Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: mNXYCZrxikTvzFEi94C2kU16XosFS2Ti9uzgMqQYTBA=
Subject key identifier: E1:8E:4A:98:F6:C4:E5:66:B0:0B:C6:31:0C:2A:3A:73:42:E6:12:8A
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 0196C91688FB13EEC609146BDA169823A013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 1536
Signing time: Tue 13 May 2025 10:00:19 +0000
Manifest this update: Tue 13 May 2025 10:00:19 +0000
Manifest next update: Wed 14 May 2025 10:00:19 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: WEdNl4qEkG9O1U2AP0U9uxKlUr6kaJbp02hkhr3lddE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:88:fb:13:ee:c6:09:14:6b:da:16:98:23:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: May 13 10:00:19 2025 GMT
Not After : May 14 10:00:19 2025 GMT
Subject: CN=e18e4a98f6c4e566b00bc6310c2a3a7342e6128a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:b2:3b:86:d5:85:86:78:54:a5:98:d3:33:
9f:6e:da:39:5f:57:da:80:de:13:c4:3c:54:1f:ae:
c5:9f:f2:50:95:81:1d:b6:f2:5e:da:67:38:68:15:
82:d1:83:9a:8a:ed:74:47:4f:e4:ba:88:ee:e5:9f:
be:5b:23:31:90:8e:53:ea:5c:8f:8c:c5:ee:66:6f:
31:03:8a:f0:14:30:c1:54:13:c6:ce:47:d6:4d:84:
48:ec:6b:90:02:f4:2d:7f:a3:e7:83:fd:2c:60:97:
28:fe:e3:6c:70:bb:17:a8:54:23:04:ae:05:18:f9:
74:74:4e:56:43:2b:7b:f6:f8:7a:30:3e:a9:81:ea:
68:b4:80:86:08:96:9f:3d:b3:b5:09:4c:8f:2e:3c:
97:2f:5a:64:8f:bb:8c:fc:8c:82:64:41:43:4e:7e:
e6:7c:63:c5:8b:77:42:19:86:74:b0:c2:64:f6:46:
95:61:31:3e:e5:8f:64:0c:d1:7a:12:1b:5b:e5:c4:
ab:9e:11:37:93:86:fc:2a:80:e9:95:a6:ee:14:cb:
e1:be:11:16:13:a5:0c:33:83:f4:6a:8f:93:3b:bf:
1c:eb:c1:0b:85:7e:6f:15:d0:30:6f:7a:ec:dd:27:
11:6d:6a:75:12:cf:b5:88:f9:24:41:3a:fd:98:73:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8E:4A:98:F6:C4:E5:66:B0:0B:C6:31:0C:2A:3A:73:42:E6:12:8A
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ce:a7:25:ff:4d:a7:91:88:dd:f7:37:f5:8d:9a:5a:42:3b:
a6:d2:d8:34:f5:42:75:5d:25:0d:3d:de:c8:72:9a:fc:56:d8:
62:8d:9c:d7:ff:11:69:b7:ee:0e:57:ed:8b:70:8e:9f:ac:14:
7f:2e:58:08:35:10:9f:3f:82:34:f3:30:5f:2b:91:c5:c8:91:
7b:8e:f0:c4:bd:49:d0:f8:e2:33:dc:9b:c2:88:a4:f7:34:a7:
42:6b:65:ca:29:9f:de:c7:f7:52:9b:64:df:c1:f2:d1:76:5e:
d0:3e:71:99:af:b8:59:94:31:a1:7c:24:57:91:a2:47:cd:d3:
43:f8:9c:28:ad:4d:ee:91:8e:aa:c9:f1:40:f5:75:67:02:8d:
dd:85:c4:8e:aa:3b:4d:2c:54:12:87:ff:48:45:60:63:21:08:
f3:28:20:1f:12:d2:99:69:a2:d2:ba:81:19:43:2d:93:22:16:
7c:f2:be:68:27:54:31:8a:a5:96:aa:33:6d:22:d4:fe:8e:0c:
4c:3c:47:06:14:67:f5:e9:aa:be:88:1d:fd:a3:22:1c:d7:fc:
ff:b0:98:63:a0:6b:fa:df:ec:0e:00:77:82:ea:cd:03:40:26:
65:16:9d:51:63:cd:dd:fd:cc:ba:7e:40:1e:84:c0:37:b0:12:
5f:83:67:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJFoj7E+7GCRRr2haYI6ATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTNiZGVlYzdjNDI2OThkZjZhYzkwY2RkYzZjMDFiM2E3
ZjJjNDkwHhcNMjUwNTEzMTAwMDE5WhcNMjUwNTE0MTAwMDE5WjAzMTEwLwYDVQQD
EyhlMThlNGE5OGY2YzRlNTY2YjAwYmM2MzEwYzJhM2E3MzQyZTYxMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCmyO4bVhYZ4VKWY0zOfbto5X1fa
gN4TxDxUH67Fn/JQlYEdtvJe2mc4aBWC0YOaiu10R0/kuoju5Z++WyMxkI5T6lyP
jMXuZm8xA4rwFDDBVBPGzkfWTYRI7GuQAvQtf6Png/0sYJco/uNscLsXqFQjBK4F
GPl0dE5WQyt79vh6MD6pgepotICGCJafPbO1CUyPLjyXL1pkj7uM/IyCZEFDTn7m
fGPFi3dCGYZ0sMJk9kaVYTE+5Y9kDNF6Ehtb5cSrnhE3k4b8KoDplabuFMvhvhEW
E6UMM4P0ao+TO78c68ELhX5vFdAwb3rs3ScRbWp1Es+1iPkkQTr9mHPNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGOSpj2xOVmsAvGMQwqOnNC5hKKMB8GA1UdIwQY
MBaAFMqTve7HxCaY32rJDN3GwBs6fyxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MDQ3NDYtYzFjMS00Y2I4LTgzZjEt
ZmFmZTJkMjA2M2NhLzEveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MDQ3NDYtYzFjMS00Y2I4LTgzZjEtZmFmZTJkMjA2M2Nh
LzEveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGs6nJf9N
p5GI3fc39Y2aWkI7ptLYNPVCdV0lDT3eyHKa/FbYYo2c1/8RabfuDlfti3COn6wU
fy5YCDUQnz+CNPMwXyuRxciRe47wxL1J0PjiM9ybwoik9zSnQmtlyimf3sf3Uptk
38Hy0XZe0D5xma+4WZQxoXwkV5GiR83TQ/icKK1N7pGOqsnxQPV1ZwKN3YXEjqo7
TSxUEof/SEVgYyEI8yggHxLSmWmi0rqBGUMtkyIWfPK+aCdUMYqllqozbSLU/o4M
TDxHBhRn9emqvogd/aMiHNf8/7CYY6Br+t/sDgB3gurNA0AmZRadUWPN3f3Mun5A
HoTAN7ASX4Nn8w==
-----END CERTIFICATE-----
Generated at Tue May 13 17:32:27 2025 by rpki-client