Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: TUHmjE534spCeF7UM7TLINYJXEsNTUXKxtOSy1h4fz4=
Subject key identifier: 0F:37:2E:E0:F9:BC:55:8F:9B:49:90:13:63:9F:22:E0:40:6D:4C:71
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 0196BBC914315FC0DDD381396CF7C497865E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 20:00:39 +0000
Manifest this update: Sat 10 May 2025 20:00:39 +0000
Manifest next update: Sun 11 May 2025 20:00:39 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: IeZEPw1CkZdeYUOTsXErjhdnJSiJUHZi2EtxJQJCujk=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:14:31:5f:c0:dd:d3:81:39:6c:f7:c4:97:86:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: May 10 20:00:39 2025 GMT
Not After : May 11 20:00:39 2025 GMT
Subject: CN=0f372ee0f9bc558f9b499013639f22e0406d4c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:db:1f:f9:fe:d6:3f:dd:a1:e0:68:84:4d:
0a:f8:54:38:5d:9c:ac:50:2f:98:01:6e:10:3c:57:
51:58:46:6a:b7:b0:36:50:3f:34:67:08:a3:53:45:
49:c0:ef:8f:d5:5d:cc:de:39:a0:82:79:a3:d9:9c:
2c:85:61:b3:05:af:c0:e6:7c:39:ef:09:41:d9:d1:
b8:2f:25:21:63:78:3e:12:c8:b5:12:02:1b:46:a2:
49:e0:f2:c3:41:f4:33:e2:e3:82:96:c0:c8:25:d6:
9f:8e:d0:a1:95:85:45:e7:06:52:02:d9:11:3a:2c:
93:e2:21:28:34:87:48:43:1b:3d:d0:df:bc:ee:6b:
5d:db:fb:e7:2a:c8:b3:be:d1:15:98:18:5c:20:5b:
f4:19:7a:fd:37:fc:72:c2:d1:53:70:e3:ac:63:59:
ac:dc:b1:69:89:b2:66:f6:0d:aa:5b:ae:23:17:03:
c4:17:c9:42:6b:7a:92:1c:95:89:9c:89:25:77:06:
49:19:7a:0c:af:38:ac:34:96:25:37:a5:b7:59:ad:
e5:91:b6:e4:1a:a4:78:96:fe:7b:80:9f:61:e2:f1:
aa:ba:04:8d:1a:f2:cf:d8:3a:13:fd:5a:0e:8a:cf:
e3:8e:10:b8:43:ce:a8:44:0f:2a:ee:aa:86:ff:cf:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:37:2E:E0:F9:BC:55:8F:9B:49:90:13:63:9F:22:E0:40:6D:4C:71
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a4:ff:7a:df:eb:13:b2:d7:24:7d:d3:d8:28:f9:11:09:37:
bb:13:df:fa:97:28:8f:57:26:d9:e5:f2:d5:00:fc:64:85:5e:
8f:0f:5f:4a:27:14:53:c3:56:ef:5b:27:4f:37:41:b3:16:d9:
cd:14:a3:37:05:23:a5:f3:0f:10:2f:6f:84:f3:dd:a5:52:53:
fc:be:a1:44:c3:9e:79:ef:67:4f:1d:c6:d4:ca:e9:43:6d:42:
18:f6:4c:fa:0d:7b:d5:bc:07:a0:06:e9:08:c3:92:81:7d:30:
23:70:36:05:2a:83:58:1a:6a:16:88:30:77:0b:0b:5e:2f:13:
3e:42:63:38:37:e6:05:ff:32:21:98:f0:8d:2e:80:4b:66:24:
e2:15:3f:69:c3:1b:f2:8d:88:64:da:1c:6d:b7:d5:db:91:8b:
2c:59:ca:3c:b8:6c:41:18:a7:2b:9f:1f:5a:37:b6:60:04:3b:
8f:41:54:56:32:a6:e4:5a:b3:76:74:8d:d8:e6:64:57:23:42:
14:83:68:e5:37:8d:91:f8:39:b2:d9:3c:44:72:48:ff:7e:d9:
c6:62:e8:ab:a4:6e:fe:ec:85:7d:45:0b:19:94:7c:87:53:05:
5a:0b:7b:1e:32:d0:f3:49:e7:f3:c3:ef:a4:21:c4:6b:33:0a:
fb:0d:e7:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7yRQxX8Dd04E5bPfEl4ZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjliMWEwODEzOWUxZGE5NjQzZGQwNDI0ZjVjZDY0NTA3
ZTM3NzEwHhcNMjUwNTEwMjAwMDM5WhcNMjUwNTExMjAwMDM5WjAzMTEwLwYDVQQD
EygwZjM3MmVlMGY5YmM1NThmOWI0OTkwMTM2MzlmMjJlMDQwNmQ0YzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rnbH/n+1j/doeBohE0K+FQ4XZys
UC+YAW4QPFdRWEZqt7A2UD80ZwijU0VJwO+P1V3M3jmggnmj2ZwshWGzBa/A5nw5
7wlB2dG4LyUhY3g+Esi1EgIbRqJJ4PLDQfQz4uOClsDIJdafjtChlYVF5wZSAtkR
OiyT4iEoNIdIQxs90N+87mtd2/vnKsizvtEVmBhcIFv0GXr9N/xywtFTcOOsY1ms
3LFpibJm9g2qW64jFwPEF8lCa3qSHJWJnIkldwZJGXoMrzisNJYlN6W3Wa3lkbbk
GqR4lv57gJ9h4vGqugSNGvLP2DoT/VoOis/jjhC4Q86oRA8q7qqG/89iTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA83LuD5vFWPm0mQE2OfIuBAbUxxMB8GA1UdIwQY
MBaAFGApsaCBOeHalkPdBCT1zWRQfjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzIt
NTYxNTUxM2ZkY2Y0LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzItNTYxNTUxM2ZkY2Y0
LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaT/et/r
E7LXJH3T2Cj5EQk3uxPf+pcoj1cm2eXy1QD8ZIVejw9fSicUU8NW71snTzdBsxbZ
zRSjNwUjpfMPEC9vhPPdpVJT/L6hRMOeee9nTx3G1MrpQ21CGPZM+g171bwHoAbp
CMOSgX0wI3A2BSqDWBpqFogwdwsLXi8TPkJjODfmBf8yIZjwjS6AS2Yk4hU/acMb
8o2IZNocbbfV25GLLFnKPLhsQRinK58fWje2YAQ7j0FUVjKm5FqzdnSN2OZkVyNC
FINo5TeNkfg5stk8RHJI/37ZxmLoq6Ru/uyFfUULGZR8h1MFWgt7HjLQ80nn88Pv
pCHEazMK+w3ncQ==
-----END CERTIFICATE-----
Generated at Sun May 11 04:33:34 2025 by rpki-client