Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: /hxisAnl2R267wTpBgfBqlukGpv4uOAWGVNduSfEAyU=
Subject key identifier: BB:E6:1D:D3:13:47:26:D6:8A:57:FD:18:BA:13:25:3A:5A:FD:26:E1
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 01965F162DD1772F81058317E91355630035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 02A9
Signing time: Tue 22 Apr 2025 20:00:11 +0000
Manifest this update: Tue 22 Apr 2025 20:00:11 +0000
Manifest next update: Wed 23 Apr 2025 20:00:11 +0000
Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: 5y8sQqRLifpEAtKPCvH0G7ESZBN28hVfNNkUlAn7IOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:2d:d1:77:2f:81:05:83:17:e9:13:55:63:00:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: Apr 22 20:00:11 2025 GMT
Not After : Apr 23 20:00:11 2025 GMT
Subject: CN=bbe61dd3134726d68a57fd18ba13253a5afd26e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:ec:68:f0:00:48:ef:de:e7:f5:31:2c:21:
fd:84:c4:f4:0f:cc:a4:24:ac:c9:34:67:d7:0e:8e:
47:c0:01:6e:b4:cd:d5:de:27:71:49:89:c1:24:61:
1e:0a:52:d8:93:5c:3f:19:79:48:52:73:c8:69:5d:
d0:c9:f0:5b:c2:91:7d:61:74:8e:a0:5f:af:24:ce:
21:eb:03:ac:66:67:ef:20:1e:c7:0d:7d:02:39:e4:
21:d7:ed:9d:9f:db:a7:d8:a1:67:64:b4:ea:08:44:
ce:66:0e:7d:8e:c2:5e:8a:b7:11:8b:a5:53:6c:67:
c7:ef:8f:a5:6d:b9:a1:85:53:63:9f:35:b2:31:11:
61:b9:e2:5f:44:3f:98:cc:16:d9:06:7d:33:a7:b7:
ac:aa:2d:b4:af:fb:03:65:ff:15:03:39:13:62:cd:
5f:11:f4:6d:05:fe:84:28:6e:4c:2e:25:57:dd:b7:
45:30:c0:3c:75:97:7c:6d:ea:fb:b2:e1:05:00:52:
5a:1d:35:7c:44:ec:f6:d9:a1:4b:3c:09:3c:11:28:
ad:f0:1d:44:3e:ba:e8:b5:6f:63:c1:00:b7:e8:1b:
21:85:7f:57:fe:0e:1c:e9:2b:c0:a8:54:32:3b:9d:
2f:48:b7:62:74:56:08:77:23:5c:f7:e0:e0:87:fb:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:1D:D3:13:47:26:D6:8A:57:FD:18:BA:13:25:3A:5A:FD:26:E1
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4a:36:ce:87:83:f0:b7:b6:8c:b1:ab:63:ea:86:dd:bf:aa:
7a:56:8e:fd:07:a0:f8:e2:c0:d0:01:f2:a7:d4:33:83:d8:2c:
0a:cd:0f:36:83:67:08:45:b2:5e:51:d6:a2:fc:1e:36:71:3e:
64:7d:2d:ea:28:7e:48:8a:2d:0f:b7:10:07:d7:ab:8a:21:80:
9c:4a:13:0a:af:8b:db:af:57:59:c3:7b:62:83:48:8f:aa:60:
2e:a7:1f:19:ad:cd:b4:48:f5:3d:9f:6b:d0:91:a8:8d:ed:63:
fb:27:46:7b:50:72:40:0a:2d:98:13:dd:9e:ed:d0:cc:5e:05:
72:47:0d:4f:f0:a1:d2:de:d2:35:61:9d:6b:67:ce:b8:0a:c6:
da:cf:21:06:51:7e:6c:6d:01:b3:77:59:9e:d8:4b:ad:16:6b:
9a:34:ac:27:69:73:2d:06:63:69:b8:68:ff:55:d5:82:38:bb:
c0:e6:21:1a:88:14:6c:7d:5d:48:dd:c5:2b:a2:d4:f3:19:14:
ab:ea:83:5a:17:bf:ef:c6:07:7a:1d:c2:05:c4:e1:7b:ab:0a:
90:7f:6b:cc:80:a9:ea:44:19:05:69:9a:43:ef:56:b6:0a:84:
45:63:7a:e3:e5:52:d2:90:1d:16:7a:22:ae:bf:48:fd:1c:85:
99:21:a8:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfFi3Rdy+BBYMX6RNVYwA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTJkOGJhMmUwODk0ZGQwNmNhMTQzYTU1MTcyMzRlNTg0
YWY4YzcwHhcNMjUwNDIyMjAwMDExWhcNMjUwNDIzMjAwMDExWjAzMTEwLwYDVQQD
EyhiYmU2MWRkMzEzNDcyNmQ2OGE1N2ZkMThiYTEzMjUzYTVhZmQyNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mnsaPAASO/e5/UxLCH9hMT0D8yk
JKzJNGfXDo5HwAFutM3V3idxSYnBJGEeClLYk1w/GXlIUnPIaV3QyfBbwpF9YXSO
oF+vJM4h6wOsZmfvIB7HDX0COeQh1+2dn9un2KFnZLTqCETOZg59jsJeircRi6VT
bGfH74+lbbmhhVNjnzWyMRFhueJfRD+YzBbZBn0zp7esqi20r/sDZf8VAzkTYs1f
EfRtBf6EKG5MLiVX3bdFMMA8dZd8ber7suEFAFJaHTV8ROz22aFLPAk8ESit8B1E
PrrotW9jwQC36BshhX9X/g4c6SvAqFQyO50vSLdidFYIdyNc9+Dgh/s7cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvmHdMTRybWilf9GLoTJTpa/SbhMB8GA1UdIwQY
MBaAFMsS2LouCJTdBsoUOlUXI05YSvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMt
MzRlMjI3OWJlNzY1LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMtMzRlMjI3OWJlNzY1
LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEo2zoeD
8Le2jLGrY+qG3b+qelaO/Qeg+OLA0AHyp9Qzg9gsCs0PNoNnCEWyXlHWovweNnE+
ZH0t6ih+SIotD7cQB9eriiGAnEoTCq+L269XWcN7YoNIj6pgLqcfGa3NtEj1PZ9r
0JGoje1j+ydGe1ByQAotmBPdnu3QzF4FckcNT/Ch0t7SNWGda2fOuArG2s8hBlF+
bG0Bs3dZnthLrRZrmjSsJ2lzLQZjabho/1XVgji7wOYhGogUbH1dSN3FK6LU8xkU
q+qDWhe/78YHeh3CBcThe6sKkH9rzICp6kQZBWmaQ+9WtgqERWN64+VS0pAdFnoi
rr9I/RyFmSGoLQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:35:14 2025 by rpki-client