Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: 0OixMEX0/L1MIOa2aW9qJEXFNLspWuFPJDikuQxo30k=
Subject key identifier: 9E:E2:16:37:F0:C0:32:9A:83:4E:8E:83:43:AC:6E:FE:CF:3D:C7:16
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 0196C2395900F7DD44D4D00EEA42EC1899C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 02:01:00 +0000
Manifest this update: Mon 12 May 2025 02:01:00 +0000
Manifest next update: Tue 13 May 2025 02:01:00 +0000
Files and hashes: 1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: 7/C6X27Ul7+ijXX6ztsd0VAeBcx5o+lWtIDeLSj4ncA=)
4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:59:00:f7:dd:44:d4:d0:0e:ea:42:ec:18:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: May 12 02:01:00 2025 GMT
Not After : May 13 02:01:00 2025 GMT
Subject: CN=9ee21637f0c0329a834e8e8343ac6efecf3dc716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:bc:c7:95:a4:09:c4:13:c3:28:63:af:35:
9f:4d:e6:0d:89:48:06:76:6a:de:cb:6d:a6:fc:00:
1e:dc:ee:cd:d7:21:1a:3d:2b:aa:1e:e5:30:48:40:
60:ae:06:8c:7a:54:57:a3:af:08:7c:e2:6a:cd:c0:
ba:2a:bf:a2:e5:c7:94:0b:71:8f:62:cb:18:7a:95:
f2:c9:52:fc:fe:fa:09:7e:35:d4:56:65:81:77:44:
3e:55:7b:3c:b6:2e:e3:76:6c:c4:c2:df:85:38:ce:
36:8e:fe:83:40:41:e1:16:93:76:20:b0:3c:38:d4:
a5:8f:4d:32:9d:99:4d:1d:24:d5:88:27:6d:b8:6c:
5d:22:cb:f7:2f:71:02:80:44:67:c4:9a:1f:46:0a:
db:a4:da:e4:84:80:c4:0e:27:86:a1:f2:ff:3e:f8:
09:21:ce:99:5d:ab:bd:90:18:2c:a2:18:7b:1f:0c:
95:f9:bb:32:46:db:59:ba:95:3a:dd:c8:c2:c0:c9:
23:58:d1:a0:45:a1:c0:cd:f3:75:5d:e2:41:5d:82:
26:90:f5:73:d6:6a:92:d7:6f:73:a7:b6:a6:12:a1:
80:91:0b:10:1a:c3:12:45:df:80:cd:0f:43:c0:f1:
3d:6e:34:50:28:b1:d9:cd:b0:11:e9:f6:01:cb:18:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E2:16:37:F0:C0:32:9A:83:4E:8E:83:43:AC:6E:FE:CF:3D:C7:16
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2c:4b:39:42:c4:a6:43:97:02:58:65:cc:14:45:80:aa:ac:
b3:94:9b:ed:0d:97:b4:74:92:3a:4d:62:82:a1:12:30:e9:e4:
4f:e9:1b:5d:f3:47:52:3b:43:e6:10:f5:30:d3:0c:28:af:c4:
2f:e8:d2:1d:e0:c8:ec:e4:11:a7:13:31:1e:47:c4:96:c3:d8:
7e:4b:41:66:8e:f0:8d:a0:e3:76:d2:9f:b7:b2:2e:7a:a0:73:
9d:ed:56:6d:a9:49:c2:7e:11:bf:8e:76:30:90:6e:71:bc:a5:
ad:3a:42:b3:78:b2:ec:34:7f:5f:7e:10:fb:d5:4c:fe:88:94:
b4:76:b1:0e:8f:e2:17:08:28:fe:ec:7b:5c:9d:87:80:fb:cf:
b7:d1:cf:cb:31:c7:7d:8b:f4:e2:d2:34:a8:46:b3:2b:f9:e1:
12:85:f9:e5:0e:a9:f4:fb:01:49:cc:11:bf:ee:d7:08:89:89:
52:fa:5b:47:59:e8:ec:25:b4:e3:b5:ea:49:ee:07:b5:f3:28:
06:fb:4d:2c:51:22:76:82:f0:e2:0d:ad:eb:5f:61:99:25:12:
67:fd:1e:2a:6b:96:d5:f5:7b:7e:4d:e6:74:c7:27:f5:a5:c8:
f0:90:16:40:c1:75:4a:a6:39:db:c2:dd:23:73:93:99:7c:01:
87:3a:90:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOVkA991E1NAO6kLsGJnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOGU2YTZhNTQwMTdkZDNiOWIyY2NlMzVmZDVhOWE3ZjJh
NDU0OTgwHhcNMjUwNTEyMDIwMTAwWhcNMjUwNTEzMDIwMTAwWjAzMTEwLwYDVQQD
Eyg5ZWUyMTYzN2YwYzAzMjlhODM0ZThlODM0M2FjNmVmZWNmM2RjNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/u8x5WkCcQTwyhjrzWfTeYNiUgG
dmrey22m/AAe3O7N1yEaPSuqHuUwSEBgrgaMelRXo68IfOJqzcC6Kr+i5ceUC3GP
YssYepXyyVL8/voJfjXUVmWBd0Q+VXs8ti7jdmzEwt+FOM42jv6DQEHhFpN2ILA8
ONSlj00ynZlNHSTViCdtuGxdIsv3L3ECgERnxJofRgrbpNrkhIDEDieGofL/PvgJ
Ic6ZXau9kBgsohh7HwyV+bsyRttZupU63cjCwMkjWNGgRaHAzfN1XeJBXYImkPVz
1mqS129zp7amEqGAkQsQGsMSRd+AzQ9DwPE9bjRQKLHZzbAR6fYByxjDJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7iFjfwwDKag06Og0Osbv7PPccWMB8GA1UdIwQY
MBaAFGCOampUAX3TubLM41/VqafypFSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2Et
MjMyNDk3N2M5MzkzLzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2EtMjMyNDk3N2M5Mzkz
LzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoixLOULE
pkOXAlhlzBRFgKqss5Sb7Q2XtHSSOk1igqESMOnkT+kbXfNHUjtD5hD1MNMMKK/E
L+jSHeDI7OQRpxMxHkfElsPYfktBZo7wjaDjdtKft7IueqBzne1WbalJwn4Rv452
MJBucbylrTpCs3iy7DR/X34Q+9VM/oiUtHaxDo/iFwgo/ux7XJ2HgPvPt9HPyzHH
fYv04tI0qEazK/nhEoX55Q6p9PsBScwRv+7XCImJUvpbR1no7CW047XqSe4HtfMo
BvtNLFEidoLw4g2t619hmSUSZ/0eKmuW1fV7fk3mdMcn9aXI8JAWQMF1SqY528Ld
I3OTmXwBhzqQ9A==
-----END CERTIFICATE-----
Generated at Mon May 12 06:48:56 2025 by rpki-client