Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier: D2qApLuWJnS84rDZJ1pyi3bzzSi0UcMcoMDHE8rR8PI=
Subject key identifier: 32:A7:C3:5E:1F:EE:EE:DF:A8:4D:49:E8:C6:1C:34:0D:1C:B4:36:57
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 019612B3B49D3019DC0F0502CA8DB9DAA7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number: 14DE
Signing time: Tue 08 Apr 2025 00:01:29 +0000
Manifest this update: Tue 08 Apr 2025 00:01:29 +0000
Manifest next update: Wed 09 Apr 2025 00:01:29 +0000
Files and hashes: 1: dUXiZWgEMzgw5vFZ8qDaH6XmlYU.roa (hash: M6xcVpwF4WkFbvgKn4KRPQKsmRd0Zva6dQ1TxO+Djpg=)
2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: wQ9pSb3TloDILbiRTzFaY/7Bgy/FZNzZWoGwg4JX/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:b3:b4:9d:30:19:dc:0f:05:02:ca:8d:b9:da:a7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Apr 8 00:01:29 2025 GMT
Not After : Apr 9 00:01:29 2025 GMT
Subject: CN=32a7c35e1feeeedfa84d49e8c61c340d1cb43657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:52:53:60:e1:9a:af:c0:45:2f:d5:ad:bd:
78:7c:e8:42:1b:9f:f3:bd:d5:be:25:3e:b2:bb:df:
d0:ca:96:a6:3d:3a:17:58:de:a4:17:7b:00:8a:83:
d4:56:20:8b:53:c4:33:08:5b:3b:d2:e7:60:5f:96:
bd:45:24:31:b4:c4:35:a0:de:06:87:85:c4:44:d9:
34:92:7a:b7:97:f2:dc:d2:64:6d:51:8b:8f:65:b9:
20:63:34:e3:3f:97:a5:b5:cb:49:a3:a3:36:a5:4c:
a7:10:bc:bf:d1:ca:8a:8e:a1:12:07:3a:63:ef:11:
20:4a:52:74:1e:e2:53:c0:13:13:91:b4:b2:c3:9c:
65:3c:8f:d5:61:6a:80:1b:c0:45:b8:07:7c:6d:5a:
08:40:22:23:e4:09:7c:4a:e9:e7:49:0a:1a:48:31:
62:9d:c2:ee:ab:5b:51:14:dc:58:27:5e:ee:24:96:
7c:a0:d7:c9:8c:5d:ff:ae:8b:ef:df:8c:43:08:31:
79:c1:c9:2a:71:dc:71:87:c1:54:05:98:ec:9b:aa:
1b:4c:a3:79:73:29:27:8e:97:41:8b:e1:91:60:67:
f2:bb:22:16:f6:56:6a:c5:70:be:ec:fd:cf:1a:b2:
c3:b8:82:e8:e1:0c:a6:20:b4:6d:78:38:f5:d2:30:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A7:C3:5E:1F:EE:EE:DF:A8:4D:49:E8:C6:1C:34:0D:1C:B4:36:57
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:31:65:5c:23:08:ba:04:f0:7b:cf:a4:af:e9:f8:57:31:9e:
ec:7f:a7:be:21:de:14:9f:e4:eb:a1:18:da:68:9b:04:29:f2:
11:ce:9e:0d:b4:76:31:ed:e1:25:b2:dd:a7:5d:d3:31:f9:ae:
3f:5e:cd:45:f5:94:c7:a4:21:ed:fd:b5:2c:17:28:89:59:64:
bd:04:3d:81:50:07:08:04:4b:1d:94:7e:3d:c5:85:dc:ed:8b:
35:8d:72:bc:18:9f:27:54:37:45:a4:2e:95:b3:1b:4a:4c:d9:
e5:51:c1:c5:93:6d:f0:9f:15:a9:5b:fb:44:1c:68:cf:0a:63:
e6:5b:d6:a3:6e:1a:e9:9e:cd:55:a5:fc:f8:1a:d8:38:70:9a:
03:bc:47:b8:b1:c9:c8:96:0f:39:de:02:4e:3d:71:08:6a:b2:
42:1b:dc:67:d2:76:c6:1c:03:a5:03:6f:5b:6f:06:e2:1a:3c:
39:01:60:72:96:88:91:8f:50:b0:22:0e:15:b5:e5:fd:98:8a:
34:75:9c:55:da:cc:4f:be:c5:ce:87:53:1c:45:4b:2a:32:c4:
f5:b9:5c:1d:63:62:3a:e8:3a:d4:89:d9:59:62:fd:b2:01:9b:
6c:83:c9:ee:28:94:80:8d:20:5d:ff:94:a6:eb:1d:65:2e:eb:
ab:c0:22:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSs7SdMBncDwUCyo252qfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDk0MmQ5NmVlOTRhN2E1YTY1MmVmN2FjODU1ZGM5NDAx
NDE1ZGYwHhcNMjUwNDA4MDAwMTI5WhcNMjUwNDA5MDAwMTI5WjAzMTEwLwYDVQQD
EygzMmE3YzM1ZTFmZWVlZWRmYTg0ZDQ5ZThjNjFjMzQwZDFjYjQzNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJpSU2Dhmq/ARS/Vrb14fOhCG5/z
vdW+JT6yu9/QypamPToXWN6kF3sAioPUViCLU8QzCFs70udgX5a9RSQxtMQ1oN4G
h4XERNk0knq3l/Lc0mRtUYuPZbkgYzTjP5eltctJo6M2pUynELy/0cqKjqESBzpj
7xEgSlJ0HuJTwBMTkbSyw5xlPI/VYWqAG8BFuAd8bVoIQCIj5Al8SunnSQoaSDFi
ncLuq1tRFNxYJ17uJJZ8oNfJjF3/rovv34xDCDF5wckqcdxxh8FUBZjsm6obTKN5
cyknjpdBi+GRYGfyuyIW9lZqxXC+7P3PGrLDuILo4QymILRteDj10jBsEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKnw14f7u7fqE1J6MYcNA0ctDZXMB8GA1UdIwQY
MBaAFMvZQtlu6Up6WmUu96yFXclAFBXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEt
YzZmNmQ0NDQ5MTVmLzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEtYzZmNmQ0NDQ5MTVm
LzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTFlXCMI
ugTwe8+kr+n4VzGe7H+nviHeFJ/k66EY2mibBCnyEc6eDbR2Me3hJbLdp13TMfmu
P17NRfWUx6Qh7f21LBcoiVlkvQQ9gVAHCARLHZR+PcWF3O2LNY1yvBifJ1Q3RaQu
lbMbSkzZ5VHBxZNt8J8VqVv7RBxozwpj5lvWo24a6Z7NVaX8+BrYOHCaA7xHuLHJ
yJYPOd4CTj1xCGqyQhvcZ9J2xhwDpQNvW28G4ho8OQFgcpaIkY9QsCIOFbXl/ZiK
NHWcVdrMT77FzodTHEVLKjLE9blcHWNiOug61InZWWL9sgGbbIPJ7iiUgI0gXf+U
pusdZS7rq8Ai0g==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:20:41 2025 by rpki-client