Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: X5ZbhXnyU0nD5Xk2hwkK/fqI31yC5TTlXuV9LXCarPc=
Subject key identifier: AA:4F:E0:40:5B:A8:EC:01:3C:64:E2:09:80:70:7D:78:E3:1B:5B:60
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 01964C6BAE8BC735986B17DC531D2A4CF918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 05:00:47 +0000
Manifest this update: Sat 19 Apr 2025 05:00:47 +0000
Manifest next update: Sun 20 Apr 2025 05:00:47 +0000
Files and hashes: 1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: Usc5smHlHJGRpWJ4+Qg8D7eF43X71Bm5UujBF2mm6RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:ae:8b:c7:35:98:6b:17:dc:53:1d:2a:4c:f9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Apr 19 05:00:47 2025 GMT
Not After : Apr 20 05:00:47 2025 GMT
Subject: CN=aa4fe0405ba8ec013c64e20980707d78e31b5b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:42:7c:fd:bc:59:98:62:16:c8:44:69:35:
c0:7d:ce:44:42:aa:74:61:92:34:9d:d8:03:ca:8f:
15:92:0c:5d:c0:d2:0c:41:75:61:e0:d8:7f:db:4c:
1e:c4:9b:65:30:e8:05:d5:c0:5b:22:55:4a:99:d8:
9b:a4:aa:81:61:00:64:32:e3:58:c7:0a:be:e8:fe:
4f:67:52:be:6b:b3:6f:bd:ad:02:07:12:41:6e:b6:
84:b2:52:6c:73:81:99:66:c7:3d:85:69:19:fc:91:
77:c2:41:e8:47:f6:6a:33:f1:5c:92:75:84:b7:d1:
c3:1a:15:bf:a0:0b:73:9e:05:bd:6b:c6:b5:32:65:
29:18:be:60:4b:d4:50:6c:ed:1b:ff:96:97:98:3d:
16:dd:aa:c1:34:28:ea:9d:00:21:1f:20:ba:8b:30:
41:e5:c9:b1:09:d2:f9:e0:fa:38:8e:d7:60:ab:9c:
4a:da:2b:41:93:ef:ba:b4:e9:9d:d5:60:89:8b:df:
17:24:3f:70:79:98:63:ff:da:89:18:c5:13:30:b6:
40:a4:f4:29:bd:7e:92:d8:46:d6:0a:18:59:4b:53:
b7:d3:ec:e7:1e:2f:5e:59:51:da:94:07:a1:38:a6:
71:e8:f5:26:ae:61:4d:e3:26:4e:5e:73:fd:97:a6:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:E0:40:5B:A8:EC:01:3C:64:E2:09:80:70:7D:78:E3:1B:5B:60
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:24:58:1e:fd:f6:8c:63:d3:7c:c5:f3:8d:92:df:c8:13:59:
32:a7:74:ee:15:c1:a3:ca:de:19:8b:75:7d:74:d2:1b:d1:fc:
ba:68:d5:76:81:d2:28:69:fb:ec:58:0c:08:e1:fc:31:7e:d1:
44:fc:b9:b9:9b:cf:52:39:10:dd:68:05:07:15:f5:16:dd:33:
9e:c0:ea:d8:e1:a2:eb:fa:be:da:63:06:02:eb:2e:a8:bc:ae:
00:2f:d9:bf:08:dc:f6:f7:c4:0a:3e:5a:d1:d1:3a:34:5c:85:
f5:56:98:fe:40:37:76:f0:84:9b:79:a2:a7:55:ff:6d:a3:8c:
20:34:4e:58:44:b3:78:3e:17:a6:b5:12:58:55:00:32:7e:b6:
17:4e:23:73:95:a2:21:64:a0:c0:57:74:a3:4c:0e:bc:75:27:
1b:7a:ee:c6:23:ea:01:c4:ee:a7:a7:16:b0:d8:37:08:28:d2:
41:89:fd:2a:2a:f5:93:dc:3e:25:eb:8e:78:9c:6a:cd:b0:fc:
d2:62:93:9c:8f:25:ac:cb:58:ed:26:73:00:a6:58:74:8d:24:
99:d1:2a:26:8a:37:4f:e4:3d:14:d9:3b:5f:cc:d8:e8:b9:12:
64:ff:90:4e:27:6e:cd:72:79:08:9b:1b:e5:cb:76:c2:37:e4:
e1:57:17:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMa66LxzWYaxfcUx0qTPkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODg1NTYzNWU0Nzk0ZjU4NzhlM2I5ODVmZWQ4OTM1YWUw
NmM1YTEwHhcNMjUwNDE5MDUwMDQ3WhcNMjUwNDIwMDUwMDQ3WjAzMTEwLwYDVQQD
EyhhYTRmZTA0MDViYThlYzAxM2M2NGUyMDk4MDcwN2Q3OGUzMWI1YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQdCfP28WZhiFshEaTXAfc5EQqp0
YZI0ndgDyo8VkgxdwNIMQXVh4Nh/20wexJtlMOgF1cBbIlVKmdibpKqBYQBkMuNY
xwq+6P5PZ1K+a7Nvva0CBxJBbraEslJsc4GZZsc9hWkZ/JF3wkHoR/ZqM/FcknWE
t9HDGhW/oAtzngW9a8a1MmUpGL5gS9RQbO0b/5aXmD0W3arBNCjqnQAhHyC6izBB
5cmxCdL54Po4jtdgq5xK2itBk++6tOmd1WCJi98XJD9weZhj/9qJGMUTMLZApPQp
vX6S2EbWChhZS1O30+znHi9eWVHalAehOKZx6PUmrmFN4yZOXnP9l6bv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpP4EBbqOwBPGTiCYBwfXjjG1tgMB8GA1UdIwQY
MBaAFGGIVWNeR5T1h447mF/tiTWuBsWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQt
MGViNmJiZjY1YjFmLzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQtMGViNmJiZjY1YjFm
LzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyRYHv32
jGPTfMXzjZLfyBNZMqd07hXBo8reGYt1fXTSG9H8umjVdoHSKGn77FgMCOH8MX7R
RPy5uZvPUjkQ3WgFBxX1Ft0znsDq2OGi6/q+2mMGAusuqLyuAC/Zvwjc9vfECj5a
0dE6NFyF9VaY/kA3dvCEm3mip1X/baOMIDROWESzeD4XprUSWFUAMn62F04jc5Wi
IWSgwFd0o0wOvHUnG3ruxiPqAcTup6cWsNg3CCjSQYn9Kir1k9w+JeuOeJxqzbD8
0mKTnI8lrMtY7SZzAKZYdI0kmdEqJoo3T+Q9FNk7X8zY6LkSZP+QTiduzXJ5CJsb
5ct2wjfk4VcXjg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:38 2025 by rpki-client