Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
File: YvSxR6sO_r8-RubeqYXXUYd8u04.mft (raw, json)
Hash identifier: M05a30TjCGT90NFB8bILrBM0wzJTe/Icl3FiSL7bQ24=
Subject key identifier: 2C:EC:E1:6B:4C:1E:EC:4C:25:16:35:46:EC:09:43:01:E9:69:86:E3
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Certificate issuer: /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial: 0196BFA56C70F59063FADA059F75C24C65C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 14:00:11 +0000
Manifest this update: Sun 11 May 2025 14:00:11 +0000
Manifest next update: Mon 12 May 2025 14:00:11 +0000
Files and hashes: 1: B254PCc3PRUmXT9tMIpAl8XNBm8.roa (hash: DpvsWvC8Sgiw0PT2yPQOf/12fRPoJTcquOU/HLYaUhc=)
2: YvSxR6sO_r8-RubeqYXXUYd8u04.crl (hash: nJchUgp3Y6gShmejn22CrzgJdEVY4hn2Zueb9A3OROc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:6c:70:f5:90:63:fa:da:05:9f:75:c2:4c:65:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Validity
Not Before: May 11 14:00:11 2025 GMT
Not After : May 12 14:00:11 2025 GMT
Subject: CN=2cece16b4c1eec4c25163546ec094301e96986e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:1a:02:9b:90:5b:12:f1:7e:28:33:c5:34:
16:3f:bd:10:5f:3f:8c:ba:6b:21:6a:20:2c:e0:cf:
fd:f8:05:c8:cb:68:05:18:96:f1:6e:84:f1:34:23:
68:bf:4f:b4:04:d7:da:da:fc:01:4d:44:20:c1:9c:
c3:de:a0:63:d9:d1:68:dc:65:c0:3c:87:62:1e:df:
aa:49:ca:0c:d7:e1:7f:f6:d6:1c:84:61:79:17:bf:
90:82:9b:4f:68:ee:4c:3e:c1:47:76:55:62:27:d0:
33:e1:db:fa:02:a4:67:81:8e:99:9d:ed:e3:e9:eb:
e3:e6:60:bd:2f:c8:22:7f:95:4b:bd:3c:7b:56:e4:
7c:f5:64:32:13:dc:8f:60:a8:d6:fa:23:b2:b2:d2:
f5:d3:d3:30:07:a1:b8:1e:25:c3:54:e8:76:f8:45:
61:41:91:fa:70:a4:13:f0:eb:1e:a1:b5:5f:d0:c4:
20:57:7e:f4:63:56:25:20:03:d6:cb:f0:1a:21:be:
db:ba:93:b0:8d:b3:f3:44:9e:df:6a:be:68:03:02:
0a:74:90:59:9c:5c:a3:70:76:a9:02:4e:96:1e:3a:
ce:78:af:68:87:38:ad:97:1f:00:e3:ca:c1:4b:a8:
93:03:70:2c:04:a3:59:78:60:4d:a0:67:2b:2b:b4:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:E1:6B:4C:1E:EC:4C:25:16:35:46:EC:09:43:01:E9:69:86:E3
X509v3 Authority Key Identifier:
keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8c:da:93:c9:20:df:54:d0:17:e4:7c:5e:5d:36:19:3e:61:
88:88:56:61:5a:d0:b6:f6:14:48:96:78:e0:69:88:41:8a:04:
99:12:4d:2d:98:95:26:f4:42:5d:d6:d7:e0:33:fa:96:f5:8c:
bc:7b:51:3b:e1:e7:1a:1c:a4:69:5b:ed:8d:a5:3b:bd:bc:c7:
52:0c:5a:eb:20:8f:3e:19:b0:8f:30:65:4d:c4:61:c1:b8:f2:
f6:ce:e2:68:f1:20:88:c6:c4:27:23:30:5a:db:4b:4b:f0:c1:
cd:a6:cd:6b:85:32:e5:6e:e0:94:b0:85:56:ce:84:b9:2b:6e:
d4:d9:b6:02:ea:84:9a:f3:5a:66:15:b9:08:f3:6e:6a:76:96:
a4:2b:e0:b4:3e:d4:e3:ba:27:fb:e7:ff:d5:eb:4b:c7:41:72:
12:f1:c7:5d:f5:8a:22:98:71:68:aa:a2:20:87:e4:f3:5b:69:
7b:97:ac:54:91:86:ab:63:1e:76:27:df:63:04:bf:c3:46:6f:
57:8d:74:be:41:f5:23:f5:b0:bc:0f:4f:e2:15:35:40:0c:93:
2b:79:76:e2:bb:bb:ec:81:8c:a2:bc:88:27:67:99:f0:51:33:
f9:33:21:dc:cb:77:44:18:aa:0b:1e:67:e2:3b:5a:e8:27:aa:
09:7a:d7:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pWxw9ZBj+toFn3XCTGXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZjRiMTQ3YWIwZWZlYmYzZTQ2ZTZkZWE5ODVkNzUxODc3
Y2JiNGUwHhcNMjUwNTExMTQwMDExWhcNMjUwNTEyMTQwMDExWjAzMTEwLwYDVQQD
EygyY2VjZTE2YjRjMWVlYzRjMjUxNjM1NDZlYzA5NDMwMWU5Njk4NmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgEaApuQWxLxfigzxTQWP70QXz+M
umshaiAs4M/9+AXIy2gFGJbxboTxNCNov0+0BNfa2vwBTUQgwZzD3qBj2dFo3GXA
PIdiHt+qScoM1+F/9tYchGF5F7+QgptPaO5MPsFHdlViJ9Az4dv6AqRngY6Zne3j
6evj5mC9L8gif5VLvTx7VuR89WQyE9yPYKjW+iOystL109MwB6G4HiXDVOh2+EVh
QZH6cKQT8OseobVf0MQgV370Y1YlIAPWy/AaIb7bupOwjbPzRJ7far5oAwIKdJBZ
nFyjcHapAk6WHjrOeK9ohzitlx8A48rBS6iTA3AsBKNZeGBNoGcrK7TbHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzs4WtMHuxMJRY1RuwJQwHpaYbjMB8GA1UdIwQY
MBaAFGL0sUerDv6/Pkbm3qmF11GHfLtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ZTZlNWEtYWVjMC00MGFkLWE2Mjgt
ZGFiM2E5ZjAzMGRjLzEvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ZTZlNWEtYWVjMC00MGFkLWE2MjgtZGFiM2E5ZjAzMGRj
LzEvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIzak8kg
31TQF+R8Xl02GT5hiIhWYVrQtvYUSJZ44GmIQYoEmRJNLZiVJvRCXdbX4DP6lvWM
vHtRO+HnGhykaVvtjaU7vbzHUgxa6yCPPhmwjzBlTcRhwbjy9s7iaPEgiMbEJyMw
WttLS/DBzabNa4Uy5W7glLCFVs6EuStu1Nm2AuqEmvNaZhW5CPNuanaWpCvgtD7U
47on++f/1etLx0FyEvHHXfWKIphxaKqiIIfk81tpe5esVJGGq2MediffYwS/w0Zv
V410vkH1I/WwvA9P4hU1QAyTK3l24ru77IGMoryIJ2eZ8FEz+TMh3Mt3RBiqCx5n
4jta6CeqCXrXjA==
-----END CERTIFICATE-----
Generated at Sun May 11 21:56:34 2025 by rpki-client