Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier: 3AxPn0fFQyaC65QKhYGs2joSTbFn8CySm80v75IL5CM=
Subject key identifier: 54:2A:8A:7C:B7:FE:FE:CA:24:8C:88:0B:0F:D5:0C:6A:75:D3:C5:C1
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial: 0196B4468F5244AE91F4E629900284895F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 09:00:45 +0000
Manifest this update: Fri 09 May 2025 09:00:45 +0000
Manifest next update: Sat 10 May 2025 09:00:45 +0000
Files and hashes: 1: 5t5Dcx5tNkWQ_sy57yYX9uF0BSc.roa (hash: PzSrKv8Rw8leyPQ1z/odwxbCskApuD1oeaEEXKXPsNc=)
2: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: 2Kr9fIVpinfAH+L8HynvFerobkjUCJ4P/bbS5CVKkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:8f:52:44:ae:91:f4:e6:29:90:02:84:89:5f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
Validity
Not Before: May 9 09:00:45 2025 GMT
Not After : May 10 09:00:45 2025 GMT
Subject: CN=542a8a7cb7fefeca248c880b0fd50c6a75d3c5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:48:60:ea:5c:90:89:7c:fb:e0:2d:6c:51:
88:76:7f:5e:5b:41:53:a8:6b:6a:f8:d7:5c:6a:c2:
65:e2:b6:56:02:23:11:e7:b6:d8:82:ef:92:ba:fd:
a7:3a:ce:6c:12:23:79:c2:e7:d7:a5:13:6e:a1:56:
d5:63:c1:44:b3:ff:5a:5c:59:aa:2c:53:54:52:80:
8c:6d:46:f0:29:22:3a:e3:1f:84:5c:32:9e:c8:61:
5f:01:c5:c1:25:59:66:21:3e:67:73:a2:d3:d3:ec:
1d:b0:c2:4a:f3:63:4a:db:13:12:3e:5f:29:25:46:
b4:23:c7:8c:59:35:54:1c:10:62:86:ca:60:85:b3:
ca:60:31:d2:fc:76:68:97:fa:96:ea:db:83:3f:df:
dc:57:7b:2d:58:66:6c:d7:e0:25:a3:ce:28:43:24:
57:92:db:6e:53:55:0d:9c:11:6f:35:81:12:99:fa:
25:1f:8a:6d:69:82:86:69:39:6b:fd:1c:fd:e0:59:
67:ef:c7:4a:41:84:3b:58:9c:86:e9:63:15:52:6e:
f4:46:bb:c1:45:1f:0b:8e:8b:fe:f6:95:12:97:99:
15:b1:7f:e0:68:1d:8a:d2:e5:4b:ee:c4:4e:f6:f5:
a8:60:e9:77:89:ba:85:e4:04:d0:ac:64:23:c1:c8:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2A:8A:7C:B7:FE:FE:CA:24:8C:88:0B:0F:D5:0C:6A:75:D3:C5:C1
X509v3 Authority Key Identifier:
keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:41:fa:62:4c:89:f5:fa:67:5f:1e:44:da:88:0c:58:53:58:
73:18:4b:26:80:57:7e:34:fc:78:1b:e8:26:62:54:ab:14:57:
d8:2e:5b:d7:e6:04:c7:5e:e0:bc:94:57:d2:1f:c5:99:b7:cb:
7b:60:bf:d2:7d:44:b2:c5:7b:5e:7c:8c:af:4e:90:99:35:f3:
87:a1:56:bb:ab:6d:a0:24:8c:b0:b4:ea:e4:89:bc:2c:29:7a:
b2:f4:18:e0:29:58:a0:3d:41:1d:13:ea:11:c2:ea:90:94:f2:
5c:68:d8:51:3d:9b:20:58:5c:ed:07:e3:81:7c:f6:9a:e7:cb:
fb:11:ac:e1:a4:3f:ca:ab:50:f6:fb:b1:7f:9f:93:4a:1d:b5:
ad:19:18:b6:70:6d:d6:dc:6c:95:45:90:26:ce:37:d1:4b:f9:
b7:44:c0:17:d7:0f:ee:3e:31:ca:8f:79:e8:0c:1e:18:cd:72:
b1:46:b2:bb:82:32:70:46:e4:f2:25:36:79:32:02:e8:0f:33:
a6:d7:64:60:63:96:70:07:53:f3:ee:78:9c:37:4d:3a:b9:77:
3a:dd:3d:b6:c2:32:c4:b5:d8:0f:8d:4f:46:5e:0a:f7:05:b4:
37:0a:ca:08:b7:6d:0b:65:c5:b6:17:01:51:06:28:32:00:f6:
1a:87:99:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0Ro9SRK6R9OYpkAKEiV9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGQ5YTUwMDRjNTkyZDA5M2NjODliMGQ5MDc1MmUyNzlk
NTE4NTQwHhcNMjUwNTA5MDkwMDQ1WhcNMjUwNTEwMDkwMDQ1WjAzMTEwLwYDVQQD
Eyg1NDJhOGE3Y2I3ZmVmZWNhMjQ4Yzg4MGIwZmQ1MGM2YTc1ZDNjNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2FIYOpckIl8++AtbFGIdn9eW0FT
qGtq+NdcasJl4rZWAiMR57bYgu+Suv2nOs5sEiN5wufXpRNuoVbVY8FEs/9aXFmq
LFNUUoCMbUbwKSI64x+EXDKeyGFfAcXBJVlmIT5nc6LT0+wdsMJK82NK2xMSPl8p
JUa0I8eMWTVUHBBihspghbPKYDHS/HZol/qW6tuDP9/cV3stWGZs1+Alo84oQyRX
kttuU1UNnBFvNYESmfolH4ptaYKGaTlr/Rz94Fln78dKQYQ7WJyG6WMVUm70RrvB
RR8Ljov+9pUSl5kVsX/gaB2K0uVL7sRO9vWoYOl3ibqF5ATQrGQjwcjgJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQqiny3/v7KJIyICw/VDGp108XBMB8GA1UdIwQY
MBaAFGONmlAExZLQk8yJsNkHUuJ51RhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wY2Y2ZDctZDhlZi00NGE4LWFhMDct
Nzc2OGQ0ZmJkY2QzLzEvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wY2Y2ZDctZDhlZi00NGE4LWFhMDctNzc2OGQ0ZmJkY2Qz
LzEvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikH6YkyJ
9fpnXx5E2ogMWFNYcxhLJoBXfjT8eBvoJmJUqxRX2C5b1+YEx17gvJRX0h/FmbfL
e2C/0n1EssV7XnyMr06QmTXzh6FWu6ttoCSMsLTq5Im8LCl6svQY4ClYoD1BHRPq
EcLqkJTyXGjYUT2bIFhc7QfjgXz2mufL+xGs4aQ/yqtQ9vuxf5+TSh21rRkYtnBt
1txslUWQJs430Uv5t0TAF9cP7j4xyo956AweGM1ysUayu4IycEbk8iU2eTIC6A8z
ptdkYGOWcAdT8+54nDdNOrl3Ot09tsIyxLXYD41PRl4K9wW0NwrKCLdtC2XFthcB
UQYoMgD2GoeZ9Q==
-----END CERTIFICATE-----
Generated at Fri May 9 11:16:45 2025 by rpki-client