Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: Uegmkj++M8U5iDdPg+u2SvEQ2lhCcuHnB1fjvIxhdwY=
Subject key identifier: 13:93:E7:47:49:17:0E:B6:8D:80:F4:AF:1F:EC:13:8E:54:C1:3E:C9
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 01963FC2291B4EE3D001506CECAECABE1CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 04AB
Signing time: Wed 16 Apr 2025 18:00:11 +0000
Manifest this update: Wed 16 Apr 2025 18:00:11 +0000
Manifest next update: Thu 17 Apr 2025 18:00:11 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: sVzulGWNAibMwhhS0xA2q2Jz6m/VgUzPIyLftk7VkMM=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:29:1b:4e:e3:d0:01:50:6c:ec:ae:ca:be:1c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Apr 16 18:00:11 2025 GMT
Not After : Apr 17 18:00:11 2025 GMT
Subject: CN=1393e74749170eb68d80f4af1fec138e54c13ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:90:3f:6b:d4:63:c9:c7:99:13:60:b0:1c:
5d:8b:08:de:01:c6:dd:06:9d:8f:88:55:06:4f:73:
d8:ca:13:d4:f9:b9:3b:28:af:b1:5a:db:e1:50:5d:
5d:0a:62:f5:e4:de:3c:0b:6f:d4:fb:79:1d:6b:c6:
bd:49:5e:eb:30:84:94:c8:b2:a9:5a:48:c1:f8:e2:
3b:88:ad:ec:ca:18:75:f6:e4:6b:57:90:2a:6d:f5:
9a:5e:bf:44:c7:aa:23:28:1e:95:17:9e:55:4d:db:
35:e2:b0:42:46:b2:72:ab:e8:33:a3:d0:b1:45:e8:
c0:86:72:8f:4b:da:fe:00:69:18:67:61:6e:df:c8:
68:8e:fc:23:c8:bb:f4:74:ee:95:3c:26:3e:86:20:
c0:0c:c9:70:4b:fb:c0:54:28:e2:8e:32:6f:ac:a1:
fa:5f:e9:0d:d6:e5:f4:6e:c3:9c:c5:af:35:c8:6c:
28:a3:a3:a5:3d:db:ea:d0:d2:e8:dc:eb:2a:8e:96:
d0:cc:41:c8:be:f3:7e:9e:4f:28:61:ff:c7:a0:40:
10:ad:90:5b:98:2b:39:9f:60:e6:0a:4e:08:52:db:
18:3b:d7:a9:0f:6a:a2:6e:50:d2:44:da:d5:85:e1:
8f:31:94:2e:91:6f:e1:5a:14:a1:34:3f:8b:68:f6:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:E7:47:49:17:0E:B6:8D:80:F4:AF:1F:EC:13:8E:54:C1:3E:C9
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:cd:26:6e:ab:37:69:59:08:4c:6a:e3:c8:df:d3:1c:98:fb:
6e:81:25:f4:d8:fc:13:2a:01:c8:47:d2:31:e2:10:d5:74:95:
64:ec:03:f1:f0:35:5e:89:da:87:ac:cc:52:f0:a5:3c:df:76:
c7:43:00:ca:92:a4:90:dd:48:e7:2c:d6:8d:dc:72:9e:a1:8b:
1a:21:09:8b:ec:93:62:6e:d8:35:74:11:bd:55:9a:bf:33:80:
ab:da:ab:65:4b:25:f5:9e:1f:f5:b0:07:f5:ca:2a:90:a5:29:
2e:3b:ae:49:c0:95:c1:9e:c7:a2:13:3f:ba:b9:0a:9c:c1:eb:
f3:77:59:f0:5a:06:33:50:29:a5:3c:a6:9a:35:c5:91:98:60:
ac:ad:93:98:5a:ff:01:f6:b9:17:4e:99:cd:8d:9d:2d:93:c6:
6b:84:b0:df:3b:cb:ff:cb:cc:ac:17:51:56:7e:1f:16:d5:f1:
b1:7e:06:f7:71:8f:99:83:9f:92:85:b0:77:f7:62:4d:73:29:
2a:4e:6f:0e:a4:89:00:fc:83:7d:c8:6d:99:3a:a7:19:7f:0f:
12:ae:80:d4:8c:59:58:f4:4b:28:61:d5:cb:1a:e0:b0:20:dd:
f9:b3:05:88:23:b1:1b:dd:a8:d7:75:18:d7:93:d0:a2:6d:c8:
31:80:52:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/wikbTuPQAVBs7K7Kvhy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODc4NDkyYTA2N2NiNWEzZWRmOTY5NWE2ZmQyNTg5ZjMy
NzNhYTcwHhcNMjUwNDE2MTgwMDExWhcNMjUwNDE3MTgwMDExWjAzMTEwLwYDVQQD
EygxMzkzZTc0NzQ5MTcwZWI2OGQ4MGY0YWYxZmVjMTM4ZTU0YzEzZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsKQP2vUY8nHmRNgsBxdiwjeAcbd
Bp2PiFUGT3PYyhPU+bk7KK+xWtvhUF1dCmL15N48C2/U+3kda8a9SV7rMISUyLKp
WkjB+OI7iK3syhh19uRrV5AqbfWaXr9Ex6ojKB6VF55VTds14rBCRrJyq+gzo9Cx
RejAhnKPS9r+AGkYZ2Fu38hojvwjyLv0dO6VPCY+hiDADMlwS/vAVCjijjJvrKH6
X+kN1uX0bsOcxa81yGwoo6OlPdvq0NLo3OsqjpbQzEHIvvN+nk8oYf/HoEAQrZBb
mCs5n2DmCk4IUtsYO9epD2qiblDSRNrVheGPMZQukW/hWhShND+LaPb49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOT50dJFw62jYD0rx/sE45UwT7JMB8GA1UdIwQY
MBaAFHWHhJKgZ8taPt+Wlab9JYnzJzqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMWJlNzctZTg3OC00NmU4LWE4NzUt
ZDA5ZmVlMDljY2IxLzEvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMWJlNzctZTg3OC00NmU4LWE4NzUtZDA5ZmVlMDljY2Ix
LzEvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtc0mbqs3
aVkITGrjyN/THJj7boEl9Nj8EyoByEfSMeIQ1XSVZOwD8fA1Xonah6zMUvClPN92
x0MAypKkkN1I5yzWjdxynqGLGiEJi+yTYm7YNXQRvVWavzOAq9qrZUsl9Z4f9bAH
9coqkKUpLjuuScCVwZ7HohM/urkKnMHr83dZ8FoGM1AppTymmjXFkZhgrK2TmFr/
Afa5F06ZzY2dLZPGa4Sw3zvL/8vMrBdRVn4fFtXxsX4G93GPmYOfkoWwd/diTXMp
Kk5vDqSJAPyDfchtmTqnGX8PEq6A1IxZWPRLKGHVyxrgsCDd+bMFiCOxG92o13UY
15PQom3IMYBSgg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 23:59:12 2025 by rpki-client