Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File: iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier: +sOXZear+RtTNjU7yhzElKLHE49w6YXm0djrV4AnuUU=
Subject key identifier: 00:30:0C:A2:31:9A:B2:39:DA:7E:98:71:B6:A7:47:81:B7:AF:B5:57
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 019651C88E384191B6A5E3A161498CA78A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number: 13D2
Signing time: Sun 20 Apr 2025 06:00:20 +0000
Manifest this update: Sun 20 Apr 2025 06:00:20 +0000
Manifest next update: Mon 21 Apr 2025 06:00:20 +0000
Files and hashes: 1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: EtWsi5hzaQyeEwgpL09SC1fqNySaPvZdWgXT6DENQ0M=)
2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:8e:38:41:91:b6:a5:e3:a1:61:49:8c:a7:8a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Apr 20 06:00:20 2025 GMT
Not After : Apr 21 06:00:20 2025 GMT
Subject: CN=00300ca2319ab239da7e9871b6a74781b7afb557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:83:34:79:38:e4:33:41:3b:e4:43:62:67:
ff:36:31:a0:04:79:01:88:1d:6d:cc:8e:e1:95:1f:
11:b2:c6:f2:86:fc:df:cf:2e:b8:a3:ec:ee:7f:4d:
01:9d:30:3e:c9:72:d1:06:ca:3b:1e:17:a5:46:b2:
5a:42:ac:4f:f6:fe:61:1a:4b:a4:4f:bc:15:63:49:
ee:7d:d4:13:54:b3:97:75:3e:d5:b1:5d:a8:9e:bc:
1d:c5:cf:7a:b9:4d:39:b5:ee:3f:d4:05:0e:ff:66:
d3:72:b5:84:23:2a:00:a8:73:6d:2d:9b:a3:a5:97:
09:b3:d6:f9:63:05:b7:cb:96:a6:0b:f2:fb:11:95:
5e:d7:bf:18:3b:ad:0f:ea:77:19:47:d9:88:2f:59:
65:15:e5:a5:72:41:ae:7b:72:d1:d5:e4:7b:20:da:
61:b2:df:f4:da:7c:7d:3a:f4:00:61:8b:da:5a:bc:
08:d7:51:5f:0e:1c:d5:70:d3:9d:a7:2d:85:7f:cd:
b9:02:7b:60:fb:cb:98:38:8c:f4:5c:e1:f4:8c:45:
84:6d:19:fe:56:13:c1:ba:5d:4f:45:4a:d9:79:fc:
2e:9b:b0:3e:ba:a2:1d:a5:30:b6:96:ce:c5:ac:a4:
71:dd:48:68:f1:4e:d6:4f:fa:c1:76:7b:3f:9f:7d:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:30:0C:A2:31:9A:B2:39:DA:7E:98:71:B6:A7:47:81:B7:AF:B5:57
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d2:2c:7a:2f:13:0a:9e:2f:dd:a1:53:05:7f:c5:05:d0:ff:
19:56:16:96:eb:f4:f3:85:b3:43:5c:cf:c9:82:1e:55:49:2f:
cc:af:63:c7:ac:8f:6c:98:8a:fd:49:e0:65:01:2a:dd:18:cc:
35:a1:01:f3:b8:66:e9:e7:89:f2:dd:25:41:a2:27:e2:65:de:
8e:88:6d:93:9e:08:9e:dc:a6:1e:6a:8e:93:b3:0b:4e:61:ab:
fb:8e:d8:28:cd:69:4b:d6:13:34:f5:21:73:89:0b:ae:2d:c7:
18:e4:c4:dd:2d:c7:6b:ac:f0:8d:af:e3:c0:86:88:6b:84:cb:
d7:0a:59:32:e0:d4:7f:0c:6e:b9:b5:60:8a:40:a3:aa:78:72:
02:fa:aa:38:4f:16:b6:8a:73:a1:f4:b8:8d:4c:21:39:4c:81:
07:95:03:c9:21:3a:97:18:ed:da:bc:f5:f0:aa:d2:1e:53:58:
f9:5a:1e:70:95:06:25:e6:49:ba:02:a0:4c:9d:bb:21:e4:3b:
18:a0:ad:37:90:3e:60:17:c3:bb:f8:fe:8f:b7:a5:b2:88:f6:
11:1b:76:b8:26:72:d6:8b:47:14:54:fe:26:18:2f:f7:3b:46:
1b:87:e4:74:1c:c3:16:66:1b:a0:13:20:be:e9:32:10:a4:77:
66:3c:c9:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyI44QZG2peOhYUmMp4oZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ODg3ZGUwMWQ4YjFjYmQ1MGI3NWRiYWM5MTMzOWY2NjE3
YTRkOGEwHhcNMjUwNDIwMDYwMDIwWhcNMjUwNDIxMDYwMDIwWjAzMTEwLwYDVQQD
EygwMDMwMGNhMjMxOWFiMjM5ZGE3ZTk4NzFiNmE3NDc4MWI3YWZiNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wqDNHk45DNBO+RDYmf/NjGgBHkB
iB1tzI7hlR8Rssbyhvzfzy64o+zuf00BnTA+yXLRBso7HhelRrJaQqxP9v5hGkuk
T7wVY0nufdQTVLOXdT7VsV2onrwdxc96uU05te4/1AUO/2bTcrWEIyoAqHNtLZuj
pZcJs9b5YwW3y5amC/L7EZVe178YO60P6ncZR9mIL1llFeWlckGue3LR1eR7INph
st/02nx9OvQAYYvaWrwI11FfDhzVcNOdpy2Ff825Antg+8uYOIz0XOH0jEWEbRn+
VhPBul1PRUrZefwum7A+uqIdpTC2ls7FrKRx3Uho8U7WT/rBdns/n32WIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAwDKIxmrI52n6YcbanR4G3r7VXMB8GA1UdIwQY
MBaAFImIfeAdixy9ULdduskTOfZhek2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVloOTRCMkxITDFRdDEyNnlSTTU5bUY2VFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85Y2U3NDItMGM1ZC00YzM0LTg3NjUt
NWVkNTE1N2NlZDBhLzEvaVloOTRCMkxITDFRdDEyNnlSTTU5bUY2VFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85Y2U3NDItMGM1ZC00YzM0LTg3NjUtNWVkNTE1N2NlZDBh
LzEvaVloOTRCMkxITDFRdDEyNnlSTTU5bUY2VFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdIsei8T
Cp4v3aFTBX/FBdD/GVYWluv084WzQ1zPyYIeVUkvzK9jx6yPbJiK/UngZQEq3RjM
NaEB87hm6eeJ8t0lQaIn4mXejohtk54IntymHmqOk7MLTmGr+47YKM1pS9YTNPUh
c4kLri3HGOTE3S3Ha6zwja/jwIaIa4TL1wpZMuDUfwxuubVgikCjqnhyAvqqOE8W
topzofS4jUwhOUyBB5UDySE6lxjt2rz18KrSHlNY+VoecJUGJeZJugKgTJ27IeQ7
GKCtN5A+YBfDu/j+j7elsoj2ERt2uCZy1otHFFT+Jhgv9ztGG4fkdBzDFmYboBMg
vukyEKR3ZjzJ2w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:14:31 2025 by rpki-client