Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: Xhpv7n5FDFqwoeDaGINf1kH6F9waAe1OfBQIObW4CcM=
Subject key identifier: B0:7D:DE:2F:BD:C6:9D:60:9C:AC:4A:A6:3A:F0:3C:1F:04:02:BF:A9
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 01963E420F450840ED09DB5813CBA9A37A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 14DB
Signing time: Wed 16 Apr 2025 11:00:38 +0000
Manifest this update: Wed 16 Apr 2025 11:00:38 +0000
Manifest next update: Thu 17 Apr 2025 11:00:38 +0000
Files and hashes: 1: mkk-KHtVpdSjRTu_tkkdV37L-30.roa (hash: ivbrYqlxOhyTn42BC3RV5SMdz9F9dKpqo8vRZ2G2vog=)
2: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: lovaEmKsW/iK1iQBIjOmUozVC41unEcykZ9VPgHc0RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:42:0f:45:08:40:ed:09:db:58:13:cb:a9:a3:7a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Apr 16 11:00:38 2025 GMT
Not After : Apr 17 11:00:38 2025 GMT
Subject: CN=b07dde2fbdc69d609cac4aa63af03c1f0402bfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:f1:81:0c:5f:4a:f4:10:98:94:d2:a7:c3:
03:42:63:89:e0:e5:55:1e:77:1d:cb:ac:8c:7d:67:
b6:a4:e0:08:70:8f:99:40:63:ba:5a:3c:95:b0:27:
46:4d:4b:67:da:7a:3c:ac:d0:17:c9:f5:a7:0e:ed:
c8:43:16:13:91:d6:98:45:68:74:f6:1b:e7:d9:4d:
00:e3:dd:a9:b6:c4:c3:4b:be:6a:23:20:94:4a:5d:
85:37:2a:bf:7f:3a:1a:9d:b7:04:3b:f8:2d:35:3b:
ea:1b:5a:b4:3a:8a:ad:d5:b2:0e:2c:da:07:c4:63:
a7:f0:8a:33:1d:7f:df:ec:6b:d4:16:b2:31:72:e2:
31:10:a1:9a:5e:dc:1c:e3:77:20:dc:c9:2e:25:06:
ce:d8:da:e0:d1:9c:89:cf:4a:6a:72:f2:cd:29:2a:
a7:ba:a8:ef:78:94:eb:74:82:f2:c2:0a:1c:ed:79:
44:41:fd:a1:43:16:ec:23:69:d7:fa:96:3c:33:19:
45:f9:5c:1c:7f:34:f5:7f:db:48:51:b2:40:88:ae:
97:6e:ad:fb:44:2b:13:5c:11:3f:59:8f:44:d0:2e:
9e:1d:a7:cf:eb:ee:19:c8:bd:b9:61:db:dd:77:0f:
eb:b2:96:6f:ce:1e:1c:f6:82:2d:68:b3:b6:c4:c5:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7D:DE:2F:BD:C6:9D:60:9C:AC:4A:A6:3A:F0:3C:1F:04:02:BF:A9
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5e:46:d1:0b:6d:7a:d1:6d:75:6c:12:97:c4:36:1b:0d:be:
97:c1:dc:f6:a1:f4:c0:9c:7d:89:44:08:3d:3e:0a:d7:ab:06:
bf:20:9f:7c:c0:14:0f:65:84:61:9e:4b:d8:06:27:cd:82:6e:
3b:26:b9:ac:c2:01:46:db:ed:d0:64:d8:f5:08:f0:2f:dc:db:
5a:c2:ba:d1:b5:02:6a:ec:e0:00:e4:52:75:78:fa:7b:f5:2f:
bf:44:cc:ec:5d:20:97:80:b1:1d:25:79:56:9d:fd:3f:61:d5:
cc:05:a2:d4:b0:93:12:51:db:a3:ee:70:39:0f:cc:7e:3a:58:
37:b7:c2:f6:e7:b0:36:71:ca:0b:b6:e0:b9:8f:0a:af:1b:40:
1b:4b:f8:9c:87:93:d7:ae:57:6e:8f:b1:f1:85:30:ba:32:35:
03:02:9a:b9:26:b4:9b:b4:38:9c:09:c2:fa:63:ba:ed:09:66:
36:d6:c9:c0:08:c8:f5:1c:f5:80:fd:67:9b:f7:3a:73:6c:e8:
f2:59:2f:bc:8f:68:a9:79:e2:ce:85:07:42:13:8c:7f:a6:99:
33:04:c8:4b:79:41:8a:6a:16:aa:cc:30:6b:85:7e:d2:66:1d:
2b:51:3c:0d:1e:b1:ee:57:6e:58:e5:97:8d:24:58:a1:52:1b:
ca:3b:4e:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+Qg9FCEDtCdtYE8upo3p0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm
OWE1YTQwHhcNMjUwNDE2MTEwMDM4WhcNMjUwNDE3MTEwMDM4WjAzMTEwLwYDVQQD
EyhiMDdkZGUyZmJkYzY5ZDYwOWNhYzRhYTYzYWYwM2MxZjA0MDJiZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3rxgQxfSvQQmJTSp8MDQmOJ4OVV
Hncdy6yMfWe2pOAIcI+ZQGO6WjyVsCdGTUtn2no8rNAXyfWnDu3IQxYTkdaYRWh0
9hvn2U0A492ptsTDS75qIyCUSl2FNyq/fzoanbcEO/gtNTvqG1q0Ooqt1bIOLNoH
xGOn8IozHX/f7GvUFrIxcuIxEKGaXtwc43cg3MkuJQbO2Nrg0ZyJz0pqcvLNKSqn
uqjveJTrdILywgoc7XlEQf2hQxbsI2nX+pY8MxlF+VwcfzT1f9tIUbJAiK6Xbq37
RCsTXBE/WY9E0C6eHafP6+4ZyL25Ydvddw/rspZvzh4c9oItaLO2xMWjywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB93i+9xp1gnKxKpjrwPB8EAr+pMB8GA1UdIwQY
MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt
YjQ5ZDg5ZTMwZGRkLzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk
LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe15G0Qtt
etFtdWwSl8Q2Gw2+l8Hc9qH0wJx9iUQIPT4K16sGvyCffMAUD2WEYZ5L2AYnzYJu
Oya5rMIBRtvt0GTY9QjwL9zbWsK60bUCauzgAORSdXj6e/Uvv0TM7F0gl4CxHSV5
Vp39P2HVzAWi1LCTElHbo+5wOQ/MfjpYN7fC9uewNnHKC7bguY8KrxtAG0v4nIeT
165Xbo+x8YUwujI1AwKauSa0m7Q4nAnC+mO67QlmNtbJwAjI9Rz1gP1nm/c6c2zo
8lkvvI9oqXnizoUHQhOMf6aZMwTIS3lBimoWqswwa4V+0mYdK1E8DR6x7lduWOWX
jSRYoVIbyjtORg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:44 2025 by rpki-client