Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: smY8uSAE4aeAOYLK+AOOWY2hb7iASCIYNdeJPujwhdk=
Subject key identifier: 57:92:58:A2:33:5C:1D:C1:55:73:71:33:3E:5C:CD:D7:97:87:24:24
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 019641E795B3E8074F9DB5D73F9A2DBC48E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0BDA
Signing time: Thu 17 Apr 2025 04:00:18 +0000
Manifest this update: Thu 17 Apr 2025 04:00:18 +0000
Manifest next update: Fri 18 Apr 2025 04:00:18 +0000
Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: JUTNOHvDiZf8vF/HCYXrELm/+wnokU5RUIe7gw1WKyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e7:95:b3:e8:07:4f:9d:b5:d7:3f:9a:2d:bc:48:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Apr 17 04:00:18 2025 GMT
Not After : Apr 18 04:00:18 2025 GMT
Subject: CN=579258a2335c1dc1557371333e5ccdd797872424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:33:4d:e4:05:65:d6:f5:cc:1e:e5:2e:2f:
e6:44:64:dc:09:98:77:47:51:ce:3d:9e:4a:b5:59:
a2:53:97:2f:7e:8d:1f:3c:ba:51:b1:8f:ae:cd:8c:
0c:6d:70:77:79:c2:a5:99:67:90:9d:16:42:2f:38:
e8:fe:86:56:72:c5:46:a7:73:2c:09:bc:a1:32:fb:
b7:8b:ec:ea:f7:9b:4b:79:26:14:d8:da:e5:a5:32:
7a:c5:b4:18:a6:24:13:58:58:dd:d6:10:93:3b:10:
fc:f5:fc:84:ad:d6:80:1c:5f:0d:5f:41:e0:30:d1:
53:4a:c7:64:bf:5c:ef:ed:8a:56:2a:53:32:b6:3c:
71:b8:b3:c5:7a:dc:e1:d1:b5:af:2d:47:d0:06:f0:
7d:3a:1f:e9:04:87:32:0a:7e:03:f4:6c:8a:03:8b:
a2:9e:d4:63:7b:64:15:8a:a0:70:16:0c:b1:fd:21:
e0:47:cc:fa:da:50:a9:bf:c6:b7:5a:c2:ef:bf:1c:
00:df:f2:1a:f6:7a:2a:b0:08:e9:78:be:ec:45:49:
e0:00:19:c2:e8:6d:cc:5d:06:64:82:5b:1b:7f:0d:
26:da:e8:e0:67:b5:51:8b:81:a9:2e:7f:93:eb:0e:
67:90:ab:ad:09:17:54:f2:7b:e5:51:13:b9:d0:21:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:92:58:A2:33:5C:1D:C1:55:73:71:33:3E:5C:CD:D7:97:87:24:24
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7c:44:be:be:3d:b5:0f:4f:08:d6:26:d5:60:41:77:b0:07:
cd:86:13:d7:c7:b8:0f:d3:7e:0a:b0:a1:ae:c6:d7:f2:7f:b2:
93:33:f8:59:1b:07:8e:ed:cd:a7:48:12:f5:8c:5c:d0:e9:cb:
97:b8:63:c7:06:bb:2f:d5:4b:83:5b:d2:82:3d:43:6e:ae:d4:
43:1b:d2:d9:4d:81:3e:80:1c:d9:85:f4:36:bc:13:32:cb:19:
b8:80:73:99:c5:c7:71:e5:db:06:d5:71:1d:d0:a7:65:59:66:
b2:bc:5a:78:c7:62:e4:e0:96:28:53:38:bf:58:02:9d:5e:d8:
93:f6:dc:4e:f1:c4:c1:80:9a:7b:c3:b1:cd:4d:f7:65:c6:a7:
bb:83:58:ce:53:2e:3c:02:a2:29:f2:ca:20:25:3d:88:2d:3a:
70:bf:c2:b9:df:7f:3f:9a:2a:aa:01:67:5e:c9:eb:8b:b3:0b:
fb:7e:fd:c2:8a:9b:ef:ab:df:14:c1:75:0b:f9:2f:0b:54:3f:
fa:e3:b7:eb:06:5c:ca:f5:f6:d9:2e:89:7c:84:05:04:3c:79:
5c:be:7d:6a:ac:54:db:a0:a0:8d:81:da:e3:5f:b0:64:58:fe:
ec:d5:84:d1:d7:92:b6:62:da:f5:8d:d1:04:be:f1:d3:89:25:
fb:a4:cc:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZB55Wz6AdPnbXXP5otvEjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0
YTJmMTkwHhcNMjUwNDE3MDQwMDE4WhcNMjUwNDE4MDQwMDE4WjAzMTEwLwYDVQQD
Eyg1NzkyNThhMjMzNWMxZGMxNTU3MzcxMzMzZTVjY2RkNzk3ODcyNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ0zTeQFZdb1zB7lLi/mRGTcCZh3
R1HOPZ5KtVmiU5cvfo0fPLpRsY+uzYwMbXB3ecKlmWeQnRZCLzjo/oZWcsVGp3Ms
CbyhMvu3i+zq95tLeSYU2NrlpTJ6xbQYpiQTWFjd1hCTOxD89fyErdaAHF8NX0Hg
MNFTSsdkv1zv7YpWKlMytjxxuLPFetzh0bWvLUfQBvB9Oh/pBIcyCn4D9GyKA4ui
ntRje2QViqBwFgyx/SHgR8z62lCpv8a3WsLvvxwA3/Ia9noqsAjpeL7sRUngABnC
6G3MXQZkglsbfw0m2ujgZ7VRi4GpLn+T6w5nkKutCRdU8nvlURO50CFPaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeSWKIzXB3BVXNxMz5czdeXhyQkMB8GA1UdIwQY
MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt
Yjg1MTg5MDk4MjBmLzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm
LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHxEvr49
tQ9PCNYm1WBBd7AHzYYT18e4D9N+CrChrsbX8n+ykzP4WRsHju3Np0gS9Yxc0OnL
l7hjxwa7L9VLg1vSgj1Dbq7UQxvS2U2BPoAc2YX0NrwTMssZuIBzmcXHceXbBtVx
HdCnZVlmsrxaeMdi5OCWKFM4v1gCnV7Yk/bcTvHEwYCae8OxzU33Zcanu4NYzlMu
PAKiKfLKICU9iC06cL/Cud9/P5oqqgFnXsnri7ML+379woqb76vfFMF1C/kvC1Q/
+uO36wZcyvX22S6JfIQFBDx5XL59aqxU26CgjYHa41+wZFj+7NWE0deStmLa9Y3R
BL7x04kl+6TMdQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:59:35 2025 by rpki-client