Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: 88u62ysd5Bp07D8UJy14USzbU+weRzCu2k6tzEO4Ud8=
Subject key identifier: 3E:04:FC:50:B2:E9:81:45:F9:41:F3:0B:A5:45:B8:11:A4:5E:48:04
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 01958C6130E293488F35AC0070F5254F4570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 03A7
Signing time: Wed 12 Mar 2025 22:02:14 +0000
Manifest this update: Wed 12 Mar 2025 22:02:14 +0000
Manifest next update: Thu 13 Mar 2025 22:02:14 +0000
Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=)
2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: JFOU33nWCWGwg8VIKSaNizfNsx2Kl2bfvAuCeRTNZ2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:30:e2:93:48:8f:35:ac:00:70:f5:25:4f:45:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Mar 12 22:02:14 2025 GMT
Not After : Mar 13 22:02:14 2025 GMT
Subject: CN=3e04fc50b2e98145f941f30ba545b811a45e4804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:ef:9c:4a:cf:2b:98:69:a5:e6:1e:9c:b5:
b7:25:e3:68:26:c2:b7:4a:59:c0:4b:e6:c8:ee:d8:
e5:99:5e:d2:78:dd:0d:44:3a:93:ae:0f:f6:17:88:
9d:39:ac:91:fd:e8:23:c5:6b:dc:72:b6:28:1b:5d:
61:15:a8:34:8d:a0:6a:d1:f9:52:a7:98:d0:e7:0b:
b2:a6:83:ef:b1:9a:b9:d2:f1:65:a6:8b:17:e8:eb:
ac:f7:11:a4:b9:48:66:72:4a:a4:dc:b9:e4:42:23:
18:9b:4c:12:06:80:69:f3:d1:ab:6c:4b:b8:0b:e8:
55:69:54:47:f6:46:2c:8e:ae:63:50:fa:bd:2e:28:
69:2f:e9:4f:24:8a:ce:71:88:c6:72:cc:4e:35:f7:
2b:28:5b:2c:4d:9e:d4:65:f0:39:e8:ee:8f:59:ed:
56:d1:48:d9:76:5c:81:0c:b2:e6:ca:f5:8d:05:ca:
f9:7d:fc:f6:14:90:71:c3:d2:3a:8b:ce:5e:09:8a:
10:d6:fe:aa:80:c8:f2:57:e6:c3:f6:35:76:05:8c:
76:37:ab:ad:ee:e5:8b:12:74:8a:37:a5:79:a0:27:
ef:6d:e3:79:e4:03:db:e6:31:2e:e5:2c:48:a8:ae:
7a:41:df:e4:25:cd:06:7b:3e:da:cf:f9:2c:4f:7c:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:FC:50:B2:E9:81:45:F9:41:F3:0B:A5:45:B8:11:A4:5E:48:04
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3a:1a:67:87:4b:e9:61:4e:fd:6f:c7:42:83:1b:ae:4e:79:
11:9f:dc:aa:bd:ad:cb:30:2e:e5:e9:34:41:39:44:fd:28:82:
ff:9c:82:0a:19:e1:0a:a0:af:24:fe:b3:c5:ef:39:89:6d:5f:
5f:ae:7e:35:32:82:81:cf:95:22:f0:1a:e0:d2:58:fb:78:bd:
53:47:39:a3:f9:a4:70:4b:81:ac:b5:2e:e3:cc:f8:04:ee:4f:
9e:c7:c0:59:c6:5c:b4:bb:f2:c7:b7:c8:ae:13:10:85:e1:e6:
e4:4d:4e:dd:9d:43:ea:09:23:69:5b:92:cb:5b:98:24:1c:3e:
4f:7b:b3:69:89:74:a5:5e:64:7c:d5:aa:9e:66:7a:61:5e:83:
97:97:81:b8:d2:c3:f1:d5:13:df:2d:9c:68:f7:64:7e:f6:67:
a5:c7:42:47:7c:55:9a:24:61:79:27:9a:fa:3a:b2:0f:5f:17:
9b:9c:f9:ab:f5:0e:4d:88:67:7a:5a:4c:53:ed:c7:e6:2f:ba:
89:3a:5a:53:34:da:53:af:d4:22:18:03:70:e1:1e:95:7b:96:
87:61:64:50:77:43:e6:00:81:f8:db:8a:79:cd:0d:ec:44:12:
6d:82:e7:1f:48:99:98:ea:29:01:41:a8:9e:0d:27:f3:41:23:
c3:46:cb:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYTDik0iPNawAcPUlT0VwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTEwMjk2ODZiMmM4MGE3ZjA0NjBiNmM2ZWYxYjkwODY3
MjgwOTcwHhcNMjUwMzEyMjIwMjE0WhcNMjUwMzEzMjIwMjE0WjAzMTEwLwYDVQQD
EygzZTA0ZmM1MGIyZTk4MTQ1Zjk0MWYzMGJhNTQ1YjgxMWE0NWU0ODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7rvnErPK5hppeYenLW3JeNoJsK3
SlnAS+bI7tjlmV7SeN0NRDqTrg/2F4idOayR/egjxWvccrYoG11hFag0jaBq0flS
p5jQ5wuypoPvsZq50vFlposX6Ous9xGkuUhmckqk3LnkQiMYm0wSBoBp89GrbEu4
C+hVaVRH9kYsjq5jUPq9LihpL+lPJIrOcYjGcsxONfcrKFssTZ7UZfA56O6PWe1W
0UjZdlyBDLLmyvWNBcr5ffz2FJBxw9I6i85eCYoQ1v6qgMjyV+bD9jV2BYx2N6ut
7uWLEnSKN6V5oCfvbeN55APb5jEu5SxIqK56Qd/kJc0Gez7az/ksT3yo8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4E/FCy6YFF+UHzC6VFuBGkXkgEMB8GA1UdIwQY
MBaAFMgRApaGssgKfwRgtsbvG5CGcoCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTIt
NTBlMzMzMzg0NjY5LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTItNTBlMzMzMzg0NjY5
LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzoaZ4dL
6WFO/W/HQoMbrk55EZ/cqr2tyzAu5ek0QTlE/SiC/5yCChnhCqCvJP6zxe85iW1f
X65+NTKCgc+VIvAa4NJY+3i9U0c5o/mkcEuBrLUu48z4BO5PnsfAWcZctLvyx7fI
rhMQheHm5E1O3Z1D6gkjaVuSy1uYJBw+T3uzaYl0pV5kfNWqnmZ6YV6Dl5eBuNLD
8dUT3y2caPdkfvZnpcdCR3xVmiRheSea+jqyD18Xm5z5q/UOTYhnelpMU+3H5i+6
iTpaUzTaU6/UIhgDcOEelXuWh2FkUHdD5gCB+NuKec0N7EQSbYLnH0iZmOopAUGo
ng0n80Ejw0bLxA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:49 2025 by rpki-client