Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: WsgVLjcBvvdT7q/gmb1p/RYL9s3Hzy9ViuecMUWyK9U=
Subject key identifier: 3E:A7:D7:2E:B5:EA:DA:0A:4F:35:85:49:6A:5F:E7:02:85:3C:9A:63
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 019652DB18CA46EA11B3817F2271094B6CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 09EF
Signing time: Sun 20 Apr 2025 11:00:12 +0000
Manifest this update: Sun 20 Apr 2025 11:00:12 +0000
Manifest next update: Mon 21 Apr 2025 11:00:12 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: XxfSom+Iyf7FHiTtUEHRyNIk9YAlJimEs838fwu6eBs=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:18:ca:46:ea:11:b3:81:7f:22:71:09:4b:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Apr 20 11:00:12 2025 GMT
Not After : Apr 21 11:00:12 2025 GMT
Subject: CN=3ea7d72eb5eada0a4f3585496a5fe702853c9a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:bc:42:d6:69:6c:4b:10:f9:da:f1:08:ad:
96:69:ee:07:6c:90:ef:96:ea:40:bf:e0:ab:6e:36:
25:cb:e0:7a:a2:ea:46:8c:67:50:e0:43:92:10:6d:
49:97:15:6a:91:ec:76:df:93:03:a7:86:58:aa:9a:
32:d2:dc:a5:93:3f:8b:e0:ec:bd:b9:0d:c9:7c:dc:
6d:7c:e6:1b:3b:31:5e:19:2b:a4:29:ef:92:c9:62:
66:27:ea:39:11:f1:ac:e3:fd:2b:2f:1c:5c:73:cd:
f0:f3:8f:b9:09:74:64:7b:c1:e4:d1:2a:2e:2d:eb:
7d:dc:36:98:90:07:71:2f:56:80:c4:60:c3:29:cc:
30:f4:17:67:81:6b:b8:ac:f1:05:ce:a6:76:6c:fb:
28:ab:c4:14:ee:cc:ea:c0:cd:05:9e:23:cf:e4:35:
ad:3b:db:86:f9:8d:5d:3b:db:0c:1f:40:50:7d:7f:
f0:46:35:e8:fa:19:bc:0d:5e:97:bc:5a:96:92:41:
20:fa:ba:0f:3c:f1:96:59:37:eb:ff:f3:54:b4:f3:
06:26:99:a5:9d:4c:b2:b9:15:be:87:8a:93:d8:5c:
5d:62:66:f3:33:18:29:d8:3f:4f:61:3a:a1:0e:42:
96:2b:8d:aa:2a:02:0b:5b:ad:54:d6:16:2b:86:04:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:D7:2E:B5:EA:DA:0A:4F:35:85:49:6A:5F:E7:02:85:3C:9A:63
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ec:9a:3d:ce:f4:cf:6a:c4:cb:48:c7:1b:b2:c0:b4:ed:fb:
e4:89:7e:43:0a:46:53:88:44:c1:e2:3b:5d:20:36:85:aa:3f:
75:0d:7b:11:fa:e5:3e:2e:31:94:08:80:40:f5:aa:65:01:33:
61:a5:dc:fc:69:8d:e1:dd:7c:33:07:8b:0c:15:54:da:ed:2a:
7e:fd:ca:cf:f1:07:14:79:21:20:1e:f9:06:04:86:bd:7d:a4:
18:5d:c4:7f:29:d8:50:84:fa:29:ab:60:6b:e4:09:54:a8:a4:
18:88:f2:a0:a5:f5:d4:38:2a:d8:75:48:8d:c8:eb:1c:47:b5:
44:77:74:43:11:e4:6f:74:83:9b:d7:eb:4c:ba:15:69:e3:44:
0e:7d:4d:60:60:77:54:ab:06:de:67:63:9b:0d:a7:93:c1:1a:
74:2e:bc:6f:29:05:24:3f:10:a8:7f:0f:ac:9d:53:ee:8d:6b:
98:1e:4e:9b:1a:c6:d7:14:3c:80:9f:9c:95:1d:6c:91:89:fe:
c0:d5:4c:bb:35:62:51:a8:5c:04:8c:a8:c5:bc:8d:f1:43:59:
dc:e7:5f:eb:de:0c:cc:52:90:56:c8:11:a3:6c:22:63:c0:e9:
c2:ae:8f:cf:16:cf:5c:85:e8:82:e9:47:23:e1:7f:a9:a7:b0:
68:2b:d1:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZS2xjKRuoRs4F/InEJS2zdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmZjNzcxZjJlZDU4ZmMyODIxZWU3NGNkYTg1M2ZkMmUz
NmM0MjgwHhcNMjUwNDIwMTEwMDEyWhcNMjUwNDIxMTEwMDEyWjAzMTEwLwYDVQQD
EygzZWE3ZDcyZWI1ZWFkYTBhNGYzNTg1NDk2YTVmZTcwMjg1M2M5YTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WO8QtZpbEsQ+drxCK2Wae4HbJDv
lupAv+CrbjYly+B6oupGjGdQ4EOSEG1JlxVqkex235MDp4ZYqpoy0tylkz+L4Oy9
uQ3JfNxtfOYbOzFeGSukKe+SyWJmJ+o5EfGs4/0rLxxcc83w84+5CXRke8Hk0Sou
Let93DaYkAdxL1aAxGDDKcww9BdngWu4rPEFzqZ2bPsoq8QU7szqwM0FniPP5DWt
O9uG+Y1dO9sMH0BQfX/wRjXo+hm8DV6XvFqWkkEg+roPPPGWWTfr//NUtPMGJpml
nUyyuRW+h4qT2FxdYmbzMxgp2D9PYTqhDkKWK42qKgILW61U1hYrhgTw1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6n1y616toKTzWFSWpf5wKFPJpjMB8GA1UdIwQY
MBaAFMv/x3Hy7Vj8KCHudM2oU/0uNsQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQt
N2E0MDU0NTUxZmQ0LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQtN2E0MDU0NTUxZmQ0
LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauyaPc70
z2rEy0jHG7LAtO375Il+QwpGU4hEweI7XSA2hao/dQ17EfrlPi4xlAiAQPWqZQEz
YaXc/GmN4d18MweLDBVU2u0qfv3Kz/EHFHkhIB75BgSGvX2kGF3EfynYUIT6Katg
a+QJVKikGIjyoKX11Dgq2HVIjcjrHEe1RHd0QxHkb3SDm9frTLoVaeNEDn1NYGB3
VKsG3mdjmw2nk8EadC68bykFJD8QqH8PrJ1T7o1rmB5OmxrG1xQ8gJ+clR1skYn+
wNVMuzViUahcBIyoxbyN8UNZ3Odf694MzFKQVsgRo2wiY8Dpwq6PzxbPXIXogulH
I+F/qaewaCvRBA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:27:08 2025 by rpki-client