Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
File: Yf61N-NjXsgAFRDDGSt36xeXwKo.mft (raw, json)
Hash identifier: ugrVjyEUcb0yIgJDTXbbQoynXQzS5BimW1H8RV7TA/Q=
Subject key identifier: FA:83:47:1F:A9:3D:2C:19:D0:4F:FA:41:F5:90:E0:42:CE:65:1D:AB
Authority key identifier: 61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
Certificate issuer: /CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Certificate serial: 01965492E36B8A98240A5081366ADD8CB9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
Manifest number: 0AFB
Signing time: Sun 20 Apr 2025 19:00:34 +0000
Manifest this update: Sun 20 Apr 2025 19:00:34 +0000
Manifest next update: Mon 21 Apr 2025 19:00:34 +0000
Files and hashes: 1: Yf61N-NjXsgAFRDDGSt36xeXwKo.crl (hash: 51dLaj0n3t02kFJ+cxypbNiBYVI7TqObgPksce0uVII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:e3:6b:8a:98:24:0a:50:81:36:6a:dd:8c:b9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Validity
Not Before: Apr 20 19:00:34 2025 GMT
Not After : Apr 21 19:00:34 2025 GMT
Subject: CN=fa83471fa93d2c19d04ffa41f590e042ce651dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:85:10:7f:b6:97:bc:48:b4:79:06:82:57:
f0:50:df:37:ec:32:bb:37:c9:54:7d:05:a7:20:ba:
8e:05:3b:1d:15:e1:8b:3d:09:a4:58:27:0f:77:a3:
f4:1f:a3:c7:58:e0:09:01:3c:60:71:4c:19:ee:30:
1f:bd:dd:bb:1b:3b:9b:f3:93:0c:88:9f:17:3f:d0:
83:2f:86:e7:c9:e7:a3:95:51:16:6c:21:6c:35:ab:
42:a2:60:9c:b9:7b:ad:f6:a8:ce:0e:d2:67:c1:32:
f4:e1:f8:6b:f3:32:34:93:d0:3c:56:40:ec:e4:1a:
0a:29:e0:bf:e2:0d:81:8d:a3:bb:bc:01:2a:6b:aa:
5d:18:25:d1:bd:64:50:94:6f:db:d4:52:35:61:e9:
8d:29:9b:a2:d8:d0:10:d8:a1:50:c9:0b:1b:48:a9:
02:00:13:53:7a:0c:01:6d:03:0e:23:bf:80:14:b3:
21:22:de:8c:71:0c:77:f4:ee:f4:e9:82:2e:e3:30:
5d:4a:b4:8d:fd:b1:76:2f:98:d8:f8:91:58:af:10:
22:92:90:d4:45:f1:af:60:7a:0b:53:41:7d:33:0e:
ba:24:f2:e8:2e:d2:26:71:13:d7:20:19:d3:4d:f9:
1e:df:29:a1:6b:cc:f0:ae:c2:68:64:e1:2b:f9:93:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:83:47:1F:A9:3D:2C:19:D0:4F:FA:41:F5:90:E0:42:CE:65:1D:AB
X509v3 Authority Key Identifier:
keyid:61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bc:aa:27:b4:50:e6:46:86:40:cd:68:f6:1e:57:04:49:a0:
8e:1c:70:48:21:fb:28:01:43:fa:f2:e0:98:b2:ed:9f:d2:c3:
18:9e:b7:b1:26:5d:46:ae:36:90:68:bd:a4:ed:1d:85:82:10:
ca:ea:c9:19:72:b6:46:63:ea:07:a8:8c:9b:fb:61:0e:01:f1:
03:37:3d:f0:08:63:3d:a5:6e:f5:4e:b8:12:6d:d7:24:73:1b:
e8:3b:7c:e5:da:cd:06:ab:73:17:fb:f7:01:3b:33:f1:a6:8a:
8d:ae:69:9a:38:e1:d4:84:95:ed:a4:d1:e6:77:a9:b7:e9:c1:
29:a1:1b:56:e2:df:6d:a8:48:b6:d4:7f:ba:89:35:0f:d5:f3:
13:c5:1e:91:f0:14:1d:22:64:09:56:b1:ad:f8:48:d9:a5:6a:
d6:a4:a5:74:0f:f8:e3:4e:77:ac:2e:c4:72:3b:a7:cc:18:6f:
54:ec:4e:de:75:24:9c:86:aa:50:80:52:f1:ee:b4:89:2a:82:
98:b4:dc:cb:c6:91:7b:45:6b:99:cc:bf:30:3c:72:13:7a:e9:
99:ce:e1:72:52:fa:e1:fe:f7:70:16:6a:8f:8a:e9:12:e4:9b:
9e:92:b9:24:b7:2a:91:c9:4a:5a:e3:39:38:32:35:10:a6:42:
27:9a:3f:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkuNripgkClCBNmrdjLnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmViNTM3ZTM2MzVlYzgwMDE1MTBjMzE5MmI3N2ViMTc5
N2MwYWEwHhcNMjUwNDIwMTkwMDM0WhcNMjUwNDIxMTkwMDM0WjAzMTEwLwYDVQQD
EyhmYTgzNDcxZmE5M2QyYzE5ZDA0ZmZhNDFmNTkwZTA0MmNlNjUxZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooGFEH+2l7xItHkGglfwUN837DK7
N8lUfQWnILqOBTsdFeGLPQmkWCcPd6P0H6PHWOAJATxgcUwZ7jAfvd27Gzub85MM
iJ8XP9CDL4bnyeejlVEWbCFsNatComCcuXut9qjODtJnwTL04fhr8zI0k9A8VkDs
5BoKKeC/4g2BjaO7vAEqa6pdGCXRvWRQlG/b1FI1YemNKZui2NAQ2KFQyQsbSKkC
ABNTegwBbQMOI7+AFLMhIt6McQx39O706YIu4zBdSrSN/bF2L5jY+JFYrxAikpDU
RfGvYHoLU0F9Mw66JPLoLtImcRPXIBnTTfke3ymha8zwrsJoZOEr+ZP/MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqDRx+pPSwZ0E/6QfWQ4ELOZR2rMB8GA1UdIwQY
MBaAFGH+tTfjY17IABUQwxkrd+sXl8CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xODIwNDQtOWNiZi00NTc5LWIzYjQt
Nzg1Njc4N2EyZTYzLzEvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xODIwNDQtOWNiZi00NTc5LWIzYjQtNzg1Njc4N2EyZTYz
LzEvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLyqJ7RQ
5kaGQM1o9h5XBEmgjhxwSCH7KAFD+vLgmLLtn9LDGJ63sSZdRq42kGi9pO0dhYIQ
yurJGXK2RmPqB6iMm/thDgHxAzc98AhjPaVu9U64Em3XJHMb6Dt85drNBqtzF/v3
ATsz8aaKja5pmjjh1ISV7aTR5nept+nBKaEbVuLfbahIttR/uok1D9XzE8UekfAU
HSJkCVaxrfhI2aVq1qSldA/44053rC7EcjunzBhvVOxO3nUknIaqUIBS8e60iSqC
mLTcy8aRe0Vrmcy/MDxyE3rpmc7hclL64f73cBZqj4rpEuSbnpK5JLcqkclKWuM5
ODI1EKZCJ5o/Yw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:10 2025 by rpki-client