Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: Sb3GdQhd3wzwdQ9j6TiPxVE+hmo92HiI2PLgNpLthVY=
Subject key identifier: 3C:48:29:FA:23:C0:66:F7:E1:17:EF:FD:7C:6C:3A:B7:3E:64:BF:B1
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 0194C3BE475A5314D5BDB5BF18F34EFBFE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 142E
Signing time: Sat 01 Feb 2025 23:00:14 +0000
Manifest this update: Sat 01 Feb 2025 23:00:14 +0000
Manifest next update: Sun 02 Feb 2025 23:00:14 +0000
Files and hashes: 1: UGjGolH12_x3cCDDDs-wfhhaN4U.roa (hash: FV6D5mk0nwiH6BRySmQ169aN1Z1SEVl4Kc/yfJEULos=)
2: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: /0+JTCy2tKkmDzfMKdlUw9Pk43CoZzTF0Q8MBWE972Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:47:5a:53:14:d5:bd:b5:bf:18:f3:4e:fb:fe:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: Feb 1 23:00:14 2025 GMT
Not After : Feb 2 23:00:14 2025 GMT
Subject: CN=3c4829fa23c066f7e117effd7c6c3ab73e64bfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:c8:cd:59:db:aa:90:7d:f2:b8:d8:ee:2d:
6e:e6:d4:36:67:6b:74:ca:d0:a7:8d:fb:12:b6:ad:
c6:bd:55:66:b5:d1:06:ef:1e:30:de:a9:00:72:d9:
77:03:41:9e:53:05:7c:c1:ba:a0:06:05:c4:7d:0f:
85:b0:be:65:b0:cf:4c:b7:3f:46:76:20:ff:08:64:
2a:23:de:79:a0:84:c3:c7:fd:27:8f:da:5d:51:89:
1a:9e:ac:ab:9a:86:c5:f8:a2:3e:60:5c:3f:d8:3d:
2c:ef:35:d7:73:8a:94:82:84:88:18:22:91:18:87:
45:28:01:a2:6d:21:7f:e3:ee:b2:a7:d0:6b:9c:65:
26:67:2b:47:f5:25:f8:a9:0b:e9:02:85:cb:cf:97:
fd:69:73:aa:0a:93:aa:9b:b8:45:63:be:1f:9a:56:
72:6c:72:a1:f0:92:03:13:31:b1:b4:f7:26:78:58:
6c:bc:b1:66:97:f7:09:c3:e9:d0:12:7c:af:d1:70:
49:ab:19:cb:9f:db:b6:8a:ce:ff:9f:e4:81:1c:17:
5c:43:e7:2d:70:b8:62:f9:d0:8a:f5:18:3f:50:ed:
ad:b8:91:fb:18:ff:bc:bb:71:6c:91:df:ee:b8:9f:
47:9c:3b:9c:1d:4a:53:b2:d2:08:db:93:13:69:41:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:29:FA:23:C0:66:F7:E1:17:EF:FD:7C:6C:3A:B7:3E:64:BF:B1
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ef:ed:a9:3d:f7:96:d3:40:67:5f:2a:9f:3f:50:9f:96:50:
9b:50:3a:28:b7:1e:03:2b:b9:26:0d:3d:e8:24:0d:7a:6b:1e:
4e:94:92:90:a6:9b:a9:19:d8:4b:9d:f8:84:eb:c0:35:87:0a:
f3:8e:36:d9:6d:12:03:77:cb:4a:ee:34:94:24:aa:94:ff:fe:
6c:56:c0:e1:7e:1d:a1:a6:4e:d2:cf:49:db:d0:5f:5e:7b:b4:
35:c6:83:ae:48:66:22:0f:0c:e0:51:89:9f:a3:90:99:3f:7c:
76:2e:0e:e3:4d:dd:64:51:22:a6:46:13:c1:b2:84:d0:ce:0c:
82:0f:5d:10:ed:5a:22:3a:97:6d:fc:18:fa:51:b9:84:8a:2f:
37:c7:0d:2b:52:39:69:ff:c6:2c:4b:2a:17:a3:84:35:07:9b:
82:07:c6:f9:03:c5:28:e2:5f:b2:bd:29:ea:1a:91:6d:cb:f3:
6b:81:4d:72:03:6c:d8:3d:fc:88:a8:48:7f:98:9b:9b:9f:55:
0f:45:2d:74:3d:d7:15:f3:fe:72:f0:20:a6:15:71:27:a4:34:
8d:d6:79:cc:66:14:ad:a5:0a:5e:46:fc:80:28:f7:a1:d7:93:
9d:5c:aa:86:07:df:59:e0:e4:c4:cb:14:14:87:d3:2a:a2:40:
b3:5a:36:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvkdaUxTVvbW/GPNO+/4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTEwYTFjNjZhMGU2MDAyNGFiYWI2MmQzMzI2ODJjNzEz
YWEzNDcwHhcNMjUwMjAxMjMwMDE0WhcNMjUwMjAyMjMwMDE0WjAzMTEwLwYDVQQD
EygzYzQ4MjlmYTIzYzA2NmY3ZTExN2VmZmQ3YzZjM2FiNzNlNjRiZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D3IzVnbqpB98rjY7i1u5tQ2Z2t0
ytCnjfsStq3GvVVmtdEG7x4w3qkActl3A0GeUwV8wbqgBgXEfQ+FsL5lsM9Mtz9G
diD/CGQqI955oITDx/0nj9pdUYkanqyrmobF+KI+YFw/2D0s7zXXc4qUgoSIGCKR
GIdFKAGibSF/4+6yp9BrnGUmZytH9SX4qQvpAoXLz5f9aXOqCpOqm7hFY74fmlZy
bHKh8JIDEzGxtPcmeFhsvLFml/cJw+nQEnyv0XBJqxnLn9u2is7/n+SBHBdcQ+ct
cLhi+dCK9Rg/UO2tuJH7GP+8u3Fskd/uuJ9HnDucHUpTstII25MTaUFNvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxIKfojwGb34Rfv/XxsOrc+ZL+xMB8GA1UdIwQY
MBaAFGDhChxmoOYAJKurYtMyaCxxOqNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2Mt
NjQxNzcwNzUxN2Q2LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2MtNjQxNzcwNzUxN2Q2
LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+/tqT33
ltNAZ18qnz9Qn5ZQm1A6KLceAyu5Jg096CQNemseTpSSkKabqRnYS534hOvANYcK
84422W0SA3fLSu40lCSqlP/+bFbA4X4doaZO0s9J29BfXnu0NcaDrkhmIg8M4FGJ
n6OQmT98di4O403dZFEipkYTwbKE0M4Mgg9dEO1aIjqXbfwY+lG5hIovN8cNK1I5
af/GLEsqF6OENQebggfG+QPFKOJfsr0p6hqRbcvza4FNcgNs2D38iKhIf5ibm59V
D0UtdD3XFfP+cvAgphVxJ6Q0jdZ5zGYUraUKXkb8gCj3odeTnVyqhgffWeDkxMsU
FIfTKqJAs1o22w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:49 2025 by rpki-client