Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: ACOiywAlflGynpZY8taFPgjdrGda3zRgt8kvE+9YbfI=
Subject key identifier: EA:81:88:CB:3A:9E:DB:68:38:B5:AD:7D:52:E8:C4:01:6E:06:B0:34
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 0196575CF3A90A9296C13EC67720E935675C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0B83
Signing time: Mon 21 Apr 2025 08:00:31 +0000
Manifest this update: Mon 21 Apr 2025 08:00:31 +0000
Manifest next update: Tue 22 Apr 2025 08:00:31 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: xZq7DdTTuerI8sp6f6wrkCS/1gIfHdx2wg/oFeuSZss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:f3:a9:0a:92:96:c1:3e:c6:77:20:e9:35:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Apr 21 08:00:31 2025 GMT
Not After : Apr 22 08:00:31 2025 GMT
Subject: CN=ea8188cb3a9edb6838b5ad7d52e8c4016e06b034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:70:df:b6:5d:8e:62:f9:cb:5e:81:3e:ab:
28:f8:fa:3f:07:13:3a:ca:8f:2d:c4:8c:ac:2e:4c:
30:9e:8c:18:26:7c:ad:22:97:8f:1c:68:63:ea:36:
ba:bc:48:1e:bb:ea:db:f7:d2:c2:9c:5b:2d:fb:8e:
44:be:41:06:ed:a8:6c:a8:35:ed:90:ea:93:53:c9:
75:c4:0d:83:42:ba:be:7e:8c:c5:ce:46:64:e0:b8:
b5:a5:a0:f2:2f:fd:a3:c1:3a:07:63:b9:1e:52:69:
2b:2c:2e:78:08:a9:a6:f8:d6:ec:0f:4b:68:57:63:
c9:8c:37:72:b0:12:cf:00:fd:11:c1:49:41:12:29:
ee:35:8b:ec:e5:42:46:d7:5b:80:64:a8:74:99:92:
72:13:3f:45:c3:19:52:fc:df:d2:fe:b0:6c:1d:55:
b0:f1:a2:4c:75:68:cf:87:5b:b9:72:5e:14:91:07:
8c:61:b6:d8:ce:40:7c:ef:8c:aa:d5:04:16:6f:73:
24:48:79:ee:90:ab:97:e4:41:dd:2e:54:2c:85:a0:
84:17:8f:75:67:c0:4a:5f:03:dc:62:d9:ec:50:51:
97:a6:87:8f:cf:89:c7:3e:be:67:4c:cc:14:0f:b5:
81:b1:df:35:6f:11:03:bc:f6:a2:f3:77:9e:e7:67:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:81:88:CB:3A:9E:DB:68:38:B5:AD:7D:52:E8:C4:01:6E:06:B0:34
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:43:49:10:46:f4:51:58:ef:44:4c:3b:cf:4e:af:e5:c6:21:
2c:61:2b:ba:ba:60:51:f2:da:ee:ff:f7:ee:a8:b0:7a:c4:71:
9c:98:05:22:fe:0a:14:3b:45:b2:25:72:53:76:27:6c:15:4f:
c7:bc:aa:7f:91:b8:2c:a4:e5:a3:cc:77:a5:26:45:e8:6a:32:
e4:00:69:d9:d2:d1:fd:b1:6c:65:8a:88:2a:1f:ce:dc:b6:ae:
d1:7c:28:f6:25:59:39:fa:15:38:0d:ec:67:8d:79:eb:c9:98:
16:39:ee:41:33:c8:42:06:82:86:40:cc:6f:0b:36:5f:ce:38:
03:c0:30:4a:88:6d:d4:82:16:10:ef:b2:f7:87:a9:95:51:52:
47:80:ba:36:e2:a8:53:62:52:59:31:70:0d:66:57:8c:61:39:
c0:de:bc:94:63:c1:14:9e:2f:37:a2:74:ae:65:e7:d7:7a:36:
4c:77:c4:9e:bd:10:3f:e4:ab:9d:66:da:bd:63:4e:47:75:31:
25:41:f7:6a:6b:13:37:24:8e:2f:66:18:e0:79:84:71:32:5a:
e0:97:cb:bb:89:b2:cb:da:74:dd:16:49:5a:89:f4:61:0b:99:
e1:27:00:59:30:3c:4d:cb:fd:9d:1e:62:69:ff:84:87:34:12:
e2:1c:91:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXXPOpCpKWwT7GdyDpNWdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm
NmQ5ODAwHhcNMjUwNDIxMDgwMDMxWhcNMjUwNDIyMDgwMDMxWjAzMTEwLwYDVQQD
EyhlYTgxODhjYjNhOWVkYjY4MzhiNWFkN2Q1MmU4YzQwMTZlMDZiMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHZw37ZdjmL5y16BPqso+Po/BxM6
yo8txIysLkwwnowYJnytIpePHGhj6ja6vEgeu+rb99LCnFst+45EvkEG7ahsqDXt
kOqTU8l1xA2DQrq+fozFzkZk4Li1paDyL/2jwToHY7keUmkrLC54CKmm+NbsD0to
V2PJjDdysBLPAP0RwUlBEinuNYvs5UJG11uAZKh0mZJyEz9FwxlS/N/S/rBsHVWw
8aJMdWjPh1u5cl4UkQeMYbbYzkB874yq1QQWb3MkSHnukKuX5EHdLlQshaCEF491
Z8BKXwPcYtnsUFGXpoePz4nHPr5nTMwUD7WBsd81bxEDvPai83ee52diuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqBiMs6nttoOLWtfVLoxAFuBrA0MB8GA1UdIwQY
MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt
N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll
LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkNJEEb0
UVjvREw7z06v5cYhLGErurpgUfLa7v/37qiwesRxnJgFIv4KFDtFsiVyU3YnbBVP
x7yqf5G4LKTlo8x3pSZF6Goy5ABp2dLR/bFsZYqIKh/O3Lau0Xwo9iVZOfoVOA3s
Z41568mYFjnuQTPIQgaChkDMbws2X844A8AwSoht1IIWEO+y94eplVFSR4C6NuKo
U2JSWTFwDWZXjGE5wN68lGPBFJ4vN6J0rmXn13o2THfEnr0QP+SrnWbavWNOR3Ux
JUH3amsTNySOL2YY4HmEcTJa4JfLu4myy9p03RZJWon0YQuZ4ScAWTA8Tcv9nR5i
af+EhzQS4hyR4g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:21 2025 by rpki-client