Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: ab5q27D/paTANv2QBXwKtFvUKhvtwukrCaKq1xfoAGY=
Subject key identifier: CA:47:50:B5:5E:A8:92:57:81:F2:1D:3C:96:CD:B5:77:1D:1D:35:C1
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 0196403096A5FC69223B91F7720AFE6862EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 03CC
Signing time: Wed 16 Apr 2025 20:00:48 +0000
Manifest this update: Wed 16 Apr 2025 20:00:48 +0000
Manifest next update: Thu 17 Apr 2025 20:00:48 +0000
Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=)
2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: KyZynuhUXT34+P2TApHre6at5aIhecxQUtrQq2CpDf4=)
3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:96:a5:fc:69:22:3b:91:f7:72:0a:fe:68:62:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Apr 16 20:00:48 2025 GMT
Not After : Apr 17 20:00:48 2025 GMT
Subject: CN=ca4750b55ea8925781f21d3c96cdb5771d1d35c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:fe:bf:54:c4:43:30:81:87:8b:b7:05:04:
be:c1:f9:fb:fe:64:84:6d:29:4e:d9:3c:d5:d5:9d:
1f:46:ea:40:bd:f9:49:b8:8c:57:0a:ac:8a:49:02:
bb:c1:10:b4:2b:e0:fc:58:1f:51:a0:3b:f4:df:96:
bb:ca:84:9f:d8:2c:67:62:f7:82:f8:08:16:49:d0:
d2:85:b0:79:8a:e3:17:45:92:c6:45:37:8e:bd:87:
18:f8:e1:d9:61:3f:27:6a:1f:38:a8:cc:45:0a:0d:
e4:10:73:95:84:0c:5c:ab:0b:d0:4b:bc:26:ce:43:
58:49:d8:29:61:71:ad:18:07:6e:fd:94:cc:6e:bc:
cf:9c:45:2f:a5:b7:2a:3b:98:b2:28:fd:c2:d6:e1:
f0:86:6b:c6:6a:5c:e8:11:b9:b5:66:d6:ec:f8:0e:
d4:27:70:69:d4:3d:35:f9:f5:44:ec:65:a6:0f:9f:
3c:c5:9a:9a:67:1f:cd:03:b1:58:62:31:97:54:f9:
29:e0:44:ae:23:a4:dd:5e:f9:18:ad:33:80:b2:1a:
d6:81:1f:ca:8a:e5:3f:12:11:bc:85:57:38:a0:ec:
34:e5:b0:44:22:95:b1:21:ed:4b:15:82:a4:bf:b0:
cd:48:7a:8a:99:4a:ee:c8:53:b4:5a:d4:c9:d7:b1:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:50:B5:5E:A8:92:57:81:F2:1D:3C:96:CD:B5:77:1D:1D:35:C1
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:aa:75:ae:5b:f8:93:89:e5:11:a8:8f:77:e6:d6:59:33:77:
bf:2a:e7:32:50:9c:0d:ac:21:62:2b:85:c9:99:69:88:e6:22:
15:62:65:92:2f:d8:8d:e5:1c:af:c7:55:91:91:c3:2b:6b:ff:
15:eb:52:c6:3e:c4:1f:f1:7a:c0:ba:a8:27:11:1d:6a:5c:56:
dd:1a:5d:7e:79:ee:47:f8:ae:b8:4b:57:12:b1:8d:45:5a:82:
51:a8:08:08:01:e5:48:70:e3:01:9c:ff:76:db:b7:2f:85:b6:
f8:c1:4f:72:10:0b:ff:9c:a0:8b:b2:f5:da:43:d6:7d:1f:14:
f4:1d:a9:4d:b2:ab:f1:34:32:ac:51:05:74:7c:0f:f6:97:ca:
0f:2b:0f:5c:aa:e9:73:eb:97:9c:b6:8b:29:d6:1a:a2:07:70:
e5:ce:7e:9f:2c:57:14:be:58:34:41:05:c1:6a:a6:80:72:62:
e1:dd:b3:d8:a4:c8:7d:35:84:5e:d0:04:f2:c7:a5:e5:96:5b:
87:94:e2:df:57:04:c2:bc:bd:9c:10:e8:d6:0f:85:8e:4a:75:
1a:06:93:9f:65:82:d6:e5:96:30:62:62:7f:54:0d:85:f6:26:
f2:01:ca:76:c3:a1:18:e5:28:b0:f8:14:4d:5e:da:ea:28:14:
df:dd:cc:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMJal/GkiO5H3cgr+aGLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2
ZGY0OGIwHhcNMjUwNDE2MjAwMDQ4WhcNMjUwNDE3MjAwMDQ4WjAzMTEwLwYDVQQD
EyhjYTQ3NTBiNTVlYTg5MjU3ODFmMjFkM2M5NmNkYjU3NzFkMWQzNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldH+v1TEQzCBh4u3BQS+wfn7/mSE
bSlO2TzV1Z0fRupAvflJuIxXCqyKSQK7wRC0K+D8WB9RoDv035a7yoSf2CxnYveC
+AgWSdDShbB5iuMXRZLGRTeOvYcY+OHZYT8nah84qMxFCg3kEHOVhAxcqwvQS7wm
zkNYSdgpYXGtGAdu/ZTMbrzPnEUvpbcqO5iyKP3C1uHwhmvGalzoEbm1Ztbs+A7U
J3Bp1D01+fVE7GWmD588xZqaZx/NA7FYYjGXVPkp4ESuI6TdXvkYrTOAshrWgR/K
iuU/EhG8hVc4oOw05bBEIpWxIe1LFYKkv7DNSHqKmUruyFO0WtTJ17EM2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpHULVeqJJXgfIdPJbNtXcdHTXBMB8GA1UdIwQY
MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt
ZDFjNWYxYjUxZTE3LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3
LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKp1rlv4
k4nlEaiPd+bWWTN3vyrnMlCcDawhYiuFyZlpiOYiFWJlki/YjeUcr8dVkZHDK2v/
FetSxj7EH/F6wLqoJxEdalxW3RpdfnnuR/iuuEtXErGNRVqCUagICAHlSHDjAZz/
dtu3L4W2+MFPchAL/5ygi7L12kPWfR8U9B2pTbKr8TQyrFEFdHwP9pfKDysPXKrp
c+uXnLaLKdYaogdw5c5+nyxXFL5YNEEFwWqmgHJi4d2z2KTIfTWEXtAE8sel5ZZb
h5Ti31cEwry9nBDo1g+Fjkp1GgaTn2WC1uWWMGJif1QNhfYm8gHKdsOhGOUosPgU
TV7a6igU393MRg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:08:59 2025 by rpki-client