Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: HXwM2MVa2egYeNLqt60zWH7ce+6vmGKmhJRM8V6bv3s=
Subject key identifier: B1:53:CB:12:D7:D1:B1:7D:2F:9B:2C:C1:81:01:32:F6:8A:3A:D2:16
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 01963F54C3AEEB1B4FB9B9B4B97E931C055E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 08AF
Signing time: Wed 16 Apr 2025 16:00:41 +0000
Manifest this update: Wed 16 Apr 2025 16:00:41 +0000
Manifest next update: Thu 17 Apr 2025 16:00:41 +0000
Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: o6PDiinVpQr32I3szBRfxp14Ax9tvAreh6ca2dQ8XOc=)
3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:c3:ae:eb:1b:4f:b9:b9:b4:b9:7e:93:1c:05:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Apr 16 16:00:41 2025 GMT
Not After : Apr 17 16:00:41 2025 GMT
Subject: CN=b153cb12d7d1b17d2f9b2cc1810132f68a3ad216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:5b:b8:a5:39:4b:13:56:8d:b0:48:aa:d0:
bc:71:49:b5:55:4e:5b:c1:6f:c1:bf:79:db:7a:5c:
bb:b8:85:8b:7f:df:1a:ac:2b:be:a2:77:3b:ad:87:
b6:b3:89:9a:ef:4e:eb:36:ea:25:c9:63:f2:ad:5f:
df:4d:43:17:41:a8:ed:58:81:d8:53:28:41:35:b7:
4c:a9:e4:ae:df:4c:1f:30:f7:cf:fa:9d:08:d0:9e:
14:a8:d2:68:5b:05:7c:be:2e:6d:56:6f:32:c9:2a:
e2:f0:de:c8:d7:9f:cb:49:a3:99:d8:71:a4:9b:75:
ed:65:1e:4e:97:46:2b:70:84:39:cd:31:c6:b8:97:
cb:64:d5:07:a0:07:e5:ec:99:7f:b3:3e:ee:94:43:
b3:cf:38:38:90:15:19:95:28:b0:fe:b8:22:c5:0b:
54:d2:ce:c2:df:bc:90:4f:06:81:c8:c4:7f:98:14:
48:93:df:54:3c:47:8a:df:f1:c3:17:71:5f:2d:b5:
29:17:c2:03:fd:87:86:02:88:68:48:72:d5:c8:00:
63:94:01:72:2b:75:2d:15:35:45:31:5b:89:98:70:
7c:4b:11:4b:58:e7:c6:48:07:f0:f8:dc:16:91:29:
71:64:8b:d5:89:0b:d7:b0:da:b8:87:5b:a8:1c:13:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:53:CB:12:D7:D1:B1:7D:2F:9B:2C:C1:81:01:32:F6:8A:3A:D2:16
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d7:36:99:46:c9:e1:05:bc:ec:4f:7c:ae:13:6a:43:f5:00:
9d:5e:73:33:0a:d8:b0:73:d1:9b:99:b5:26:ea:60:62:51:78:
98:44:96:aa:db:e9:c4:50:26:c2:b9:16:ad:41:76:4f:02:cf:
58:e2:05:1e:61:c6:8f:f0:50:f0:98:22:19:be:4b:b4:de:06:
4a:1d:12:0f:56:4f:12:b1:37:50:de:ff:8b:c7:a6:58:f6:d7:
4d:ef:fe:10:3f:a0:a5:5d:1a:14:eb:b8:11:17:c9:60:5a:55:
47:44:e5:d4:e1:5d:2f:d2:99:b3:79:72:ff:ff:ef:1b:02:e2:
3b:ff:2e:67:19:5a:0b:e3:6b:bd:fa:08:91:f9:b3:06:bb:22:
27:a7:de:9c:3f:ea:94:17:28:de:63:6b:02:b1:0c:be:4e:a0:
65:e9:7e:54:f9:e1:d9:67:0c:8c:c7:70:77:e1:91:8c:1b:d4:
96:c8:d4:09:5f:48:1f:4d:90:9b:6d:2a:63:e4:94:5f:9f:63:
44:3e:bb:a7:ec:22:88:84:ad:26:51:ad:a5:4d:81:99:42:a8:
ef:c2:97:2a:c8:12:12:46:07:1f:3c:a0:42:27:be:68:21:95:
a6:f4:d3:7d:29:db:6c:96:85:e9:fc:30:9c:0e:c2:5f:ad:f4:
a7:c4:b0:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/VMOu6xtPubm0uX6THAVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzM2U3NTJjYTBkYzQyM2M3NGY1MDg0MDViYTUyMjhhOGMy
ZTUxNTcwHhcNMjUwNDE2MTYwMDQxWhcNMjUwNDE3MTYwMDQxWjAzMTEwLwYDVQQD
EyhiMTUzY2IxMmQ3ZDFiMTdkMmY5YjJjYzE4MTAxMzJmNjhhM2FkMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX5buKU5SxNWjbBIqtC8cUm1VU5b
wW/Bv3nbely7uIWLf98arCu+onc7rYe2s4ma707rNuolyWPyrV/fTUMXQajtWIHY
UyhBNbdMqeSu30wfMPfP+p0I0J4UqNJoWwV8vi5tVm8yySri8N7I15/LSaOZ2HGk
m3XtZR5Ol0YrcIQ5zTHGuJfLZNUHoAfl7Jl/sz7ulEOzzzg4kBUZlSiw/rgixQtU
0s7C37yQTwaByMR/mBRIk99UPEeK3/HDF3FfLbUpF8ID/YeGAohoSHLVyABjlAFy
K3UtFTVFMVuJmHB8SxFLWOfGSAfw+NwWkSlxZIvViQvXsNq4h1uoHBMfbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFTyxLX0bF9L5sswYEBMvaKOtIWMB8GA1UdIwQY
MBaAFGM+dSyg3EI8dPUIQFulIoqMLlFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzkt
ZGU2MTg3YjcyOThhLzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzktZGU2MTg3YjcyOThh
LzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNc2mUbJ
4QW87E98rhNqQ/UAnV5zMwrYsHPRm5m1JupgYlF4mESWqtvpxFAmwrkWrUF2TwLP
WOIFHmHGj/BQ8JgiGb5LtN4GSh0SD1ZPErE3UN7/i8emWPbXTe/+ED+gpV0aFOu4
ERfJYFpVR0Tl1OFdL9KZs3ly///vGwLiO/8uZxlaC+NrvfoIkfmzBrsiJ6fenD/q
lBco3mNrArEMvk6gZel+VPnh2WcMjMdwd+GRjBvUlsjUCV9IH02Qm20qY+SUX59j
RD67p+wiiIStJlGtpU2BmUKo78KXKsgSEkYHHzygQie+aCGVpvTTfSnbbJaF6fww
nA7CX630p8Sw/Q==
-----END CERTIFICATE-----
Generated at Wed Apr 16 18:55:28 2025 by rpki-client