Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: U8iMtA8jBooIWNiFWlmqafUgBVm9ocFEQxj0vd1fMwA=
Subject key identifier: D0:FD:B2:5A:9E:11:C0:1E:5C:60:21:23:84:F4:02:A1:CB:2E:22:3A
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 019510C6B721E4F132488CE0BBB7338FB6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 03A5
Signing time: Sun 16 Feb 2025 22:00:13 +0000
Manifest this update: Sun 16 Feb 2025 22:00:13 +0000
Manifest next update: Mon 17 Feb 2025 22:00:13 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: kjdLsbAokU7h5eCIt+PH5ml7RprGbceBteokJCj9nGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:b7:21:e4:f1:32:48:8c:e0:bb:b7:33:8f:b6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Feb 16 22:00:13 2025 GMT
Not After : Feb 17 22:00:13 2025 GMT
Subject: CN=d0fdb25a9e11c01e5c60212384f402a1cb2e223a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:56:50:c2:9c:fd:77:be:7b:8d:ba:11:c8:
c9:47:32:55:46:15:11:bf:99:8c:e6:bd:d9:b7:26:
63:13:4d:a4:84:0f:0d:0d:df:0d:9a:77:ef:d9:81:
d6:97:53:ee:a7:8e:4e:20:d2:ff:e4:e2:09:17:1d:
95:68:b1:09:4f:35:3f:9a:f3:10:24:06:2b:ca:c3:
44:11:9c:bd:60:91:2e:43:52:63:6b:e9:b5:17:db:
f4:37:72:11:1e:45:40:e7:74:44:5c:88:8c:d5:24:
34:8d:e7:25:da:8d:bb:2b:0e:50:68:08:d1:3a:19:
9e:73:53:52:c4:a0:88:c2:c8:30:26:f6:25:cf:7b:
73:57:c1:5f:32:14:ba:3c:87:25:39:54:22:1c:b6:
8e:1e:c4:b8:af:dd:a5:dc:9c:56:30:41:ad:fa:20:
12:c6:7f:8f:2c:a8:2b:01:bf:ab:23:e0:57:ee:c6:
41:7f:ea:3c:4a:d6:52:97:aa:c2:77:b0:96:3b:6d:
c3:76:68:37:d7:41:06:ee:b9:5c:00:3a:b3:bf:66:
5b:ed:a7:16:3d:75:5d:fc:b0:e4:64:fa:75:35:a0:
9a:82:84:42:62:50:9f:bd:7c:4c:e2:73:ae:43:c5:
30:98:86:1e:17:00:85:05:1f:91:31:b7:e3:ed:b1:
59:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FD:B2:5A:9E:11:C0:1E:5C:60:21:23:84:F4:02:A1:CB:2E:22:3A
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ab:a1:a2:fb:1b:22:cf:a9:60:8d:0e:38:49:84:37:86:71:
c6:01:bc:b7:6b:e4:16:84:00:6a:4d:d2:34:ab:52:b2:46:c2:
4e:72:34:12:93:80:1d:3a:1e:47:75:70:c1:13:77:3d:17:d5:
9c:3e:e7:e0:ef:36:97:53:14:b0:9e:ae:7b:9f:72:20:62:52:
0e:d9:11:0f:cf:79:11:4e:f7:99:24:e1:7d:f4:6d:c5:98:e5:
9f:7a:85:3d:59:de:c7:fe:fb:11:7c:26:68:98:78:86:06:df:
f4:fd:93:7f:d3:58:93:c7:9e:03:29:50:16:dd:6f:76:a1:0b:
29:2f:1f:ff:66:4d:bd:58:10:0c:e7:b0:f7:a7:5e:26:31:c8:
f0:d1:16:2a:1e:02:29:2b:0b:a5:47:37:73:3d:40:88:dc:30:
60:ea:69:df:e8:99:f7:f0:50:b7:4b:e6:a1:df:4a:b2:29:25:
25:86:be:dc:cd:3e:e2:18:f2:ad:03:5b:8f:7e:50:db:79:70:
2a:56:3d:f4:80:f8:6e:11:17:33:4b:7d:bd:67:a3:b6:12:6c:
0b:18:b1:28:2e:78:62:4f:b4:cc:5d:9d:4a:68:51:a2:28:26:
6e:fd:43:fe:cb:a4:77:c6:15:c5:a4:e4:08:6d:9f:6c:c7:23:
81:3b:f8:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxrch5PEySIzgu7czj7bVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzdkMmY2ZjBiNzhjMGVkNzViOGVmYzI4MDA5ZDc5Nzk2
MTQwMDMwHhcNMjUwMjE2MjIwMDEzWhcNMjUwMjE3MjIwMDEzWjAzMTEwLwYDVQQD
EyhkMGZkYjI1YTllMTFjMDFlNWM2MDIxMjM4NGY0MDJhMWNiMmUyMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4ZWUMKc/Xe+e426EcjJRzJVRhUR
v5mM5r3ZtyZjE02khA8NDd8Nmnfv2YHWl1Pup45OINL/5OIJFx2VaLEJTzU/mvMQ
JAYrysNEEZy9YJEuQ1Jja+m1F9v0N3IRHkVA53REXIiM1SQ0jecl2o27Kw5QaAjR
Ohmec1NSxKCIwsgwJvYlz3tzV8FfMhS6PIclOVQiHLaOHsS4r92l3JxWMEGt+iAS
xn+PLKgrAb+rI+BX7sZBf+o8StZSl6rCd7CWO23Ddmg310EG7rlcADqzv2Zb7acW
PXVd/LDkZPp1NaCagoRCYlCfvXxM4nOuQ8UwmIYeFwCFBR+RMbfj7bFZbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND9slqeEcAeXGAhI4T0AqHLLiI6MB8GA1UdIwQY
MBaAFMk30vbwt4wO11uO/CgAnXl5YUADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTIt
OTM3NzU0Y2JiNTA1LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTItOTM3NzU0Y2JiNTA1
LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUquhovsb
Is+pYI0OOEmEN4ZxxgG8t2vkFoQAak3SNKtSskbCTnI0EpOAHToeR3VwwRN3PRfV
nD7n4O82l1MUsJ6ue59yIGJSDtkRD895EU73mSThffRtxZjln3qFPVnex/77EXwm
aJh4hgbf9P2Tf9NYk8eeAylQFt1vdqELKS8f/2ZNvVgQDOew96deJjHI8NEWKh4C
KSsLpUc3cz1AiNwwYOpp3+iZ9/BQt0vmod9KsiklJYa+3M0+4hjyrQNbj35Q23lw
KlY99ID4bhEXM0t9vWejthJsCxixKC54Yk+0zF2dSmhRoigmbv1D/sukd8YVxaTk
CG2fbMcjgTv4Hg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:30 2025 by rpki-client