Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: H2BtSt9UPOC6nSWqMYYXHOW7CmKE4Unh2DWowXdN0nE=
Subject key identifier: 24:6B:7B:95:36:E5:59:64:69:6B:FC:E5:CA:CD:E1:99:51:50:F2:41
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 01964DEBE880A747FCB5B717F3C72CACCBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 0D83
Signing time: Sat 19 Apr 2025 12:00:28 +0000
Manifest this update: Sat 19 Apr 2025 12:00:28 +0000
Manifest next update: Sun 20 Apr 2025 12:00:28 +0000
Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: aIxdoklyjGXsNb1+tBn1vX/HJyhijNQdr+ggbJDVHhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:e8:80:a7:47:fc:b5:b7:17:f3:c7:2c:ac:cb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Apr 19 12:00:28 2025 GMT
Not After : Apr 20 12:00:28 2025 GMT
Subject: CN=246b7b9536e55964696bfce5cacde1995150f241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:61:ef:d7:98:b0:e0:f9:77:a4:73:de:93:
24:47:0f:2a:95:88:56:a8:b1:32:7a:38:f5:46:8b:
aa:b5:db:ac:6b:cc:ec:83:cd:cf:14:d4:96:58:89:
f9:93:5a:2d:56:86:e8:0a:5e:28:5b:2f:4b:b2:88:
02:98:e8:09:0c:0f:83:99:5e:7b:a1:74:92:78:03:
a0:cc:af:1f:ee:0b:f8:fb:76:34:ed:35:67:bf:40:
8b:5f:c0:43:13:13:44:41:e4:82:6b:e8:42:06:cf:
cd:18:f1:ff:c4:95:be:d9:8c:f1:b7:8d:6a:ad:9d:
07:70:fa:ec:03:84:ed:2f:d5:64:69:bd:bd:b3:74:
4d:99:87:9e:0a:ed:45:5a:7d:4e:40:16:4e:f4:bd:
fb:e9:3c:77:0b:78:dc:41:ec:a3:ef:10:01:c8:79:
ef:20:a7:27:e9:87:bb:9f:c7:db:1e:47:d6:29:ee:
c3:8f:15:2c:e3:0e:34:4d:2b:ff:7e:90:07:a5:ee:
a0:a9:1d:3d:76:17:23:24:8b:b9:0c:fb:7b:49:92:
10:17:72:c7:fa:38:1a:74:53:ec:96:b5:8d:7f:34:
0b:b8:bd:da:6a:cc:63:7c:99:2f:f4:46:91:89:85:
39:7b:b1:13:09:26:be:e7:cf:ef:bd:cc:02:12:e5:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6B:7B:95:36:E5:59:64:69:6B:FC:E5:CA:CD:E1:99:51:50:F2:41
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dc:7e:67:26:15:4f:07:58:b8:4f:f4:8e:f5:68:00:20:cf:
3d:30:0d:e8:d9:38:01:69:94:b6:3d:c0:97:19:ca:61:9f:aa:
a7:4e:3d:8e:81:a0:c4:4b:80:33:f0:9d:6a:df:8c:0a:c4:91:
2b:09:1e:02:02:d8:6d:ae:59:ea:d5:3f:f4:30:f6:76:99:33:
e9:e6:a2:34:db:41:4b:f3:60:ca:4e:c9:c1:d2:99:24:ec:af:
cd:27:cd:f3:02:be:c3:62:9e:70:5d:00:e4:d4:9e:02:7d:d9:
31:c0:43:f2:eb:f9:2c:fd:03:71:7c:fc:5f:60:5d:be:3f:a9:
4f:5f:04:24:71:b3:1d:1b:e8:f4:07:88:a7:d1:f0:2d:00:8a:
9f:8c:37:57:e5:eb:d0:c8:8d:98:9a:21:00:74:dc:b4:a3:ab:
5e:5d:a7:c8:a9:e1:f6:ab:95:32:5f:36:07:e5:b0:3e:72:78:
c5:23:24:e8:62:e0:91:df:30:41:c6:82:88:1f:d0:b6:21:f4:
3a:ac:11:c1:7a:49:f3:b9:e8:c7:57:9d:a7:79:2d:a2:0a:b3:
d2:01:a7:e6:a0:99:cc:b6:88:02:2d:dc:be:7f:35:9a:82:b2:
16:29:36:e8:1b:ee:0e:8c:52:cf:3b:dc:2f:86:d4:58:07:4a:
e2:f8:40:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN6+iAp0f8tbcX88csrMvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGFjNTJlMmI1NzJjYzJhOTlhNzQxMjU3ZTU2OWFhMzcx
ZTM1NjgwHhcNMjUwNDE5MTIwMDI4WhcNMjUwNDIwMTIwMDI4WjAzMTEwLwYDVQQD
EygyNDZiN2I5NTM2ZTU1OTY0Njk2YmZjZTVjYWNkZTE5OTUxNTBmMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdZh79eYsOD5d6Rz3pMkRw8qlYhW
qLEyejj1Rouqtdusa8zsg83PFNSWWIn5k1otVoboCl4oWy9LsogCmOgJDA+DmV57
oXSSeAOgzK8f7gv4+3Y07TVnv0CLX8BDExNEQeSCa+hCBs/NGPH/xJW+2Yzxt41q
rZ0HcPrsA4TtL9Vkab29s3RNmYeeCu1FWn1OQBZO9L376Tx3C3jcQeyj7xAByHnv
IKcn6Ye7n8fbHkfWKe7DjxUs4w40TSv/fpAHpe6gqR09dhcjJIu5DPt7SZIQF3LH
+jgadFPslrWNfzQLuL3aasxjfJkv9EaRiYU5e7ETCSa+58/vvcwCEuVOpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRre5U25VlkaWv85crN4ZlRUPJBMB8GA1UdIwQY
MBaAFMhKxS4rVyzCqZp0Elflaao3HjVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQt
MmNjMzQyYjAwNTE5LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQtMmNjMzQyYjAwNTE5
LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtx+ZyYV
TwdYuE/0jvVoACDPPTAN6Nk4AWmUtj3AlxnKYZ+qp049joGgxEuAM/Cdat+MCsSR
KwkeAgLYba5Z6tU/9DD2dpkz6eaiNNtBS/Ngyk7JwdKZJOyvzSfN8wK+w2KecF0A
5NSeAn3ZMcBD8uv5LP0DcXz8X2Bdvj+pT18EJHGzHRvo9AeIp9HwLQCKn4w3V+Xr
0MiNmJohAHTctKOrXl2nyKnh9quVMl82B+WwPnJ4xSMk6GLgkd8wQcaCiB/QtiH0
OqwRwXpJ87nox1edp3ktogqz0gGn5qCZzLaIAi3cvn81moKyFik26BvuDoxSzzvc
L4bUWAdK4vhADg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:28 2025 by rpki-client