Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: 7Sw2PqQ8LhaN3dz1fLv+mOwqNGq2TbOw6vpLg9auj4k=
Subject key identifier: F3:65:A2:12:58:41:67:B3:5E:99:0E:E5:C4:50:B9:E2:C6:D7:D3:4D
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019510FE1A4F038C0ADCD018477906FA8CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0735
Signing time: Sun 16 Feb 2025 23:00:43 +0000
Manifest this update: Sun 16 Feb 2025 23:00:43 +0000
Manifest next update: Mon 17 Feb 2025 23:00:43 +0000
Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=)
2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: aHOpwHZL8QXn1c2f3rtMAK+UCZcHpfe2IwzDZqyluFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:1a:4f:03:8c:0a:dc:d0:18:47:79:06:fa:8c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Feb 16 23:00:43 2025 GMT
Not After : Feb 17 23:00:43 2025 GMT
Subject: CN=f365a212584167b35e990ee5c450b9e2c6d7d34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:75:fa:67:73:a2:88:73:46:59:25:18:b3:
87:97:a0:45:cd:7e:91:0b:71:94:0f:7f:38:d6:5a:
65:f2:61:dd:93:e2:3d:b5:9d:91:58:a2:94:50:26:
37:af:c6:af:49:13:4e:44:1b:c7:cd:1b:58:04:90:
b2:5d:76:e5:2a:fe:d9:c2:d8:08:57:41:c4:8d:d7:
8f:8a:ef:b1:00:4a:bf:2a:6c:18:07:06:7b:1f:89:
79:ad:46:94:44:6b:f3:cd:f8:5c:36:02:6e:c2:f3:
5c:f5:aa:30:08:b6:ec:76:2a:6d:e2:d3:49:96:fe:
90:39:76:f6:3e:72:4f:54:1c:d0:57:2f:a4:a8:b9:
0b:38:2e:b8:23:52:6d:f7:f6:58:82:f3:1a:29:1c:
7c:38:8c:4d:58:ec:09:fa:7a:1e:f9:f2:4b:ca:5d:
b2:d3:bc:34:ad:92:6b:85:90:c7:58:e5:79:21:d4:
1e:ba:14:11:3f:6d:43:fb:d7:0f:6d:d2:39:d3:56:
65:ef:2f:07:8d:fc:fe:f6:3b:7f:c7:0a:07:93:69:
e3:5a:b8:f9:4a:b0:4b:dc:30:9b:29:3e:72:d0:b6:
49:54:86:9c:9e:cc:56:6c:3d:70:fc:71:09:b4:17:
42:42:87:3d:d9:ca:88:d8:86:73:96:54:cf:0a:ae:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:65:A2:12:58:41:67:B3:5E:99:0E:E5:C4:50:B9:E2:C6:D7:D3:4D
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:93:15:fa:e7:d3:df:c2:5b:1e:8b:8f:88:22:32:c5:ff:a3:
c8:8e:1c:3a:99:0f:74:e6:8f:30:b2:fe:c0:1f:7c:83:00:ee:
fe:f8:96:ad:98:45:ef:90:86:e4:3e:29:3a:d5:d7:c9:cf:0f:
29:f5:0a:15:64:90:8e:a0:5b:76:1b:96:72:47:a6:69:51:cf:
ea:35:db:c7:c9:22:56:69:32:ed:a7:66:6c:ff:ea:07:39:53:
03:88:be:23:c9:6a:2f:db:55:db:e4:2c:f2:ab:50:ee:3a:80:
a6:ae:74:d1:99:b3:1d:2d:ae:f0:98:aa:cd:66:e6:f8:93:96:
bb:a7:15:7c:43:4f:94:e0:b3:cd:c5:0b:aa:1e:9e:76:c3:83:
b0:d2:c1:aa:15:c8:72:1a:8b:88:60:1f:8a:aa:86:da:0d:cb:
cf:62:ba:ab:42:c2:00:8b:e4:11:0b:6f:4b:05:bd:18:9d:67:
ad:80:62:1d:1a:31:59:22:23:ba:42:b2:76:39:d4:e6:5e:89:
96:ac:75:4d:77:45:2e:68:94:39:00:09:4f:f1:b2:cf:55:49:
a9:4b:45:59:3e:a8:92:ac:da:c9:f9:b3:92:f6:e5:f0:53:89:
33:9d:e2:0b:f3:99:20:74:a4:1d:df:e4:76:5f:e6:f5:cc:8a:
19:e4:69:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/hpPA4wK3NAYR3kG+oy7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZTYwZDM4YmIzNzc5NGU3MmU4N2U2ODcwZDA3MWYyYTdk
ZDNlNTcwHhcNMjUwMjE2MjMwMDQzWhcNMjUwMjE3MjMwMDQzWjAzMTEwLwYDVQQD
EyhmMzY1YTIxMjU4NDE2N2IzNWU5OTBlZTVjNDUwYjllMmM2ZDdkMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstp1+mdzoohzRlklGLOHl6BFzX6R
C3GUD3841lpl8mHdk+I9tZ2RWKKUUCY3r8avSRNORBvHzRtYBJCyXXblKv7ZwtgI
V0HEjdePiu+xAEq/KmwYBwZ7H4l5rUaURGvzzfhcNgJuwvNc9aowCLbsdipt4tNJ
lv6QOXb2PnJPVBzQVy+kqLkLOC64I1Jt9/ZYgvMaKRx8OIxNWOwJ+noe+fJLyl2y
07w0rZJrhZDHWOV5IdQeuhQRP21D+9cPbdI501Zl7y8Hjfz+9jt/xwoHk2njWrj5
SrBL3DCbKT5y0LZJVIacnsxWbD1w/HEJtBdCQoc92cqI2IZzllTPCq7JAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNlohJYQWezXpkO5cRQueLG19NNMB8GA1UdIwQY
MBaAFLPmDTi7N3lOcuh+aHDQcfKn3T5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUt
N2E5NGM3YzM2MjE3LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUtN2E5NGM3YzM2MjE3
LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJMV+ufT
38JbHouPiCIyxf+jyI4cOpkPdOaPMLL+wB98gwDu/viWrZhF75CG5D4pOtXXyc8P
KfUKFWSQjqBbdhuWckemaVHP6jXbx8kiVmky7admbP/qBzlTA4i+I8lqL9tV2+Qs
8qtQ7jqApq500ZmzHS2u8JiqzWbm+JOWu6cVfENPlOCzzcULqh6edsODsNLBqhXI
chqLiGAfiqqG2g3Lz2K6q0LCAIvkEQtvSwW9GJ1nrYBiHRoxWSIjukKydjnU5l6J
lqx1TXdFLmiUOQAJT/Gyz1VJqUtFWT6okqzayfmzkvbl8FOJM53iC/OZIHSkHd/k
dl/m9cyKGeRpzQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:16 2025 by rpki-client