Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
File: YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json)
Hash identifier: z4Kc4th/85WfpZdNpNwZo3s3t9esb2MBU8gYH4Ciahs=
Subject key identifier: 20:49:10:41:6A:52:A2:76:70:C8:D5:62:75:2A:9E:D0:8E:FD:54:C6
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 0195797E7BA9758BD7815143C51C5D4108B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
Manifest number: 0638
Signing time: Sun 09 Mar 2025 06:01:27 +0000
Manifest this update: Sun 09 Mar 2025 06:01:27 +0000
Manifest next update: Mon 10 Mar 2025 06:01:27 +0000
Files and hashes: 1: 2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa (hash: XnJT5JSjqE4Adj+ylm025sl/JK+1c1iwTV7Ra2tEO8w=)
2: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: rhmUezlA+bzULag2kzIWcT6doAH72QhjfzilzB5Bp1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:7e:7b:a9:75:8b:d7:81:51:43:c5:1c:5d:41:08:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Mar 9 06:01:27 2025 GMT
Not After : Mar 10 06:01:27 2025 GMT
Subject: CN=204910416a52a27670c8d562752a9ed08efd54c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:f8:c1:1f:a5:40:38:ce:fb:ad:51:f7:2c:
bd:82:4f:e2:fe:90:71:3e:34:90:5a:3a:06:58:94:
33:16:f4:5a:06:fc:c3:e7:3b:1c:ee:97:87:0f:ff:
cc:e7:19:68:17:db:21:74:7b:89:9a:98:eb:6e:6d:
07:1c:13:4e:37:f8:88:2b:f0:11:34:4c:7e:60:d6:
9c:da:ee:fe:a6:18:e4:5f:c8:e5:62:9b:0d:08:14:
66:93:8b:43:b4:ef:47:57:aa:8a:02:b6:c8:4c:bb:
6d:fa:f5:8c:38:94:08:1e:a9:b0:1b:ae:b3:7b:18:
5d:c4:92:26:32:33:e5:36:e0:33:ab:e8:4e:40:42:
e8:52:50:7e:ba:17:fb:ce:87:70:7a:49:5f:09:87:
6b:d5:7a:a8:01:75:d1:56:f1:7f:b5:1f:83:f0:f6:
ee:a5:12:91:75:1e:25:3b:95:32:21:8f:85:eb:94:
20:02:8c:21:a7:fe:9b:91:de:9c:5d:a1:f9:b5:18:
cf:9c:0b:52:1b:00:9c:d9:01:4c:51:86:9d:63:85:
05:2b:c3:7a:39:bf:89:e1:1f:28:45:07:e3:b9:77:
4d:bf:ce:29:5f:2a:76:53:4a:3a:e4:63:be:69:05:
28:16:75:84:c8:98:e3:aa:96:07:ac:15:8a:2b:06:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:49:10:41:6A:52:A2:76:70:C8:D5:62:75:2A:9E:D0:8E:FD:54:C6
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:63:f2:da:20:98:59:3d:a0:58:73:98:e7:f6:a3:0a:c4:56:
02:7c:d6:52:23:8b:65:53:fb:23:4c:08:9d:5d:b6:cd:3b:91:
8c:86:ce:87:0f:4f:83:f0:5c:75:04:dc:ba:c8:14:d9:2d:8a:
a5:6c:a2:88:5b:2b:f7:e7:5d:ed:8d:f9:96:f1:7b:b4:fb:35:
b4:cf:9c:f9:45:72:a0:8b:aa:6b:7b:c2:43:58:6b:6a:24:22:
65:e2:d2:e0:61:d2:cf:b7:fc:e5:0a:46:b8:5d:ec:d2:0f:b1:
16:aa:45:81:6a:7e:91:72:f9:9f:8f:2b:0d:f6:97:31:23:fe:
69:47:ab:80:eb:5f:43:f6:27:53:bd:5d:ec:a0:7d:ff:0d:e1:
35:46:4a:d9:f0:aa:e9:e4:96:33:9b:af:93:86:25:c0:3e:22:
c9:59:85:55:6e:67:10:da:47:b7:4f:3c:d8:cf:03:3f:60:00:
c8:87:1e:c2:81:3b:ac:81:bc:ef:c4:6d:d6:9b:b1:82:2d:3f:
75:31:ac:5f:14:35:c7:78:5a:35:f4:c9:06:c6:cd:be:dc:6e:
fa:df:fc:19:af:c8:05:87:5a:67:98:ff:7f:f0:25:dd:4d:cd:
f5:23:13:b9:3a:47:cf:06:5e:3a:49:f9:90:11:24:dd:bd:7d:
5d:41:15:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV5fnupdYvXgVFDxRxdQQi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZGM1YTAwMzY4ZDhhZTFmYmE5OTU0MzFmMDNhNDEzMWFk
ZDhhOWEwHhcNMjUwMzA5MDYwMTI3WhcNMjUwMzEwMDYwMTI3WjAzMTEwLwYDVQQD
EygyMDQ5MTA0MTZhNTJhMjc2NzBjOGQ1NjI3NTJhOWVkMDhlZmQ1NGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIz4wR+lQDjO+61R9yy9gk/i/pBx
PjSQWjoGWJQzFvRaBvzD5zsc7peHD//M5xloF9shdHuJmpjrbm0HHBNON/iIK/AR
NEx+YNac2u7+phjkX8jlYpsNCBRmk4tDtO9HV6qKArbITLtt+vWMOJQIHqmwG66z
exhdxJImMjPlNuAzq+hOQELoUlB+uhf7zodweklfCYdr1XqoAXXRVvF/tR+D8Pbu
pRKRdR4lO5UyIY+F65QgAowhp/6bkd6cXaH5tRjPnAtSGwCc2QFMUYadY4UFK8N6
Ob+J4R8oRQfjuXdNv84pXyp2U0o65GO+aQUoFnWEyJjjqpYHrBWKKwbl+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBJEEFqUqJ2cMjVYnUqntCO/VTGMB8GA1UdIwQY
MBaAFGDcWgA2jYrh+6mVQx8DpBMa3YqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80M2Q2M2EtYTkzNi00NTkzLTg4MjYt
ZWJiMzk4MmMyZWIwLzEvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80M2Q2M2EtYTkzNi00NTkzLTg4MjYtZWJiMzk4MmMyZWIw
LzEvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWPy2iCY
WT2gWHOY5/ajCsRWAnzWUiOLZVP7I0wInV22zTuRjIbOhw9Pg/BcdQTcusgU2S2K
pWyiiFsr9+dd7Y35lvF7tPs1tM+c+UVyoIuqa3vCQ1hraiQiZeLS4GHSz7f85QpG
uF3s0g+xFqpFgWp+kXL5n48rDfaXMSP+aUergOtfQ/YnU71d7KB9/w3hNUZK2fCq
6eSWM5uvk4YlwD4iyVmFVW5nENpHt0882M8DP2AAyIcewoE7rIG878Rt1puxgi0/
dTGsXxQ1x3haNfTJBsbNvtxu+t/8Ga/IBYdaZ5j/f/Al3U3N9SMTuTpHzwZeOkn5
kBEk3b19XUEVog==
-----END CERTIFICATE-----
Generated at Sun Mar 9 10:13:42 2025 by rpki-client