Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: /nSQ/l5MEK2fyo/Ge3OIituBjAC3cQPMgKyHSdc0ZE0=
Subject key identifier: D8:BD:6E:83:3B:74:F6:92:04:A6:8B:42:12:A8:66:37:AC:C4:AF:43
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 0195903D264A302C59A2410912513A40417B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 03BB
Signing time: Thu 13 Mar 2025 16:01:21 +0000
Manifest this update: Thu 13 Mar 2025 16:01:21 +0000
Manifest next update: Fri 14 Mar 2025 16:01:21 +0000
Files and hashes: 1: PkfIS5G435_5emRi_COnc1WyLBs.roa (hash: IOA4UWzzxA3Jqfg26gD/3jtgnYFnAYPzln5ueD/sEOk=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: TAngXIgrAFU1OEVEBMAVJqiTi1LH3OyKLCpEBI0PAxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:26:4a:30:2c:59:a2:41:09:12:51:3a:40:41:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Mar 13 16:01:21 2025 GMT
Not After : Mar 14 16:01:21 2025 GMT
Subject: CN=d8bd6e833b74f69204a68b4212a86637acc4af43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:09:2a:6d:fa:c4:80:a3:fc:43:08:ae:3d:
ed:ad:93:31:4b:c8:2c:e6:55:22:0f:97:ff:2f:1e:
85:8f:0d:e1:44:b5:13:3c:89:d9:e3:8a:8d:39:e8:
77:bb:8d:16:a7:3a:be:9b:3a:43:03:84:06:f8:62:
3d:58:7c:67:7c:0d:31:6a:64:01:89:85:60:0a:00:
85:0c:c8:50:d0:3b:fe:6d:a9:02:2e:4e:a7:08:3e:
7e:53:a1:d9:ac:60:17:25:35:74:f7:dc:ef:a1:a1:
92:06:e2:34:94:b1:b3:fc:eb:0c:79:3a:a9:59:e1:
1b:1d:9a:ee:6c:9e:bf:7e:48:ff:02:85:a2:bd:f0:
eb:00:1a:1f:25:94:7a:30:b9:de:31:92:07:f5:c9:
f7:2b:ed:e4:92:02:82:40:cb:12:9c:f0:8e:60:75:
77:4e:78:b5:d4:07:b1:eb:6d:b4:e5:cc:d5:f2:da:
bb:89:a1:49:15:2a:9a:5d:c7:69:79:92:76:84:dc:
7c:f9:1d:59:ae:aa:1b:96:01:6b:03:22:a8:7d:09:
4a:3b:4e:ab:e3:87:88:0e:a9:0b:a0:da:87:84:9f:
78:60:95:0b:20:25:2e:e2:a5:16:d1:33:e9:c8:06:
ca:4b:49:89:88:ef:13:7c:5b:66:2d:cc:bb:6b:6a:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BD:6E:83:3B:74:F6:92:04:A6:8B:42:12:A8:66:37:AC:C4:AF:43
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4b:ed:fd:b5:c3:58:cb:a4:17:7e:1a:10:0e:40:95:5f:df:
01:1a:78:cf:c3:5f:db:1d:cf:41:98:2f:e4:94:38:9a:8f:6d:
ef:a6:98:13:8a:e2:7d:01:90:a5:19:14:41:e8:39:cb:8e:12:
f1:8e:b2:b8:bd:c7:a3:62:a6:79:b3:dd:d4:92:5d:b4:60:5c:
91:cc:8e:03:ec:e2:bb:e2:7b:ec:80:04:4a:82:76:59:1b:13:
8a:4c:14:cb:9a:06:05:50:20:6d:56:47:e3:a0:83:50:6f:70:
59:1a:66:f6:95:be:f0:84:84:2a:00:eb:e0:3f:a6:01:3a:8d:
1b:75:84:e3:ef:58:52:e6:d1:84:28:e3:9c:5f:4f:4b:30:e0:
55:4d:5c:62:22:b1:29:77:fd:05:ab:20:f5:47:46:c1:eb:db:
f5:21:fb:a2:a7:e6:5f:46:a5:aa:86:52:29:8d:cb:6d:85:6f:
40:42:d6:3f:ea:1a:e2:ac:9a:10:23:0a:c3:57:ea:68:84:e5:
e1:8d:27:e3:57:7b:1b:1e:28:3a:f2:72:f0:52:59:09:14:11:
e6:91:03:a6:26:54:0e:38:63:16:6a:b3:e3:73:6e:0c:15:62:
ab:da:a5:3e:de:02:1a:31:24:61:2a:ed:f5:80:c5:d3:50:03:
55:1c:02:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPSZKMCxZokEJElE6QEF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZWM3YzRhNTcxNTVjZThkZWM1YjFjZDYyZmZhODQwMTdi
MTZmNTgwHhcNMjUwMzEzMTYwMTIxWhcNMjUwMzE0MTYwMTIxWjAzMTEwLwYDVQQD
EyhkOGJkNmU4MzNiNzRmNjkyMDRhNjhiNDIxMmE4NjYzN2FjYzRhZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JEJKm36xICj/EMIrj3trZMxS8gs
5lUiD5f/Lx6Fjw3hRLUTPInZ44qNOeh3u40Wpzq+mzpDA4QG+GI9WHxnfA0xamQB
iYVgCgCFDMhQ0Dv+bakCLk6nCD5+U6HZrGAXJTV099zvoaGSBuI0lLGz/OsMeTqp
WeEbHZrubJ6/fkj/AoWivfDrABofJZR6MLneMZIH9cn3K+3kkgKCQMsSnPCOYHV3
Tni11Aex62205czV8tq7iaFJFSqaXcdpeZJ2hNx8+R1ZrqoblgFrAyKofQlKO06r
44eIDqkLoNqHhJ94YJULICUu4qUW0TPpyAbKS0mJiO8TfFtmLcy7a2o6twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi9boM7dPaSBKaLQhKoZjesxK9DMB8GA1UdIwQY
MBaAFMjsfEpXFVzo3sWxzWL/qEAXsW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5Yjct
ZGE1ZjZhNjU4ZjhiLzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5YjctZGE1ZjZhNjU4Zjhi
LzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEvt/bXD
WMukF34aEA5AlV/fARp4z8Nf2x3PQZgv5JQ4mo9t76aYE4rifQGQpRkUQeg5y44S
8Y6yuL3Ho2KmebPd1JJdtGBckcyOA+ziu+J77IAESoJ2WRsTikwUy5oGBVAgbVZH
46CDUG9wWRpm9pW+8ISEKgDr4D+mATqNG3WE4+9YUubRhCjjnF9PSzDgVU1cYiKx
KXf9Basg9UdGwevb9SH7oqfmX0alqoZSKY3LbYVvQELWP+oa4qyaECMKw1fqaITl
4Y0n41d7Gx4oOvJy8FJZCRQR5pEDpiZUDjhjFmqz43NuDBViq9qlPt4CGjEkYSrt
9YDF01ADVRwCrQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:03:11 2025 by rpki-client