Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: gWrG4p4NYVKJHLYpLyXVrq7pq0eYlrsk9a9KnWjmplk=
Subject key identifier: 0B:86:BA:43:01:2D:F4:5F:A5:3D:C7:E4:D8:FC:2F:5A:A5:A7:C8:79
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 0196BD804846362541134CC7F76042443B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0CF9
Signing time: Sun 11 May 2025 04:00:22 +0000
Manifest this update: Sun 11 May 2025 04:00:22 +0000
Manifest next update: Mon 12 May 2025 04:00:22 +0000
Files and hashes: 1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: itxPIOSzXnKhb6hAWuk2BIB03819YR6oSnhGjnUjL+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:48:46:36:25:41:13:4c:c7:f7:60:42:44:3b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: May 11 04:00:22 2025 GMT
Not After : May 12 04:00:22 2025 GMT
Subject: CN=0b86ba43012df45fa53dc7e4d8fc2f5aa5a7c879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:5e:11:a0:11:c9:09:95:a6:af:02:21:2e:
bf:5b:d2:36:15:e5:22:c2:2c:a7:05:21:89:a3:01:
ad:49:e6:26:06:29:a0:ce:c9:88:29:b0:63:c9:12:
e7:e3:58:74:16:50:34:1d:79:f2:50:42:b1:b7:f1:
cf:a0:17:5c:f5:1d:df:70:ce:dd:3b:01:47:c4:16:
2d:5f:59:d2:b1:7d:56:84:b4:06:24:83:d8:f7:79:
6a:38:cf:65:47:82:f8:5f:a0:7d:c3:d4:6a:38:fe:
8a:73:12:da:43:3a:3f:bc:ee:26:56:df:71:ba:79:
4d:9e:2a:fb:43:4e:ed:43:37:07:e5:08:44:a5:ab:
14:0a:1b:9c:8b:4b:f1:b9:af:3b:7e:ea:af:c1:15:
d8:ea:5a:e8:e6:28:83:62:58:cb:c5:8d:8b:26:9c:
bd:2f:91:5d:e4:9b:b4:30:3b:88:1d:1b:9a:ce:92:
50:f2:57:54:f9:70:6c:1e:0e:96:7f:ed:39:f2:ba:
d0:43:4d:3d:39:6b:8e:a4:c7:5c:f8:91:dd:45:c1:
f0:a8:77:3a:4d:20:16:4d:66:db:c5:e3:45:90:d5:
35:a1:97:38:cb:ad:60:71:01:50:e3:21:7f:5c:f6:
59:5e:ba:53:6e:0e:bc:fc:02:f2:a8:05:15:37:68:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:86:BA:43:01:2D:F4:5F:A5:3D:C7:E4:D8:FC:2F:5A:A5:A7:C8:79
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:31:74:dd:a2:bc:29:00:0a:fe:17:e5:65:8c:3c:64:36:19:
2b:0e:ff:30:8d:f5:1e:e7:2c:12:6b:b2:f8:94:0e:b7:12:1e:
2e:26:2d:ef:d8:5c:9e:bd:3f:8f:3a:b2:b2:e1:39:db:56:59:
40:38:85:ee:f9:1c:41:e6:51:d1:59:cc:e6:a2:33:6b:a4:96:
e8:54:43:8d:9b:37:28:62:e9:07:aa:30:3e:e0:ba:0c:58:81:
46:12:1e:9a:d0:de:9a:1f:9f:eb:3c:89:a2:38:f2:95:1f:b3:
65:a7:3a:a9:24:eb:3b:fa:c6:e0:8b:0a:d2:df:15:33:45:9e:
6a:3b:99:ca:0e:21:27:4b:87:ca:11:67:07:a7:cb:fc:3b:32:
59:69:2e:8e:2f:1c:5d:7a:9b:1f:a9:f2:0d:1f:27:c7:ce:46:
c0:9f:9d:8d:10:82:6e:c7:60:b2:c7:45:17:38:15:ec:19:c4:
7f:83:a3:b3:73:88:d6:32:93:0a:e7:6d:50:39:d2:ba:db:ef:
04:11:a0:cc:16:73:69:f3:10:0c:e5:44:51:c7:71:d9:e1:06:
1f:50:8b:50:eb:67:f2:8a:94:ea:59:73:49:58:b6:3c:47:ab:
f3:72:ea:e0:ad:cb:1c:04:ff:a0:d5:45:69:17:41:ee:78:4f:
67:33:f6:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gEhGNiVBE0zH92BCRDtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl
ZTRjZTEwHhcNMjUwNTExMDQwMDIyWhcNMjUwNTEyMDQwMDIyWjAzMTEwLwYDVQQD
EygwYjg2YmE0MzAxMmRmNDVmYTUzZGM3ZTRkOGZjMmY1YWE1YTdjODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVxeEaARyQmVpq8CIS6/W9I2FeUi
wiynBSGJowGtSeYmBimgzsmIKbBjyRLn41h0FlA0HXnyUEKxt/HPoBdc9R3fcM7d
OwFHxBYtX1nSsX1WhLQGJIPY93lqOM9lR4L4X6B9w9RqOP6KcxLaQzo/vO4mVt9x
unlNnir7Q07tQzcH5QhEpasUChuci0vxua87fuqvwRXY6lro5iiDYljLxY2LJpy9
L5Fd5Ju0MDuIHRuazpJQ8ldU+XBsHg6Wf+058rrQQ009OWuOpMdc+JHdRcHwqHc6
TSAWTWbbxeNFkNU1oZc4y61gcQFQ4yF/XPZZXrpTbg68/ALyqAUVN2hnpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuGukMBLfRfpT3H5Nj8L1qlp8h5MB8GA1UdIwQY
MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt
MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz
LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzF03aK8
KQAK/hflZYw8ZDYZKw7/MI31HucsEmuy+JQOtxIeLiYt79hcnr0/jzqysuE521ZZ
QDiF7vkcQeZR0VnM5qIza6SW6FRDjZs3KGLpB6owPuC6DFiBRhIemtDemh+f6zyJ
ojjylR+zZac6qSTrO/rG4IsK0t8VM0WeajuZyg4hJ0uHyhFnB6fL/DsyWWkuji8c
XXqbH6nyDR8nx85GwJ+djRCCbsdgssdFFzgV7BnEf4Ojs3OI1jKTCudtUDnSutvv
BBGgzBZzafMQDOVEUcdx2eEGH1CLUOtn8oqU6llzSVi2PEer83Lq4K3LHAT/oNVF
aRdB7nhPZzP2PA==
-----END CERTIFICATE-----
Generated at Sun May 11 11:26:48 2025 by rpki-client