Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier: T59f9Fj8y6oABhitvNvviXGpYYFHPRfWyFlX9aCICdc=
Subject key identifier: 27:41:3D:EB:5F:04:A5:DB:59:C0:6A:AD:33:E5:8F:20:46:D6:27:42
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial: 01964D7E847F2849D97A22CCB8E4A6E93C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number: 0FF8
Signing time: Sat 19 Apr 2025 10:00:59 +0000
Manifest this update: Sat 19 Apr 2025 10:00:59 +0000
Manifest next update: Sun 20 Apr 2025 10:00:59 +0000
Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: t3yQX0n8TBVSRAnyj/ZbdH+Dw5kf8t0kmRAJsyl/NjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:84:7f:28:49:d9:7a:22:cc:b8:e4:a6:e9:3c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Validity
Not Before: Apr 19 10:00:59 2025 GMT
Not After : Apr 20 10:00:59 2025 GMT
Subject: CN=27413deb5f04a5db59c06aad33e58f2046d62742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:e0:9a:0d:31:a3:b1:14:b7:1c:f0:4a:c3:
0f:f3:2e:6f:03:5f:6d:30:42:fa:9b:c6:5a:7b:bf:
44:c6:fa:65:88:98:e2:37:ab:67:26:55:65:e3:2c:
06:88:4a:fa:3d:a7:d7:ce:37:21:0f:44:27:63:b0:
13:92:a9:25:84:0d:8e:01:56:2a:d6:5f:9d:76:63:
d2:65:ab:d0:d2:e4:2c:a4:d5:3f:7c:e3:d2:bb:f6:
f2:82:44:5c:38:ab:99:cc:e6:12:c9:59:d7:ac:ab:
4a:b2:d6:bd:b3:0e:d6:3a:bd:b8:ba:f4:17:ca:45:
ca:7c:e9:b6:2a:4a:48:69:d2:a3:b9:85:1b:86:9f:
71:2d:a0:f3:fd:c2:1c:b0:d7:6d:cd:ac:a9:33:5c:
c8:c1:e4:2c:58:50:d6:c0:2e:8b:79:87:36:3e:5e:
c6:8c:27:07:91:c7:e7:d5:5f:84:91:65:f2:86:f0:
a8:26:49:26:1e:82:91:f3:58:19:f0:e6:c6:47:8a:
ef:4f:3a:c6:cb:b2:f3:67:e6:6f:88:e7:4d:99:c9:
02:59:f2:d8:26:1f:57:b4:10:6c:2b:70:d1:82:41:
3f:3d:4a:a5:c5:f3:b6:d4:e5:1d:2a:f3:89:92:f7:
39:77:44:95:23:0c:46:93:5a:e3:7a:3c:d8:2a:72:
cb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:41:3D:EB:5F:04:A5:DB:59:C0:6A:AD:33:E5:8F:20:46:D6:27:42
X509v3 Authority Key Identifier:
keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e6:ac:05:ff:55:fa:2f:f2:41:62:7d:bd:8a:62:66:42:68:
a2:69:d6:ca:a1:44:5f:6f:e3:dd:da:48:e0:43:68:7a:6b:2e:
38:67:64:47:86:21:bc:8c:51:91:93:69:c6:d6:fc:ed:ef:f0:
4a:1e:3c:26:f1:3e:c5:11:94:7e:ba:9b:ac:c5:85:ff:63:bf:
3b:5b:7c:43:75:1b:8f:e7:82:9d:7f:c1:de:c9:cb:19:27:e0:
88:dc:15:30:42:fc:f5:6d:b1:63:e9:73:1d:7c:ae:7f:a2:6f:
e1:a9:0b:bf:d4:78:03:65:dd:cf:c7:77:7f:14:14:25:b4:66:
44:6b:c8:b8:22:4a:f1:82:93:6b:42:18:32:b8:f1:33:84:72:
8a:5e:43:60:f6:87:4e:db:86:27:64:fc:c1:42:00:2b:9c:65:
6b:ac:8b:08:bb:aa:88:fd:bc:a3:58:49:86:84:54:cc:4b:5d:
a1:f5:c9:fd:89:43:eb:8d:b4:dd:9b:93:c5:ad:44:fa:2a:de:
fe:b1:b3:cd:6f:aa:63:10:27:4b:d3:e1:18:1b:f0:4a:1e:44:
8f:3b:a0:cb:76:42:d2:78:6e:9e:d3:56:e1:7d:52:4b:7f:b1:
8d:25:d1:f1:54:85:bd:34:7e:b7:a3:f4:d7:5f:80:a3:d4:ec:
a2:a8:2b:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfoR/KEnZeiLMuOSm6TwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MDFmYzFmOTE4MThlNDhkNmZkMTBlZDZmOWM1MzlhODg4
NTRiMDMwHhcNMjUwNDE5MTAwMDU5WhcNMjUwNDIwMTAwMDU5WjAzMTEwLwYDVQQD
EygyNzQxM2RlYjVmMDRhNWRiNTljMDZhYWQzM2U1OGYyMDQ2ZDYyNzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFjgmg0xo7EUtxzwSsMP8y5vA19t
MEL6m8Zae79ExvpliJjiN6tnJlVl4ywGiEr6PafXzjchD0QnY7ATkqklhA2OAVYq
1l+ddmPSZavQ0uQspNU/fOPSu/bygkRcOKuZzOYSyVnXrKtKsta9sw7WOr24uvQX
ykXKfOm2KkpIadKjuYUbhp9xLaDz/cIcsNdtzaypM1zIweQsWFDWwC6LeYc2Pl7G
jCcHkcfn1V+EkWXyhvCoJkkmHoKR81gZ8ObGR4rvTzrGy7LzZ+ZviOdNmckCWfLY
Jh9XtBBsK3DRgkE/PUqlxfO21OUdKvOJkvc5d0SVIwxGk1rjejzYKnLLQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdBPetfBKXbWcBqrTPljyBG1idCMB8GA1UdIwQY
MBaAFMkB/B+RgY5I1v0Q7W+cU5qIhUsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82Zjk4M2ItM2U1Ni00YzgyLTlmMzgt
NWYxZDg1NjJiNTJmLzEveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82Zjk4M2ItM2U1Ni00YzgyLTlmMzgtNWYxZDg1NjJiNTJm
LzEveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuasBf9V
+i/yQWJ9vYpiZkJoomnWyqFEX2/j3dpI4ENoemsuOGdkR4YhvIxRkZNpxtb87e/w
Sh48JvE+xRGUfrqbrMWF/2O/O1t8Q3Ubj+eCnX/B3snLGSfgiNwVMEL89W2xY+lz
HXyuf6Jv4akLv9R4A2Xdz8d3fxQUJbRmRGvIuCJK8YKTa0IYMrjxM4Ryil5DYPaH
TtuGJ2T8wUIAK5xla6yLCLuqiP28o1hJhoRUzEtdofXJ/YlD64203ZuTxa1E+ire
/rGzzW+qYxAnS9PhGBvwSh5Ejzugy3ZC0nhuntNW4X1SS3+xjSXR8VSFvTR+t6P0
11+Ao9Tsoqgrdw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:27:53 2025 by rpki-client