Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: cT5mJ919wqzokoLVgqfqQt+dgJcusrs9ORCrxqUfr3o=
Subject key identifier: 9D:E3:DD:35:86:3C:94:83:C2:A9:58:3E:97:86:49:7D:01:4F:26:CA
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 0196515B68781A4A8F1F30DAE479CEADF00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 04:01:06 +0000
Manifest this update: Sun 20 Apr 2025 04:01:06 +0000
Manifest next update: Mon 21 Apr 2025 04:01:06 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: vaB0dxZr2HNvHTcGVqyZkAJAKcjTgL36vyx5vWJezFI=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:68:78:1a:4a:8f:1f:30:da:e4:79:ce:ad:f0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Apr 20 04:01:06 2025 GMT
Not After : Apr 21 04:01:06 2025 GMT
Subject: CN=9de3dd35863c9483c2a9583e9786497d014f26ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:d0:87:31:db:aa:14:3e:25:8f:3f:1f:df:
48:f0:4e:1f:16:2c:98:f4:01:a5:82:05:69:b5:58:
03:e3:0c:23:bf:89:a2:6b:0c:ef:8c:1a:7b:8c:0f:
c6:fc:2f:11:78:bb:34:c0:06:7d:e7:7d:7d:34:27:
01:68:c3:a5:c6:f6:ff:88:5f:f0:fb:58:2d:44:65:
04:73:99:70:a5:d2:77:ef:aa:f4:d5:50:71:55:d7:
d0:34:0a:d4:88:8b:25:92:55:47:31:68:0c:23:ed:
15:21:0e:7a:2b:ea:9f:11:ce:18:b9:20:f8:84:32:
c7:e8:48:b2:11:e9:a7:c6:8c:36:39:c6:e5:e8:20:
60:b0:e8:8c:fb:d2:26:18:e2:7e:c3:36:c3:e6:22:
5e:11:f5:91:e2:cc:8a:bd:dd:e6:64:9b:6f:88:b5:
44:11:af:bc:7a:43:28:79:38:48:3a:eb:3c:be:64:
f3:c3:f2:29:f0:1b:6f:ac:bf:63:8e:8b:90:e6:78:
ff:db:41:13:f7:62:af:e6:af:72:81:fc:dd:1d:66:
e9:7d:4a:6c:28:cf:7b:a7:52:00:83:ef:0e:56:1a:
12:e7:b2:ae:2f:b1:54:36:c7:a9:a3:67:a3:ba:78:
d5:23:22:7e:3d:90:83:e1:55:5a:d4:a5:1f:72:fe:
16:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:DD:35:86:3C:94:83:C2:A9:58:3E:97:86:49:7D:01:4F:26:CA
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1b:fe:63:8b:5b:97:76:99:40:47:a3:e1:2a:d8:5f:40:f6:
0b:02:91:f0:f8:12:3a:c8:d2:f0:5b:5d:5d:af:48:76:9f:41:
5d:06:8b:35:e2:e1:44:17:da:72:de:5f:19:15:11:a1:26:3d:
68:e9:c2:97:f2:13:97:d2:2f:a6:a8:5c:c0:ba:29:3a:ea:f3:
83:61:e3:67:85:80:ce:c3:de:0d:25:97:22:95:60:16:b8:52:
64:3f:46:8c:57:9d:be:e9:ee:5f:b1:44:ae:e7:3b:05:02:e6:
4d:2a:0c:be:e6:68:61:52:11:1c:10:64:ac:2a:d4:5d:34:71:
6f:34:c9:bf:36:66:03:61:ac:3a:37:09:d8:c4:36:bd:ca:f7:
ea:80:42:f7:6e:67:28:80:ac:7a:3a:12:af:ab:f3:00:18:7b:
f7:f1:2a:7d:4e:f9:8e:5f:51:84:0a:8e:a8:2b:7e:3c:62:3e:
14:92:90:a5:c5:0b:31:b8:b3:1e:fb:e7:80:3b:fe:b6:21:bd:
b3:c8:56:38:1f:43:fb:5c:c2:b5:de:d8:94:dc:a4:e4:b2:0e:
d6:9e:0b:89:a5:f1:31:b4:09:f4:c6:0e:1f:47:48:96:c4:79:
c2:ec:ca:0f:16:bf:32:b5:5d:6b:d2:16:cb:a8:25:98:33:89:
4e:19:ca:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRW2h4GkqPHzDa5HnOrfALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGM1MDljYjc3YjAxNDliNmY2NmY1MDE5Zjg1OGIzYWNm
OTQyZTkwHhcNMjUwNDIwMDQwMTA2WhcNMjUwNDIxMDQwMTA2WjAzMTEwLwYDVQQD
Eyg5ZGUzZGQzNTg2M2M5NDgzYzJhOTU4M2U5Nzg2NDk3ZDAxNGYyNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwjQhzHbqhQ+JY8/H99I8E4fFiyY
9AGlggVptVgD4wwjv4miawzvjBp7jA/G/C8ReLs0wAZ95319NCcBaMOlxvb/iF/w
+1gtRGUEc5lwpdJ376r01VBxVdfQNArUiIslklVHMWgMI+0VIQ56K+qfEc4YuSD4
hDLH6EiyEemnxow2Ocbl6CBgsOiM+9ImGOJ+wzbD5iJeEfWR4syKvd3mZJtviLVE
Ea+8ekMoeThIOus8vmTzw/Ip8BtvrL9jjouQ5nj/20ET92Kv5q9ygfzdHWbpfUps
KM97p1IAg+8OVhoS57KuL7FUNsepo2ejunjVIyJ+PZCD4VVa1KUfcv4WZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3j3TWGPJSDwqlYPpeGSX0BTybKMB8GA1UdIwQY
MBaAFGOMUJy3ewFJtvZvUBn4WLOs+ULpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQt
M2NjNGZmOWFhMWJjLzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQtM2NjNGZmOWFhMWJj
LzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBv+Y4tb
l3aZQEej4SrYX0D2CwKR8PgSOsjS8FtdXa9Idp9BXQaLNeLhRBfact5fGRURoSY9
aOnCl/ITl9IvpqhcwLopOurzg2HjZ4WAzsPeDSWXIpVgFrhSZD9GjFedvunuX7FE
ruc7BQLmTSoMvuZoYVIRHBBkrCrUXTRxbzTJvzZmA2GsOjcJ2MQ2vcr36oBC925n
KICsejoSr6vzABh79/EqfU75jl9RhAqOqCt+PGI+FJKQpcULMbizHvvngDv+tiG9
s8hWOB9D+1zCtd7YlNyk5LIO1p4LiaXxMbQJ9MYOH0dIlsR5wuzKDxa/MrVda9IW
y6glmDOJThnKfg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:03 2025 by rpki-client