Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: 7iK1aa1+0aiYI3RJaYKBALDBL5igI1hjSTR1E+KA+34=
Subject key identifier: 73:6B:0E:D3:5F:16:4C:54:66:D1:26:3B:7D:E1:B0:1C:4C:0F:51:C7
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 0196DDAFFB8BE960FCA63519E6CE7A9395BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 0F04
Signing time: Sat 17 May 2025 10:00:19 +0000
Manifest this update: Sat 17 May 2025 10:00:19 +0000
Manifest next update: Sun 18 May 2025 10:00:19 +0000
Files and hashes: 1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: EHkYwQ/HdoXjjQMWERUcLkaVwrBPCu5Q9hBxIacs6S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:af:fb:8b:e9:60:fc:a6:35:19:e6:ce:7a:93:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: May 17 10:00:19 2025 GMT
Not After : May 18 10:00:19 2025 GMT
Subject: CN=736b0ed35f164c5466d1263b7de1b01c4c0f51c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:76:d1:8c:04:40:46:fb:d7:6e:46:6c:d7:
91:51:83:44:a8:03:a3:39:e2:49:72:8e:6d:5d:71:
3f:fd:b4:79:25:3f:cb:b2:40:e3:17:37:90:79:74:
49:8e:bb:54:a9:90:37:1a:3f:fa:d3:33:0e:2f:6b:
bb:cb:bf:d3:0f:74:62:c4:e4:10:08:12:3c:28:1e:
82:b8:05:c3:68:6a:6a:c5:b6:68:8f:3c:cb:ef:bd:
6c:2a:f2:cd:30:8f:d4:7a:84:c1:bd:8e:72:9f:cd:
21:20:65:49:91:8c:b2:ea:28:c4:cb:6f:8d:34:fa:
46:38:c8:e8:e1:ea:42:ae:80:a8:d8:58:9f:f4:6d:
1c:a2:7d:70:a2:ba:fd:1a:ab:02:9a:b2:2e:41:84:
33:91:48:a4:6f:00:bd:cf:3b:bf:f9:74:c9:39:65:
52:a0:a4:3b:3b:87:66:b4:5f:67:8a:32:5a:c7:a4:
f8:38:f4:7d:25:67:41:93:3f:f6:74:08:66:4f:aa:
5a:50:44:c4:77:a3:a0:29:d4:32:1f:4a:8c:ae:98:
18:6c:e0:f7:2d:59:95:54:58:ed:23:9a:6d:44:d8:
9c:28:94:1b:f4:af:9a:56:d0:4f:4a:d7:87:2f:24:
59:2e:2e:5c:f0:51:a4:cb:d6:38:44:5d:0c:71:d9:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6B:0E:D3:5F:16:4C:54:66:D1:26:3B:7D:E1:B0:1C:4C:0F:51:C7
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c2:e6:fa:97:c5:47:04:5c:77:a8:d5:25:95:62:d6:6a:6f:
47:d6:29:53:9d:ec:20:94:b9:f7:2a:2f:22:ae:87:ad:f6:50:
39:fd:35:5e:44:4d:46:f7:40:c1:d4:da:66:1f:be:a4:53:01:
a0:ad:9c:76:57:6c:ec:5b:08:b3:80:eb:e9:5d:a7:e6:3b:23:
d1:5b:07:d5:e7:d9:9a:6e:3a:f9:3c:41:fc:02:d9:c8:f6:60:
13:e8:5f:11:17:7c:08:61:75:7b:25:22:a5:85:15:e2:6e:d0:
30:9f:75:3d:31:ee:ae:07:32:6f:a6:1c:d4:9b:29:3f:d5:d0:
55:07:66:15:6f:fb:cd:f7:dd:7d:23:1e:66:67:39:f7:b7:05:
da:94:a1:29:93:27:26:15:bf:ee:4e:a8:ec:50:5a:29:53:a6:
f5:62:2d:4b:63:d2:06:0e:b0:87:da:6b:14:79:38:50:a6:ba:
23:54:08:91:c6:ac:16:dc:b0:af:a5:08:9f:af:e3:e6:ac:a9:
1a:34:a1:c6:28:2a:b4:9d:44:e4:0d:ca:6c:31:a4:c1:97:9b:
ea:f1:ba:28:2e:66:bb:68:d0:2d:cc:66:2e:5d:8a:9c:84:81:
40:d5:7a:0d:c5:d1:3d:c5:c8:ff:d2:a6:96:67:ea:fb:3c:ef:
9e:92:bb:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbdr/uL6WD8pjUZ5s56k5W9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYmU2ZWE2ZWYzMzA4OWU1MjU5ZDI0OWM1YjBkZmFhMTNh
OTRkNzgwHhcNMjUwNTE3MTAwMDE5WhcNMjUwNTE4MTAwMDE5WjAzMTEwLwYDVQQD
Eyg3MzZiMGVkMzVmMTY0YzU0NjZkMTI2M2I3ZGUxYjAxYzRjMGY1MWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FR20YwEQEb7125GbNeRUYNEqAOj
OeJJco5tXXE//bR5JT/LskDjFzeQeXRJjrtUqZA3Gj/60zMOL2u7y7/TD3RixOQQ
CBI8KB6CuAXDaGpqxbZojzzL771sKvLNMI/UeoTBvY5yn80hIGVJkYyy6ijEy2+N
NPpGOMjo4epCroCo2Fif9G0con1worr9GqsCmrIuQYQzkUikbwC9zzu/+XTJOWVS
oKQ7O4dmtF9nijJax6T4OPR9JWdBkz/2dAhmT6paUETEd6OgKdQyH0qMrpgYbOD3
LVmVVFjtI5ptRNicKJQb9K+aVtBPSteHLyRZLi5c8FGky9Y4RF0McdnpbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNrDtNfFkxUZtEmO33hsBxMD1HHMB8GA1UdIwQY
MBaAFMq+bqbvMwieUlnSScWw36oTqU14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMt
ZDMzNWMyMDQyNDAzLzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMtZDMzNWMyMDQyNDAz
LzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8Lm+pfF
RwRcd6jVJZVi1mpvR9YpU53sIJS59yovIq6HrfZQOf01XkRNRvdAwdTaZh++pFMB
oK2cdlds7FsIs4Dr6V2n5jsj0VsH1efZmm46+TxB/ALZyPZgE+hfERd8CGF1eyUi
pYUV4m7QMJ91PTHurgcyb6Yc1JspP9XQVQdmFW/7zffdfSMeZmc597cF2pShKZMn
JhW/7k6o7FBaKVOm9WItS2PSBg6wh9prFHk4UKa6I1QIkcasFtywr6UIn6/j5qyp
GjShxigqtJ1E5A3KbDGkwZeb6vG6KC5mu2jQLcxmLl2KnISBQNV6DcXRPcXI/9Km
lmfq+zzvnpK7Pw==
-----END CERTIFICATE-----
Generated at Sat May 17 14:09:28 2025 by rpki-client