Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: 9whxeJFr9cG4xp/jl0P7wLKh9xazMAvI/g80ATPNkFM=
Subject key identifier: 4F:B2:C3:87:76:76:FE:E1:53:1E:12:8D:9C:E7:CD:F2:65:5E:E2:E9
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 019643D690EA3F99F1A5C5920569D3F62F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 13:00:57 +0000
Manifest this update: Thu 17 Apr 2025 13:00:57 +0000
Manifest next update: Fri 18 Apr 2025 13:00:57 +0000
Files and hashes: 1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: JuIW6NAdzGPGdb+3oLTyM0vpgDfSxRdGN5e0ixgjmiM=)
3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:90:ea:3f:99:f1:a5:c5:92:05:69:d3:f6:2f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Apr 17 13:00:57 2025 GMT
Not After : Apr 18 13:00:57 2025 GMT
Subject: CN=4fb2c3877676fee1531e128d9ce7cdf2655ee2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:63:5c:5f:14:49:c1:98:96:ee:81:b1:38:de:
eb:76:3c:0e:4e:ef:cf:8b:8e:2b:5e:4b:63:8d:1e:
38:b1:1b:96:dd:c5:ee:3f:ce:6e:c1:2d:5a:e1:75:
c8:36:a0:2b:37:a9:89:cf:86:2f:a5:46:10:0c:4e:
7f:48:86:56:16:0c:15:41:b9:49:55:9e:cc:08:e3:
7c:36:7c:5c:34:08:b0:e1:ee:88:77:47:68:f7:0f:
17:d1:4b:90:5f:4d:58:dc:9e:36:4d:28:91:47:98:
45:18:7e:9b:fa:59:57:1d:34:e4:e1:46:7c:44:a6:
a1:7e:0e:3d:0e:5c:eb:b5:46:45:0f:60:31:52:c3:
fe:5e:41:f3:54:3c:db:38:22:2e:de:07:6d:ff:20:
db:5a:02:98:1d:fa:34:f5:58:8c:0c:13:36:ca:8d:
9f:18:19:37:e0:f3:1d:ea:0f:58:49:04:8f:d6:70:
0c:10:2b:f6:a7:52:d8:15:99:0a:d1:93:f9:66:d9:
dc:8a:16:f9:6b:b5:4a:3c:1e:3b:ff:2e:75:e1:17:
3e:92:7d:7a:3b:fe:5e:30:9c:9b:cd:62:32:da:f2:
63:54:d1:cb:60:61:43:eb:ee:03:53:b0:f4:2a:7d:
b2:db:de:44:65:3e:9f:64:5a:a3:6e:44:05:c9:50:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B2:C3:87:76:76:FE:E1:53:1E:12:8D:9C:E7:CD:F2:65:5E:E2:E9
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:af:b1:aa:a7:1e:cd:17:ee:a1:00:71:92:4e:8a:dd:26:75:
ad:60:c3:5e:82:d5:7a:1d:c5:ff:61:5a:e9:95:4d:95:73:8e:
ba:b7:ab:a8:14:a0:53:d2:03:e0:93:a8:92:69:6a:04:f3:56:
09:25:c1:c6:e7:99:7d:3c:cf:a7:6d:cb:16:74:f2:35:ba:0f:
ee:c9:60:40:26:36:82:96:1c:63:b5:b9:5d:c3:43:17:bb:29:
da:66:55:0e:cc:f4:0e:3c:77:f4:34:a2:6d:3d:15:1e:c8:28:
a0:f6:56:a4:c5:d1:02:cd:d2:60:e7:49:07:53:30:0d:ca:6e:
08:ca:ae:c3:9e:ec:df:25:cc:be:bb:a1:82:03:a5:43:11:f7:
69:07:db:49:cf:c7:19:a1:81:d1:70:bb:36:a3:e6:61:cc:80:
8a:1e:ce:e6:78:93:79:4b:ff:d5:17:92:f4:e4:c0:0f:2f:c3:
09:ae:68:b5:9c:3d:54:b4:3f:78:94:8b:bd:02:82:42:75:1f:
6b:55:95:1b:7b:9b:00:b4:8b:58:f3:3c:cb:fd:f6:e7:01:f6:
c8:1e:d9:7b:9c:03:e6:92:f4:d4:c4:14:81:2a:fe:dc:fd:9f:
03:bd:0a:56:5d:b9:2f:29:62:7e:fe:50:a9:a5:d0:57:7b:5f:
e1:35:ff:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1pDqP5nxpcWSBWnT9i8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MjY1YjhiYTllNjE5MGYyNjA5Nzg3Y2Q5ZDkyZWZkNDhl
ZmJkOWQwHhcNMjUwNDE3MTMwMDU3WhcNMjUwNDE4MTMwMDU3WjAzMTEwLwYDVQQD
Eyg0ZmIyYzM4Nzc2NzZmZWUxNTMxZTEyOGQ5Y2U3Y2RmMjY1NWVlMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GNcXxRJwZiW7oGxON7rdjwOTu/P
i44rXktjjR44sRuW3cXuP85uwS1a4XXINqArN6mJz4YvpUYQDE5/SIZWFgwVQblJ
VZ7MCON8NnxcNAiw4e6Id0do9w8X0UuQX01Y3J42TSiRR5hFGH6b+llXHTTk4UZ8
RKahfg49DlzrtUZFD2AxUsP+XkHzVDzbOCIu3gdt/yDbWgKYHfo09ViMDBM2yo2f
GBk34PMd6g9YSQSP1nAMECv2p1LYFZkK0ZP5Ztncihb5a7VKPB47/y514Rc+kn16
O/5eMJybzWIy2vJjVNHLYGFD6+4DU7D0Kn2y295EZT6fZFqjbkQFyVA1xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+yw4d2dv7hUx4SjZznzfJlXuLpMB8GA1UdIwQY
MBaAFMkmW4up5hkPJgl4fNnZLv1I772dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDct
YjdhNjYwOGE4ZmJjLzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDctYjdhNjYwOGE4ZmJj
LzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkq+xqqce
zRfuoQBxkk6K3SZ1rWDDXoLVeh3F/2Fa6ZVNlXOOurerqBSgU9ID4JOokmlqBPNW
CSXBxueZfTzPp23LFnTyNboP7slgQCY2gpYcY7W5XcNDF7sp2mZVDsz0Djx39DSi
bT0VHsgooPZWpMXRAs3SYOdJB1MwDcpuCMquw57s3yXMvruhggOlQxH3aQfbSc/H
GaGB0XC7NqPmYcyAih7O5niTeUv/1ReS9OTADy/DCa5otZw9VLQ/eJSLvQKCQnUf
a1WVG3ubALSLWPM8y/325wH2yB7Ze5wD5pL01MQUgSr+3P2fA70KVl25Lylifv5Q
qaXQV3tf4TX/0w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:20 2025 by rpki-client