Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: tEaJrB5QiqWQCPy4J43Ef8/5fVYD3q9O6O8oi7CTqOs=
Subject key identifier: 86:AD:D1:1A:82:0C:24:2E:EE:F7:A9:BB:1C:2C:29:EE:F4:FB:BC:92
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 01965424AB1739DDDA49E31389957986A13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 0C8C
Signing time: Sun 20 Apr 2025 17:00:11 +0000
Manifest this update: Sun 20 Apr 2025 17:00:11 +0000
Manifest next update: Mon 21 Apr 2025 17:00:11 +0000
Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: XHj9E7waIki6MIFFIbliVH/GuHZblwbsSBvCyQZMBL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:ab:17:39:dd:da:49:e3:13:89:95:79:86:a1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Apr 20 17:00:11 2025 GMT
Not After : Apr 21 17:00:11 2025 GMT
Subject: CN=86add11a820c242eeef7a9bb1c2c29eef4fbbc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:23:de:a0:12:c0:42:df:9d:21:e1:c4:7b:
c8:1a:2b:3f:ab:2b:d0:b5:cc:b0:9e:ee:80:9c:83:
b8:71:43:bd:c3:c0:63:db:21:da:18:6a:26:fc:8d:
35:f1:08:8c:1f:1a:b4:3a:e3:e8:64:23:9e:f8:2f:
12:b1:e9:9a:22:8a:d5:80:03:a5:c3:f1:21:cb:db:
40:6a:bd:f3:5e:6e:d7:04:d9:ac:d0:02:93:f2:b3:
e5:65:96:58:fe:33:d8:38:95:e7:5b:2e:76:86:72:
6e:64:71:af:37:85:2b:b8:7f:a0:68:71:ea:ce:25:
99:ac:f2:1a:f3:14:ee:cc:65:b1:20:ee:a0:d4:2d:
f4:44:68:fd:23:a6:05:d0:d5:47:4b:db:da:12:07:
bd:54:ff:ed:9d:08:2b:dd:59:54:d0:f7:72:bd:16:
a1:a4:65:69:c3:66:1f:fc:6a:7e:e7:e6:19:5a:7d:
ca:41:8a:9d:f8:01:4e:be:1f:48:b0:e8:88:ac:4c:
6d:f4:30:14:1b:72:c4:a1:d2:e4:6e:28:92:61:d8:
19:ff:54:b3:74:08:c0:40:07:75:d2:83:22:cb:86:
44:d0:cf:5a:29:1e:00:9c:9d:ca:0d:19:66:ab:2e:
74:f2:c9:77:25:6e:8e:cf:1a:3e:6b:04:a0:65:3c:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AD:D1:1A:82:0C:24:2E:EE:F7:A9:BB:1C:2C:29:EE:F4:FB:BC:92
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ac:fa:f1:6e:8f:02:1c:be:07:f8:87:7e:f4:22:4f:bb:63:
45:b7:14:37:1d:16:ee:bb:2c:94:f7:ba:29:2a:41:73:7a:e1:
cd:97:6a:3a:bb:91:2a:ad:69:73:e6:92:9d:b7:d6:41:cb:84:
27:fc:a5:dd:61:34:86:ba:1e:c3:0a:a9:fb:08:ea:7f:40:65:
e4:08:77:19:25:3f:83:0a:aa:f5:09:92:75:9e:9b:33:26:c8:
88:9d:23:06:cf:59:64:ec:2f:90:83:51:27:ef:a9:c8:65:64:
f8:7b:d3:43:fb:f4:35:0e:77:61:24:14:a3:b9:4c:e8:31:f4:
10:6b:27:04:32:25:34:6f:81:02:d8:26:00:2e:39:f7:23:63:
8f:b3:81:2a:d8:e5:81:0b:fc:c2:01:e3:24:e2:04:1f:e5:88:
6f:fe:0c:df:4e:01:c2:85:56:ad:2b:e0:ff:4b:9e:62:30:3a:
79:b5:46:0f:6b:64:da:bd:2c:e8:8a:c8:76:c3:20:c6:8e:8e:
8f:5d:e1:b9:9c:2f:40:32:2e:4d:c0:cb:08:47:1a:0a:25:79:
71:4e:dd:1c:e8:45:10:bc:88:6e:07:94:84:dd:ae:40:44:86:
5a:c5:3b:26:7f:67:61:ca:78:fc:d7:0f:63:26:13:6b:51:d7:
81:59:3f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJKsXOd3aSeMTiZV5hqE/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzAyYTI3M2FiNGVmMjVhOGVhOTFhNGEzNzc5YmNmN2Qx
ZGU1OWIwHhcNMjUwNDIwMTcwMDExWhcNMjUwNDIxMTcwMDExWjAzMTEwLwYDVQQD
Eyg4NmFkZDExYTgyMGMyNDJlZWVmN2E5YmIxYzJjMjllZWY0ZmJiYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44oj3qASwELfnSHhxHvIGis/qyvQ
tcywnu6AnIO4cUO9w8Bj2yHaGGom/I018QiMHxq0OuPoZCOe+C8SsemaIorVgAOl
w/Ehy9tAar3zXm7XBNms0AKT8rPlZZZY/jPYOJXnWy52hnJuZHGvN4UruH+gaHHq
ziWZrPIa8xTuzGWxIO6g1C30RGj9I6YF0NVHS9vaEge9VP/tnQgr3VlU0PdyvRah
pGVpw2Yf/Gp+5+YZWn3KQYqd+AFOvh9IsOiIrExt9DAUG3LEodLkbiiSYdgZ/1Sz
dAjAQAd10oMiy4ZE0M9aKR4AnJ3KDRlmqy508sl3JW6Ozxo+awSgZTwclQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIat0RqCDCQu7vepuxwsKe70+7ySMB8GA1UdIwQY
MBaAFMswKic6tO8lqOqRpKN3m899HeWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmIt
ODAwOGQxZTdjMzhjLzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmItODAwOGQxZTdjMzhj
LzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqz68W6P
Ahy+B/iHfvQiT7tjRbcUNx0W7rsslPe6KSpBc3rhzZdqOruRKq1pc+aSnbfWQcuE
J/yl3WE0hroewwqp+wjqf0Bl5Ah3GSU/gwqq9QmSdZ6bMybIiJ0jBs9ZZOwvkINR
J++pyGVk+HvTQ/v0NQ53YSQUo7lM6DH0EGsnBDIlNG+BAtgmAC459yNjj7OBKtjl
gQv8wgHjJOIEH+WIb/4M304BwoVWrSvg/0ueYjA6ebVGD2tk2r0s6IrIdsMgxo6O
j13huZwvQDIuTcDLCEcaCiV5cU7dHOhFELyIbgeUhN2uQESGWsU7Jn9nYcp4/NcP
YyYTa1HXgVk/Gw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:57:00 2025 by rpki-client