Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
File: yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft (raw, json)
Hash identifier: PzTrPx03mHHyq7s2bPU/nrFT4inhDaJhgPzM41Jk8sg=
Subject key identifier: 88:3B:2F:BC:BF:E3:10:A1:F3:59:10:B2:4F:C4:3C:00:95:BB:4A:57
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Certificate issuer: /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial: 01964F6CF02722CA850CD67935403B277267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 19:01:01 +0000
Manifest this update: Sat 19 Apr 2025 19:01:01 +0000
Manifest next update: Sun 20 Apr 2025 19:01:01 +0000
Files and hashes: 1: fewPOq5Sy5alJvzpYZYieD6pmV8.roa (hash: nQVFjlDzgmj3SLHG29wBX3sEI4Pk0MW5juplwGFMB6g=)
2: yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl (hash: vQISr5QSWkJbRgq6M23XLTBykgOw7LmkIf3krXR2cW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:f0:27:22:ca:85:0c:d6:79:35:40:3b:27:72:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Validity
Not Before: Apr 19 19:01:01 2025 GMT
Not After : Apr 20 19:01:01 2025 GMT
Subject: CN=883b2fbcbfe310a1f35910b24fc43c0095bb4a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:4d:d8:d7:98:98:61:be:7a:20:35:cc:0c:
a3:aa:ca:3e:d8:f3:00:89:e9:1d:13:06:6e:12:23:
5f:16:ca:ed:2d:18:60:56:0d:63:62:6e:fd:0a:6d:
f5:3b:8b:f0:0e:d8:2b:40:3b:bc:4d:31:94:a5:a5:
03:1e:47:bd:3c:72:6e:ba:d9:f1:b6:14:8c:05:7e:
82:66:f3:90:3f:00:d4:41:4f:39:c6:bb:ea:9d:fd:
55:20:54:d0:b1:c7:39:93:e0:6b:4a:27:1d:aa:9d:
8e:58:8c:61:01:ff:d5:42:c4:78:c3:9e:37:27:65:
a3:7c:0c:b2:8e:f0:06:b1:a1:3f:0c:44:50:61:8f:
05:91:ef:9d:7b:9f:fd:11:9a:7a:f8:67:25:bd:9e:
92:86:73:02:a6:47:c8:da:a1:86:af:f5:f8:82:c2:
af:0a:16:74:a2:db:d8:a4:05:98:11:51:c9:52:44:
4b:72:cc:13:fa:7a:87:be:bc:e3:84:69:fe:93:75:
83:37:c2:97:76:17:9f:60:32:1d:07:73:fc:46:8b:
e9:d4:66:57:d2:01:35:4f:5c:d7:dc:15:dd:27:04:
bd:75:b6:a7:80:a1:f5:33:5c:55:e8:d0:45:76:61:
6e:09:36:ed:a7:88:0f:1c:fd:66:15:7a:b8:98:93:
92:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3B:2F:BC:BF:E3:10:A1:F3:59:10:B2:4F:C4:3C:00:95:BB:4A:57
X509v3 Authority Key Identifier:
keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:88:b5:91:db:f8:39:ca:55:82:39:34:56:af:57:c3:07:28:
76:2e:ac:d8:1b:ba:f1:88:56:22:3b:ca:56:88:58:90:82:e2:
80:45:cc:19:ef:68:9d:80:7c:c4:36:c7:2c:f8:15:de:a7:8f:
ba:22:c2:41:04:75:0c:72:1d:b7:dc:93:9c:0d:57:79:45:b9:
c6:7a:a6:ae:de:e7:4f:3f:b0:d9:c8:9d:81:bd:e4:f0:11:4e:
1a:78:7f:03:98:48:df:bd:ab:7d:18:60:e0:1d:0b:44:9c:64:
ea:ac:03:17:6f:aa:94:fa:0c:65:e2:c7:57:57:47:8f:6f:29:
fb:fa:1a:28:7c:60:23:fb:4c:36:9f:07:b3:04:a6:39:cd:99:
00:c4:ca:06:40:ff:e4:72:ec:9b:f4:ab:04:d0:5e:bc:0f:8a:
2d:29:41:b1:17:d8:35:ea:29:95:19:ba:23:8b:6a:71:a0:50:
b0:d3:70:5b:ac:fd:01:f8:95:66:9b:4c:e1:9f:6a:3a:83:62:
be:3f:93:23:c5:ca:cf:34:27:82:aa:3d:1b:ad:ee:28:09:b5:
fa:40:50:c8:e9:6a:d8:99:84:37:da:00:b6:c5:18:2c:ea:8f:
6b:63:55:32:3b:5e:2d:ea:0e:7a:9f:d9:c2:98:de:6f:75:95:
97:7e:7b:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbPAnIsqFDNZ5NUA7J3JnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NWY1MTBjNzJjZTBiNzljMjg5OWIzNTg0NWZmZTM2NzA2
OTNmMDUwHhcNMjUwNDE5MTkwMTAxWhcNMjUwNDIwMTkwMTAxWjAzMTEwLwYDVQQD
Eyg4ODNiMmZiY2JmZTMxMGExZjM1OTEwYjI0ZmM0M2MwMDk1YmI0YTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3hN2NeYmGG+eiA1zAyjqso+2PMA
iekdEwZuEiNfFsrtLRhgVg1jYm79Cm31O4vwDtgrQDu8TTGUpaUDHke9PHJuutnx
thSMBX6CZvOQPwDUQU85xrvqnf1VIFTQscc5k+BrSicdqp2OWIxhAf/VQsR4w543
J2WjfAyyjvAGsaE/DERQYY8Fke+de5/9EZp6+GclvZ6ShnMCpkfI2qGGr/X4gsKv
ChZ0otvYpAWYEVHJUkRLcswT+nqHvrzjhGn+k3WDN8KXdhefYDIdB3P8Rovp1GZX
0gE1T1zX3BXdJwS9dbangKH1M1xV6NBFdmFuCTbtp4gPHP1mFXq4mJOSqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg7L7y/4xCh81kQsk/EPACVu0pXMB8GA1UdIwQY
MBaAFMhfUQxyzgt5wombNYRf/jZwaT8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hMmNmYjAtMGU2OC00ZTQ3LTg4ODEt
YjhjOWEyYTlkYTQ2LzEveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hMmNmYjAtMGU2OC00ZTQ3LTg4ODEtYjhjOWEyYTlkYTQ2
LzEveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIi1kdv4
OcpVgjk0Vq9Xwwcodi6s2Bu68YhWIjvKVohYkILigEXMGe9onYB8xDbHLPgV3qeP
uiLCQQR1DHIdt9yTnA1XeUW5xnqmrt7nTz+w2cidgb3k8BFOGnh/A5hI372rfRhg
4B0LRJxk6qwDF2+qlPoMZeLHV1dHj28p+/oaKHxgI/tMNp8HswSmOc2ZAMTKBkD/
5HLsm/SrBNBevA+KLSlBsRfYNeoplRm6I4tqcaBQsNNwW6z9AfiVZptM4Z9qOoNi
vj+TI8XKzzQngqo9G63uKAm1+kBQyOlq2JmEN9oAtsUYLOqPa2NVMjteLeoOep/Z
wpjeb3WVl357Pw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:44 2025 by rpki-client