Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: 9w1/+QDg5Tx004SXiwZWXe+M+0uymDmpgE/Ezlmk5zQ=
Subject key identifier: C1:0B:9D:0A:8B:53:45:07:1F:0E:86:AC:23:DD:A4:80:D4:24:4E:CC
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 019640306D7604535EF1A13CA0F692682FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 20:00:37 +0000
Manifest this update: Wed 16 Apr 2025 20:00:37 +0000
Manifest next update: Thu 17 Apr 2025 20:00:37 +0000
Files and hashes: 1: SOjICIUf3Q5KcvZmv_NHH5baNJY.roa (hash: CIXb+faY/LyAGhWDjXy0Uzmt28hgw4zuuv1ZndxzjNQ=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: mBfkP8YjNphcwE2Msl3e9E3tNJZ5Y2Wz4YHldB0K1wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:6d:76:04:53:5e:f1:a1:3c:a0:f6:92:68:2f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Apr 16 20:00:37 2025 GMT
Not After : Apr 17 20:00:37 2025 GMT
Subject: CN=c10b9d0a8b5345071f0e86ac23dda480d4244ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:10:db:26:8d:b3:df:d1:36:89:94:ba:1f:
bf:9a:f5:39:a6:1c:9d:50:51:52:52:bf:fa:d0:f9:
31:72:11:cc:e5:f1:69:f6:fc:66:40:d9:41:35:4a:
30:8a:7e:c7:74:da:f4:9b:db:76:5c:48:58:3b:f6:
92:83:c4:07:78:8a:bb:fd:fa:9c:67:de:4e:7e:d8:
cc:e4:61:b6:37:4a:30:af:57:f0:75:d7:21:79:a9:
31:45:86:72:c1:56:72:99:02:ef:cf:27:df:14:da:
ae:22:f6:eb:f0:55:0b:38:61:59:8e:84:c4:bb:8e:
54:39:60:ad:59:a1:25:46:6f:a9:e7:cf:98:a1:e5:
e3:ed:08:43:5a:9e:21:cc:93:6b:cc:15:0e:9c:2d:
7f:a7:0d:58:cd:c8:4e:3a:c5:e8:68:fb:9f:3d:35:
59:82:14:77:1b:31:9d:7e:3c:3f:9c:e2:e1:c8:36:
19:66:e3:5e:1c:c5:63:6d:91:cf:f8:b0:ab:9e:2f:
4d:87:01:e1:0f:56:88:78:cd:8b:5e:d5:2a:1f:46:
11:96:04:02:d5:99:c0:39:19:e5:0e:b0:84:8f:39:
07:c3:76:8c:bb:40:d4:92:fe:ff:0c:f7:88:d3:b4:
71:6f:18:36:2f:ec:73:65:63:54:2c:78:d5:94:06:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:9D:0A:8B:53:45:07:1F:0E:86:AC:23:DD:A4:80:D4:24:4E:CC
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ab:51:63:60:b5:89:f8:77:28:65:12:de:11:60:b7:0e:8f:
f7:b0:1d:bc:f4:6a:96:7d:8f:73:3f:2b:e5:f4:1e:db:cc:73:
fd:9f:a0:e6:28:41:ef:9b:55:ea:c4:1c:b0:10:8b:bb:9c:c3:
f5:67:cf:ec:4c:f6:10:41:e1:ad:86:f0:bd:67:6f:84:ec:8a:
df:c4:0f:ae:7c:65:92:c4:b2:ab:3f:8d:eb:10:6b:8c:26:20:
da:be:9a:5a:72:16:58:9e:b8:f4:16:7d:1b:37:f0:77:bf:49:
ca:b3:c3:0b:96:99:86:7b:89:49:db:79:bd:12:17:d9:d4:84:
52:c0:0d:8d:51:72:94:aa:5a:f6:95:51:56:97:f7:eb:db:4d:
fd:b6:69:58:eb:ce:87:e2:4c:3f:35:68:1a:18:f6:d0:7f:88:
8f:bf:33:7e:d1:4f:5b:8d:f6:7d:8c:ad:c3:6f:6a:99:ac:d6:
46:fe:d6:7f:cf:11:54:73:6d:61:63:da:29:fd:75:92:97:68:
39:a9:57:d3:a0:d7:be:b6:ca:75:40:0b:01:69:a6:6f:1e:bf:
b4:a3:f2:f7:3d:71:8f:c7:73:47:ae:cd:36:bc:a7:5f:25:6f:
10:aa:f7:15:4c:33:1a:3c:bd:21:dc:49:57:80:89:9e:1c:dc:
a3:9a:e0:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMG12BFNe8aE8oPaSaC/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTJjYWE3ZTE4YWYyZGZiZGIzYTYyNjlkYTJlMDZkZWRj
YjZjZjAwHhcNMjUwNDE2MjAwMDM3WhcNMjUwNDE3MjAwMDM3WjAzMTEwLwYDVQQD
EyhjMTBiOWQwYThiNTM0NTA3MWYwZTg2YWMyM2RkYTQ4MGQ0MjQ0ZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohsQ2yaNs9/RNomUuh+/mvU5phyd
UFFSUr/60PkxchHM5fFp9vxmQNlBNUowin7HdNr0m9t2XEhYO/aSg8QHeIq7/fqc
Z95OftjM5GG2N0owr1fwddcheakxRYZywVZymQLvzyffFNquIvbr8FULOGFZjoTE
u45UOWCtWaElRm+p58+YoeXj7QhDWp4hzJNrzBUOnC1/pw1YzchOOsXoaPufPTVZ
ghR3GzGdfjw/nOLhyDYZZuNeHMVjbZHP+LCrni9NhwHhD1aIeM2LXtUqH0YRlgQC
1ZnAORnlDrCEjzkHw3aMu0DUkv7/DPeI07Rxbxg2L+xzZWNULHjVlAbyxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMELnQqLU0UHHw6GrCPdpIDUJE7MMB8GA1UdIwQY
MBaAFGPiyqfhivLfvbOmJp2i4G3ty2zwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQt
NTM4YWYxMDE3NTA5LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQtNTM4YWYxMDE3NTA5
LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKtRY2C1
ifh3KGUS3hFgtw6P97AdvPRqln2Pcz8r5fQe28xz/Z+g5ihB75tV6sQcsBCLu5zD
9WfP7Ez2EEHhrYbwvWdvhOyK38QPrnxlksSyqz+N6xBrjCYg2r6aWnIWWJ649BZ9
Gzfwd79JyrPDC5aZhnuJSdt5vRIX2dSEUsANjVFylKpa9pVRVpf369tN/bZpWOvO
h+JMPzVoGhj20H+Ij78zftFPW432fYytw29qmazWRv7Wf88RVHNtYWPaKf11kpdo
OalX06DXvrbKdUALAWmmbx6/tKPy9z1xj8dzR67NNrynXyVvEKr3FUwzGjy9IdxJ
V4CJnhzco5rgYg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:40:48 2025 by rpki-client