Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: u9Qsq0OQRyLdv/1cCH99yla0uUgEhjRGNoWJCcxrH6k=
Subject key identifier: 0B:63:66:91:3B:CB:61:32:A6:6F:BA:19:7E:6B:64:6D:53:88:75:2F
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 01964E59E337498F1B558007C92ADBFB9057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 117F
Signing time: Sat 19 Apr 2025 14:00:35 +0000
Manifest this update: Sat 19 Apr 2025 14:00:35 +0000
Manifest next update: Sun 20 Apr 2025 14:00:35 +0000
Files and hashes: 1: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (hash: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: UJ6rwNIcwBXKsE+wzssGrc653LY21MrbTZOorJe8f6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:e3:37:49:8f:1b:55:80:07:c9:2a:db:fb:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Apr 19 14:00:35 2025 GMT
Not After : Apr 20 14:00:35 2025 GMT
Subject: CN=0b6366913bcb6132a66fba197e6b646d5388752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:ac:32:8c:c1:36:78:5f:6a:17:ce:3f:b2:
71:0f:30:ee:79:f0:8c:2b:44:1e:0b:46:40:96:80:
88:37:ce:bd:2f:9b:28:12:f2:5f:31:7c:81:8e:8d:
a3:fc:48:9a:19:d8:76:08:42:d3:dc:e8:43:9b:a2:
4e:98:9c:24:36:f5:31:fa:0b:44:76:ed:32:df:ab:
7c:a1:5d:80:a1:e4:18:13:29:90:27:54:8c:56:92:
5a:40:85:9a:b9:6b:75:f4:78:61:c6:5c:0a:03:1c:
98:d4:9a:80:06:88:73:64:44:ef:a8:6f:4c:61:1b:
0d:ff:d6:3f:42:5a:06:e0:3d:d2:8e:78:ec:69:54:
1c:7b:33:30:27:e9:4c:16:ef:63:69:60:16:b7:85:
38:6e:b4:ad:89:09:1e:01:08:44:ae:fa:b1:a2:9d:
ac:2f:b6:1c:be:e1:cc:b7:14:e3:ff:ce:96:e2:eb:
92:b0:57:a8:0c:78:a2:b0:c1:69:e0:bc:cb:ff:69:
dd:4b:2d:6c:82:31:b6:a2:8b:d7:66:c6:2d:29:38:
86:b0:30:e8:c2:82:06:d3:9c:e0:49:53:af:a3:64:
4c:f1:17:6c:c7:87:b9:b3:1b:6e:e4:e3:99:1a:e1:
b9:cb:ea:09:23:5c:11:68:30:74:de:aa:c0:16:9c:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:63:66:91:3B:CB:61:32:A6:6F:BA:19:7E:6B:64:6D:53:88:75:2F
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2c:0f:da:6f:87:d4:7a:c6:2d:87:bf:c1:d7:b6:4e:d9:b8:
1f:dd:30:e0:fa:90:0e:03:d2:77:38:94:81:69:28:02:fd:19:
63:58:f2:30:d9:f1:79:70:50:67:74:f2:30:9e:58:29:35:59:
a3:7d:cb:f0:5e:a9:43:bc:fe:29:3c:01:d9:44:07:f4:23:1e:
86:c2:48:b6:ef:79:0f:4c:7f:e6:55:b7:16:0c:06:72:05:d5:
be:73:6b:7b:a5:8b:48:34:c7:65:2b:d7:b8:c6:ca:f8:3b:05:
1e:94:d0:3c:c9:a0:71:a8:8c:c0:36:20:1f:27:13:54:d4:8e:
ab:d4:65:4f:2b:28:63:f4:bc:52:cf:d6:d8:67:b1:f5:4c:83:
4e:03:4c:16:9b:95:a4:3e:1e:9f:06:4f:35:7b:0a:5e:a7:a0:
dc:f9:f7:0d:24:59:25:07:da:18:6f:e3:49:57:ed:24:81:8d:
c7:90:fb:cd:65:ab:d5:95:17:e2:e3:f8:08:93:66:b3:81:66:
97:a2:bb:7b:ef:4a:21:0d:46:f0:8f:05:9b:42:97:2c:9e:05:
04:a7:bc:ee:28:f7:ff:45:83:84:f0:56:d0:d9:37:52:52:94:
a6:17:f5:06:83:c8:7e:a9:8c:7a:a0:07:ed:6e:56:ba:8f:50:
5a:a6:29:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOWeM3SY8bVYAHySrb+5BXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Mjg5NTM1ZTdlNGQyM2U2M2UxNzhlM2ZiNWJmMDU2ZmU4
YWUyNzcwHhcNMjUwNDE5MTQwMDM1WhcNMjUwNDIwMTQwMDM1WjAzMTEwLwYDVQQD
EygwYjYzNjY5MTNiY2I2MTMyYTY2ZmJhMTk3ZTZiNjQ2ZDUzODg3NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dOsMozBNnhfahfOP7JxDzDuefCM
K0QeC0ZAloCIN869L5soEvJfMXyBjo2j/EiaGdh2CELT3OhDm6JOmJwkNvUx+gtE
du0y36t8oV2AoeQYEymQJ1SMVpJaQIWauWt19HhhxlwKAxyY1JqABohzZETvqG9M
YRsN/9Y/QloG4D3SjnjsaVQcezMwJ+lMFu9jaWAWt4U4brStiQkeAQhErvqxop2s
L7YcvuHMtxTj/86W4uuSsFeoDHiisMFp4LzL/2ndSy1sgjG2oovXZsYtKTiGsDDo
woIG05zgSVOvo2RM8Rdsx4e5sxtu5OOZGuG5y+oJI1wRaDB03qrAFpxk7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtjZpE7y2Eypm+6GX5rZG1TiHUvMB8GA1UdIwQY
MBaAFMgolTXn5NI+Y+F44/tb8Fb+iuJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQt
NjZhNWVjYzg0NjE2LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQtNjZhNWVjYzg0NjE2
LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSwP2m+H
1HrGLYe/wde2Ttm4H90w4PqQDgPSdziUgWkoAv0ZY1jyMNnxeXBQZ3TyMJ5YKTVZ
o33L8F6pQ7z+KTwB2UQH9CMehsJItu95D0x/5lW3FgwGcgXVvnNre6WLSDTHZSvX
uMbK+DsFHpTQPMmgcaiMwDYgHycTVNSOq9RlTysoY/S8Us/W2Gex9UyDTgNMFpuV
pD4enwZPNXsKXqeg3Pn3DSRZJQfaGG/jSVftJIGNx5D7zWWr1ZUX4uP4CJNms4Fm
l6K7e+9KIQ1G8I8Fm0KXLJ4FBKe87ij3/0WDhPBW0Nk3UlKUphf1BoPIfqmMeqAH
7W5Wuo9QWqYpVg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:22 2025 by rpki-client