Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: Ob7WsAv90g9NHEkBo5fZz0W5yIllkX6IA/fijVXZAa8=
Subject key identifier: 9D:D1:C5:7A:D5:A3:00:66:45:DE:6F:6A:73:22:C1:26:5B:7F:71:80
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 019653EE3FFF87B89EF3227CB88BF5E2FBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0B0B
Signing time: Sun 20 Apr 2025 16:00:44 +0000
Manifest this update: Sun 20 Apr 2025 16:00:44 +0000
Manifest next update: Mon 21 Apr 2025 16:00:44 +0000
Files and hashes: 1: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: CXSDaF24UXi/cPdTcKIQAPM9p6BFmbgJQwQf8IkXpu4=)
2: kVcJYJ6Q63B4lKtQ5vKu6QeoxFU.roa (hash: zBFFe6GTU3Rj12iW+TDrkgjiFgVWN+v43RC3XAW3nrQ=)
3: xBRxdmpfvYOwV2CG-TGZUb7lV80.roa (hash: BYeaby5+zBYzTYQvAAICT6cMk4h5pLzaoyyqUhm5i9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:3f:ff:87:b8:9e:f3:22:7c:b8:8b:f5:e2:fb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Apr 20 16:00:44 2025 GMT
Not After : Apr 21 16:00:44 2025 GMT
Subject: CN=9dd1c57ad5a3006645de6f6a7322c1265b7f7180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:dd:79:d3:1f:d3:4f:c0:f3:c3:91:ad:a0:
c3:68:ca:69:8e:60:de:4e:a5:73:18:9d:1e:ae:d8:
5f:0b:83:75:4d:51:33:23:4d:88:05:e2:cd:48:a4:
d0:83:89:9d:a4:57:0b:41:9e:6d:54:e4:5a:1d:8a:
67:14:0c:69:ed:79:5e:ff:06:0f:bb:21:b7:28:c2:
d6:af:fe:68:d6:ab:60:4a:7b:89:bd:ff:19:ca:e5:
da:69:71:6d:4e:e5:93:e4:da:e8:a2:60:5c:c3:2b:
5d:ba:d3:57:38:62:26:29:18:aa:2d:06:46:f2:55:
0b:e0:72:de:47:e5:1a:4b:06:63:91:ad:c6:1f:9f:
7e:e2:d8:24:78:57:cc:d0:38:1d:f5:56:a6:42:61:
57:d6:fe:53:1f:a8:7b:5f:76:6b:0d:f8:43:67:62:
4a:ba:92:39:79:25:4f:be:6d:43:ab:a3:37:ff:e8:
62:6f:29:7b:b0:93:13:f1:4d:77:3c:b8:e0:21:f6:
5a:8f:48:77:75:4d:66:87:4b:b5:e8:af:35:4d:b0:
98:99:6f:42:43:11:61:c1:0d:d6:70:f2:7b:48:2c:
24:cf:c7:25:2d:24:09:d7:5d:cc:b9:8c:54:50:2a:
a4:0c:50:bd:8c:ac:80:1f:7e:a9:1a:0c:87:23:ec:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:C5:7A:D5:A3:00:66:45:DE:6F:6A:73:22:C1:26:5B:7F:71:80
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bd:3b:7c:f2:47:0e:6e:df:14:85:ef:f1:7e:ae:9b:ab:86:
d8:0a:cb:c7:81:03:c5:b0:4c:be:8e:f6:a5:49:1d:d2:39:f2:
f6:dd:f8:2c:f3:2f:1e:5c:76:ac:f7:c9:d1:77:71:3a:ef:7b:
c8:6c:f5:9e:ac:7e:48:c0:bb:b5:ba:f6:21:37:ed:00:45:0f:
ac:e5:23:91:3f:d1:1d:ca:52:f7:1e:e8:13:d4:96:5e:54:f3:
19:7e:83:2c:59:f0:38:9c:e9:17:24:57:80:43:cf:ac:54:6b:
6d:ca:1d:61:f0:ab:3f:c7:97:0a:8b:de:bc:5d:62:d2:11:d5:
28:0d:0a:5b:7e:52:31:a3:de:2b:e0:51:f0:22:08:43:19:1a:
24:0b:17:d2:c5:f3:b7:dc:db:6b:5d:c3:e4:e7:34:cd:7f:b1:
74:66:61:0f:ef:bc:bf:0a:4f:59:5d:51:bd:db:cd:24:b0:52:
31:d4:93:c7:ec:12:e1:65:01:f0:7d:c9:a7:15:f4:b9:96:af:
7b:42:85:4f:bd:73:e9:30:01:3b:f8:2b:59:e9:e3:c2:83:1d:
d4:4c:e1:ac:bc:9b:e3:b8:92:b6:6e:36:8a:52:c6:ab:90:41:
3f:9a:f6:c2:b8:9d:1c:68:8f:d1:18:4b:f9:46:72:d4:42:6e:
6c:2e:f8:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7j//h7ie8yJ8uIv14vu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh
YWNhN2IwHhcNMjUwNDIwMTYwMDQ0WhcNMjUwNDIxMTYwMDQ0WjAzMTEwLwYDVQQD
Eyg5ZGQxYzU3YWQ1YTMwMDY2NDVkZTZmNmE3MzIyYzEyNjViN2Y3MTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfHdedMf00/A88ORraDDaMppjmDe
TqVzGJ0erthfC4N1TVEzI02IBeLNSKTQg4mdpFcLQZ5tVORaHYpnFAxp7Xle/wYP
uyG3KMLWr/5o1qtgSnuJvf8ZyuXaaXFtTuWT5NroomBcwytdutNXOGImKRiqLQZG
8lUL4HLeR+UaSwZjka3GH59+4tgkeFfM0Dgd9VamQmFX1v5TH6h7X3ZrDfhDZ2JK
upI5eSVPvm1Dq6M3/+hibyl7sJMT8U13PLjgIfZaj0h3dU1mh0u16K81TbCYmW9C
QxFhwQ3WcPJ7SCwkz8clLSQJ113MuYxUUCqkDFC9jKyAH36pGgyHI+zfCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3RxXrVowBmRd5vanMiwSZbf3GAMB8GA1UdIwQY
MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt
ODFjOGNlNzUwMTI0LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0
LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIb07fPJH
Dm7fFIXv8X6um6uG2ArLx4EDxbBMvo72pUkd0jny9t34LPMvHlx2rPfJ0XdxOu97
yGz1nqx+SMC7tbr2ITftAEUPrOUjkT/RHcpS9x7oE9SWXlTzGX6DLFnwOJzpFyRX
gEPPrFRrbcodYfCrP8eXCovevF1i0hHVKA0KW35SMaPeK+BR8CIIQxkaJAsX0sXz
t9zba13D5Oc0zX+xdGZhD++8vwpPWV1RvdvNJLBSMdSTx+wS4WUB8H3JpxX0uZav
e0KFT71z6TABO/grWenjwoMd1EzhrLyb47iStm42ilLGq5BBP5r2wridHGiP0RhL
+UZy1EJubC74jQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:45:35 2025 by rpki-client