Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: BYtrGwjKqO/Msy08ON6elZNeBSZ34OV/xNYqCN1ap7w=
Subject key identifier: 5F:CE:1F:4F:E3:BE:D3:20:50:FF:6C:6E:C4:5E:05:83:E0:F6:2B:D0
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 019635E3716211E63AA17A5D21DE80D6BC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 14F0
Signing time: Mon 14 Apr 2025 20:00:20 +0000
Manifest this update: Mon 14 Apr 2025 20:00:20 +0000
Manifest next update: Tue 15 Apr 2025 20:00:20 +0000
Files and hashes: 1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: a8TmUB/FF1rPxyNNXqZ0t9pioF3iTEZEL/p9i1tKCqA=)
2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:e3:71:62:11:e6:3a:a1:7a:5d:21:de:80:d6:bc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Apr 14 20:00:20 2025 GMT
Not After : Apr 15 20:00:20 2025 GMT
Subject: CN=5fce1f4fe3bed32050ff6c6ec45e0583e0f62bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:15:83:4b:19:b7:4c:3e:f6:ef:21:5f:68:
d6:db:c0:7b:ff:1d:48:51:8d:7c:35:07:00:28:f8:
5e:1f:fa:25:a8:42:c3:0b:8f:04:22:1d:7f:14:fd:
0c:7f:3b:5f:cf:87:e4:9c:ba:54:10:0b:9b:c0:eb:
6a:54:67:16:70:21:9f:5d:22:48:f7:e4:ba:b9:a5:
68:20:d5:5a:ac:5d:ae:d4:20:29:ff:ba:88:c4:32:
80:b6:75:e1:6f:7d:6e:e3:3f:df:34:e5:8b:bb:0f:
01:cf:9d:d6:f0:3a:35:dd:73:8f:a5:c9:8f:40:fd:
c6:05:31:72:c8:9d:f0:08:af:76:e3:e7:a5:8a:92:
01:35:47:da:d4:98:35:f0:ce:0c:8c:d7:94:97:a7:
bf:ef:dc:a4:1c:34:88:38:ba:a1:dc:c8:a4:79:d6:
78:3b:29:f1:bd:05:5d:9a:06:01:91:74:d3:da:75:
25:05:28:aa:29:a3:0b:e7:b1:1c:25:9f:95:84:7a:
ae:ba:87:a0:48:03:29:4c:2b:d1:e8:9b:8a:a6:06:
b6:25:d5:ea:6c:e0:9d:84:97:66:16:cf:70:56:9d:
32:7d:99:2d:62:9a:7e:ba:04:9a:a8:37:97:d8:46:
ef:83:10:28:b7:4a:43:db:32:b6:27:f3:95:5c:a7:
6f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CE:1F:4F:E3:BE:D3:20:50:FF:6C:6E:C4:5E:05:83:E0:F6:2B:D0
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c6:17:0d:55:3e:5c:37:2b:41:a6:d9:89:41:a9:89:78:a8:
32:99:d9:45:9c:58:b7:fc:8f:86:08:f4:72:42:a3:0c:89:af:
2b:e5:8e:a3:0d:4b:5c:0a:18:ee:ef:2d:8c:f7:93:09:b6:e5:
70:c7:9d:e2:9e:d4:5a:42:4b:13:a5:d1:be:47:f4:b5:49:07:
d6:8d:1f:7a:2d:8e:16:75:ac:7a:93:0c:3d:22:77:8b:da:b8:
15:e2:2d:b2:1b:21:e8:5f:e7:5f:51:3b:28:1d:83:12:b2:49:
28:16:48:28:53:0d:29:94:ac:7a:b6:0f:12:90:89:72:31:8c:
7f:65:ba:28:3b:2d:1f:67:d1:70:1f:5f:5e:5a:92:d4:ce:c0:
19:84:1c:10:96:af:eb:ad:48:e8:ad:a2:b2:32:b2:51:de:de:
d8:3c:df:fe:89:bd:50:49:85:6d:f4:87:33:b4:03:85:82:1a:
d3:66:fa:85:75:e9:a1:5e:f1:a6:60:ee:25:b7:a5:65:5d:47:
15:de:18:1c:f4:d0:0f:ce:60:4c:91:94:8e:2f:84:0e:40:9b:
7e:ec:30:be:71:19:d4:4c:09:96:74:ea:fb:75:04:74:9e:9d:
8b:49:3f:61:23:53:6c:49:02:ba:62:4b:c2:72:5a:88:06:b3:
d9:54:99:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY143FiEeY6oXpdId6A1rw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMWFjYTVmOWExZGNmYTE5NzA0ZDFmMDM3N2YxYjlmZTkx
NDVlMDgwHhcNMjUwNDE0MjAwMDIwWhcNMjUwNDE1MjAwMDIwWjAzMTEwLwYDVQQD
Eyg1ZmNlMWY0ZmUzYmVkMzIwNTBmZjZjNmVjNDVlMDU4M2UwZjYyYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDwVg0sZt0w+9u8hX2jW28B7/x1I
UY18NQcAKPheH/olqELDC48EIh1/FP0Mfztfz4fknLpUEAubwOtqVGcWcCGfXSJI
9+S6uaVoINVarF2u1CAp/7qIxDKAtnXhb31u4z/fNOWLuw8Bz53W8Do13XOPpcmP
QP3GBTFyyJ3wCK924+elipIBNUfa1Jg18M4MjNeUl6e/79ykHDSIOLqh3MikedZ4
OynxvQVdmgYBkXTT2nUlBSiqKaML57EcJZ+VhHquuoegSAMpTCvR6JuKpga2JdXq
bOCdhJdmFs9wVp0yfZktYpp+ugSaqDeX2EbvgxAot0pD2zK2J/OVXKdvWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/OH0/jvtMgUP9sbsReBYPg9ivQMB8GA1UdIwQY
MBaAFGMayl+aHc+hlwTR8Dd/G5/pFF4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTkt
ZDJiMDJhNDAzYzdiLzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTktZDJiMDJhNDAzYzdi
LzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcYXDVU+
XDcrQabZiUGpiXioMpnZRZxYt/yPhgj0ckKjDImvK+WOow1LXAoY7u8tjPeTCbbl
cMed4p7UWkJLE6XRvkf0tUkH1o0fei2OFnWsepMMPSJ3i9q4FeItshsh6F/nX1E7
KB2DErJJKBZIKFMNKZSserYPEpCJcjGMf2W6KDstH2fRcB9fXlqS1M7AGYQcEJav
661I6K2isjKyUd7e2Dzf/om9UEmFbfSHM7QDhYIa02b6hXXpoV7xpmDuJbelZV1H
Fd4YHPTQD85gTJGUji+EDkCbfuwwvnEZ1EwJlnTq+3UEdJ6di0k/YSNTbEkCumJL
wnJaiAaz2VSZIg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 07:20:24 2025 by rpki-client