Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: X9F5upS6kFa02EI7YsUSniUe52edds9HrqTnKppgC/I=
Subject key identifier: 24:C1:C5:55:E3:48:E5:4E:C7:27:B6:4C:4F:19:AC:A4:BC:52:97:A9
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 0196089D74BA61D42D442D9FF05B0ACAF641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 1217
Signing time: Sun 06 Apr 2025 01:00:58 +0000
Manifest this update: Sun 06 Apr 2025 01:00:58 +0000
Manifest next update: Mon 07 Apr 2025 01:00:58 +0000
Files and hashes: 1: 4shZBDKZZPGnSQMfuQiOImBHql8.roa (hash: Jfoq3n1s/kyNKvCWlVGyWbHUx4CSO8/9+CCCYgnc/Us=)
2: FA2h5OHRpegZzdAFMMwkYVBg-BM.roa (hash: 9GzazJbnHKp6+I1Ph8x2q38kHV8Nlnih0rihfAr5aBo=)
3: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: cSrB5q61mpxJQzzRu5qRhmAIAmA/XppGytP263pu6f8=)
4: ZEOW67E73LjGkhRbjT8p8HAuQ7g.roa (hash: 3byQhC85THLNsX/WfVA4T3mVllKuuMpO1Ynx6g/Ksak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:9d:74:ba:61:d4:2d:44:2d:9f:f0:5b:0a:ca:f6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Apr 6 01:00:58 2025 GMT
Not After : Apr 7 01:00:58 2025 GMT
Subject: CN=24c1c555e348e54ec727b64c4f19aca4bc5297a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:2f:58:9f:9b:b6:2f:a9:07:02:24:5c:3e:
45:3f:98:1c:1c:6b:e1:47:36:30:32:e5:53:27:5d:
0e:c5:85:21:34:bf:9b:f9:86:36:69:b7:0d:e7:85:
fd:85:35:84:4c:ea:70:d0:b8:a1:c9:24:81:98:7b:
8d:5e:98:62:e1:08:98:d9:1c:9c:cb:90:60:a7:42:
72:49:61:d1:f8:6d:1d:7b:26:e6:9e:a0:e5:b0:0f:
68:60:30:63:cb:54:3c:fa:78:2f:f7:03:6f:e2:7e:
f8:e8:60:99:e2:46:f6:20:9d:1f:a4:d3:8d:ea:68:
bd:ad:2f:ac:2c:a3:b4:2d:cb:a7:88:a4:25:88:0c:
2e:37:f0:27:9c:89:dc:fc:e6:06:b6:4a:b3:80:3d:
b2:71:8b:f6:ac:b5:6f:41:d3:68:6a:a4:6b:c1:75:
4c:40:56:7b:5b:fe:73:18:38:26:14:86:2d:0c:aa:
aa:f5:6b:9a:7f:66:b4:df:0c:cd:9f:97:db:49:be:
64:6f:b1:8f:12:08:d0:52:79:8a:f9:2b:48:b4:ee:
5f:36:ef:52:69:4e:af:3b:93:17:40:fb:31:ca:aa:
c7:3b:37:dd:d8:16:63:de:36:44:ef:a8:9d:54:3c:
52:3e:01:8e:6f:78:41:b4:f4:02:81:81:92:a2:2d:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:C5:55:E3:48:E5:4E:C7:27:B6:4C:4F:19:AC:A4:BC:52:97:A9
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:49:1e:6c:96:3c:a3:45:62:00:12:24:a5:7a:34:4d:13:75:
a0:1a:a7:03:54:e2:3b:25:bf:a6:c3:77:90:e6:8e:0f:01:1c:
cb:07:2d:b3:a6:99:41:db:23:0a:fc:49:28:30:b3:0c:bd:2a:
65:ab:90:a8:ba:9a:7b:e9:5c:ad:94:23:e0:62:3b:cb:ad:5c:
42:fc:1c:3f:ce:d5:5e:47:bf:0d:23:21:ed:09:11:16:2b:00:
03:42:ba:b2:45:59:c3:ac:45:34:86:26:ab:c7:a1:2f:34:9c:
6d:ad:e2:73:37:5c:c6:f9:28:e9:a5:e7:62:6b:a1:cd:2f:aa:
05:17:c4:a2:b3:f7:f5:bc:47:20:16:4f:64:e5:a8:99:80:f9:
e8:fd:12:a5:1c:9b:61:4c:f1:7e:a3:43:bf:f0:aa:45:da:fe:
d8:5a:cf:df:a3:2c:60:66:e1:14:d6:f4:90:99:0c:60:12:94:
13:6f:03:e1:aa:9f:66:db:42:59:bf:ea:61:77:ce:fd:c6:ca:
cf:57:08:96:43:cc:b0:38:a9:9b:a0:6d:c8:6b:9b:07:ad:90:
5c:a5:73:60:d7:b5:37:1f:d0:0d:7a:69:d6:a2:19:4a:62:c2:
9b:2b:d2:d9:67:05:92:94:2a:1c:66:ac:a4:97:fd:9d:42:8a:
a4:53:fc:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYInXS6YdQtRC2f8FsKyvZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOTI3YjM2YjEzOGYwODYzNTg5MzhlM2FjZmRhNDYzOGU1
NmE3OTIwHhcNMjUwNDA2MDEwMDU4WhcNMjUwNDA3MDEwMDU4WjAzMTEwLwYDVQQD
EygyNGMxYzU1NWUzNDhlNTRlYzcyN2I2NGM0ZjE5YWNhNGJjNTI5N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKovWJ+bti+pBwIkXD5FP5gcHGvh
RzYwMuVTJ10OxYUhNL+b+YY2abcN54X9hTWETOpw0LihySSBmHuNXphi4QiY2Ryc
y5Bgp0JySWHR+G0deybmnqDlsA9oYDBjy1Q8+ngv9wNv4n746GCZ4kb2IJ0fpNON
6mi9rS+sLKO0LcuniKQliAwuN/AnnInc/OYGtkqzgD2ycYv2rLVvQdNoaqRrwXVM
QFZ7W/5zGDgmFIYtDKqq9Wuaf2a03wzNn5fbSb5kb7GPEgjQUnmK+StItO5fNu9S
aU6vO5MXQPsxyqrHOzfd2BZj3jZE76idVDxSPgGOb3hBtPQCgYGSoi37uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTBxVXjSOVOxye2TE8ZrKS8UpepMB8GA1UdIwQY
MBaAFGKSezaxOPCGNYk446z9pGOOVqeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEt
YTk5YzdlZTVjMjg0LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEtYTk5YzdlZTVjMjg0
LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkkebJY8
o0ViABIkpXo0TRN1oBqnA1TiOyW/psN3kOaODwEcywcts6aZQdsjCvxJKDCzDL0q
ZauQqLqae+lcrZQj4GI7y61cQvwcP87VXke/DSMh7QkRFisAA0K6skVZw6xFNIYm
q8ehLzScba3iczdcxvko6aXnYmuhzS+qBRfEorP39bxHIBZPZOWomYD56P0SpRyb
YUzxfqNDv/CqRdr+2FrP36MsYGbhFNb0kJkMYBKUE28D4aqfZttCWb/qYXfO/cbK
z1cIlkPMsDipm6BtyGubB62QXKVzYNe1Nx/QDXpp1qIZSmLCmyvS2WcFkpQqHGas
pJf9nUKKpFP85A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:32 2025 by rpki-client