Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
File: YTChAogFFzqiJUSk67mECskbyNA.mft (raw, json)
Hash identifier: uwdAVFmnn/310udnaSiUUPpOZYxmZzw7D9824r8NV0o=
Subject key identifier: 03:89:13:E7:F6:C7:B0:65:BA:0D:30:B2:A9:7F:22:D0:FF:03:83:98
Authority key identifier: 61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
Certificate issuer: /CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Certificate serial: 0196BD80D39496C592B6838178D3D96A3052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
Manifest number: 0C94
Signing time: Sun 11 May 2025 04:00:58 +0000
Manifest this update: Sun 11 May 2025 04:00:58 +0000
Manifest next update: Mon 12 May 2025 04:00:58 +0000
Files and hashes: 1: YTChAogFFzqiJUSk67mECskbyNA.crl (hash: el8uIMibNnIo+DbkdL+xv/AUNn68o1PiALWH77o7ieA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:d3:94:96:c5:92:b6:83:81:78:d3:d9:6a:30:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Validity
Not Before: May 11 04:00:58 2025 GMT
Not After : May 12 04:00:58 2025 GMT
Subject: CN=038913e7f6c7b065ba0d30b2a97f22d0ff038398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:f6:2f:d0:29:5a:7f:d8:a7:a1:5d:1a:39:
27:e0:4b:e6:74:30:12:e1:6c:cc:09:87:13:7d:f7:
01:a8:10:60:e1:a0:11:0e:6c:bb:cb:bc:33:37:0b:
4c:f6:13:bc:6d:a1:27:e2:7b:d1:56:61:2a:27:38:
f9:79:c5:29:5a:6c:f7:d6:79:f1:a0:27:fb:3b:93:
2c:0c:64:79:c4:e4:a9:05:f0:10:02:79:2d:70:1a:
97:11:0b:57:36:ac:fa:58:e6:85:9d:db:c8:c9:90:
3a:14:d7:81:d9:9f:fa:ee:6a:e1:48:9e:82:df:3c:
e8:5a:e0:be:7d:2b:44:2d:03:53:8c:c9:44:73:2d:
64:f4:4a:3e:6e:77:2d:03:e1:fe:73:e0:b5:24:58:
81:32:18:f3:26:c8:72:8a:18:16:86:f9:0a:a5:20:
09:6c:cf:e1:5f:29:38:28:9e:4d:37:b2:b3:15:79:
9b:85:de:84:77:a4:92:cd:e6:f7:d7:48:64:2f:27:
69:19:f2:b8:ef:48:b5:00:5b:bb:f1:ab:37:51:e3:
18:57:1f:e5:ee:9b:89:f8:a8:5c:78:78:d3:5f:5c:
58:82:50:65:5b:48:3c:c0:11:5d:22:ff:7c:bc:25:
5a:1e:51:7e:78:f6:ef:e7:c9:94:be:f0:e9:33:90:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:89:13:E7:F6:C7:B0:65:BA:0D:30:B2:A9:7F:22:D0:FF:03:83:98
X509v3 Authority Key Identifier:
keyid:61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b1:b8:3d:43:ee:2a:8f:e6:ca:2d:0b:c6:e2:a8:e9:d4:60:
bf:c9:57:9f:84:18:a0:31:f5:e6:19:4c:e1:ac:fc:06:62:f9:
0b:46:90:fe:d1:e5:da:d1:bb:44:81:b9:9a:bb:91:7d:29:92:
ff:ab:66:de:d5:77:22:c3:c4:c1:49:d5:ed:94:bb:cf:71:e3:
94:a5:cf:9f:00:c9:d9:f9:16:0b:00:4a:a8:4e:9a:c6:3c:09:
31:e8:1e:3a:b9:26:79:2b:26:e7:9e:c9:52:c6:ff:5a:b4:64:
e1:a4:e0:05:6c:49:13:5e:49:70:d2:35:d5:82:0f:8a:b6:94:
94:17:6b:3f:81:b9:c9:ac:d0:5a:6a:46:56:15:b9:ad:4c:c6:
e5:c4:af:31:d7:46:72:00:da:f4:d0:e6:7d:38:7f:41:a8:1e:
d9:c9:0e:68:8d:ae:b9:71:be:5d:d2:07:d6:a9:f8:31:95:a1:
e0:a0:1c:13:16:16:4f:0b:2b:59:28:9e:6e:8d:8f:0b:b0:89:
34:e6:17:7d:b4:71:46:50:76:df:70:65:1c:45:68:0e:5a:a2:
a8:32:f3:92:87:44:28:19:0f:88:7d:94:e6:8d:d3:95:15:9a:
1b:8a:a0:f6:08:f6:b4:c4:42:e3:11:a4:27:7e:eb:d0:c1:72:
e0:55:bf:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gNOUlsWStoOBeNPZajBSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzBhMTAyODgwNTE3M2FhMjI1NDRhNGViYjk4NDBhYzkx
YmM4ZDAwHhcNMjUwNTExMDQwMDU4WhcNMjUwNTEyMDQwMDU4WjAzMTEwLwYDVQQD
EygwMzg5MTNlN2Y2YzdiMDY1YmEwZDMwYjJhOTdmMjJkMGZmMDM4Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXP2L9ApWn/Yp6FdGjkn4EvmdDAS
4WzMCYcTffcBqBBg4aARDmy7y7wzNwtM9hO8baEn4nvRVmEqJzj5ecUpWmz31nnx
oCf7O5MsDGR5xOSpBfAQAnktcBqXEQtXNqz6WOaFndvIyZA6FNeB2Z/67mrhSJ6C
3zzoWuC+fStELQNTjMlEcy1k9Eo+bnctA+H+c+C1JFiBMhjzJshyihgWhvkKpSAJ
bM/hXyk4KJ5NN7KzFXmbhd6Ed6SSzeb310hkLydpGfK470i1AFu78as3UeMYVx/l
7puJ+KhceHjTX1xYglBlW0g8wBFdIv98vCVaHlF+ePbv58mUvvDpM5DqrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOJE+f2x7Blug0wsql/ItD/A4OYMB8GA1UdIwQY
MBaAFGEwoQKIBRc6oiVEpOu5hArJG8jQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRDaEFvZ0ZGenFpSlVTazY3bUVDc2tieU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zYWU4NjMtNjkwZS00NjMxLTkxMjAt
YTUzYjVlOTc5MTMxLzEvWVRDaEFvZ0ZGenFpSlVTazY3bUVDc2tieU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8zYWU4NjMtNjkwZS00NjMxLTkxMjAtYTUzYjVlOTc5MTMx
LzEvWVRDaEFvZ0ZGenFpSlVTazY3bUVDc2tieU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbG4PUPu
Ko/myi0LxuKo6dRgv8lXn4QYoDH15hlM4az8BmL5C0aQ/tHl2tG7RIG5mruRfSmS
/6tm3tV3IsPEwUnV7ZS7z3HjlKXPnwDJ2fkWCwBKqE6axjwJMegeOrkmeSsm557J
Usb/WrRk4aTgBWxJE15JcNI11YIPiraUlBdrP4G5yazQWmpGVhW5rUzG5cSvMddG
cgDa9NDmfTh/Qage2ckOaI2uuXG+XdIH1qn4MZWh4KAcExYWTwsrWSiebo2PC7CJ
NOYXfbRxRlB233BlHEVoDlqiqDLzkodEKBkPiH2U5o3TlRWaG4qg9gj2tMRC4xGk
J37r0MFy4FW/5g==
-----END CERTIFICATE-----
Generated at Sun May 11 14:55:05 2025 by rpki-client