Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File: yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier: TfZjXahtY7RnBEbo33MAxHFBA3jk1kJ6hdZPuAsZ/lA=
Subject key identifier: CD:C0:7C:32:07:01:98:08:5D:1D:AA:9A:9B:18:EA:58:7B:2C:60:F6
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 01964CD90ED7C25B72431273D03D5C75AD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 07:00:15 +0000
Manifest this update: Sat 19 Apr 2025 07:00:15 +0000
Manifest next update: Sun 20 Apr 2025 07:00:15 +0000
Files and hashes: 1: CIsZyO4sYlxS6zxs93wo-C0_kOw.roa (hash: ioxln7YvRG7zaRY74N5lo8NJZPbsX7Lowl9YoqVb2QM=)
2: SLGZR5HlGlUvyxXb4J9dlFoOmHA.roa (hash: ItBZnQTRFfvhdaqeW1Co9+W+Nd7SvqU9wrygJFtBPMk=)
3: jX1iMEMhj6_WdXTUBq0GlWaaV20.roa (hash: 8QCHzWOckFZKqXALiiMy/qW6wfPGm8V2LBqLIdFNZH8=)
4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: aUnjjLiOh+7+rdF8+YDN+Opv0kZxUXp2o2lDxAAbU+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:0e:d7:c2:5b:72:43:12:73:d0:3d:5c:75:ad:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Apr 19 07:00:15 2025 GMT
Not After : Apr 20 07:00:15 2025 GMT
Subject: CN=cdc07c32070198085d1daa9a9b18ea587b2c60f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:a8:10:34:92:cc:2f:f4:49:64:9c:27:5b:
d3:a0:95:81:3f:0a:b5:9c:c9:37:16:59:27:32:34:
36:6c:82:52:52:4d:c3:6a:b0:1e:3a:9e:2c:9d:e4:
75:22:5e:6f:d9:44:32:79:5c:c9:6e:cb:1c:d3:1a:
d2:81:25:27:c5:93:8e:3f:73:66:e2:f7:2f:c4:c4:
82:84:21:1e:30:f5:a3:8a:ca:10:72:52:6a:4a:bd:
63:d4:bc:ab:b3:a6:d4:ea:13:f7:c7:8e:cb:03:1a:
f7:c2:79:1a:9e:9b:6b:aa:30:a3:09:eb:2b:e1:c7:
6e:6c:85:5f:98:5c:f7:dd:bc:ff:b5:82:bb:3d:df:
9e:9f:f5:99:5e:15:00:5c:1c:c5:de:6c:ed:d7:db:
ac:c7:d0:a2:c1:45:0b:0b:d3:f8:22:92:5e:1c:40:
6e:b2:23:a9:76:36:64:17:23:1f:a3:59:ce:36:14:
a0:48:be:6a:7f:65:42:6a:4b:da:1e:fa:79:9b:24:
d6:a6:0e:99:18:b2:55:a3:9c:08:ea:13:36:ca:d6:
1b:82:f8:a4:44:b7:f3:96:a5:72:ce:1a:3b:75:74:
15:d2:08:34:30:ee:8e:08:bf:90:cf:80:9e:0d:58:
03:b5:7d:f8:e9:66:3a:c9:1b:3c:be:23:84:5b:e9:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C0:7C:32:07:01:98:08:5D:1D:AA:9A:9B:18:EA:58:7B:2C:60:F6
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2d:f4:4d:5b:37:72:bc:c6:ae:2c:23:34:90:6b:2b:16:ae:
f7:e3:1e:7f:9e:c2:74:7f:91:c4:42:bd:c3:ae:24:d2:a9:b9:
fb:a5:7a:c9:d3:87:98:d5:4e:ec:c5:d2:37:c1:22:a7:ea:a6:
d9:51:b6:5b:96:6d:5f:78:49:23:7e:4e:6e:fe:20:5f:91:f6:
3d:d9:37:12:09:a5:22:b3:90:dd:19:a0:2f:be:ab:0c:d0:ba:
5d:b6:f4:11:25:74:d5:63:85:1e:36:fd:69:62:e9:d3:5a:7e:
0f:04:fe:ea:19:cb:1d:54:35:6b:20:3f:9f:c0:3e:11:65:9c:
83:b3:c5:99:93:6d:6f:02:b0:07:3c:4b:f9:d5:58:21:13:1d:
58:ae:6c:e0:d1:dd:a7:e3:ba:e1:db:97:6e:37:6d:0c:90:25:
fd:26:ef:71:34:b6:36:dc:88:d2:cd:25:b9:44:7a:86:0c:a0:
1d:3c:b5:a7:51:92:b8:6f:2b:cb:f2:61:d4:8c:53:b1:b3:03:
a3:78:27:6f:5c:92:ba:dc:c5:a4:aa:91:39:29:1f:a2:4e:4c:
79:1d:25:de:f9:99:f3:33:a5:0f:52:d5:79:fc:e9:6f:32:e4:
d7:3a:1d:c1:e4:92:77:f0:e5:4e:42:97:2b:87:e8:0f:4f:46:
05:d7:c0:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2Q7XwltyQxJz0D1cda1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NDcwYWU0MThlZWRkZDZiMzlkYWU5ZTdhMTc3YTE5Yzc3
OTljNDEwHhcNMjUwNDE5MDcwMDE1WhcNMjUwNDIwMDcwMDE1WjAzMTEwLwYDVQQD
EyhjZGMwN2MzMjA3MDE5ODA4NWQxZGFhOWE5YjE4ZWE1ODdiMmM2MGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EOoEDSSzC/0SWScJ1vToJWBPwq1
nMk3FlknMjQ2bIJSUk3DarAeOp4sneR1Il5v2UQyeVzJbssc0xrSgSUnxZOOP3Nm
4vcvxMSChCEeMPWjisoQclJqSr1j1Lyrs6bU6hP3x47LAxr3wnkanptrqjCjCesr
4cdubIVfmFz33bz/tYK7Pd+en/WZXhUAXBzF3mzt19usx9CiwUULC9P4IpJeHEBu
siOpdjZkFyMfo1nONhSgSL5qf2VCakvaHvp5myTWpg6ZGLJVo5wI6hM2ytYbgvik
RLfzlqVyzho7dXQV0gg0MO6OCL+Qz4CeDVgDtX346WY6yRs8viOEW+mp8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3AfDIHAZgIXR2qmpsY6lh7LGD2MB8GA1UdIwQY
MBaAFMlHCuQY7t3Ws52unnoXehnHeZxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMt
YjA5MTIxNWQ1ZTRkLzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMtYjA5MTIxNWQ1ZTRk
LzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmC30TVs3
crzGriwjNJBrKxau9+Mef57CdH+RxEK9w64k0qm5+6V6ydOHmNVO7MXSN8Eip+qm
2VG2W5ZtX3hJI35Obv4gX5H2Pdk3EgmlIrOQ3RmgL76rDNC6Xbb0ESV01WOFHjb9
aWLp01p+DwT+6hnLHVQ1ayA/n8A+EWWcg7PFmZNtbwKwBzxL+dVYIRMdWK5s4NHd
p+O64duXbjdtDJAl/SbvcTS2NtyI0s0luUR6hgygHTy1p1GSuG8ry/Jh1IxTsbMD
o3gnb1ySutzFpKqROSkfok5MeR0l3vmZ8zOlD1LVefzpbzLk1zodweSSd/DlTkKX
K4foD09GBdfAwQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 13:59:05 2025 by rpki-client