Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier: UwEYELR50liFZFeRrOgcTVt3m5NejIUdKrx1HmOJ4HU=
Subject key identifier: 00:E3:98:9C:2B:04:43:C7:26:5B:5A:06:87:E9:25:D5:F4:67:27:19
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 01964DEC4D73815E051CDD2B171E87396ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number: 1500
Signing time: Sat 19 Apr 2025 12:00:53 +0000
Manifest this update: Sat 19 Apr 2025 12:00:53 +0000
Manifest next update: Sun 20 Apr 2025 12:00:53 +0000
Files and hashes: 1: M6Kiusoj-vmcX-l1FvQ-whelTCY.roa (hash: PZnmBtue/4j7K73vwfKaOFXRKwScBqdnVIvN9DoCZyQ=)
2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=)
3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: rXQmsvtYqP87WBTpvXfjsbhcg934XbAqMPIY7tCsCDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:4d:73:81:5e:05:1c:dd:2b:17:1e:87:39:6e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Apr 19 12:00:53 2025 GMT
Not After : Apr 20 12:00:53 2025 GMT
Subject: CN=00e3989c2b0443c7265b5a0687e925d5f4672719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:2a:78:78:a7:a1:79:66:10:17:d3:06:f0:
a3:4a:09:b3:51:1b:25:88:dc:2f:86:6e:93:80:7c:
0c:f8:e7:1c:a3:48:c2:9a:00:a4:72:20:0c:79:54:
1d:53:fd:52:e9:b9:52:41:4e:31:1b:13:e7:09:f3:
10:d0:8d:68:91:3d:03:d0:a6:76:7b:ee:53:39:cc:
63:f4:6f:b5:36:ad:d2:8b:de:e0:9e:6d:31:ca:ab:
8b:11:5b:bb:c9:58:b4:82:a6:0d:85:5d:7e:31:2e:
63:c4:35:78:49:2d:eb:b9:36:46:6e:55:07:e6:4d:
9d:9a:e7:d5:86:6d:9e:3a:ff:48:28:e2:56:32:19:
4f:86:1a:9b:bf:59:e1:08:63:6d:47:a4:03:56:aa:
13:03:49:2a:91:18:00:ba:b9:0c:08:64:8e:b9:42:
c7:2d:48:88:2c:17:53:e1:cf:18:36:d6:62:2b:3c:
15:f8:bf:e3:e3:5d:df:94:7e:06:33:21:37:2a:99:
54:f0:f9:77:a6:f3:38:cf:1c:62:9b:12:68:0d:77:
b6:b4:16:7b:ea:af:22:c9:a5:71:77:ea:12:e1:63:
a7:8b:f4:a2:bf:26:1a:7a:f6:63:97:b4:3e:bd:66:
88:22:72:83:6a:33:03:9f:47:21:0d:07:0c:3f:fb:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E3:98:9C:2B:04:43:C7:26:5B:5A:06:87:E9:25:D5:F4:67:27:19
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:66:9c:80:a6:f7:07:00:b4:e1:bb:3e:59:30:48:1c:d6:d5:
b5:f0:cb:4e:1a:c1:e8:07:df:b2:fe:62:6d:ff:4c:c8:36:33:
17:df:70:1a:85:57:9f:52:ac:4a:e4:aa:f2:74:f1:63:f7:aa:
ac:5e:c3:0f:b4:c2:86:a3:01:b8:13:9f:b8:9a:cb:e9:bd:fa:
72:85:1c:bc:15:69:c1:0b:5f:66:94:7d:d2:9f:55:70:3e:61:
1b:3d:46:6f:f6:8e:38:fc:f4:f1:af:7d:9f:d1:9d:81:a3:97:
be:83:15:e8:15:93:79:f3:ea:74:c5:1d:bb:9d:38:16:63:79:
ef:cd:5d:79:99:1f:aa:3f:12:d3:9b:ff:39:39:4f:a5:01:01:
15:93:66:41:be:fa:0c:ff:36:08:c2:86:d9:54:88:6f:a1:d7:
14:d3:f1:f8:a8:12:ff:3c:2d:75:1a:b7:a1:69:3a:36:27:e5:
78:43:18:8a:88:63:a8:de:4b:2c:b3:71:cd:a5:d0:dc:27:e7:
b8:9b:4b:5d:ce:9f:c5:0b:60:9e:5e:92:42:f8:72:95:37:5a:
ea:2b:00:da:80:5b:95:e7:11:b2:11:7e:e0:34:db:a2:e2:4e:
00:1c:17:50:b8:de:ff:1f:12:c7:f8:cc:3d:91:74:63:27:be:
92:c6:c1:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN7E1zgV4FHN0rFx6HOW7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGNiNjk1YzcwZGI0Yjk2MzcwNjAwNzUwOTE4YTRiM2E4
YTIxYTkwHhcNMjUwNDE5MTIwMDUzWhcNMjUwNDIwMTIwMDUzWjAzMTEwLwYDVQQD
EygwMGUzOTg5YzJiMDQ0M2M3MjY1YjVhMDY4N2U5MjVkNWY0NjcyNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVoqeHinoXlmEBfTBvCjSgmzURsl
iNwvhm6TgHwM+Occo0jCmgCkciAMeVQdU/1S6blSQU4xGxPnCfMQ0I1okT0D0KZ2
e+5TOcxj9G+1Nq3Si97gnm0xyquLEVu7yVi0gqYNhV1+MS5jxDV4SS3ruTZGblUH
5k2dmufVhm2eOv9IKOJWMhlPhhqbv1nhCGNtR6QDVqoTA0kqkRgAurkMCGSOuULH
LUiILBdT4c8YNtZiKzwV+L/j413flH4GMyE3KplU8Pl3pvM4zxximxJoDXe2tBZ7
6q8iyaVxd+oS4WOni/SivyYaevZjl7Q+vWaIInKDajMDn0chDQcMP/tOzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADjmJwrBEPHJltaBofpJdX0ZycZMB8GA1UdIwQY
MBaAFMnctpXHDbS5Y3BgB1CRiks6iiGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTIt
ZWNhOTc4YzNjYjg1LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTItZWNhOTc4YzNjYjg1
LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmacgKb3
BwC04bs+WTBIHNbVtfDLThrB6Affsv5ibf9MyDYzF99wGoVXn1KsSuSq8nTxY/eq
rF7DD7TChqMBuBOfuJrL6b36coUcvBVpwQtfZpR90p9VcD5hGz1Gb/aOOPz08a99
n9GdgaOXvoMV6BWTefPqdMUdu504FmN5781deZkfqj8S05v/OTlPpQEBFZNmQb76
DP82CMKG2VSIb6HXFNPx+KgS/zwtdRq3oWk6NifleEMYiohjqN5LLLNxzaXQ3Cfn
uJtLXc6fxQtgnl6SQvhylTda6isA2oBblecRshF+4DTbouJOABwXULje/x8Sx/jM
PZF0Yye+ksbBRQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:57:05 2025 by rpki-client