Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
File: y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json)
Hash identifier: aIxCSL2t971vOJ7SjaWVfaUHpI/GjiZbCTinOndXk58=
Subject key identifier: 1E:26:B3:EE:3E:D3:09:EE:FB:33:EA:4E:54:4E:29:4E:91:EF:D5:A8
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial: 0196BC6E3EC22F59246417A98FCEC8D691C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
Manifest number: 0F00
Signing time: Sat 10 May 2025 23:01:03 +0000
Manifest this update: Sat 10 May 2025 23:01:03 +0000
Manifest next update: Sun 11 May 2025 23:01:03 +0000
Files and hashes: 1: xXYCNUnm-3UsiS0Y2j4IJt8GJmU.roa (hash: kfa/1BPOG2GKMxXo/zgSWZ2DSaf3+pCaWIgYdprI0TU=)
2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: gXS8IcQK0N9B2K9JK4CgnRcvegINkv58die/uXCk+zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:3e:c2:2f:59:24:64:17:a9:8f:ce:c8:d6:91:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Validity
Not Before: May 10 23:01:03 2025 GMT
Not After : May 11 23:01:03 2025 GMT
Subject: CN=1e26b3ee3ed309eefb33ea4e544e294e91efd5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:e2:ce:4c:cd:3b:27:3d:61:d6:42:da:f9:
7c:ad:4d:e2:78:95:48:2e:6d:6f:db:14:b3:b3:21:
1d:80:a2:3b:58:d7:13:6c:df:67:07:04:28:35:46:
7e:c2:88:00:2d:7c:a4:25:25:fd:63:b0:45:38:a0:
1d:7e:0d:f3:94:ec:e6:1b:26:c6:9f:97:b0:a6:63:
fb:f0:fe:3e:77:54:2d:bc:12:ec:39:ce:d2:41:40:
1e:04:d7:dc:bd:d0:d0:d5:4a:72:4c:34:73:9f:1a:
de:49:e5:9c:07:cd:96:2e:61:e7:bd:04:bb:21:17:
e7:2c:35:80:52:40:7a:7d:47:3b:aa:6a:72:67:66:
51:b3:40:a9:f3:2e:68:7f:e8:8c:34:9c:33:56:08:
a9:20:e5:0e:ab:b2:1b:ff:fc:df:33:84:25:b4:4f:
0c:3c:3a:67:28:0d:83:77:1c:40:bc:0e:a4:d7:79:
62:49:fe:3f:d4:15:2e:6e:39:6a:d5:22:b9:06:6a:
a6:f4:b7:0d:3d:4b:4a:87:d4:4f:e6:7d:7a:4f:12:
4f:17:d1:41:d0:03:e2:f9:e4:6e:df:f0:81:64:27:
07:bf:84:88:1e:01:9e:bd:db:ee:d3:96:7e:b4:c8:
78:df:4f:05:4f:2f:88:a8:17:0e:35:90:40:97:81:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:26:B3:EE:3E:D3:09:EE:FB:33:EA:4E:54:4E:29:4E:91:EF:D5:A8
X509v3 Authority Key Identifier:
keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:61:fe:3c:61:f0:c5:2e:67:80:33:bc:5a:8b:90:f5:93:4b:
1e:2e:cd:21:76:58:8d:9b:7b:8f:8f:0e:ae:34:80:99:8b:06:
4d:a9:1d:c1:71:4f:d7:59:7d:3e:9f:d6:0c:00:a7:a2:78:51:
4c:20:dd:c3:db:92:0e:16:28:ea:dc:0b:36:99:64:70:92:91:
ae:eb:87:98:dd:cb:da:cc:1c:ef:3c:c8:18:ee:b6:54:75:90:
a4:17:e8:8f:bb:89:8a:ed:51:c1:11:8b:27:7b:51:c1:ba:24:
f8:c1:3a:c5:38:66:a5:cb:13:22:6e:40:cc:bc:63:50:1b:4c:
1a:68:bb:25:04:44:47:6a:ff:f0:9a:23:42:d5:c8:2e:69:12:
dc:31:f6:6e:d2:29:65:f9:01:b2:c5:cd:88:a1:ec:09:2d:01:
08:8c:9f:99:e6:6d:88:92:f1:32:6b:f4:43:6e:12:23:f3:a3:
6d:7f:62:3d:b4:94:11:63:a8:7e:1d:ce:27:be:b0:86:6a:22:
ec:d1:5a:98:e1:92:d4:df:ba:53:ad:9d:b4:86:c5:d2:58:d4:
fb:76:a3:53:59:48:cb:87:80:a7:dc:56:d9:b1:a4:4a:83:b8:
f7:30:7c:70:52:61:27:14:6c:aa:c7:c2:a0:ec:8c:3c:7a:91:
ce:56:05:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bj7CL1kkZBepj87I1pHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDc1N2U5MTNhYWNlNDM0ZTZkZDZkNmQ1MGE3ZWRmNzJj
ZTg4OGMwHhcNMjUwNTEwMjMwMTAzWhcNMjUwNTExMjMwMTAzWjAzMTEwLwYDVQQD
EygxZTI2YjNlZTNlZDMwOWVlZmIzM2VhNGU1NDRlMjk0ZTkxZWZkNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprbizkzNOyc9YdZC2vl8rU3ieJVI
Lm1v2xSzsyEdgKI7WNcTbN9nBwQoNUZ+wogALXykJSX9Y7BFOKAdfg3zlOzmGybG
n5ewpmP78P4+d1QtvBLsOc7SQUAeBNfcvdDQ1UpyTDRznxreSeWcB82WLmHnvQS7
IRfnLDWAUkB6fUc7qmpyZ2ZRs0Cp8y5of+iMNJwzVgipIOUOq7Ib//zfM4QltE8M
PDpnKA2DdxxAvA6k13liSf4/1BUubjlq1SK5Bmqm9LcNPUtKh9RP5n16TxJPF9FB
0APi+eRu3/CBZCcHv4SIHgGevdvu05Z+tMh4308FTy+IqBcONZBAl4E9XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4ms+4+0wnu+zPqTlROKU6R79WoMB8GA1UdIwQY
MBaAFMvXV+kTqs5DTm3W1tUKft9yzoiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZGMwOWEtMmIyYS00Nzk3LWEyOTYt
OWNmZGYzYzJiMzQ4LzEveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iZGMwOWEtMmIyYS00Nzk3LWEyOTYtOWNmZGYzYzJiMzQ4
LzEveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3WH+PGHw
xS5ngDO8WouQ9ZNLHi7NIXZYjZt7j48OrjSAmYsGTakdwXFP11l9Pp/WDACnonhR
TCDdw9uSDhYo6twLNplkcJKRruuHmN3L2swc7zzIGO62VHWQpBfoj7uJiu1RwRGL
J3tRwbok+ME6xThmpcsTIm5AzLxjUBtMGmi7JQRER2r/8JojQtXILmkS3DH2btIp
ZfkBssXNiKHsCS0BCIyfmeZtiJLxMmv0Q24SI/OjbX9iPbSUEWOofh3OJ76whmoi
7NFamOGS1N+6U62dtIbF0ljU+3ajU1lIy4eAp9xW2bGkSoO49zB8cFJhJxRsqsfC
oOyMPHqRzlYFyA==
-----END CERTIFICATE-----
Generated at Sun May 11 09:36:03 2025 by rpki-client