2WCVmf0qlDOaHP5bwv4Wfh4YOkL
+Y9fcgE544g5zDqusckQ3MijEFlHVqP1wwIq5HlvWJkt3fm6WOqiZscw3dUsdGKT
A4n5bG2AyLgT2VjTlT4jWAFqX/M/u4LZpPghO9feJ82jJEPa4Y2Hzl0tlyP4koYG
8wZEurtFDpIuun6zxuF/dGB+erGNDeMMQoBU3WNYCE6bLX1Rxf+KAOwu8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWlfvbDydH6XMVunE/zC99dfGMkMB8GA1UdIwQY
MBaAFMk30vbwt4wO11uO/CgAnXl5YUADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTIt
OTM3NzU0Y2JiNTA1LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTItOTM3NzU0Y2JiNTA1
LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANL4xPjlA
GsE6Z5JlEezbSQp3VeXPGIPFl+F3QoPNEIH/bjpnWXZwRbSp0nvclnUhgasE5ABc
ZY5U6WC+a3itc9mMCV3R892t5SqqdaZ8z6ColFUPq233n+Scp450MBp6yQmNFSe4
71YshPAVQDQH0CePfQresTX6y9BV7VjjrfBn8yWFRrHfYsQbf4mtPnWucKh5v8K5
xcsVYviljPDY0bQ+dXb3tDB9bP0tKGzg8NtPY5RiNzU7XurmAciQlYfGRmdsLObx
N8FyXddp+u3/7PJSeUI8jBzjl1u+epUh4p+Dh2771e0QIQDvTURfDRUOrmXbMDGt
Dm90dtL9QAEW8A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:32:52 2025 by rpki-client