Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: shTp2cNMh5aNJmYoRQ8MCsyiobRQh5MS7dy9zwtJwtU=
Subject key identifier: 46:05:CD:C6:E0:B6:F3:5C:B4:3E:74:13:C0:0E:A3:5F:AB:4F:38:84
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 01958CCE7B39544B8AA4ADCD765BE8D5AD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 13C3
Signing time: Thu 13 Mar 2025 00:01:36 +0000
Manifest this update: Thu 13 Mar 2025 00:01:36 +0000
Manifest next update: Fri 14 Mar 2025 00:01:36 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: rfqUhvd7tdz7kdHBLAvPFDtWZnVhrEsmZRT6lqvxVAI=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:7b:39:54:4b:8a:a4:ad:cd:76:5b:e8:d5:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Mar 13 00:01:36 2025 GMT
Not After : Mar 14 00:01:36 2025 GMT
Subject: CN=4605cdc6e0b6f35cb43e7413c00ea35fab4f3884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:b9:d9:71:df:1f:0f:46:b1:ac:31:9c:e4:
77:21:c8:35:b7:9e:2a:e3:41:ae:af:4d:17:27:f1:
15:39:81:1d:18:a2:45:41:b5:9c:11:5d:85:46:f7:
47:8e:1e:b6:24:68:ad:7f:2c:c5:ad:22:af:21:e2:
e4:e6:df:7b:22:52:e2:8c:34:bd:25:37:b7:17:00:
51:ee:56:67:e7:0d:d9:6d:2c:c8:c2:73:d9:0b:44:
65:87:fb:42:da:78:f1:50:c8:75:dd:9b:f9:38:d5:
61:28:0f:96:f6:fc:ff:c3:e3:18:f3:62:ab:46:94:
72:50:69:09:4f:a0:44:5f:88:dc:18:b8:42:79:f3:
29:bc:12:aa:1f:0e:05:de:aa:7e:39:38:27:16:f0:
a5:86:8b:04:a2:85:db:a4:1f:50:17:63:87:d0:52:
cb:42:f3:f2:ee:5d:40:8c:18:97:2d:d7:6c:6e:75:
47:9c:5f:63:aa:b7:a3:63:f3:e7:b6:bf:a0:7e:0d:
f0:42:58:ee:a9:46:11:01:72:64:42:24:73:7c:51:
44:2b:57:e4:3a:a7:b7:32:9d:f1:75:bd:27:68:a9:
81:61:49:c0:1d:09:a4:9b:39:03:37:9c:b6:bc:17:
c6:21:c9:a0:32:e0:5b:7d:8c:31:85:dc:cd:de:99:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:05:CD:C6:E0:B6:F3:5C:B4:3E:74:13:C0:0E:A3:5F:AB:4F:38:84
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:65:a3:94:1e:38:5f:d3:c3:e1:24:c5:fc:37:4a:bb:db:25:
d5:09:5a:de:80:a8:29:51:26:12:f7:26:ea:04:fc:a5:66:09:
b4:5c:97:75:1f:59:f2:f1:5f:db:07:1a:3e:ef:17:de:08:4d:
1e:8c:62:84:5c:fb:be:09:5f:a1:39:4c:48:c7:21:c6:f5:05:
8c:c9:a4:60:10:ee:d4:00:01:d1:4c:06:96:ba:39:9e:d5:e1:
2a:8a:07:2f:5f:a6:7d:13:0e:b6:d2:8a:e6:16:bc:fe:29:6f:
94:2d:b6:dc:41:84:8d:f0:50:c8:ba:c6:f0:15:f8:00:0e:41:
18:ec:ee:22:69:41:6c:02:35:91:bb:6b:ca:8b:31:7e:21:e0:
f1:46:68:98:9b:36:e4:ac:a1:c8:c1:14:eb:12:62:dd:a9:a4:
66:e0:da:be:09:68:30:76:8d:95:6e:40:e8:60:00:aa:63:cb:
ad:20:52:7c:73:20:54:58:77:73:71:0a:b2:d9:5f:4e:de:d5:
da:47:18:05:1b:b9:af:3f:e5:c0:03:1d:18:c5:09:d4:54:15:
b7:f0:36:17:f1:52:a3:76:9c:f2:c9:a2:ea:7f:81:7b:c9:d5:
a8:32:4e:e4:8c:6b:ad:8b:75:15:5e:1f:a4:03:81:18:d1:54:
67:61:b9:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzns5VEuKpK3Ndlvo1a1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1
NDFiMjUwHhcNMjUwMzEzMDAwMTM2WhcNMjUwMzE0MDAwMTM2WjAzMTEwLwYDVQQD
Eyg0NjA1Y2RjNmUwYjZmMzVjYjQzZTc0MTNjMDBlYTM1ZmFiNGYzODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybi52XHfHw9GsawxnOR3Icg1t54q
40Gur00XJ/EVOYEdGKJFQbWcEV2FRvdHjh62JGitfyzFrSKvIeLk5t97IlLijDS9
JTe3FwBR7lZn5w3ZbSzIwnPZC0Rlh/tC2njxUMh13Zv5ONVhKA+W9vz/w+MY82Kr
RpRyUGkJT6BEX4jcGLhCefMpvBKqHw4F3qp+OTgnFvClhosEooXbpB9QF2OH0FLL
QvPy7l1AjBiXLddsbnVHnF9jqrejY/Pntr+gfg3wQljuqUYRAXJkQiRzfFFEK1fk
Oqe3Mp3xdb0naKmBYUnAHQmkmzkDN5y2vBfGIcmgMuBbfYwxhdzN3pn3LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYFzcbgtvNctD50E8AOo1+rTziEMB8GA1UdIwQY
MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt
ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz
LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGWjlB44
X9PD4STF/DdKu9sl1Qla3oCoKVEmEvcm6gT8pWYJtFyXdR9Z8vFf2wcaPu8X3ghN
HoxihFz7vglfoTlMSMchxvUFjMmkYBDu1AAB0UwGlro5ntXhKooHL1+mfRMOttKK
5ha8/ilvlC223EGEjfBQyLrG8BX4AA5BGOzuImlBbAI1kbtryosxfiHg8UZomJs2
5KyhyMEU6xJi3amkZuDavgloMHaNlW5A6GAAqmPLrSBSfHMgVFh3c3EKstlfTt7V
2kcYBRu5rz/lwAMdGMUJ1FQVt/A2F/FSo3ac8smi6n+Be8nVqDJO5IxrrYt1FV4f
pAOBGNFUZ2G53w==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:27 2025 by rpki-client