Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier: P/bNyIvRcWZeINSXh8hm5PKQcMbMCab9gkIqXFRc24M=
Subject key identifier: 0C:D9:02:8E:C0:42:53:43:7E:E6:6B:61:AB:B6:D4:3E:C1:1B:87:4E
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial: 01962C3C7830E4B2F6C646814AB0FC0466DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number: 044A
Signing time: Sat 12 Apr 2025 23:01:22 +0000
Manifest this update: Sat 12 Apr 2025 23:01:22 +0000
Manifest next update: Sun 13 Apr 2025 23:01:22 +0000
Files and hashes: 1: qeRkAxuKV7jDoBRtnwhgHvVO2oU.roa (hash: AbAyYkMckXNzAm/R63UZOCSEewsBDfH65FR66tVjq2s=)
2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: 0+eIvZQAaFc48u8VK6kwyFEAGnKhWVmW3ERfq8BC8WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:3c:78:30:e4:b2:f6:c6:46:81:4a:b0:fc:04:66:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Validity
Not Before: Apr 12 23:01:22 2025 GMT
Not After : Apr 13 23:01:22 2025 GMT
Subject: CN=0cd9028ec04253437ee66b61abb6d43ec11b874e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8f:19:32:3f:03:28:89:25:e5:49:c2:20:33:
64:22:6e:e2:5d:4e:72:bf:b8:b4:74:2a:4d:f5:b2:
c0:2a:22:f7:60:c8:7e:b4:8f:d5:7a:1e:6e:af:a5:
64:e3:37:02:a9:9d:fe:97:d1:30:b2:17:76:29:9f:
71:3c:1d:c9:c3:87:df:d7:c4:48:c9:bd:50:b3:36:
fe:e3:60:24:0f:0c:d8:2d:36:a8:c0:a3:5a:1e:83:
da:a2:42:81:08:8e:e7:06:38:0d:1b:64:63:dd:a6:
db:36:b3:0e:82:49:56:d2:6d:c3:d4:9d:9e:68:09:
3a:6f:1d:13:38:f9:7a:e7:6a:e4:e6:32:06:9f:1f:
cc:c8:77:c7:e2:18:9d:bb:b9:b3:fa:dd:7c:95:62:
06:83:ee:21:c9:8a:e1:78:62:e3:90:e1:f0:a4:cf:
81:79:7a:09:0e:62:b6:7b:3f:e7:73:89:4c:b6:0f:
73:ac:c8:e8:f3:d9:6a:e4:0e:10:d2:3f:62:b1:36:
b9:1b:75:75:12:02:5d:83:cc:00:67:82:1d:9b:47:
51:f1:6d:c8:c8:95:21:19:39:a3:39:47:39:78:eb:
11:f8:62:b2:35:55:c8:00:ae:3f:f1:e7:ed:34:91:
2a:b0:da:13:94:da:94:e3:0a:2c:30:da:29:79:db:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D9:02:8E:C0:42:53:43:7E:E6:6B:61:AB:B6:D4:3E:C1:1B:87:4E
X509v3 Authority Key Identifier:
keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:09:4e:a6:36:fe:fb:d6:27:de:92:06:5f:83:32:51:2b:69:
57:31:11:6f:b3:2e:65:5e:40:2d:f6:15:64:cf:cb:62:f6:8e:
74:f2:f5:90:4a:20:f3:aa:7c:66:52:04:84:a9:66:a6:2f:0a:
42:45:eb:0d:d2:06:99:35:20:a2:0a:92:c4:88:39:08:f8:c0:
d4:20:31:2a:50:f2:8a:e6:4d:28:6e:f2:9d:b9:96:e4:cd:6e:
c3:17:36:05:2e:c1:e4:96:95:43:70:72:57:6f:12:1c:7d:44:
5b:5d:86:79:f2:6e:bc:d4:cb:6c:95:14:5c:a2:7a:c1:57:e6:
a0:1a:7c:9d:4b:65:94:0f:a4:02:2b:9b:02:92:e2:e4:75:e9:
12:f5:ab:6e:e1:5b:28:9c:b2:de:fb:5d:26:eb:1a:83:f3:83:
eb:e1:18:2a:cf:24:82:d4:b0:7c:3a:9a:cd:ec:70:ec:0b:d5:
26:18:30:3c:20:2f:94:7e:36:e9:7e:f6:0e:88:fb:cb:09:c7:
6e:23:25:39:0d:65:3d:b5:89:16:56:ec:bc:d5:9e:c8:42:0e:
7d:09:06:59:a8:f7:5a:d7:e4:88:cc:9a:01:3b:5f:7c:0a:4b:
71:ba:4d:94:03:c2:14:47:39:36:6e:f6:09:76:fc:22:23:e4:
0f:74:a9:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYsPHgw5LL2xkaBSrD8BGbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDAwZDQ4MDMyZDEyOWQ5NGJkMDhlZDI3MTdhOWExZjRj
ZjJmNGIwHhcNMjUwNDEyMjMwMTIyWhcNMjUwNDEzMjMwMTIyWjAzMTEwLwYDVQQD
EygwY2Q5MDI4ZWMwNDI1MzQzN2VlNjZiNjFhYmI2ZDQzZWMxMWI4NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY8ZMj8DKIkl5UnCIDNkIm7iXU5y
v7i0dCpN9bLAKiL3YMh+tI/Veh5ur6Vk4zcCqZ3+l9Ewshd2KZ9xPB3Jw4ff18RI
yb1Qszb+42AkDwzYLTaowKNaHoPaokKBCI7nBjgNG2Rj3abbNrMOgklW0m3D1J2e
aAk6bx0TOPl652rk5jIGnx/MyHfH4hidu7mz+t18lWIGg+4hyYrheGLjkOHwpM+B
eXoJDmK2ez/nc4lMtg9zrMjo89lq5A4Q0j9isTa5G3V1EgJdg8wAZ4Idm0dR8W3I
yJUhGTmjOUc5eOsR+GKyNVXIAK4/8eftNJEqsNoTlNqU4wosMNopeduG7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzZAo7AQlNDfuZrYau21D7BG4dOMB8GA1UdIwQY
MBaAFMtADUgDLRKdlL0I7ScXqaH0zy9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUt
NzJjYjZiYWU0YTNkLzEveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUtNzJjYjZiYWU0YTNk
LzEveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAlOpjb+
+9Yn3pIGX4MyUStpVzERb7MuZV5ALfYVZM/LYvaOdPL1kEog86p8ZlIEhKlmpi8K
QkXrDdIGmTUgogqSxIg5CPjA1CAxKlDyiuZNKG7ynbmW5M1uwxc2BS7B5JaVQ3By
V28SHH1EW12GefJuvNTLbJUUXKJ6wVfmoBp8nUtllA+kAiubApLi5HXpEvWrbuFb
KJyy3vtdJusag/OD6+EYKs8kgtSwfDqazexw7AvVJhgwPCAvlH426X72Doj7ywnH
biMlOQ1lPbWJFlbsvNWeyEIOfQkGWaj3WtfkiMyaATtffApLcbpNlAPCFEc5Nm72
CXb8IiPkD3SpWg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:46:17 2025 by rpki-client