Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: UgOWiiK8DakiH8DXSgsdgoTWogf1cgpXqPju9i+ko6Y=
Subject key identifier: D3:03:8F:56:63:BD:5E:D0:C8:E0:BD:15:B8:D3:D4:53:22:24:A6:E0
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 0196444474C524D4BA4965AB3E346FA38BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 15:00:59 +0000
Manifest this update: Thu 17 Apr 2025 15:00:59 +0000
Manifest next update: Fri 18 Apr 2025 15:00:59 +0000
Files and hashes: 1: X75BC-oQSIZ_Eow4PmOQdnEFFSA.roa (hash: 9fCRye0I7SNN/gpC5nOojc7Nk1BoVgXxf8JAD5uwXBE=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: o4n/AJqL487dfWEIBg4wxj6Clk7MwM+RpfPOZn1RJQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:74:c5:24:d4:ba:49:65:ab:3e:34:6f:a3:8b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Apr 17 15:00:59 2025 GMT
Not After : Apr 18 15:00:59 2025 GMT
Subject: CN=d3038f5663bd5ed0c8e0bd15b8d3d4532224a6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:43:b2:25:61:ce:44:38:33:38:78:15:59:
5c:1d:c0:35:59:c4:ce:db:28:90:32:66:e4:f9:58:
4a:36:40:de:85:d1:ca:f9:58:e2:ba:7b:5a:48:f2:
22:c5:70:63:c1:b7:49:f0:9a:6e:66:0b:82:b7:79:
7f:07:37:16:d6:d1:dd:de:7b:02:0f:a4:85:58:9e:
87:5c:95:5c:c1:d0:30:c9:a2:1a:a1:40:23:69:85:
2e:50:05:73:ee:bb:73:c9:66:13:d7:96:c2:f1:e1:
1d:c2:6a:3b:1b:23:33:54:e7:40:e4:fe:e1:b4:e3:
fc:11:5b:6d:c6:5e:5d:12:ae:40:36:be:6a:02:bb:
f0:76:0f:5a:5d:71:31:0e:52:6d:9d:9d:3c:15:29:
63:42:d1:06:b7:f9:ec:3b:2e:e9:14:8b:50:9b:5b:
fe:b4:b6:1f:6d:60:ea:8e:6c:27:48:21:c8:9b:2f:
97:f9:b1:4e:c2:68:1e:71:30:72:7b:d6:19:bc:43:
98:fa:53:55:85:a8:79:70:88:26:31:8f:54:a1:88:
a6:43:fe:13:4c:3e:56:c4:95:04:6c:ee:db:84:e1:
11:3a:17:f3:ff:b4:5e:f9:87:f9:6f:de:0e:50:4a:
5d:bd:9d:54:6d:7e:2a:96:65:c7:88:1a:6a:d5:db:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:03:8F:56:63:BD:5E:D0:C8:E0:BD:15:B8:D3:D4:53:22:24:A6:E0
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fe:7d:4d:85:99:69:4a:3d:b0:dd:d8:b4:40:3b:cd:d9:de:
f8:0c:31:cc:75:78:c9:d6:02:ca:6c:bd:84:0b:ff:d1:e8:af:
7a:32:4a:70:b0:b3:60:dd:76:9d:dc:95:71:83:ba:c9:ea:ee:
07:cf:13:c8:b9:15:50:36:1b:0f:15:74:47:93:be:41:4b:ab:
a0:06:04:97:12:cc:1e:50:5d:a3:31:b8:4b:8e:1b:81:9f:76:
e2:a7:9c:bf:5d:6c:ab:bf:93:b4:1e:02:f2:83:70:b2:bf:3e:
ab:5b:a9:59:56:83:04:6f:88:73:ae:7d:f4:a9:58:26:21:44:
6f:1c:a0:06:3b:9c:66:8e:4d:48:a4:f6:40:d4:1e:17:07:30:
4f:e9:f1:b6:c4:52:62:4a:92:da:f3:b6:bf:a0:98:09:23:52:
26:c8:f4:ac:fc:73:f7:02:29:8a:80:9f:14:cb:29:4d:5d:c0:
e5:51:18:c9:ae:2c:2f:86:81:75:c6:ec:b2:08:63:0f:71:74:
3f:7c:3b:ee:e4:50:78:7d:7d:fb:da:99:47:cf:ec:52:2f:84:
d4:13:66:d5:68:c0:6a:3d:c8:53:7d:76:39:9f:dc:bb:d5:8f:
a3:36:f8:20:d5:55:ac:71:40:3a:f4:7c:7c:f5:f2:7d:be:e3:
3a:3c:82:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZERHTFJNS6SWWrPjRvo4u8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOGIxMzhiYTkzNTIzNGYxMWNhMTAyNWQ2NjdmMTMzZjA3
ZDU1ZmQwHhcNMjUwNDE3MTUwMDU5WhcNMjUwNDE4MTUwMDU5WjAzMTEwLwYDVQQD
EyhkMzAzOGY1NjYzYmQ1ZWQwYzhlMGJkMTViOGQzZDQ1MzIyMjRhNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcFDsiVhzkQ4Mzh4FVlcHcA1WcTO
2yiQMmbk+VhKNkDehdHK+VjiuntaSPIixXBjwbdJ8JpuZguCt3l/BzcW1tHd3nsC
D6SFWJ6HXJVcwdAwyaIaoUAjaYUuUAVz7rtzyWYT15bC8eEdwmo7GyMzVOdA5P7h
tOP8EVttxl5dEq5ANr5qArvwdg9aXXExDlJtnZ08FSljQtEGt/nsOy7pFItQm1v+
tLYfbWDqjmwnSCHImy+X+bFOwmgecTBye9YZvEOY+lNVhah5cIgmMY9UoYimQ/4T
TD5WxJUEbO7bhOEROhfz/7Re+Yf5b94OUEpdvZ1UbX4qlmXHiBpq1dscVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMDj1ZjvV7QyOC9FbjT1FMiJKbgMB8GA1UdIwQY
MBaAFHGLE4upNSNPEcoQJdZn8TPwfVX9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1lzVGk2azFJMDhSeWhBbDFtZnhNX0I5VmYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kNDMwODUtZDk0ZS00NjlkLTk3Nzgt
M2I4ZWMxYTY1ODgwLzEvY1lzVGk2azFJMDhSeWhBbDFtZnhNX0I5VmYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kNDMwODUtZDk0ZS00NjlkLTk3NzgtM2I4ZWMxYTY1ODgw
LzEvY1lzVGk2azFJMDhSeWhBbDFtZnhNX0I5VmYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeP59TYWZ
aUo9sN3YtEA7zdne+AwxzHV4ydYCymy9hAv/0eivejJKcLCzYN12ndyVcYO6yeru
B88TyLkVUDYbDxV0R5O+QUuroAYElxLMHlBdozG4S44bgZ924qecv11sq7+TtB4C
8oNwsr8+q1upWVaDBG+Ic6599KlYJiFEbxygBjucZo5NSKT2QNQeFwcwT+nxtsRS
YkqS2vO2v6CYCSNSJsj0rPxz9wIpioCfFMspTV3A5VEYya4sL4aBdcbssghjD3F0
P3w77uRQeH19+9qZR8/sUi+E1BNm1WjAaj3IU312OZ/cu9WPozb4INVVrHFAOvR8
fPXyfb7jOjyCyA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:35:03 2025 by rpki-client