Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: a0z4vvYWEkzJ0wKRsaN6y0VTG4XogIokIiYUnrdXxXo=
Subject key identifier: 5A:E5:07:E1:BF:F7:2A:4E:98:68:C2:83:3D:01:BC:75:FE:26:D5:50
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 0196A9F9A1C95A0967E3F19BC3292A9FD655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 1014
Signing time: Wed 07 May 2025 09:00:31 +0000
Manifest this update: Wed 07 May 2025 09:00:31 +0000
Manifest next update: Thu 08 May 2025 09:00:31 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: nH82eIPWZ68bUWeYd1rf5+vdhWJd70k3DCj3sF6Q/8s=)
2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:a1:c9:5a:09:67:e3:f1:9b:c3:29:2a:9f:d6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: May 7 09:00:31 2025 GMT
Not After : May 8 09:00:31 2025 GMT
Subject: CN=5ae507e1bff72a4e9868c2833d01bc75fe26d550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:b2:f1:09:9f:6e:82:b5:a3:f9:c4:eb:01:
4e:6e:e8:f8:01:62:8f:43:e5:8f:24:72:49:5c:93:
c6:43:04:55:c4:be:90:35:fe:6b:e9:75:d3:d0:5a:
40:39:9c:ef:5a:8c:5f:b1:44:ff:0a:f8:70:20:1f:
dc:11:3b:7d:fa:63:4c:25:eb:6e:ed:ca:ef:b1:71:
45:43:ef:6c:81:e6:a1:22:f3:b2:a0:b8:ed:63:c7:
69:1f:8f:0e:c8:e9:b0:c3:65:d2:3c:1a:db:27:e9:
71:37:5e:51:1c:f4:1f:fa:48:99:f1:da:08:fc:28:
65:80:2f:e0:f3:9c:23:33:18:b1:db:44:dc:2c:6d:
77:f1:a5:57:fa:94:d7:59:1b:83:b7:3f:9c:27:35:
ce:c9:c0:20:5b:ec:46:69:8b:f2:42:ef:8f:22:99:
e6:a6:09:d2:d6:2e:04:74:84:9f:01:0b:39:b9:e2:
6f:c3:52:ec:ac:33:d5:52:f3:3c:9a:31:5e:59:d8:
53:4f:6c:3c:80:f8:09:23:d4:a1:30:4b:76:2b:96:
d1:79:78:f2:81:46:72:dc:2f:c0:63:64:2e:1f:a1:
8c:bb:76:e3:2d:c3:2e:de:60:1e:6e:85:e7:0b:fb:
a8:d7:07:9c:08:4e:80:29:fd:bd:ec:8c:54:5d:0e:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:07:E1:BF:F7:2A:4E:98:68:C2:83:3D:01:BC:75:FE:26:D5:50
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ea:55:54:15:18:5d:29:1e:c0:99:f2:57:07:c9:da:4a:0c:
25:b7:7b:23:97:4d:69:21:86:be:9d:89:1b:e7:fc:1c:00:96:
4e:ee:6c:76:be:ab:e5:9a:44:2c:0e:9d:21:61:53:8e:09:4c:
d1:12:7e:02:82:9d:a3:ce:4b:d6:67:8f:94:93:02:0b:c9:0c:
31:b4:d5:8a:ba:82:41:c4:eb:db:b6:bb:36:1c:2e:26:c1:66:
4a:de:aa:e0:2f:44:83:9d:81:9f:f0:31:e8:f4:7b:28:ad:2e:
ba:bf:56:30:10:05:a5:cf:d9:32:fd:a1:e5:89:37:39:a3:32:
a7:da:3b:c2:4f:1e:92:f2:f5:14:3d:f5:c3:ad:af:cd:a0:12:
a5:9d:9b:3d:71:62:b4:91:d4:74:05:00:cf:c5:c9:9c:99:b3:
e0:5f:ed:09:5b:fe:6f:fd:7c:50:03:eb:e5:7f:03:bd:4e:6c:
a7:55:d8:3e:1d:da:da:6f:08:b2:1a:c4:14:4f:c2:ec:04:d5:
92:2f:6b:f7:9e:20:ee:f0:7b:ad:ca:21:9b:c4:44:58:82:be:
c6:9c:e6:0e:cf:a9:cd:15:8a:55:14:eb:eb:68:58:7b:20:4a:
f9:74:14:7c:2d:da:b2:4f:7a:57:92:e3:ca:52:de:e6:c7:9e:
50:da:e2:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZap+aHJWgln4/Gbwykqn9ZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOGMyMDMwYTU5NzFjNGE1NDA5NmE4ZWRiYjIxMjExZTU0
MjE2YTcwHhcNMjUwNTA3MDkwMDMxWhcNMjUwNTA4MDkwMDMxWjAzMTEwLwYDVQQD
Eyg1YWU1MDdlMWJmZjcyYTRlOTg2OGMyODMzZDAxYmM3NWZlMjZkNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxmy8QmfboK1o/nE6wFObuj4AWKP
Q+WPJHJJXJPGQwRVxL6QNf5r6XXT0FpAOZzvWoxfsUT/CvhwIB/cETt9+mNMJetu
7crvsXFFQ+9sgeahIvOyoLjtY8dpH48OyOmww2XSPBrbJ+lxN15RHPQf+kiZ8doI
/ChlgC/g85wjMxix20TcLG138aVX+pTXWRuDtz+cJzXOycAgW+xGaYvyQu+PIpnm
pgnS1i4EdISfAQs5ueJvw1LsrDPVUvM8mjFeWdhTT2w8gPgJI9ShMEt2K5bReXjy
gUZy3C/AY2QuH6GMu3bjLcMu3mAeboXnC/uo1wecCE6AKf297IxUXQ7KSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrlB+G/9ypOmGjCgz0BvHX+JtVQMB8GA1UdIwQY
MBaAFNGMIDCllxxKVAlqjtuyEhHlQhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQt
NTNhNjcyZDE0YjdhLzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQtNTNhNjcyZDE0Yjdh
LzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcupVVBUY
XSkewJnyVwfJ2koMJbd7I5dNaSGGvp2JG+f8HACWTu5sdr6r5ZpELA6dIWFTjglM
0RJ+AoKdo85L1mePlJMCC8kMMbTVirqCQcTr27a7NhwuJsFmSt6q4C9Eg52Bn/Ax
6PR7KK0uur9WMBAFpc/ZMv2h5Yk3OaMyp9o7wk8ekvL1FD31w62vzaASpZ2bPXFi
tJHUdAUAz8XJnJmz4F/tCVv+b/18UAPr5X8DvU5sp1XYPh3a2m8IshrEFE/C7ATV
ki9r954g7vB7rcohm8REWIK+xpzmDs+pzRWKVRTr62hYeyBK+XQUfC3ask96V5Lj
ylLe5seeUNrihA==
-----END CERTIFICATE-----
Generated at Wed May 7 15:05:57 2025 by rpki-client