Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: DUq9AUnXS7eY0krN4GJlvOklITkA5JmLZ44Oai7bdZg=
Subject key identifier: 42:CB:5A:AF:7E:86:04:A5:3D:B4:11:2A:FC:E1:B2:16:9A:F5:EA:A9
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 01964E5A0E9712486B28AA930019CD269290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0CF6
Signing time: Sat 19 Apr 2025 14:00:46 +0000
Manifest this update: Sat 19 Apr 2025 14:00:46 +0000
Manifest next update: Sun 20 Apr 2025 14:00:46 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: /SkOYByrQE30XVLBE6QwAIzxW+Ffo2kOQ5rH61pMKcE=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:0e:97:12:48:6b:28:aa:93:00:19:cd:26:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Apr 19 14:00:46 2025 GMT
Not After : Apr 20 14:00:46 2025 GMT
Subject: CN=42cb5aaf7e8604a53db4112afce1b2169af5eaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:51:2f:19:b3:a0:8f:52:16:f9:7a:36:a1:
80:db:fb:18:7d:3b:46:5e:31:3c:17:74:eb:da:9b:
f5:a2:79:53:63:98:ab:5b:75:45:c5:af:bc:85:98:
2b:49:c7:28:53:91:20:a0:c8:86:f5:2e:15:eb:d5:
10:b1:07:30:c7:33:bb:11:e1:cd:57:3c:06:4a:91:
56:8b:7a:1a:b4:c5:46:cf:96:d1:64:0d:f2:5b:7e:
f1:93:2c:6e:19:68:c9:25:75:18:a1:9c:c9:1b:93:
be:26:23:dd:6a:38:4a:39:fb:46:23:c6:fc:11:b7:
2c:ad:d6:3f:60:03:2c:70:6e:d2:6f:a0:9f:e9:c2:
61:5c:e1:d5:13:72:73:8c:50:b5:3f:f3:50:27:02:
1c:1c:38:c3:81:85:2b:87:9d:0e:df:5e:15:53:22:
88:99:35:d7:5d:02:2e:dc:cb:76:08:29:10:89:0e:
2e:f3:f8:e2:11:3e:ec:8d:63:2e:f9:aa:9a:fc:21:
14:7e:60:be:cf:9c:a8:ba:f7:b7:79:b4:32:ea:3e:
93:89:e9:7f:bc:cc:e6:67:bc:24:91:03:40:ca:c5:
b3:74:94:22:1e:2a:54:da:ae:81:52:b8:ea:bb:9d:
97:93:7e:b1:3b:13:b3:79:f9:ba:cd:51:45:e3:0b:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:5A:AF:7E:86:04:A5:3D:B4:11:2A:FC:E1:B2:16:9A:F5:EA:A9
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:17:28:52:bf:02:16:b3:63:4c:a9:78:50:29:79:b6:45:d1:
d8:fe:5d:0b:54:d1:79:c2:6c:f8:44:49:c3:8d:5e:29:68:b6:
58:df:05:0a:e7:22:26:78:ab:10:13:12:f8:d1:38:10:79:51:
1c:71:d6:a4:32:f1:5e:2a:94:0f:00:eb:78:f6:e3:91:5f:1a:
57:e7:28:d1:55:84:4e:3b:99:7f:6f:98:d3:c0:4c:f0:dd:e9:
6e:8c:1e:90:69:43:85:bd:b7:3f:89:cb:54:b6:f7:77:56:3c:
5d:5f:45:88:fb:92:0e:42:ae:3e:45:3f:66:dd:57:9c:e4:88:
2b:30:b2:36:e5:5a:e6:14:20:5a:cd:15:4b:b0:bc:9a:49:97:
b8:fb:ef:d7:1c:57:e9:45:bc:b7:86:29:dd:9c:95:5b:8c:b8:
67:b4:85:d6:ba:c7:09:e9:90:5d:17:bf:6d:de:fb:e2:b2:f7:
04:d6:49:e5:c5:da:e9:00:da:89:bd:2c:d5:01:f2:40:70:de:
59:dc:c4:cf:ce:ae:cc:8a:4a:98:ab:8e:f5:c9:d1:75:a1:16:
72:8e:a6:b6:49:a4:fe:f4:7e:40:ac:f0:09:3e:2d:69:38:28:
0f:3b:a1:22:e5:d4:6f:be:17:e1:28:ca:6b:74:cd:18:e9:2f:
df:45:91:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOWg6XEkhrKKqTABnNJpKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwODAxMWVhNTFhOWZiY2Y4YmFlMGRmMWVkNDk5YTM0MDdk
NjMwNTMwHhcNMjUwNDE5MTQwMDQ2WhcNMjUwNDIwMTQwMDQ2WjAzMTEwLwYDVQQD
Eyg0MmNiNWFhZjdlODYwNGE1M2RiNDExMmFmY2UxYjIxNjlhZjVlYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRJRLxmzoI9SFvl6NqGA2/sYfTtG
XjE8F3Tr2pv1onlTY5irW3VFxa+8hZgrSccoU5EgoMiG9S4V69UQsQcwxzO7EeHN
VzwGSpFWi3oatMVGz5bRZA3yW37xkyxuGWjJJXUYoZzJG5O+JiPdajhKOftGI8b8
EbcsrdY/YAMscG7Sb6Cf6cJhXOHVE3JzjFC1P/NQJwIcHDjDgYUrh50O314VUyKI
mTXXXQIu3Mt2CCkQiQ4u8/jiET7sjWMu+aqa/CEUfmC+z5youve3ebQy6j6Tiel/
vMzmZ7wkkQNAysWzdJQiHipU2q6BUrjqu52Xk36xOxOzefm6zVFF4wuVmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELLWq9+hgSlPbQRKvzhshaa9eqpMB8GA1UdIwQY
MBaAFGCAEepRqfvPi64N8e1JmjQH1jBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80ZjBlYzUtNTRkMi00MGZiLTk0OTgt
NzQyZjg2OTFiZWFhLzEvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80ZjBlYzUtNTRkMi00MGZiLTk0OTgtNzQyZjg2OTFiZWFh
LzEvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhcoUr8C
FrNjTKl4UCl5tkXR2P5dC1TRecJs+ERJw41eKWi2WN8FCuciJnirEBMS+NE4EHlR
HHHWpDLxXiqUDwDrePbjkV8aV+co0VWETjuZf2+Y08BM8N3pbowekGlDhb23P4nL
VLb3d1Y8XV9FiPuSDkKuPkU/Zt1XnOSIKzCyNuVa5hQgWs0VS7C8mkmXuPvv1xxX
6UW8t4Yp3ZyVW4y4Z7SF1rrHCemQXRe/bd774rL3BNZJ5cXa6QDaib0s1QHyQHDe
WdzEz86uzIpKmKuO9cnRdaEWco6mtkmk/vR+QKzwCT4taTgoDzuhIuXUb74X4SjK
a3TNGOkv30WRpA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:53 2025 by rpki-client