Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: USR1O6sFWMHoSxJCYyn7r2yBGgsF4uLapsI9wAlvknE=
Subject key identifier: 64:E1:54:54:24:B8:99:F5:D1:6A:72:84:70:C8:79:EB:CC:CF:2F:38
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 0196507F409DCE6A5D4E22034BC2D5CFCF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 043B
Signing time: Sun 20 Apr 2025 00:00:38 +0000
Manifest this update: Sun 20 Apr 2025 00:00:38 +0000
Manifest next update: Mon 21 Apr 2025 00:00:38 +0000
Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=)
2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: 3EMWiFK5QixzMoqKo6n+u66i0NR19gLh7BmvN39ednE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:40:9d:ce:6a:5d:4e:22:03:4b:c2:d5:cf:cf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Apr 20 00:00:38 2025 GMT
Not After : Apr 21 00:00:38 2025 GMT
Subject: CN=64e1545424b899f5d16a728470c879ebcccf2f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:b1:91:0b:2e:87:e3:91:a0:79:45:26:c9:
ff:a2:c3:9a:e2:01:2f:f3:37:7e:50:f8:1a:98:93:
53:25:38:88:15:a5:ff:8d:a9:5e:01:cb:08:52:a4:
df:e9:19:73:5f:70:9a:b9:d9:09:4a:cf:b2:9a:73:
12:82:19:f4:d5:f5:c8:24:ec:02:62:e1:f3:9a:e7:
98:22:1b:ff:51:1a:a8:c3:63:c8:9f:b8:f7:32:fd:
0f:46:44:d6:ca:5f:e6:4c:43:33:ba:a0:e9:84:23:
23:e6:fa:e6:d1:68:54:a7:95:3c:95:cc:52:d9:07:
53:2b:84:f8:58:ed:f4:b7:f0:5c:17:7e:66:87:f6:
c7:54:f9:5f:75:d4:56:0e:03:94:46:96:f2:b9:5d:
88:20:08:06:ee:c8:43:fd:bc:bf:8b:ea:c9:af:d0:
33:30:ef:13:74:60:00:ec:4b:1a:80:3f:ff:32:04:
27:4e:c4:47:6c:24:b3:8d:36:42:1e:49:60:ec:e6:
ce:45:8f:24:58:ae:42:47:e4:66:ad:76:41:2d:e4:
4a:26:2e:50:f9:59:d6:f2:2e:3f:98:65:30:52:7f:
ff:cf:7c:29:65:4d:c3:f3:00:a0:38:49:be:03:7a:
ab:68:9c:97:cc:1b:32:5b:32:27:56:6e:ad:f1:30:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E1:54:54:24:B8:99:F5:D1:6A:72:84:70:C8:79:EB:CC:CF:2F:38
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:00:54:6b:58:d6:74:17:bb:e0:13:e8:98:be:2c:38:5e:b5:
2c:02:59:3c:d8:f8:82:73:1e:1f:9b:79:81:20:37:d2:27:7f:
f9:03:f7:c0:44:1f:bd:26:8c:21:c8:38:8b:98:ab:32:09:b6:
b8:13:d9:ae:e4:f4:12:d6:89:f5:28:e2:1f:c8:2c:09:18:65:
46:0f:b4:91:f9:80:18:f5:c0:29:3a:0c:e9:48:a5:f7:8d:cb:
fa:75:32:7a:f0:ce:55:ab:00:63:f7:f0:e9:b3:c0:7a:df:98:
bb:2f:8f:5f:50:4e:1d:04:b5:c9:80:45:39:a8:89:9c:a9:4c:
f0:44:a7:a8:59:6b:11:3f:36:56:8b:fb:6f:d3:f4:05:f6:4c:
c9:3c:bd:8f:e8:a3:e0:e6:ad:f3:fb:98:e9:5e:ae:6a:08:60:
2b:55:72:37:bf:2a:9c:17:df:a4:c6:93:de:7a:17:16:fe:e4:
6f:ee:c2:76:38:4c:76:ee:1b:b4:59:10:2f:3a:77:29:8e:ae:
1a:a9:66:60:eb:88:a3:f9:9c:35:0e:b0:98:dd:9c:66:f2:16:
ed:0d:f6:5f:a0:d9:a3:42:85:19:c4:a0:0a:b6:f8:c7:59:9e:
50:74:b0:c0:54:a6:d6:32:0f:ee:e8:17:3a:4f:6e:13:3e:45:
39:82:b2:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQf0CdzmpdTiIDS8LVz89TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDBlOTIzNGNjNjcyMTk1N2E0YWMyMTNlYWM2NzUzZWQ4
NWVlYTcwHhcNMjUwNDIwMDAwMDM4WhcNMjUwNDIxMDAwMDM4WjAzMTEwLwYDVQQD
Eyg2NGUxNTQ1NDI0Yjg5OWY1ZDE2YTcyODQ3MGM4NzllYmNjY2YyZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwaxkQsuh+ORoHlFJsn/osOa4gEv
8zd+UPgamJNTJTiIFaX/jaleAcsIUqTf6RlzX3CaudkJSs+ymnMSghn01fXIJOwC
YuHzmueYIhv/URqow2PIn7j3Mv0PRkTWyl/mTEMzuqDphCMj5vrm0WhUp5U8lcxS
2QdTK4T4WO30t/BcF35mh/bHVPlfddRWDgOURpbyuV2IIAgG7shD/by/i+rJr9Az
MO8TdGAA7EsagD//MgQnTsRHbCSzjTZCHklg7ObORY8kWK5CR+RmrXZBLeRKJi5Q
+VnW8i4/mGUwUn//z3wpZU3D8wCgOEm+A3qraJyXzBsyWzInVm6t8TCczwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGThVFQkuJn10WpyhHDIeevMzy84MB8GA1UdIwQY
MBaAFMnQ6SNMxnIZV6SsIT6sZ1Pthe6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgt
OWEzMDBiMGE3ZWQyLzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgtOWEzMDBiMGE3ZWQy
LzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgBUa1jW
dBe74BPomL4sOF61LAJZPNj4gnMeH5t5gSA30id/+QP3wEQfvSaMIcg4i5irMgm2
uBPZruT0EtaJ9SjiH8gsCRhlRg+0kfmAGPXAKToM6Uil943L+nUyevDOVasAY/fw
6bPAet+Yuy+PX1BOHQS1yYBFOaiJnKlM8ESnqFlrET82Vov7b9P0BfZMyTy9j+ij
4Oat8/uY6V6uaghgK1VyN78qnBffpMaT3noXFv7kb+7CdjhMdu4btFkQLzp3KY6u
GqlmYOuIo/mcNQ6wmN2cZvIW7Q32X6DZo0KFGcSgCrb4x1meUHSwwFSm1jIP7ugX
Ok9uEz5FOYKy8g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:10 2025 by rpki-client