Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: DfXVc58wA4JSbje05K+GZeVwSWLn5T87RIrN/XKVtS4=
Subject key identifier: 4D:24:98:DA:EF:E0:95:0A:E0:C3:3A:C5:F6:57:ED:46:BC:B9:17:04
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 0196D17523CB434B9457446220E563FED972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 153D
Signing time: Thu 15 May 2025 01:00:37 +0000
Manifest this update: Thu 15 May 2025 01:00:37 +0000
Manifest next update: Fri 16 May 2025 01:00:37 +0000
Files and hashes: 1: Z406JsldDq5gjN_1Lio77tcegQc.roa (hash: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: IyL6W3Xadud3icNR1tllKGMJWIo05znKBuVhIaKGmZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:75:23:cb:43:4b:94:57:44:62:20:e5:63:fe:d9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: May 15 01:00:37 2025 GMT
Not After : May 16 01:00:37 2025 GMT
Subject: CN=4d2498daefe0950ae0c33ac5f657ed46bcb91704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:6d:d6:40:64:6c:11:d4:61:8c:d4:5a:5e:
c0:7b:1a:d6:dc:59:27:a2:d3:42:fe:63:97:d4:f4:
e4:c6:a9:9d:d2:be:fa:73:75:f0:43:9b:6e:a0:5b:
ad:97:c9:22:03:ae:b5:8d:8b:77:ac:3a:5a:0f:58:
c0:23:ec:7e:12:25:ac:59:29:42:96:50:66:d3:7a:
69:f1:3c:6b:a0:c9:1e:ba:c9:7a:03:4d:16:3a:7f:
10:ef:6b:ab:17:ee:de:f6:a4:fc:0d:cc:3e:f5:bb:
36:65:c7:4d:17:22:b1:6b:1e:a4:bf:42:4d:bb:f9:
58:1d:3c:07:32:26:d3:55:08:8c:8b:24:3b:a6:18:
23:9d:af:ab:4e:61:b6:a7:3f:93:c2:a7:07:ea:a7:
53:75:55:69:74:45:9a:69:1f:35:bb:2e:70:a8:52:
d8:bc:13:e9:4d:df:8e:d8:9e:42:1c:46:97:63:1d:
4f:e7:bf:32:e2:d5:1f:f6:cb:f4:45:9e:a8:3c:6b:
7a:e1:02:41:64:b3:57:5b:27:1e:d8:ed:7c:83:15:
8e:e8:da:a5:79:b0:71:6a:46:16:f8:4c:62:84:71:
27:56:37:e6:68:b7:d6:29:ba:96:c1:31:8f:c1:43:
5f:cf:03:7d:00:f6:14:a0:75:e6:7d:8f:44:58:ea:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:24:98:DA:EF:E0:95:0A:E0:C3:3A:C5:F6:57:ED:46:BC:B9:17:04
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:16:74:55:54:d8:44:78:18:c6:81:e6:a5:11:b6:91:2b:6a:
a3:27:9c:1a:82:93:6c:8d:d4:f2:7b:79:08:b9:7b:c3:fa:1f:
9a:c8:13:f2:e1:de:d1:1a:5b:1a:85:af:fb:c9:5d:73:49:c8:
e5:a5:2a:7d:b7:43:e2:c1:b1:53:c1:bc:f5:96:a7:19:0c:76:
f4:b0:31:b4:c9:47:5a:98:b7:2c:a2:aa:4e:a4:7d:a0:72:81:
cf:b0:a8:19:96:08:54:4a:24:a6:be:4f:57:95:c7:72:04:7f:
f1:75:4c:21:bc:c9:7d:25:e6:b8:f4:b8:a4:bb:9d:a1:d4:fe:
c0:19:82:a8:fb:9b:48:b3:9f:e2:ef:85:22:88:94:a1:f6:f1:
ca:10:0e:3a:e5:f3:80:4f:c6:3f:91:41:6a:4b:e3:f0:e6:c5:
e1:6e:53:22:ea:c2:8f:3e:e2:13:ba:26:a9:88:c6:bb:84:ae:
31:d6:84:ec:b4:12:04:38:f3:00:93:bf:df:06:73:aa:fd:c3:
f0:32:d4:87:23:e9:5e:fc:fe:51:d8:74:d0:98:a5:2c:7a:8d:
17:b2:ac:f0:47:57:04:50:e4:7b:e2:09:b6:1a:aa:78:0c:8b:
2b:59:81:90:1e:42:ec:c8:d5:cd:44:91:2e:ad:56:0f:6e:41:
b2:3e:8a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbRdSPLQ0uUV0RiIOVj/tlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDBmYzgyNTkwNzVjZDY3NWYzMTlkN2FmNGZhNzEzMDQ4
YTUxNWMwHhcNMjUwNTE1MDEwMDM3WhcNMjUwNTE2MDEwMDM3WjAzMTEwLwYDVQQD
Eyg0ZDI0OThkYWVmZTA5NTBhZTBjMzNhYzVmNjU3ZWQ0NmJjYjkxNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Nt1kBkbBHUYYzUWl7AexrW3Fkn
otNC/mOX1PTkxqmd0r76c3XwQ5tuoFutl8kiA661jYt3rDpaD1jAI+x+EiWsWSlC
llBm03pp8TxroMkeusl6A00WOn8Q72urF+7e9qT8Dcw+9bs2ZcdNFyKxax6kv0JN
u/lYHTwHMibTVQiMiyQ7phgjna+rTmG2pz+TwqcH6qdTdVVpdEWaaR81uy5wqFLY
vBPpTd+O2J5CHEaXYx1P578y4tUf9sv0RZ6oPGt64QJBZLNXWyce2O18gxWO6Nql
ebBxakYW+ExihHEnVjfmaLfWKbqWwTGPwUNfzwN9APYUoHXmfY9EWOqk/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0kmNrv4JUK4MM6xfZX7Ua8uRcEMB8GA1UdIwQY
MBaAFMjQ/IJZB1zWdfMZ169PpxMEilFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80NWM4NjItOWUzMy00NWM4LWE3Mjgt
N2EyZmQxMDI2OWJlLzEveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80NWM4NjItOWUzMy00NWM4LWE3MjgtN2EyZmQxMDI2OWJl
LzEveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhZ0VVTY
RHgYxoHmpRG2kStqoyecGoKTbI3U8nt5CLl7w/ofmsgT8uHe0RpbGoWv+8ldc0nI
5aUqfbdD4sGxU8G89ZanGQx29LAxtMlHWpi3LKKqTqR9oHKBz7CoGZYIVEokpr5P
V5XHcgR/8XVMIbzJfSXmuPS4pLudodT+wBmCqPubSLOf4u+FIoiUofbxyhAOOuXz
gE/GP5FBakvj8ObF4W5TIurCjz7iE7omqYjGu4SuMdaE7LQSBDjzAJO/3wZzqv3D
8DLUhyPpXvz+Udh00JilLHqNF7Ks8EdXBFDke+IJthqqeAyLK1mBkB5C7MjVzUSR
Lq1WD25Bsj6KZQ==
-----END CERTIFICATE-----
Generated at Thu May 15 03:39:54 2025 by rpki-client