Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: cjeMPMaqKt+VDMOWr7ARs/Un9sDyZAiStn0r+l1KBy8=
Subject key identifier: AD:93:AA:72:D0:48:3E:1C:19:33:9F:A1:84:36:37:43:7B:EC:A1:E5
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019652DB52C5638054A8418F13709411661E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 0F62
Signing time: Sun 20 Apr 2025 11:00:27 +0000
Manifest this update: Sun 20 Apr 2025 11:00:27 +0000
Manifest next update: Mon 21 Apr 2025 11:00:27 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: +5JIHCHux712IwUYI/W7R/esZaurmt0cGx0cy/NbbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:52:c5:63:80:54:a8:41:8f:13:70:94:11:66:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Apr 20 11:00:27 2025 GMT
Not After : Apr 21 11:00:27 2025 GMT
Subject: CN=ad93aa72d0483e1c19339fa1843637437beca1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:59:7f:33:d5:c7:cd:ca:81:a6:96:fc:ce:
6e:0a:42:50:f6:e8:5a:db:3f:ce:65:a9:cd:0b:87:
9e:64:8d:39:cc:b9:6d:a4:70:e3:fa:c4:e8:ae:52:
0d:35:17:56:f6:b0:20:03:fa:c2:ef:e8:fb:62:11:
aa:e0:b2:40:9f:bd:18:c5:26:24:31:86:0a:4c:ce:
95:02:b7:a7:46:a6:8e:3e:5f:a2:7f:07:9f:cf:0f:
db:ee:6e:0d:89:fa:2c:0a:c1:c3:2c:bc:b4:dc:83:
30:fb:6a:f2:83:9b:28:6b:3a:59:08:b7:3d:73:ed:
f1:3e:fc:b5:bf:f7:42:e2:2d:71:e5:63:e4:3c:57:
a1:53:fd:62:72:78:e9:03:16:25:91:ef:58:ae:1c:
f8:db:57:7b:2f:9e:8a:88:bf:15:ad:bd:bb:41:0d:
fd:b7:e2:b6:38:42:92:19:e3:4b:c8:71:34:c3:a2:
94:60:1d:73:a2:26:31:ae:4f:6f:ca:9c:01:26:32:
e4:dd:ce:44:9e:e6:18:74:60:e9:f1:09:ec:ed:03:
cd:48:78:7e:73:47:f1:c4:40:fc:4a:90:5d:1d:2a:
b3:55:33:ca:fb:f2:fc:23:ec:c1:ef:35:33:a2:84:
af:fc:13:e8:a3:e9:30:a4:91:87:c2:00:22:76:8c:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:93:AA:72:D0:48:3E:1C:19:33:9F:A1:84:36:37:43:7B:EC:A1:E5
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6a:e9:01:c4:72:5f:d8:05:11:c4:ff:9e:19:8a:a2:de:4f:
fb:18:17:e3:b5:15:a1:76:03:6b:3c:c1:95:8a:01:5e:62:fc:
de:54:23:44:d6:ea:48:da:3b:bd:f5:06:6e:d2:31:ac:79:d9:
db:da:32:1a:b2:c3:82:b0:8a:f8:f3:d7:27:cf:d3:d3:f8:d7:
e2:3e:4c:6a:f1:47:fa:75:61:9a:d9:eb:c0:66:8a:fb:e4:c4:
7c:55:04:13:c2:19:bb:2d:e1:d5:d3:6b:e0:97:22:b7:6a:77:
63:0e:aa:a2:8c:11:7d:d2:5b:26:1a:24:3c:db:25:9c:d9:15:
ba:34:7b:39:af:57:42:44:41:63:8f:62:55:55:ef:bb:fe:78:
fb:ce:a3:35:8b:c3:0b:c6:07:0d:c2:78:5e:f0:c9:ab:80:e5:
83:10:fe:a8:ec:db:45:62:c4:51:0e:9c:25:e0:c4:96:ff:21:
01:e7:67:c8:52:34:91:60:33:f9:34:ad:d1:a4:3f:b8:00:ad:
14:77:33:72:24:00:e9:b0:f1:cc:ea:fe:75:9d:79:e9:75:c2:
c7:cc:ba:2c:40:77:96:b6:71:18:c1:ce:ea:a7:82:70:fb:4f:
56:71:06:b4:ec:75:86:e4:8a:e6:90:1e:4e:8e:67:37:af:12:
95:75:a1:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZS21LFY4BUqEGPE3CUEWYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYmUwOGRhMWFiMzFlM2Y5OGY1NTRmYTAxMzczZjk0Y2M5
MDExZWQwHhcNMjUwNDIwMTEwMDI3WhcNMjUwNDIxMTEwMDI3WjAzMTEwLwYDVQQD
EyhhZDkzYWE3MmQwNDgzZTFjMTkzMzlmYTE4NDM2Mzc0MzdiZWNhMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRFZfzPVx83KgaaW/M5uCkJQ9uha
2z/OZanNC4eeZI05zLltpHDj+sTorlINNRdW9rAgA/rC7+j7YhGq4LJAn70YxSYk
MYYKTM6VArenRqaOPl+ifwefzw/b7m4NifosCsHDLLy03IMw+2ryg5soazpZCLc9
c+3xPvy1v/dC4i1x5WPkPFehU/1icnjpAxYlke9Yrhz421d7L56KiL8Vrb27QQ39
t+K2OEKSGeNLyHE0w6KUYB1zoiYxrk9vypwBJjLk3c5EnuYYdGDp8Qns7QPNSHh+
c0fxxED8SpBdHSqzVTPK+/L8I+zB7zUzooSv/BPoo+kwpJGHwgAidowzHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2TqnLQSD4cGTOfoYQ2N0N77KHlMB8GA1UdIwQY
MBaAFGO+CNoasx4/mPVU+gE3P5TMkBHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1Nzct
Y2M4MDU0YTUxZDY2LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1NzctY2M4MDU0YTUxZDY2
LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGrpAcRy
X9gFEcT/nhmKot5P+xgX47UVoXYDazzBlYoBXmL83lQjRNbqSNo7vfUGbtIxrHnZ
29oyGrLDgrCK+PPXJ8/T0/jX4j5MavFH+nVhmtnrwGaK++TEfFUEE8IZuy3h1dNr
4Jcit2p3Yw6qoowRfdJbJhokPNslnNkVujR7Oa9XQkRBY49iVVXvu/54+86jNYvD
C8YHDcJ4XvDJq4DlgxD+qOzbRWLEUQ6cJeDElv8hAednyFI0kWAz+TSt0aQ/uACt
FHczciQA6bDxzOr+dZ156XXCx8y6LEB3lrZxGMHO6qeCcPtPVnEGtOx1huSK5pAe
To5nN68SlXWheg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:12 2025 by rpki-client