Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
File: yrjSpYc51mIvFaU8wb1U-dsIAcY.mft (raw, json)
Hash identifier: OaGt+scjTG80CTBbTR/tueGLWdAXwBvAQdzgBrCzh1I=
Subject key identifier: 7E:19:16:0B:47:32:FE:F4:56:8C:76:08:58:E9:A7:9C:89:35:0E:47
Authority key identifier: CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
Certificate issuer: /CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Certificate serial: 01958EF369E9DAFB7A31B2E607E1DA8949E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
Manifest number: 02CE
Signing time: Thu 13 Mar 2025 10:01:11 +0000
Manifest this update: Thu 13 Mar 2025 10:01:11 +0000
Manifest next update: Fri 14 Mar 2025 10:01:11 +0000
Files and hashes: 1: yrjSpYc51mIvFaU8wb1U-dsIAcY.crl (hash: 56kJ8gioE+jQ2hqfnxm+or6vVuwfYBeKlIj9CsBq9JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:69:e9:da:fb:7a:31:b2:e6:07:e1:da:89:49:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Validity
Not Before: Mar 13 10:01:11 2025 GMT
Not After : Mar 14 10:01:11 2025 GMT
Subject: CN=7e19160b4732fef4568c760858e9a79c89350e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:23:e4:27:34:b6:64:bf:43:43:56:c5:83:
92:e2:09:bc:9b:4c:9f:77:3c:4d:26:3a:2f:f3:b5:
d9:9d:17:d0:2b:5e:59:ac:e9:bc:12:bf:2b:cc:69:
b0:5a:4e:c5:fc:8c:1f:fa:87:7d:78:b1:84:22:f3:
a2:f2:b5:2d:e8:e7:b4:ad:64:aa:20:ee:21:c9:5b:
d3:c4:b8:fc:2f:64:13:9c:6b:92:6f:20:9d:38:25:
15:e4:44:4e:bf:db:82:e3:01:bf:fc:7e:b7:21:8b:
63:73:d8:9e:f1:80:ff:38:19:67:78:56:08:76:9e:
02:33:99:4f:0b:49:25:77:62:bd:c3:4d:62:24:99:
28:24:42:b4:0a:ea:17:0e:25:31:c6:08:b9:7d:e6:
14:95:69:93:d9:be:0e:f9:5e:c9:95:80:cb:f9:51:
88:4e:34:4b:7c:51:76:4e:ca:9e:de:a0:45:e0:cd:
6d:3b:58:ac:5a:4b:85:01:32:19:a3:8b:33:a7:f3:
34:15:03:55:4c:bf:c4:5c:28:17:9b:c5:78:a0:20:
47:5f:0f:56:78:1b:4f:54:a0:54:26:89:b6:1b:9e:
48:43:7a:63:07:5f:8b:de:fd:08:99:fd:64:cc:d5:
cd:d4:2e:5d:22:51:f3:6e:1b:74:d7:a3:80:c9:3b:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:19:16:0B:47:32:FE:F4:56:8C:76:08:58:E9:A7:9C:89:35:0E:47
X509v3 Authority Key Identifier:
keyid:CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0e:d4:28:8e:10:ac:76:1b:b5:d7:34:13:ad:32:f7:ff:5d:
45:30:87:26:6f:03:3f:1b:4a:a6:f7:19:f6:3a:7f:2e:7e:e1:
5f:cd:a2:c8:5e:05:36:24:b5:e8:90:73:c8:36:9e:a9:a4:bd:
af:fc:9c:88:e6:a6:85:0c:d5:1e:52:60:37:56:e2:12:fe:85:
cc:90:e9:ba:bb:a1:84:7b:1e:4c:e3:67:68:5f:6f:bd:5c:dd:
73:bc:7f:d2:0f:17:03:ba:54:ba:59:54:1f:da:e2:70:c0:3e:
f6:a2:d2:a7:d8:f6:3c:36:88:17:6a:cb:7c:df:85:ee:ad:d9:
f4:3b:0e:e5:22:fa:0f:15:bd:aa:14:4f:2c:8d:a3:d3:85:8c:
4e:19:82:f3:00:7b:22:96:a3:a7:5f:55:83:7e:a6:ff:7d:35:
85:c5:35:aa:d7:94:fc:f8:5e:78:a5:fd:ae:3a:8a:49:2d:bc:
de:20:5f:e5:f5:44:0f:11:a3:99:21:d8:6b:35:e6:9d:98:72:
18:01:2c:79:ef:f4:d0:a6:50:51:0a:c9:15:5e:0d:9d:73:20:
9b:c5:a7:35:44:07:56:05:63:c4:5e:4e:15:ee:72:d7:3e:de:
bb:03:e3:8e:9e:6e:94:1a:6c:32:81:d2:a8:b0:1e:1e:ad:02:
73:39:c9:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWO82np2vt6MbLmB+HaiUngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjhkMmE1ODczOWQ2NjIyZjE1YTUzY2MxYmQ1NGY5ZGIw
ODAxYzYwHhcNMjUwMzEzMTAwMTExWhcNMjUwMzE0MTAwMTExWjAzMTEwLwYDVQQD
Eyg3ZTE5MTYwYjQ3MzJmZWY0NTY4Yzc2MDg1OGU5YTc5Yzg5MzUwZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL8j5Cc0tmS/Q0NWxYOS4gm8m0yf
dzxNJjov87XZnRfQK15ZrOm8Er8rzGmwWk7F/Iwf+od9eLGEIvOi8rUt6Oe0rWSq
IO4hyVvTxLj8L2QTnGuSbyCdOCUV5EROv9uC4wG//H63IYtjc9ie8YD/OBlneFYI
dp4CM5lPC0kld2K9w01iJJkoJEK0CuoXDiUxxgi5feYUlWmT2b4O+V7JlYDL+VGI
TjRLfFF2Tsqe3qBF4M1tO1isWkuFATIZo4szp/M0FQNVTL/EXCgXm8V4oCBHXw9W
eBtPVKBUJom2G55IQ3pjB1+L3v0Imf1kzNXN1C5dIlHzbht016OAyTurbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4ZFgtHMv70Vox2CFjpp5yJNQ5HMB8GA1UdIwQY
MBaAFMq40qWHOdZiLxWlPMG9VPnbCAHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJqU3BZYzUxbUl2RmFVOHdiMVUtZHNJQWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82NmNlY2YtYmRmYy00Mjc4LWFlMDMt
YWQxY2RlMWI4NTQyLzEveXJqU3BZYzUxbUl2RmFVOHdiMVUtZHNJQWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82NmNlY2YtYmRmYy00Mjc4LWFlMDMtYWQxY2RlMWI4NTQy
LzEveXJqU3BZYzUxbUl2RmFVOHdiMVUtZHNJQWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApg7UKI4Q
rHYbtdc0E60y9/9dRTCHJm8DPxtKpvcZ9jp/Ln7hX82iyF4FNiS16JBzyDaeqaS9
r/yciOamhQzVHlJgN1biEv6FzJDpuruhhHseTONnaF9vvVzdc7x/0g8XA7pUullU
H9ricMA+9qLSp9j2PDaIF2rLfN+F7q3Z9DsO5SL6DxW9qhRPLI2j04WMThmC8wB7
Ipajp19Vg36m/301hcU1qteU/PheeKX9rjqKSS283iBf5fVEDxGjmSHYazXmnZhy
GAEsee/00KZQUQrJFV4NnXMgm8WnNUQHVgVjxF5OFe5y1z7euwPjjp5ulBpsMoHS
qLAeHq0CcznJDA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:24:21 2025 by rpki-client