Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: ubH1pQ28Qpf49F0BupXkUGyiWgjEJIdXHaAin2QzWEk=
Subject key identifier: D5:42:55:1C:45:66:B8:94:CD:01:6D:78:87:17:9D:42:58:C6:A7:F8
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 01964CA23E5C89E88AB47EB9AC976BBC2E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 05BB
Signing time: Sat 19 Apr 2025 06:00:23 +0000
Manifest this update: Sat 19 Apr 2025 06:00:23 +0000
Manifest next update: Sun 20 Apr 2025 06:00:23 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: AoBYiCq1tg8tgR1AwWP35XzTD36zitp4NARfOpMAQRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:3e:5c:89:e8:8a:b4:7e:b9:ac:97:6b:bc:2e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Apr 19 06:00:23 2025 GMT
Not After : Apr 20 06:00:23 2025 GMT
Subject: CN=d542551c4566b894cd016d7887179d4258c6a7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:d9:81:5c:ab:37:f3:61:5d:df:8b:de:ea:
01:e6:09:c3:38:99:5b:82:dc:7c:12:73:c3:a1:05:
0f:85:ad:70:bf:90:13:2f:3e:4e:15:f1:07:e2:25:
9d:b8:47:22:95:f4:38:9d:22:ff:88:3a:ca:a0:36:
9f:e1:0f:ed:22:42:d0:db:48:fe:c8:70:7b:68:82:
92:e2:44:62:36:98:8d:38:46:45:fe:8e:6a:18:f2:
28:17:09:29:ba:10:db:9e:05:f3:6e:78:6c:c8:db:
9e:40:28:4d:80:c2:dc:af:d7:20:69:8b:a5:02:80:
9b:89:0c:fa:90:72:f0:55:3c:97:78:f2:06:1a:6e:
04:8c:da:54:d0:b4:e0:7d:c4:d4:98:e0:f5:dc:a6:
6e:1c:0a:e3:24:08:b3:2e:52:66:7b:8e:02:3e:93:
31:f6:44:8c:4c:69:47:e1:ab:0c:56:2f:10:4b:e2:
9f:9b:1f:06:68:d6:1a:08:4c:11:02:d0:ba:4c:c9:
0e:70:28:89:ba:21:8d:3d:10:d2:d8:e1:05:e3:aa:
c0:a2:a1:06:a4:1d:b0:fb:72:a3:41:c2:2d:55:38:
f1:f2:79:a6:57:db:b9:2d:21:37:10:ea:9d:30:56:
8a:39:81:a8:e1:d7:b1:b3:37:14:5f:bc:0a:a7:01:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:42:55:1C:45:66:B8:94:CD:01:6D:78:87:17:9D:42:58:C6:A7:F8
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c5:f6:b4:f3:6e:62:8c:ec:a0:24:72:39:36:6b:54:a5:01:
79:f4:ce:b1:32:31:0b:40:c8:c1:67:5e:74:41:16:e8:a5:2c:
b5:4f:9f:e3:2a:df:28:eb:79:be:ce:84:e4:fb:e2:2f:3f:5f:
96:d9:ed:cc:9d:ba:dc:9b:a8:d3:1e:0b:53:59:a2:8c:ab:10:
3b:d5:fa:71:ac:c9:08:33:b3:f7:de:1b:6a:dd:d1:92:0c:50:
15:cf:82:0e:ac:d3:2b:a1:b1:b6:df:28:36:db:55:a5:47:bc:
ca:ca:b7:21:c0:5e:6c:dc:f9:30:14:91:9b:a7:55:44:bc:b6:
30:35:5f:4a:0d:f6:06:3c:6e:14:07:da:22:68:b6:36:d7:b6:
48:c5:4b:bd:2d:13:fb:3a:4f:32:16:b9:7e:69:28:d4:d4:b3:
13:88:70:49:44:ba:d4:ed:54:e4:4d:b2:cd:1f:92:60:c8:09:
cb:a7:b2:21:3d:21:ba:aa:90:39:19:28:e1:da:b1:39:f1:b8:
10:85:75:b8:7e:64:ae:96:51:63:9f:b8:b5:fb:35:f3:4a:d4:
25:e1:26:28:47:68:a7:70:fa:31:40:58:2a:85:77:95:21:3a:
3d:31:3a:f5:fa:93:d9:29:a5:38:2d:cd:aa:7f:84:17:a4:be:
f7:db:56:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMoj5cieiKtH65rJdrvC5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNThhZWI0MTI5ZjhlMmM5YmM0MmNkMTkxODVjOGQ3ZjBl
NmVhZjkwHhcNMjUwNDE5MDYwMDIzWhcNMjUwNDIwMDYwMDIzWjAzMTEwLwYDVQQD
EyhkNTQyNTUxYzQ1NjZiODk0Y2QwMTZkNzg4NzE3OWQ0MjU4YzZhN2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6bZgVyrN/NhXd+L3uoB5gnDOJlb
gtx8EnPDoQUPha1wv5ATLz5OFfEH4iWduEcilfQ4nSL/iDrKoDaf4Q/tIkLQ20j+
yHB7aIKS4kRiNpiNOEZF/o5qGPIoFwkpuhDbngXzbnhsyNueQChNgMLcr9cgaYul
AoCbiQz6kHLwVTyXePIGGm4EjNpU0LTgfcTUmOD13KZuHArjJAizLlJme44CPpMx
9kSMTGlH4asMVi8QS+Kfmx8GaNYaCEwRAtC6TMkOcCiJuiGNPRDS2OEF46rAoqEG
pB2w+3KjQcItVTjx8nmmV9u5LSE3EOqdMFaKOYGo4dexszcUX7wKpwE8LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVCVRxFZriUzQFteIcXnUJYxqf4MB8GA1UdIwQY
MBaAFMpYrrQSn44sm8Qs0ZGFyNfw5ur5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84ZjAyMTgtNTQzZC00OTQzLThlM2Mt
YWVmMWIzNGEyODdkLzEveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84ZjAyMTgtNTQzZC00OTQzLThlM2MtYWVmMWIzNGEyODdk
LzEveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsX2tPNu
YozsoCRyOTZrVKUBefTOsTIxC0DIwWdedEEW6KUstU+f4yrfKOt5vs6E5PviLz9f
ltntzJ263Juo0x4LU1mijKsQO9X6cazJCDOz994bat3RkgxQFc+CDqzTK6Gxtt8o
NttVpUe8ysq3IcBebNz5MBSRm6dVRLy2MDVfSg32BjxuFAfaImi2Nte2SMVLvS0T
+zpPMha5fmko1NSzE4hwSUS61O1U5E2yzR+SYMgJy6eyIT0huqqQORko4dqxOfG4
EIV1uH5krpZRY5+4tfs180rUJeEmKEdop3D6MUBYKoV3lSE6PTE69fqT2SmlOC3N
qn+EF6S+99tWUw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:27 2025 by rpki-client