Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier: +dU+bfHwmNWeyHSMEXvH2IF3S3NDIf2LTixCE4A4fO0=
Subject key identifier: 6C:DC:94:87:58:1F:6C:02:13:ED:EE:04:5F:33:E7:42:CD:71:D5:3E
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 019653EE489BFE9A4CA601A40FECA73F1D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number: 0FC5
Signing time: Sun 20 Apr 2025 16:00:47 +0000
Manifest this update: Sun 20 Apr 2025 16:00:47 +0000
Manifest next update: Mon 21 Apr 2025 16:00:47 +0000
Files and hashes: 1: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: cIYHEwyKFTTRtk6R4oSALdiVN/E5XUnnzrnGXy6m8pc=)
2: rs5a3rW2E-ThNoq2t8O4hGc6590.roa (hash: YMDJkD8/KCkGFvxJ1si+V/dSXJflYLlhdawvNihd//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:48:9b:fe:9a:4c:a6:01:a4:0f:ec:a7:3f:1d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Apr 20 16:00:47 2025 GMT
Not After : Apr 21 16:00:47 2025 GMT
Subject: CN=6cdc9487581f6c0213edee045f33e742cd71d53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:6c:21:4b:87:0a:bb:16:e2:e0:ad:19:4f:
3a:10:1e:b7:eb:30:60:08:b6:57:b7:1e:30:8c:c0:
8b:fe:b2:d3:51:1d:b1:fb:10:a3:22:18:c2:81:1f:
e0:d7:79:8c:08:d1:21:93:18:21:ec:90:8a:e8:20:
1f:cc:8d:73:51:30:68:6e:a6:84:95:9d:f9:be:a6:
d5:29:72:53:05:b3:61:d4:a4:e4:7e:5c:cb:8b:81:
dc:5e:a4:09:42:79:f3:14:7e:4f:17:ff:d4:25:4e:
c6:ba:ff:e1:2e:7d:33:5b:4d:ec:2f:00:d0:e1:30:
cf:94:0e:c1:f2:3d:e9:30:45:72:5a:0a:8f:67:24:
39:e6:3c:5b:bd:b8:32:a7:d9:29:e5:22:66:d4:d0:
9c:d2:f5:c0:39:4d:49:ae:9a:57:3d:83:91:e0:67:
6f:5e:ac:b8:bd:f1:36:5d:90:08:9a:74:7d:a2:47:
48:7a:30:44:43:1c:f1:cd:82:f3:f1:0d:32:1b:a6:
44:da:ee:b1:c9:ea:f8:c3:fe:d9:12:02:f2:31:f6:
8a:97:60:06:a4:49:bb:5f:ff:1c:be:13:ab:84:65:
a6:9c:c9:c0:26:cf:e3:ca:2c:ba:4d:eb:a0:08:85:
f9:39:dc:a1:a2:63:a4:10:69:d3:b6:99:0c:9e:cf:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DC:94:87:58:1F:6C:02:13:ED:EE:04:5F:33:E7:42:CD:71:D5:3E
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:89:94:28:ba:26:fe:0b:84:87:06:d1:c6:8d:20:ca:cc:38:
e6:c8:8c:eb:39:17:90:68:8f:53:42:70:72:28:66:b3:1e:75:
e1:56:fd:ea:f0:20:06:d4:d0:a1:d6:4c:d1:ca:bc:ba:23:fc:
41:7e:ac:7e:80:03:0e:b7:47:9f:4c:7e:64:ae:0d:fd:10:ad:
c1:46:62:9c:18:64:6a:f3:f3:a2:5a:de:c1:6b:8d:ee:fa:bf:
2e:ba:c1:73:d4:27:6c:5b:32:6e:37:37:df:a9:56:27:21:3a:
95:22:86:f6:8a:c4:da:3f:63:a3:0c:63:b9:75:a9:04:27:66:
70:4c:e9:87:ac:12:a5:86:0a:e0:b8:44:66:84:2c:26:68:4c:
95:14:26:f6:3b:1d:c5:bb:a5:a3:f0:a4:c5:ef:d8:68:39:82:
d2:2f:f7:4e:6b:1d:cb:71:d4:b2:0b:3d:7f:4b:12:ce:81:e0:
48:b2:7b:fc:b7:7e:1d:91:3b:a2:56:47:b9:ab:92:d0:0d:fb:
9e:ed:44:47:b8:e7:00:89:13:1f:ca:7e:72:ce:2d:31:2a:1c:
e6:fa:67:03:3e:fa:24:56:4d:9b:10:da:24:c3:04:57:25:dc:
c5:ff:a5:b0:ec:27:ed:43:76:bf:de:4b:d2:1f:9f:11:d8:5a:
a1:98:cf:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7kib/ppMpgGkD+ynPx2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDM5ZDc0YjE3ZTY5MWRkMWIwNTIyMWM2MDk4Y2FmNWVl
OTNhMzYwHhcNMjUwNDIwMTYwMDQ3WhcNMjUwNDIxMTYwMDQ3WjAzMTEwLwYDVQQD
Eyg2Y2RjOTQ4NzU4MWY2YzAyMTNlZGVlMDQ1ZjMzZTc0MmNkNzFkNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstVsIUuHCrsW4uCtGU86EB636zBg
CLZXtx4wjMCL/rLTUR2x+xCjIhjCgR/g13mMCNEhkxgh7JCK6CAfzI1zUTBobqaE
lZ35vqbVKXJTBbNh1KTkflzLi4HcXqQJQnnzFH5PF//UJU7Guv/hLn0zW03sLwDQ
4TDPlA7B8j3pMEVyWgqPZyQ55jxbvbgyp9kp5SJm1NCc0vXAOU1JrppXPYOR4Gdv
Xqy4vfE2XZAImnR9okdIejBEQxzxzYLz8Q0yG6ZE2u6xyer4w/7ZEgLyMfaKl2AG
pEm7X/8cvhOrhGWmnMnAJs/jyiy6TeugCIX5OdyhomOkEGnTtpkMns+kDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzclIdYH2wCE+3uBF8z50LNcdU+MB8GA1UdIwQY
MBaAFGHTnXSxfmkd0bBSIcYJjK9e6To2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQt
OTgwNTExZGMwNWFlLzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQtOTgwNTExZGMwNWFl
LzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYmUKLom
/guEhwbRxo0gysw45siM6zkXkGiPU0Jwcihmsx514Vb96vAgBtTQodZM0cq8uiP8
QX6sfoADDrdHn0x+ZK4N/RCtwUZinBhkavPzolrewWuN7vq/LrrBc9QnbFsybjc3
36lWJyE6lSKG9orE2j9jowxjuXWpBCdmcEzph6wSpYYK4LhEZoQsJmhMlRQm9jsd
xbulo/Ckxe/YaDmC0i/3Tmsdy3HUsgs9f0sSzoHgSLJ7/Ld+HZE7olZHuauS0A37
nu1ER7jnAIkTH8p+cs4tMSoc5vpnAz76JFZNmxDaJMMEVyXcxf+lsOwn7UN2v95L
0h+fEdhaoZjPAw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:30 2025 by rpki-client