Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: UDXVEXziGyvI+nSjg8ei8MLkB0BV93sjQJLga4xq5d4=
Subject key identifier: D3:43:5C:26:55:45:F4:1F:E2:9D:6D:7F:6B:AD:2A:6D:5D:D7:11:CB
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 019635ADCC723B311980EC71FEDC14019E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 14F4
Signing time: Mon 14 Apr 2025 19:01:44 +0000
Manifest this update: Mon 14 Apr 2025 19:01:44 +0000
Manifest next update: Tue 15 Apr 2025 19:01:44 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: Dt3_ZkBEBRp0R0_CDkNOquu1bQM.roa (hash: uiOI0uk8eYds16+TqWf+6h0vN+dm+2r3lmxvhrKa8Qc=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: D/UoC1hBG9678Ez6D8xYwbEVbK/tlEwXAZJkzHpZFJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:ad:cc:72:3b:31:19:80:ec:71:fe:dc:14:01:9e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Apr 14 19:01:44 2025 GMT
Not After : Apr 15 19:01:44 2025 GMT
Subject: CN=d3435c265545f41fe29d6d7f6bad2a6d5dd711cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:01:d2:24:76:e3:7d:f5:ef:ec:18:df:91:
4b:52:fb:be:17:00:fa:bf:0b:5c:fc:57:fd:80:85:
1e:74:82:75:45:82:97:f4:89:d7:07:57:9e:02:c4:
9f:8d:8d:e3:8b:ed:ac:27:4d:7b:92:70:5c:b0:bc:
e9:78:e8:4d:c0:b8:85:36:7e:e9:43:ab:80:c9:0a:
29:a4:a7:1c:69:ab:48:5f:ab:06:6f:89:bf:c5:32:
4f:ef:9c:97:f1:4d:13:e0:68:4e:2b:f3:62:f3:be:
e9:d3:cd:96:78:4b:ae:b8:65:e2:d4:49:d4:f7:e4:
df:5a:85:5a:f5:32:78:fd:8e:db:9d:94:e0:00:85:
4c:71:47:b0:b8:5a:1c:20:70:9e:ea:a3:b3:d1:56:
35:71:ec:13:ca:a8:5b:e7:68:9f:b0:a0:6d:80:05:
39:da:8d:0f:d8:eb:38:81:51:58:8d:48:19:d8:64:
c8:4b:87:4d:ef:fa:c0:18:64:66:77:71:09:aa:a3:
f0:94:21:08:fc:ce:d3:7f:c8:84:9d:19:cc:5b:e0:
40:ae:55:54:50:4b:34:a4:ed:83:62:28:83:ed:7d:
82:2f:9b:44:3b:11:c1:d8:2d:38:73:a5:45:b7:1a:
7e:e7:81:00:07:4f:8a:a8:5f:2a:ec:73:fc:ef:da:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:5C:26:55:45:F4:1F:E2:9D:6D:7F:6B:AD:2A:6D:5D:D7:11:CB
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b3:34:7a:5c:cc:60:85:4a:e9:0b:42:77:82:4d:b7:4e:34:
53:13:11:1b:a0:7b:d3:b2:7d:c2:78:b9:90:24:b3:17:01:b7:
23:ef:0e:a6:fd:7f:6b:ea:26:b2:53:aa:34:f0:87:a9:bd:33:
d4:5a:1d:4e:37:6b:ed:d4:c0:a9:69:37:d7:2c:68:38:5b:c6:
ea:75:bf:f6:e1:27:fa:96:c7:5e:88:8e:12:2f:bb:04:4d:d6:
7b:41:a2:d4:a1:8e:ad:f3:ac:8a:da:70:31:f6:fb:c5:b8:c8:
46:c9:74:c0:85:21:e7:3a:b8:13:90:49:b8:5d:b2:13:df:61:
78:a5:32:fb:0f:21:6a:0c:65:66:c8:e5:38:3c:d1:9a:be:8f:
61:69:c4:5f:39:7f:1d:65:bd:95:7b:23:22:6a:b4:87:54:e4:
15:00:73:81:c2:a1:85:b6:e9:a5:a1:c0:0a:5d:e6:4e:18:d0:
cf:f2:84:d7:75:ea:ce:26:06:ed:42:4d:3b:2f:95:5b:ae:53:
97:b9:77:34:5a:b1:76:0d:80:8b:48:6e:9c:d9:17:2c:25:35:
dc:25:fb:9c:d8:fd:9a:6e:ea:b7:f4:a3:55:e7:9d:4a:59:6a:
74:0a:d8:a0:b6:d4:bc:0b:45:0b:08:61:22:fa:91:6f:c5:62:
68:81:03:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY1rcxyOzEZgOxx/twUAZ6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw
MjhlOTEwHhcNMjUwNDE0MTkwMTQ0WhcNMjUwNDE1MTkwMTQ0WjAzMTEwLwYDVQQD
EyhkMzQzNWMyNjU1NDVmNDFmZTI5ZDZkN2Y2YmFkMmE2ZDVkZDcxMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAkB0iR243317+wY35FLUvu+FwD6
vwtc/Ff9gIUedIJ1RYKX9InXB1eeAsSfjY3ji+2sJ017knBcsLzpeOhNwLiFNn7p
Q6uAyQoppKccaatIX6sGb4m/xTJP75yX8U0T4GhOK/Ni877p082WeEuuuGXi1EnU
9+TfWoVa9TJ4/Y7bnZTgAIVMcUewuFocIHCe6qOz0VY1cewTyqhb52ifsKBtgAU5
2o0P2Os4gVFYjUgZ2GTIS4dN7/rAGGRmd3EJqqPwlCEI/M7Tf8iEnRnMW+BArlVU
UEs0pO2DYiiD7X2CL5tEOxHB2C04c6VFtxp+54EAB0+KqF8q7HP879r5lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNDXCZVRfQf4p1tf2utKm1d1xHLMB8GA1UdIwQY
MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt
ODg1NGM4MmI1NDVkLzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk
LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLM0elzM
YIVK6QtCd4JNt040UxMRG6B707J9wni5kCSzFwG3I+8Opv1/a+omslOqNPCHqb0z
1FodTjdr7dTAqWk31yxoOFvG6nW/9uEn+pbHXoiOEi+7BE3We0Gi1KGOrfOsitpw
Mfb7xbjIRsl0wIUh5zq4E5BJuF2yE99heKUy+w8hagxlZsjlODzRmr6PYWnEXzl/
HWW9lXsjImq0h1TkFQBzgcKhhbbppaHACl3mThjQz/KE13XqziYG7UJNOy+VW65T
l7l3NFqxdg2Ai0hunNkXLCU13CX7nNj9mm7qt/SjVeedSllqdArYoLbUvAtFCwhh
IvqRb8ViaIEDew==
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:17:54 2025 by rpki-client