Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: EYLUYk7gU/2JgQQFWsqCVr4LduH4l5s6oAxgAlYyo84=
Subject key identifier: E1:DD:AF:EF:C6:BB:B8:19:A2:51:66:C9:61:4F:57:0A:9D:4D:B2:4E
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 0196C49582DCF46C6508E33CBA2EEE4E6174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 13:00:54 +0000
Manifest this update: Mon 12 May 2025 13:00:54 +0000
Manifest next update: Tue 13 May 2025 13:00:54 +0000
Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: LlyZT+6BoxACs6KGC3jMbOI0FWpBW+BPc2umSdGrBbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:82:dc:f4:6c:65:08:e3:3c:ba:2e:ee:4e:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: May 12 13:00:54 2025 GMT
Not After : May 13 13:00:54 2025 GMT
Subject: CN=e1ddafefc6bbb819a25166c9614f570a9d4db24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:21:cb:61:6e:64:a1:be:14:4a:5c:84:65:
d7:17:90:b5:68:20:8d:42:13:00:a5:fb:b8:9d:5d:
51:3a:d5:15:a5:1f:25:ce:9f:22:0c:ad:fc:70:33:
7b:cf:5a:24:64:de:dd:ff:a4:02:a5:6b:c4:65:1a:
3a:14:f5:0d:e8:f1:c3:a0:b7:33:27:e8:35:fa:d6:
84:fe:47:73:b2:e7:f4:d1:2d:ef:e3:8e:d9:0e:8e:
cb:c1:fc:fd:39:47:0a:2f:52:df:e1:af:6f:e2:e1:
56:04:a8:6e:b7:b0:3d:a6:35:f2:b1:4f:76:ba:17:
1d:af:35:2b:43:99:65:aa:e4:b3:23:75:af:f4:3b:
ca:fe:fe:0b:72:5d:8b:53:b9:05:86:fe:87:ea:da:
fc:9d:8c:25:8d:25:de:f2:f4:c4:ae:c9:4e:46:9d:
79:1e:10:d1:eb:2f:0a:64:a4:1e:da:c2:16:cd:77:
50:e3:a4:27:67:9d:66:cb:df:fb:f8:c2:06:b8:16:
48:72:49:e9:9b:cf:29:e0:11:82:e7:e4:04:ef:bc:
9c:d6:63:57:7e:1a:3a:24:43:60:05:43:9f:f0:a3:
22:e5:0a:51:29:98:fc:a3:b2:d5:34:dc:cd:fe:cd:
a5:77:c0:d2:c8:ca:7e:cd:bc:c3:c6:d1:a7:73:85:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:AF:EF:C6:BB:B8:19:A2:51:66:C9:61:4F:57:0A:9D:4D:B2:4E
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0c:8e:79:ed:f5:02:b1:9d:0b:2d:a0:ba:21:3e:32:99:9e:
18:a3:04:49:1d:f3:d6:d8:a5:f4:c0:d1:e3:da:6e:4e:8e:60:
a4:6f:d3:39:a3:e4:32:c9:9d:62:78:57:03:03:c5:92:16:a9:
ee:61:5d:5c:1f:38:5e:ca:bb:f9:15:65:bf:a9:9a:3a:8a:8c:
10:bf:45:9f:ee:b5:10:db:c2:15:0d:ca:24:9d:13:87:b0:a2:
f5:32:73:62:ec:f4:e4:c0:c0:58:76:02:33:03:76:1f:58:17:
44:40:41:d9:ef:70:0d:aa:ef:02:ed:e1:b0:61:0f:b6:c7:e9:
50:cf:5f:21:83:57:a3:18:b1:1b:c8:ba:3b:77:6f:e6:44:d5:
f0:9c:b1:f3:7f:a6:bc:16:a4:04:e4:0f:f0:a3:8e:a7:1d:9f:
a5:fe:21:18:0c:92:71:d8:10:e7:2f:24:c7:e9:fb:2d:12:8c:
8f:76:73:a6:b1:04:6b:83:2d:da:c8:bb:e1:ef:4c:97:d9:09:
c4:5b:59:c6:35:6e:5f:d6:8d:45:ae:fe:ce:8a:d6:4f:9a:24:
8a:73:84:05:a9:ed:d5:cf:f0:2b:d7:32:7c:db:bd:6e:31:60:
8c:e5:35:59:a9:24:6d:72:e0:b6:32:ca:77:9c:ff:17:95:0d:
11:3e:24:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbElYLc9GxlCOM8ui7uTmF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGQ0MjI0MzE5Nzg2NGJiNDgxNjQ2MWQ0ZDA2NTNhYjBi
YTMyYmEwHhcNMjUwNTEyMTMwMDU0WhcNMjUwNTEzMTMwMDU0WjAzMTEwLwYDVQQD
EyhlMWRkYWZlZmM2YmJiODE5YTI1MTY2Yzk2MTRmNTcwYTlkNGRiMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE8hy2FuZKG+FEpchGXXF5C1aCCN
QhMApfu4nV1ROtUVpR8lzp8iDK38cDN7z1okZN7d/6QCpWvEZRo6FPUN6PHDoLcz
J+g1+taE/kdzsuf00S3v447ZDo7Lwfz9OUcKL1Lf4a9v4uFWBKhut7A9pjXysU92
uhcdrzUrQ5llquSzI3Wv9DvK/v4Lcl2LU7kFhv6H6tr8nYwljSXe8vTErslORp15
HhDR6y8KZKQe2sIWzXdQ46QnZ51my9/7+MIGuBZIcknpm88p4BGC5+QE77yc1mNX
fho6JENgBUOf8KMi5QpRKZj8o7LVNNzN/s2ld8DSyMp+zbzDxtGnc4W0ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHdr+/Gu7gZolFmyWFPVwqdTbJOMB8GA1UdIwQY
MBaAFMndQiQxl4ZLtIFkYdTQZTqwujK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2Et
NjRhNzE1YTVmNjliLzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2EtNjRhNzE1YTVmNjli
LzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQyOee31
ArGdCy2guiE+MpmeGKMESR3z1til9MDR49puTo5gpG/TOaPkMsmdYnhXAwPFkhap
7mFdXB84Xsq7+RVlv6maOoqMEL9Fn+61ENvCFQ3KJJ0Th7Ci9TJzYuz05MDAWHYC
MwN2H1gXREBB2e9wDarvAu3hsGEPtsfpUM9fIYNXoxixG8i6O3dv5kTV8Jyx83+m
vBakBOQP8KOOpx2fpf4hGAyScdgQ5y8kx+n7LRKMj3ZzprEEa4Mt2si74e9Ml9kJ
xFtZxjVuX9aNRa7+zorWT5okinOEBant1c/wK9cyfNu9bjFgjOU1WakkbXLgtjLK
d5z/F5UNET4k8A==
-----END CERTIFICATE-----
Generated at Mon May 12 22:00:30 2025 by rpki-client