Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: frIwmiqk2FeP4WV9Pdj58QELaAvz0BVJfpGcxG/kaGU=
Subject key identifier: A7:3A:40:A1:83:01:CA:8D:69:A2:F2:08:DA:07:CF:8F:C9:7A:A5:82
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 0194C3F5798FA26B9BF47636FC90F84AE598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 9B
Signing time: Sun 02 Feb 2025 00:00:32 +0000
Manifest this update: Sun 02 Feb 2025 00:00:32 +0000
Manifest next update: Mon 03 Feb 2025 00:00:32 +0000
Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: nEW7B3V/XtWIhSlaqWtHDuMTRw19exf1us/2J4ml55E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:79:8f:a2:6b:9b:f4:76:36:fc:90:f8:4a:e5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Feb 2 00:00:32 2025 GMT
Not After : Feb 3 00:00:32 2025 GMT
Subject: CN=a73a40a18301ca8d69a2f208da07cf8fc97aa582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:54:ea:86:6c:21:ea:37:cb:17:06:21:fb:
93:5d:8e:5c:16:d3:81:b5:35:4a:dc:60:ac:9d:86:
cd:29:00:95:ee:37:91:53:94:cb:76:3a:2d:14:39:
04:30:f5:4b:b1:61:f0:f8:57:7c:73:6c:24:91:80:
9a:38:91:15:80:93:eb:d9:33:ab:ea:26:ee:47:77:
9c:d6:21:70:84:24:df:6c:0d:68:03:91:5c:6c:7a:
91:76:39:f7:f1:8b:44:35:8b:ed:a7:f0:67:f5:19:
f7:ef:45:66:50:59:31:33:d0:90:76:85:28:66:34:
9a:ec:b8:26:b2:3c:87:d0:d9:10:88:35:50:3e:dc:
63:d6:ee:93:e3:a5:2b:54:cb:c6:ee:18:98:70:e4:
8a:cc:38:ea:89:d6:89:bb:42:19:b8:d8:14:bc:68:
bd:74:78:d3:68:4a:8d:f0:81:5a:37:52:52:9b:e0:
7f:fe:f2:fb:7d:87:94:cb:03:78:37:fd:4b:29:e9:
d4:be:79:7b:30:52:d3:cb:b0:0c:8d:c4:d7:11:fb:
01:74:f4:87:2b:81:39:59:5a:a1:a9:82:f8:1c:9b:
ab:5b:32:d6:f3:b1:fc:f2:58:76:b5:a7:77:c1:32:
a6:bb:67:62:39:13:cd:e8:19:42:51:9c:95:43:78:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:40:A1:83:01:CA:8D:69:A2:F2:08:DA:07:CF:8F:C9:7A:A5:82
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6e:12:0a:6c:9a:87:01:dc:be:e3:b8:ce:d9:78:92:fc:4a:
71:4b:c7:4f:30:05:82:80:8c:86:c7:2b:a6:b4:1d:06:56:6d:
1a:47:bb:d6:93:f0:3f:fa:dc:ae:f1:b2:3a:5c:ec:d9:1f:b1:
63:b3:2d:b0:29:5e:cb:e9:8a:d0:8f:f3:aa:08:80:2d:b8:34:
b5:f1:da:29:10:4b:56:19:23:f7:57:c2:fc:8d:57:8e:e4:a3:
4c:03:75:2e:9c:3a:74:6c:df:b9:91:84:71:ff:7f:e9:2c:6a:
de:a1:d3:74:28:93:b6:be:61:75:02:df:0c:43:f1:3e:9a:37:
5d:a4:3f:29:93:f5:e9:6f:9f:ba:7a:d3:aa:a3:f6:36:8e:83:
c7:f7:ec:19:b0:54:f0:8a:1e:87:1c:87:90:bc:05:7d:6f:83:
db:ce:92:da:47:40:3e:74:52:5d:68:18:ca:de:db:d5:36:d6:
88:aa:30:f4:c3:32:71:17:5f:87:6a:1b:f4:ea:41:bc:9a:b4:
33:8b:f2:5c:61:22:ea:db:e8:c2:49:83:38:b7:3b:53:29:32:
bb:74:8b:b5:aa:51:55:08:cb:48:ea:b6:d3:aa:69:9e:ee:f7:
23:ef:2d:c3:26:ca:d7:5d:aa:8a:7c:08:58:e3:db:b5:c8:cd:
f5:49:3c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9XmPomub9HY2/JD4SuWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm
ZTI2MWQwHhcNMjUwMjAyMDAwMDMyWhcNMjUwMjAzMDAwMDMyWjAzMTEwLwYDVQQD
EyhhNzNhNDBhMTgzMDFjYThkNjlhMmYyMDhkYTA3Y2Y4ZmM5N2FhNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC5U6oZsIeo3yxcGIfuTXY5cFtOB
tTVK3GCsnYbNKQCV7jeRU5TLdjotFDkEMPVLsWHw+Fd8c2wkkYCaOJEVgJPr2TOr
6ibuR3ec1iFwhCTfbA1oA5FcbHqRdjn38YtENYvtp/Bn9Rn370VmUFkxM9CQdoUo
ZjSa7LgmsjyH0NkQiDVQPtxj1u6T46UrVMvG7hiYcOSKzDjqidaJu0IZuNgUvGi9
dHjTaEqN8IFaN1JSm+B//vL7fYeUywN4N/1LKenUvnl7MFLTy7AMjcTXEfsBdPSH
K4E5WVqhqYL4HJurWzLW87H88lh2tad3wTKmu2diORPN6BlCUZyVQ3h5zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKc6QKGDAcqNaaLyCNoHz4/JeqWCMB8GA1UdIwQY
MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt
NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw
LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvW4SCmya
hwHcvuO4ztl4kvxKcUvHTzAFgoCMhscrprQdBlZtGke71pPwP/rcrvGyOlzs2R+x
Y7MtsCley+mK0I/zqgiALbg0tfHaKRBLVhkj91fC/I1XjuSjTAN1Lpw6dGzfuZGE
cf9/6Sxq3qHTdCiTtr5hdQLfDEPxPpo3XaQ/KZP16W+funrTqqP2No6Dx/fsGbBU
8IoehxyHkLwFfW+D286S2kdAPnRSXWgYyt7b1TbWiKow9MMycRdfh2ob9OpBvJq0
M4vyXGEi6tvowkmDOLc7Uykyu3SLtapRVQjLSOq206ppnu73I+8twybK112qinwI
WOPbtcjN9Uk8JQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:45 2025 by rpki-client