Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: MA9bNq1kTOML5KcxsnaVfz6MIuRXnsds6jrV69NZ+eE=
Subject key identifier: EC:AA:E1:25:91:39:6E:08:DB:5D:54:66:8A:CD:F5:42:C4:34:94:BA
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 01958B84AF1AFA1A3F542ED099035BAF1992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 1427
Signing time: Wed 12 Mar 2025 18:01:23 +0000
Manifest this update: Wed 12 Mar 2025 18:01:23 +0000
Manifest next update: Thu 13 Mar 2025 18:01:23 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: +aQNJSLrVLW/xwh4mpVUvv8jSru8UZwmmml9hBrdFaQ=)
2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:af:1a:fa:1a:3f:54:2e:d0:99:03:5b:af:19:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Mar 12 18:01:23 2025 GMT
Not After : Mar 13 18:01:23 2025 GMT
Subject: CN=ecaae12591396e08db5d54668acdf542c43494ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:b2:82:c4:61:e7:ec:9a:31:11:97:41:b5:
04:b0:79:93:49:f4:3a:ed:c2:ea:8d:cd:07:22:7d:
e6:75:09:ef:42:75:f1:c9:7c:af:65:34:99:9d:17:
a8:46:d2:54:f6:40:74:ea:61:a3:71:5e:fb:7a:6f:
b3:e1:30:2f:5d:43:ec:eb:cb:22:e0:91:d9:42:21:
45:d9:36:ab:88:de:6e:83:f8:59:eb:4c:a5:f0:d4:
09:c2:a6:70:33:e4:c9:cf:9a:c9:e2:72:9c:bc:bb:
c6:e0:dd:16:51:92:95:cc:9a:6d:e2:77:c6:f9:38:
a5:63:16:ae:e1:d9:4d:46:b7:3f:3b:25:ff:5a:e6:
9b:e5:5e:87:12:56:05:76:37:4a:a5:64:ee:6d:49:
35:74:d1:ae:05:c4:d2:68:3d:84:08:6a:08:b0:3f:
4b:bd:b9:d8:ca:a4:fc:9b:8f:3f:b2:77:cb:9f:b4:
96:cc:28:40:59:6e:f0:c2:47:00:fa:f4:b3:e1:42:
eb:7e:e9:66:52:06:2c:97:1d:11:f6:13:fa:4f:98:
f6:0b:33:3a:de:9b:16:f6:c5:b5:f6:47:3f:ac:cc:
2f:11:e5:3d:ff:ee:5e:17:9c:b6:c6:32:93:05:bd:
5c:7f:e5:d4:41:8f:93:24:53:b9:de:d5:b8:37:a5:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AA:E1:25:91:39:6E:08:DB:5D:54:66:8A:CD:F5:42:C4:34:94:BA
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ad:1e:38:ae:53:92:18:10:74:bf:72:db:40:2c:ae:7a:d3:
11:d0:65:34:71:d9:04:37:e9:24:78:f3:82:28:fc:82:15:a8:
bc:19:a9:9d:61:59:77:b3:a8:71:78:c2:81:10:6f:eb:73:d3:
cb:ed:a8:37:90:cf:09:06:d1:98:d7:70:8e:f3:f3:e7:99:45:
1f:96:16:d2:a9:b0:11:dd:69:92:92:84:28:5a:93:b4:b4:01:
93:c3:cc:69:3f:96:1f:e8:84:b3:1d:66:bf:ee:36:ef:37:d2:
64:4b:2f:85:2e:97:b0:96:d9:a3:aa:81:40:63:46:86:58:14:
59:d9:ce:53:0e:64:a8:31:47:b1:d6:12:74:df:85:1b:ab:7b:
f2:49:69:68:ce:d9:ec:8c:ac:bf:a7:33:f2:66:e3:30:f8:57:
47:0a:d4:a8:78:a4:cc:50:7e:52:5b:c1:a7:83:6a:63:9b:14:
1a:be:aa:c5:5e:eb:4c:0f:b3:02:64:6e:6b:36:ce:56:b4:84:
77:5d:60:5e:48:d2:9e:ae:ba:3b:8c:70:42:f7:63:f3:d0:0b:
43:c3:e0:a3:f1:c0:22:e2:73:e4:4f:52:d1:c9:8b:9c:84:62:
90:ee:a8:9a:41:c2:8e:f2:e1:4d:f5:86:5e:f8:f7:8c:62:5b:
77:86:f1:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhK8a+ho/VC7QmQNbrxmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjYwNGRjNzg5MmJhOTlmNTM1Mjk2YjkxMDJkOGQ3YTE4
NDQzODgwHhcNMjUwMzEyMTgwMTIzWhcNMjUwMzEzMTgwMTIzWjAzMTEwLwYDVQQD
EyhlY2FhZTEyNTkxMzk2ZTA4ZGI1ZDU0NjY4YWNkZjU0MmM0MzQ5NGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr6ygsRh5+yaMRGXQbUEsHmTSfQ6
7cLqjc0HIn3mdQnvQnXxyXyvZTSZnReoRtJU9kB06mGjcV77em+z4TAvXUPs68si
4JHZQiFF2TariN5ug/hZ60yl8NQJwqZwM+TJz5rJ4nKcvLvG4N0WUZKVzJpt4nfG
+TilYxau4dlNRrc/OyX/Wuab5V6HElYFdjdKpWTubUk1dNGuBcTSaD2ECGoIsD9L
vbnYyqT8m48/snfLn7SWzChAWW7wwkcA+vSz4ULrfulmUgYslx0R9hP6T5j2CzM6
3psW9sW19kc/rMwvEeU9/+5eF5y2xjKTBb1cf+XUQY+TJFO53tW4N6X7PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyq4SWROW4I211UZorN9ULENJS6MB8GA1UdIwQY
MBaAFP/2BNx4krqZ9TUpa5EC2NehhEOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUt
MWMxOTk0OWI5NmI2LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUtMWMxOTk0OWI5NmI2
LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW60eOK5T
khgQdL9y20AsrnrTEdBlNHHZBDfpJHjzgij8ghWovBmpnWFZd7OocXjCgRBv63PT
y+2oN5DPCQbRmNdwjvPz55lFH5YW0qmwEd1pkpKEKFqTtLQBk8PMaT+WH+iEsx1m
v+427zfSZEsvhS6XsJbZo6qBQGNGhlgUWdnOUw5kqDFHsdYSdN+FG6t78klpaM7Z
7Iysv6cz8mbjMPhXRwrUqHikzFB+UlvBp4NqY5sUGr6qxV7rTA+zAmRuazbOVrSE
d11gXkjSnq66O4xwQvdj89ALQ8Pgo/HAIuJz5E9S0cmLnIRikO6omkHCjvLhTfWG
Xvj3jGJbd4bxrw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:44 2025 by rpki-client