Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: usBDQXDnXzdzsrb3q36G3xvZFY6wgmkOhOB/nElKN/w=
Subject key identifier: C6:4C:02:2A:16:95:B6:32:F7:F7:56:30:71:03:47:86:30:4F:48:DE
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 01965D5F492EC647C96A236CD7770FDBD254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 1108
Signing time: Tue 22 Apr 2025 12:00:47 +0000
Manifest this update: Tue 22 Apr 2025 12:00:47 +0000
Manifest next update: Wed 23 Apr 2025 12:00:47 +0000
Files and hashes: 1: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: mdDrDfY8OQWRtL1nJ2mqXRwPtS9VPVTf4i5ZDho1AXM=)
2: yueP6aik06BPwcnmsnEIlj3ek5g.roa (hash: ouDcttk3dQ7QbY0vNsL4yJQH9X2H2u4pj98A+2ZbC4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:49:2e:c6:47:c9:6a:23:6c:d7:77:0f:db:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Apr 22 12:00:47 2025 GMT
Not After : Apr 23 12:00:47 2025 GMT
Subject: CN=c64c022a1695b632f7f7563071034786304f48de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:97:1b:38:2b:b0:8d:1e:f3:40:58:91:f0:
30:fc:5c:59:49:29:c0:04:5c:71:a8:83:42:de:a7:
bf:91:dd:59:e1:b3:87:cb:0f:bd:c2:53:8f:5d:b6:
e9:ea:47:ba:57:9e:58:17:78:22:0e:42:fb:b9:23:
a8:1c:8e:d1:b7:88:00:7b:67:74:e8:33:8d:29:e2:
75:fe:a4:c2:ed:c2:23:82:59:ad:fc:2b:fe:e3:33:
0a:b8:01:af:0e:a6:6d:43:b0:89:6e:94:5c:9f:66:
7b:28:9f:6a:ae:46:29:fc:e3:8a:99:72:2f:73:44:
91:16:fb:fa:f4:f7:55:39:9f:8d:2f:8c:93:db:ac:
ad:79:bc:40:f1:5e:30:84:05:cc:b7:29:4d:06:90:
ad:a6:c1:f5:af:33:95:34:62:55:7a:97:ce:11:ed:
3a:75:65:3d:6a:20:a8:3a:cf:47:ae:a1:e2:7e:7a:
77:df:e2:d5:7a:5e:5c:0e:6a:ed:da:58:01:2c:a6:
6f:85:58:ab:c5:02:33:8c:32:1c:e4:08:3b:ac:30:
66:3c:a3:93:bb:2c:ff:35:04:0d:5f:30:48:9d:3f:
ad:bd:84:46:19:de:37:72:a9:0c:47:1b:90:78:fa:
01:2e:d1:88:76:c6:48:f1:7d:68:cf:dd:97:1e:49:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4C:02:2A:16:95:B6:32:F7:F7:56:30:71:03:47:86:30:4F:48:DE
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fd:e7:0f:f1:c4:7f:ff:a4:f6:87:15:39:1c:d9:6d:a3:40:
02:e4:05:53:27:28:b8:9b:8f:c3:e6:68:11:03:ad:3c:25:3a:
04:0d:b0:89:6b:bd:4c:59:eb:e9:10:b7:4c:56:17:e2:84:49:
1d:b9:73:88:8d:1c:eb:4e:21:01:64:c5:e4:24:bc:c9:6e:2a:
a5:7d:7e:2c:16:fc:93:b3:77:f6:2e:a4:f6:0b:fa:51:37:53:
2c:2a:c5:80:08:df:a1:2e:33:94:25:d2:f9:f0:70:00:95:03:
63:2b:88:83:7a:ae:6a:5d:c2:56:e0:c0:46:81:da:c9:3b:eb:
dc:28:3a:09:6e:63:27:70:58:ae:36:be:e8:c9:bb:f6:7a:07:
ef:5b:bd:07:26:a7:3d:38:61:74:eb:b3:85:08:41:a2:6c:05:
50:58:72:24:bc:0d:e9:d7:d0:c4:af:d1:97:72:5f:6e:c2:b9:
c4:d1:d4:da:0f:f1:62:d3:89:b0:8c:5e:15:2d:4b:3b:86:ca:
63:94:0c:62:26:78:bb:09:2b:49:0f:16:ed:b3:08:16:b5:69:
a8:97:00:94:cc:34:a5:d2:49:7f:54:6e:08:00:5e:ba:35:fd:
d6:52:e3:7a:11:58:26:b7:0d:ff:c7:23:57:fb:2a:0d:da:5f:
79:60:15:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdX0kuxkfJaiNs13cP29JUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzYzYzUyNGU1NWRmMzRiZjc1ODI4Mjc3NTNlNzdhNzY5
OWM3YTIwHhcNMjUwNDIyMTIwMDQ3WhcNMjUwNDIzMTIwMDQ3WjAzMTEwLwYDVQQD
EyhjNjRjMDIyYTE2OTViNjMyZjdmNzU2MzA3MTAzNDc4NjMwNGY0OGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKyXGzgrsI0e80BYkfAw/FxZSSnA
BFxxqINC3qe/kd1Z4bOHyw+9wlOPXbbp6ke6V55YF3giDkL7uSOoHI7Rt4gAe2d0
6DONKeJ1/qTC7cIjglmt/Cv+4zMKuAGvDqZtQ7CJbpRcn2Z7KJ9qrkYp/OOKmXIv
c0SRFvv69PdVOZ+NL4yT26ytebxA8V4whAXMtylNBpCtpsH1rzOVNGJVepfOEe06
dWU9aiCoOs9HrqHifnp33+LVel5cDmrt2lgBLKZvhVirxQIzjDIc5Ag7rDBmPKOT
uyz/NQQNXzBInT+tvYRGGd43cqkMRxuQePoBLtGIdsZI8X1oz92XHkm49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZMAioWlbYy9/dWMHEDR4YwT0jeMB8GA1UdIwQY
MBaAFP7GPFJOVd80v3WCgndT53p2mceiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDIt
YjMxZGY3MTE3NzE1LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDItYjMxZGY3MTE3NzE1
LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf3nD/HE
f/+k9ocVORzZbaNAAuQFUycouJuPw+ZoEQOtPCU6BA2wiWu9TFnr6RC3TFYX4oRJ
HblziI0c604hAWTF5CS8yW4qpX1+LBb8k7N39i6k9gv6UTdTLCrFgAjfoS4zlCXS
+fBwAJUDYyuIg3qual3CVuDARoHayTvr3Cg6CW5jJ3BYrja+6Mm79noH71u9Byan
PThhdOuzhQhBomwFUFhyJLwN6dfQxK/Rl3JfbsK5xNHU2g/xYtOJsIxeFS1LO4bK
Y5QMYiZ4uwkrSQ8W7bMIFrVpqJcAlMw0pdJJf1RuCABeujX91lLjehFYJrcN/8cj
V/sqDdpfeWAVfg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:54 2025 by rpki-client