Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: zPCXnvCryVAL3mzzsSxjOIzEfVY0VU4UoJndUwsgK94=
Subject key identifier: 12:56:5B:9F:8D:D5:BD:3E:99:13:A6:30:66:9D:6E:CC:71:12:EA:52
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 01964D7EAABA32436A743880D1DCB433BE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: CC
Signing time: Sat 19 Apr 2025 10:01:08 +0000
Manifest this update: Sat 19 Apr 2025 10:01:08 +0000
Manifest next update: Sun 20 Apr 2025 10:01:08 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: gj2zHmioxSfnrTFepedpMY/yf/lYtAWlyI0qWo4d4Ec=)
2: wK5U0OA4so9Bb6LaTOAhvYcrZbw.roa (hash: i3F3Ec/aHEk6lLvyEsCOnZPx8LpXq7mO54DzXI/2qs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:aa:ba:32:43:6a:74:38:80:d1:dc:b4:33:be:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Apr 19 10:01:08 2025 GMT
Not After : Apr 20 10:01:08 2025 GMT
Subject: CN=12565b9f8dd5bd3e9913a630669d6ecc7112ea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:cd:e0:eb:40:40:10:f5:5f:17:93:25:33:
86:aa:b8:e1:b4:92:cc:6c:3d:6a:28:25:cb:7f:ca:
26:09:c5:3f:9d:75:11:13:ef:2e:9c:f4:c3:41:f6:
96:67:5e:3a:b3:11:53:0b:75:b7:78:73:11:f9:06:
67:d3:7b:c5:16:e3:9b:f3:e1:7f:5b:5d:20:cd:86:
5e:3b:f5:46:ac:89:9f:9e:cf:58:6d:96:d0:e1:d4:
7d:6d:a3:1a:70:c4:a9:b7:19:7b:f5:96:33:30:6d:
84:5c:7d:db:9c:ca:b0:75:d0:59:74:a7:37:47:7f:
9c:cc:16:9e:27:2a:74:38:0e:c0:9e:ed:d8:2d:3e:
37:e5:6b:14:da:8e:5a:65:8b:88:71:ea:cd:26:32:
6c:bc:e1:4b:dd:0c:60:5b:d3:ea:a4:8d:17:31:fe:
0e:33:46:5b:7f:53:c1:be:1a:c1:bb:82:d0:69:7e:
1d:13:39:0c:a5:60:5f:17:95:00:33:e7:87:c2:7e:
e8:e2:2f:6f:dd:2f:50:c1:8d:67:d1:78:e0:12:66:
32:24:50:1c:e3:e1:82:9c:77:2e:ec:b2:8a:c3:93:
0d:d6:0b:7f:31:c9:2e:01:c5:57:1f:b3:d0:49:4b:
30:3b:0a:28:90:b6:d3:be:0b:07:01:ce:a3:95:17:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:56:5B:9F:8D:D5:BD:3E:99:13:A6:30:66:9D:6E:CC:71:12:EA:52
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6e:b2:ce:4b:e2:31:6e:18:ab:e0:b2:ca:a4:8e:2b:5b:3c:
1a:a3:00:a1:d4:d4:c7:e6:6b:1f:47:54:da:50:30:d2:76:90:
86:92:83:6d:bd:a9:c2:ea:1c:7b:8a:a9:a6:fa:35:b9:ed:86:
c1:3e:4f:8b:1d:32:a4:ea:1a:2b:76:66:b3:f4:60:5a:06:63:
9d:a8:35:94:22:d9:c2:9f:0f:a7:be:2a:a2:ce:53:71:5f:c5:
bd:7a:c4:2f:e6:a1:17:e4:94:80:f9:c4:a6:81:a2:29:ce:7e:
26:da:6c:11:0a:c5:f1:71:c2:d6:0e:a5:9e:e2:c8:46:64:13:
3c:86:c3:30:49:87:c2:a9:2b:76:54:8c:50:37:5b:2d:6e:f9:
78:9d:0e:52:73:ca:72:e7:57:a1:e4:8f:4b:b9:47:10:1b:c8:
c5:e6:4f:5c:d3:6c:4c:70:e9:9d:b0:ef:ce:38:b7:5e:a7:f1:
e3:ff:36:cf:a0:ad:56:08:3d:56:e9:b6:d9:61:8c:b8:1a:39:
55:82:87:be:e6:09:c7:b6:51:6a:da:ed:7b:98:ca:9e:c3:ad:
73:14:9d:24:ea:79:82:38:e8:0e:ee:64:58:08:79:53:a9:62:
93:81:04:da:9e:2f:5a:c4:94:ea:ae:20:10:f6:c4:ad:b9:47:
82:07:9b:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfqq6MkNqdDiA0dy0M74/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjVhYWM3NmZlNmJmMjkxMzM1ZDE5YTY1OGU2NDg5MTA1
Yjg2OWYwHhcNMjUwNDE5MTAwMTA4WhcNMjUwNDIwMTAwMTA4WjAzMTEwLwYDVQQD
EygxMjU2NWI5ZjhkZDViZDNlOTkxM2E2MzA2NjlkNmVjYzcxMTJlYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14fN4OtAQBD1XxeTJTOGqrjhtJLM
bD1qKCXLf8omCcU/nXURE+8unPTDQfaWZ146sxFTC3W3eHMR+QZn03vFFuOb8+F/
W10gzYZeO/VGrImfns9YbZbQ4dR9baMacMSptxl79ZYzMG2EXH3bnMqwddBZdKc3
R3+czBaeJyp0OA7Anu3YLT435WsU2o5aZYuIcerNJjJsvOFL3QxgW9PqpI0XMf4O
M0Zbf1PBvhrBu4LQaX4dEzkMpWBfF5UAM+eHwn7o4i9v3S9QwY1n0XjgEmYyJFAc
4+GCnHcu7LKKw5MN1gt/MckuAcVXH7PQSUswOwookLbTvgsHAc6jlReInQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJWW5+N1b0+mROmMGadbsxxEupSMB8GA1UdIwQY
MBaAFGD1qsdv5r8pEzXRmmWOZIkQW4afMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMTJiMDAtYWY4Mi00NzM1LWFhYzEt
MmJmYjZhZGRjZjQ1LzEvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jMTJiMDAtYWY4Mi00NzM1LWFhYzEtMmJmYjZhZGRjZjQ1
LzEvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG6yzkvi
MW4Yq+CyyqSOK1s8GqMAodTUx+ZrH0dU2lAw0naQhpKDbb2pwuoce4qppvo1ue2G
wT5Pix0ypOoaK3Zms/RgWgZjnag1lCLZwp8Pp74qos5TcV/FvXrEL+ahF+SUgPnE
poGiKc5+JtpsEQrF8XHC1g6lnuLIRmQTPIbDMEmHwqkrdlSMUDdbLW75eJ0OUnPK
cudXoeSPS7lHEBvIxeZPXNNsTHDpnbDvzji3Xqfx4/82z6CtVgg9Vum22WGMuBo5
VYKHvuYJx7ZRatrte5jKnsOtcxSdJOp5gjjoDu5kWAh5U6lik4EE2p4vWsSU6q4g
EPbErblHggebcA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:53:18 2025 by rpki-client