Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: N/t7MvMZ8BqeWSoEAX8kCIudrK9nil1+ez7wBGKF4zE=
Subject key identifier: 69:02:7C:3F:AC:82:E5:C7:78:4C:E9:C4:1C:13:F8:44:B1:3C:9B:EF
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 01959005C8DF5CBDE0108647F80F6612437A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 149C
Signing time: Thu 13 Mar 2025 15:00:52 +0000
Manifest this update: Thu 13 Mar 2025 15:00:52 +0000
Manifest next update: Fri 14 Mar 2025 15:00:52 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: ZCtlVeP84Gd4UFqLrltM4NW7CV7ZQLHBqpAR8sNM4+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:05:c8:df:5c:bd:e0:10:86:47:f8:0f:66:12:43:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Mar 13 15:00:52 2025 GMT
Not After : Mar 14 15:00:52 2025 GMT
Subject: CN=69027c3fac82e5c7784ce9c41c13f844b13c9bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:65:22:97:6d:d4:da:63:cf:e8:23:d4:8d:
aa:6f:69:cb:ed:0f:8e:32:1a:0d:21:e6:6e:9f:fb:
b9:48:90:d2:de:c6:09:ec:28:04:80:d5:6c:23:58:
57:f6:a9:32:58:17:2e:d3:8f:5d:8e:f9:2c:de:05:
d5:f8:17:82:d4:0e:b7:e7:54:81:b2:71:1b:66:73:
31:15:29:45:42:d3:df:4f:99:b1:e9:2d:23:7c:c1:
be:6d:c7:66:a6:c2:1b:9d:49:1d:b9:a8:6c:63:00:
c8:be:2f:95:d7:7b:56:4d:4a:78:f6:ed:38:70:28:
9a:99:3d:e2:ec:74:b4:59:d7:82:f3:8b:33:e8:a5:
76:4e:e4:bc:ff:db:78:49:c6:e0:55:33:6f:cc:36:
f8:96:52:8a:99:46:73:1b:9a:ab:b0:bf:6f:bd:85:
86:5c:9b:01:6e:55:2e:21:86:7e:37:f2:2a:5f:32:
29:62:83:6f:ae:14:1d:40:5f:3e:18:77:9b:c8:56:
18:dd:91:f4:cd:fe:b0:89:4d:d8:33:f7:fe:22:61:
d2:cc:5b:47:1c:36:16:2d:eb:8c:2a:67:e6:09:de:
50:46:3b:1d:be:93:13:d7:18:fd:38:16:3b:b9:2e:
1c:37:a2:18:cb:a4:96:c2:c6:52:69:2d:e0:e9:e9:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:02:7C:3F:AC:82:E5:C7:78:4C:E9:C4:1C:13:F8:44:B1:3C:9B:EF
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f1:cd:e6:ca:aa:2a:3f:89:c8:ca:2a:f1:28:03:c3:87:0d:
d4:73:96:9d:0f:3f:1f:95:7f:f8:bb:9a:5a:94:37:e9:03:cf:
af:06:b3:2b:54:f8:1c:36:61:f8:90:be:e4:95:f2:12:38:ed:
dc:8b:19:6b:7c:da:e5:f7:47:95:33:7a:a9:3f:98:ae:c8:9d:
b0:f8:80:46:30:12:3a:42:18:ba:78:fb:06:8b:59:ef:66:1f:
01:6d:72:7c:68:74:18:e4:42:d4:fa:b4:d9:a0:85:e6:f2:3b:
7e:82:6a:dd:86:7f:79:61:0e:58:f8:e6:8b:ab:c0:1d:f5:75:
f6:a3:e4:57:7f:88:3c:5f:37:71:b4:b6:07:6d:b2:9a:c3:a5:
00:f6:04:d4:9f:7b:61:44:78:ce:e0:b2:0a:27:71:01:e5:89:
fd:54:94:42:80:7d:32:6b:5a:f0:a1:05:0f:33:e8:d3:f9:82:
74:58:f6:91:4d:be:62:7d:ed:3c:c5:7a:d7:e5:1a:b2:0c:9a:
a1:5c:a4:d1:87:4a:b7:20:e8:c6:e8:eb:1d:26:63:d1:fe:cf:
0b:29:97:5a:ed:20:8b:98:04:09:4f:53:db:37:41:96:a5:c1:
90:7e:c6:0d:cb:54:80:26:dd:7d:b6:57:a2:cb:36:e2:e0:56:
6a:45:5d:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQBcjfXL3gEIZH+A9mEkN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzc4NDNmMDc1MjIyNDQ1OWU2MDM0NTY5YTIxN2M4YjYx
MTU2NGIwHhcNMjUwMzEzMTUwMDUyWhcNMjUwMzE0MTUwMDUyWjAzMTEwLwYDVQQD
Eyg2OTAyN2MzZmFjODJlNWM3Nzg0Y2U5YzQxYzEzZjg0NGIxM2M5YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOhlIpdt1Npjz+gj1I2qb2nL7Q+O
MhoNIeZun/u5SJDS3sYJ7CgEgNVsI1hX9qkyWBcu049djvks3gXV+BeC1A6351SB
snEbZnMxFSlFQtPfT5mx6S0jfMG+bcdmpsIbnUkduahsYwDIvi+V13tWTUp49u04
cCiamT3i7HS0WdeC84sz6KV2TuS8/9t4ScbgVTNvzDb4llKKmUZzG5qrsL9vvYWG
XJsBblUuIYZ+N/IqXzIpYoNvrhQdQF8+GHebyFYY3ZH0zf6wiU3YM/f+ImHSzFtH
HDYWLeuMKmfmCd5QRjsdvpMT1xj9OBY7uS4cN6IYy6SWwsZSaS3g6envtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkCfD+sguXHeEzpxBwT+ESxPJvvMB8GA1UdIwQY
MBaAFMo3hD8HUiJEWeYDRWmiF8i2EVZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUt
OGZlNzg0ZTMxZTVkLzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUtOGZlNzg0ZTMxZTVk
LzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPHN5sqq
Kj+JyMoq8SgDw4cN1HOWnQ8/H5V/+LuaWpQ36QPPrwazK1T4HDZh+JC+5JXyEjjt
3IsZa3za5fdHlTN6qT+YrsidsPiARjASOkIYunj7BotZ72YfAW1yfGh0GORC1Pq0
2aCF5vI7foJq3YZ/eWEOWPjmi6vAHfV19qPkV3+IPF83cbS2B22ymsOlAPYE1J97
YUR4zuCyCidxAeWJ/VSUQoB9Mmta8KEFDzPo0/mCdFj2kU2+Yn3tPMV61+Uasgya
oVyk0YdKtyDoxujrHSZj0f7PCymXWu0gi5gECU9T2zdBlqXBkH7GDctUgCbdfbZX
oss24uBWakVdlg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:17 2025 by rpki-client