Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: Scfow4IP4mST1S2Y0BV4S58UqhBeCuPqJUw02P7RbQA=
Subject key identifier: E0:58:A2:68:BE:9B:55:EB:AF:C8:B2:09:4A:0F:8F:89:C3:F8:6E:6E
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 0196A0892E755E220B01838357B508B59EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 13:01:06 +0000
Manifest this update: Mon 05 May 2025 13:01:06 +0000
Manifest next update: Tue 06 May 2025 13:01:06 +0000
Files and hashes: 1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: bYtdSFRQkzLPqkzBA5gE5EZlwLyRoCqR67WLTvy1OUY=)
3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:2e:75:5e:22:0b:01:83:83:57:b5:08:b5:9e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: May 5 13:01:06 2025 GMT
Not After : May 6 13:01:06 2025 GMT
Subject: CN=e058a268be9b55ebafc8b2094a0f8f89c3f86e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:a8:1e:54:f4:95:77:32:0e:35:d1:b9:73:
46:a5:39:db:c0:05:ca:70:94:10:aa:4c:9c:46:be:
e9:52:8f:48:3e:e6:1c:08:cb:f3:e7:95:8f:1d:6e:
25:48:e9:1d:6b:3a:e0:a1:64:68:aa:0a:cf:ef:c5:
cb:17:8e:77:c6:21:c6:76:bc:61:0b:e0:f6:f5:44:
7d:b9:55:34:a7:e4:f4:d4:ab:26:cc:49:8d:56:4d:
d5:5f:c9:a9:1b:c5:f8:40:10:8b:db:4b:c1:3f:04:
1f:2e:6c:fc:5c:3c:d6:a7:7a:d7:35:eb:0b:c2:e6:
43:97:2c:6a:1b:ed:3c:a1:58:f0:ae:46:25:a6:09:
3c:12:c8:d4:62:fe:bc:92:f0:61:01:c5:23:70:2f:
af:8c:1c:a1:84:8b:02:ee:b8:e0:18:b9:d1:99:19:
f6:71:4f:54:3f:f4:dc:e9:90:f1:e2:40:32:56:a5:
03:92:5d:ee:42:2a:4c:29:bf:b9:f3:8d:32:ac:56:
e9:5d:06:e2:83:d9:33:95:20:8f:07:70:05:d3:52:
23:76:ab:70:0c:7a:f6:af:90:6f:7b:05:63:95:f8:
05:bb:55:ce:c3:5e:37:12:c3:f7:c7:64:74:1f:42:
9f:c4:51:06:7f:72:79:92:d8:9f:45:99:45:94:ec:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:58:A2:68:BE:9B:55:EB:AF:C8:B2:09:4A:0F:8F:89:C3:F8:6E:6E
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:b8:9e:d5:14:73:5e:0d:8c:69:e8:99:70:26:4e:68:ad:
af:71:ca:f5:3b:56:ac:09:e9:23:66:0e:70:dd:b8:0a:e0:ff:
1f:4c:de:0c:f9:6d:8e:6d:94:2f:6a:73:6e:c0:77:3c:ba:a2:
fb:c7:b6:da:6b:ee:2b:0a:64:63:96:7b:73:1e:2f:dd:7d:fb:
1e:d1:95:05:56:fa:65:b7:ef:69:a6:84:37:04:64:09:c3:4c:
97:25:33:93:ec:8e:eb:d1:df:aa:95:35:e6:6b:39:ee:7f:4f:
71:12:89:a5:b0:df:e9:8c:2f:cf:93:b2:8b:4e:81:4f:77:e2:
8b:71:b8:21:b3:f3:33:e8:96:1f:c5:6e:61:87:24:e5:17:7d:
ca:7d:f3:d1:07:ae:6a:0b:81:b5:62:66:72:1d:5b:07:5d:7c:
d8:d8:c3:6a:35:56:a8:4d:42:c4:0b:8a:65:b0:22:08:2a:6c:
ca:f1:bd:e3:63:39:6b:92:f9:a3:3d:4d:91:98:55:01:69:2f:
ec:12:b4:ca:a2:6d:02:f3:de:ae:c5:1e:64:4c:f1:c2:07:98:
0f:db:ae:cb:0e:8f:69:1e:ef:b2:88:12:83:18:13:8d:cb:f5:
f0:f2:fd:7c:0a:c2:73:ca:90:47:6c:51:97:91:39:bd:47:f1:
3a:fb:6c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagiS51XiILAYODV7UItZ7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MjY1YjhiYTllNjE5MGYyNjA5Nzg3Y2Q5ZDkyZWZkNDhl
ZmJkOWQwHhcNMjUwNTA1MTMwMTA2WhcNMjUwNTA2MTMwMTA2WjAzMTEwLwYDVQQD
EyhlMDU4YTI2OGJlOWI1NWViYWZjOGIyMDk0YTBmOGY4OWMzZjg2ZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmSoHlT0lXcyDjXRuXNGpTnbwAXK
cJQQqkycRr7pUo9IPuYcCMvz55WPHW4lSOkdazrgoWRoqgrP78XLF453xiHGdrxh
C+D29UR9uVU0p+T01KsmzEmNVk3VX8mpG8X4QBCL20vBPwQfLmz8XDzWp3rXNesL
wuZDlyxqG+08oVjwrkYlpgk8EsjUYv68kvBhAcUjcC+vjByhhIsC7rjgGLnRmRn2
cU9UP/Tc6ZDx4kAyVqUDkl3uQipMKb+5840yrFbpXQbig9kzlSCPB3AF01Ijdqtw
DHr2r5BvewVjlfgFu1XOw143EsP3x2R0H0KfxFEGf3J5ktifRZlFlOzgiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBYomi+m1Xrr8iyCUoPj4nD+G5uMB8GA1UdIwQY
MBaAFMkmW4up5hkPJgl4fNnZLv1I772dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDct
YjdhNjYwOGE4ZmJjLzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDctYjdhNjYwOGE4ZmJj
LzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGay4ntUU
c14NjGnomXAmTmitr3HK9TtWrAnpI2YOcN24CuD/H0zeDPltjm2UL2pzbsB3PLqi
+8e22mvuKwpkY5Z7cx4v3X37HtGVBVb6ZbfvaaaENwRkCcNMlyUzk+yO69HfqpU1
5ms57n9PcRKJpbDf6Ywvz5Oyi06BT3fii3G4IbPzM+iWH8VuYYck5Rd9yn3z0Qeu
aguBtWJmch1bB1182NjDajVWqE1CxAuKZbAiCCpsyvG942M5a5L5oz1NkZhVAWkv
7BK0yqJtAvPersUeZEzxwgeYD9uuyw6PaR7vsogSgxgTjcv18PL9fArCc8qQR2xR
l5E5vUfxOvtsHQ==
-----END CERTIFICATE-----
Generated at Mon May 5 15:36:23 2025 by rpki-client