Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: BBlOqKvJ+BmDYzU8Z0gmsOdFdIkNVe6TdgoSnZvm+Dw=
Subject key identifier: E8:DA:5B:85:E8:1F:B4:F8:86:EE:F6:4D:7B:A9:16:21:42:6E:8A:52
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 019649D832538FC0835C29868CE4DEB4F5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 0251
Signing time: Fri 18 Apr 2025 17:00:27 +0000
Manifest this update: Fri 18 Apr 2025 17:00:27 +0000
Manifest next update: Sat 19 Apr 2025 17:00:27 +0000
Files and hashes: 1: Rui0sD0wI3PFIXuSgFCUVWy-M9k.roa (hash: hbv5XThLS6CFQJgStPKrJAlPn/du5JdwcgW0fJRsYnU=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: qwO6ii4PAoCK++f99z9suufKzVj4B4dsdNlwtmO28Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:32:53:8f:c0:83:5c:29:86:8c:e4:de:b4:f5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Apr 18 17:00:27 2025 GMT
Not After : Apr 19 17:00:27 2025 GMT
Subject: CN=e8da5b85e81fb4f886eef64d7ba91621426e8a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:e3:91:62:cc:dd:cb:6a:50:49:d1:10:c0:
0b:2c:83:9b:cc:b5:cf:18:15:e2:2a:50:5e:d3:13:
48:2d:40:e0:74:ec:ad:bf:79:7a:d6:12:17:20:3c:
10:50:17:bc:52:41:9b:31:79:16:06:3b:cf:f9:0c:
82:69:df:15:0d:bb:42:55:d5:77:28:d7:b3:c8:c9:
1c:a4:93:14:bd:b1:cf:47:d1:45:eb:b1:55:2d:c6:
dc:1f:50:11:fc:a5:e0:bd:f5:b2:e4:f9:f8:cf:81:
5f:f8:db:34:a1:ca:5d:3a:ee:63:8c:d1:81:df:b8:
a5:43:b6:e1:aa:4b:c6:fb:f4:3d:82:98:2b:f3:24:
e5:92:f8:fe:03:d9:20:92:f5:ac:89:92:9a:c3:c7:
7b:06:b1:a2:67:43:8e:82:87:75:12:86:6f:fa:f5:
23:f1:1c:ce:7e:46:1f:c3:62:41:66:19:71:96:d8:
64:8b:a1:f2:16:3c:bd:d4:ff:9b:d0:4b:5a:73:bc:
59:19:83:bf:f4:8e:db:82:3c:96:4c:e6:18:97:c8:
4d:77:b8:70:ff:a7:2d:ec:23:c0:d8:9f:b1:22:0d:
9e:63:ba:a0:30:ad:42:ae:5c:03:de:30:cc:c4:a6:
6e:38:6a:8d:9f:34:63:2a:0a:7e:10:bb:4b:e5:6a:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DA:5B:85:E8:1F:B4:F8:86:EE:F6:4D:7B:A9:16:21:42:6E:8A:52
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:25:38:f9:65:6a:f5:55:07:68:2d:ae:dd:e6:91:f2:7c:13:
ed:bb:f6:a4:e2:9b:f4:a2:c8:84:76:0e:e0:4c:ab:81:fc:91:
83:7a:34:0d:41:e7:00:a3:b8:e9:b2:99:be:63:d5:27:b8:71:
5d:46:56:3d:92:ff:4b:22:77:0a:0b:e8:37:1e:65:b8:2c:a9:
75:d6:a9:51:26:8f:b1:2a:66:52:ba:c8:a7:74:92:97:28:fc:
d4:55:7f:f5:e9:f2:ad:06:4d:f6:b4:41:86:22:c2:65:e8:c4:
9d:8a:d9:a8:17:fa:14:7f:6b:88:42:bb:50:c9:ca:73:00:01:
9d:6f:86:c4:9c:3e:f8:6c:4e:86:35:0a:5f:00:b8:a9:2c:f2:
ca:bf:97:3f:86:98:5b:e9:41:63:44:44:8e:76:80:ef:d5:73:
c5:d0:02:dc:b1:49:c7:8a:c0:15:a2:74:28:6b:3e:0b:82:8b:
fc:d2:d1:c7:fa:a7:e6:a4:a5:fd:19:bd:a6:94:61:2b:79:da:
48:7a:41:fc:0a:51:1f:f2:d2:5e:13:74:31:c0:ff:ae:d7:53:
6b:1c:72:67:3e:ec:ce:3e:fb:a5:fc:10:e8:77:83:26:ed:82:
f0:80:fd:a2:b2:62:82:9b:05:d5:15:ad:92:9a:bd:5e:aa:cc:
97:91:11:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJ2DJTj8CDXCmGjOTetPXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzlhMTU1MGQzZGIxYWMwYWViMTFjMTZkNjNlNDhhNjgz
YmNhMDMwHhcNMjUwNDE4MTcwMDI3WhcNMjUwNDE5MTcwMDI3WjAzMTEwLwYDVQQD
EyhlOGRhNWI4NWU4MWZiNGY4ODZlZWY2NGQ3YmE5MTYyMTQyNmU4YTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMTjkWLM3ctqUEnREMALLIObzLXP
GBXiKlBe0xNILUDgdOytv3l61hIXIDwQUBe8UkGbMXkWBjvP+QyCad8VDbtCVdV3
KNezyMkcpJMUvbHPR9FF67FVLcbcH1AR/KXgvfWy5Pn4z4Ff+Ns0ocpdOu5jjNGB
37ilQ7bhqkvG+/Q9gpgr8yTlkvj+A9kgkvWsiZKaw8d7BrGiZ0OOgod1EoZv+vUj
8RzOfkYfw2JBZhlxlthki6HyFjy91P+b0Etac7xZGYO/9I7bgjyWTOYYl8hNd7hw
/6ct7CPA2J+xIg2eY7qgMK1CrlwD3jDMxKZuOGqNnzRjKgp+ELtL5WoqGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjaW4XoH7T4hu72TXupFiFCbopSMB8GA1UdIwQY
MBaAFMrJoVUNPbGsCusRwW1j5IpoO8oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83NDI0YzUtMmM5OS00OTUyLTg2ZTct
MDczZmI4M2FiZmM2LzEveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83NDI0YzUtMmM5OS00OTUyLTg2ZTctMDczZmI4M2FiZmM2
LzEveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiU4+WVq
9VUHaC2u3eaR8nwT7bv2pOKb9KLIhHYO4EyrgfyRg3o0DUHnAKO46bKZvmPVJ7hx
XUZWPZL/SyJ3CgvoNx5luCypddapUSaPsSpmUrrIp3SSlyj81FV/9enyrQZN9rRB
hiLCZejEnYrZqBf6FH9riEK7UMnKcwABnW+GxJw++GxOhjUKXwC4qSzyyr+XP4aY
W+lBY0REjnaA79VzxdAC3LFJx4rAFaJ0KGs+C4KL/NLRx/qn5qSl/Rm9ppRhK3na
SHpB/ApRH/LSXhN0McD/rtdTaxxyZz7szj77pfwQ6HeDJu2C8ID9orJigpsF1RWt
kpq9XqrMl5EReQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:41:09 2025 by rpki-client