Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: IDkcI8hOleMtGBwMHdi/3zcFY2m2C5bxzBat8QwKrO8=
Subject key identifier: 22:F1:EE:0A:E2:AD:52:28:CB:99:E9:64:87:7E:BA:29:B8:19:F5:B9
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 0196BFA59ECAE337083E76C1051F96FABA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 14:00:24 +0000
Manifest this update: Sun 11 May 2025 14:00:24 +0000
Manifest next update: Mon 12 May 2025 14:00:24 +0000
Files and hashes: 1: 1-4YCAM0PPWpbsIo98h9fkDFWnfg.roa (hash: 3vMBuIr7SB4QB0M6+bNSVLgKbzy+afGhB2NFcCi6J/M=)
2: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: icR6LV4sM3T/2tVKRa2g2mL49Xz6Io/ycUee+oHZ4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:9e:ca:e3:37:08:3e:76:c1:05:1f:96:fa:ba:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: May 11 14:00:24 2025 GMT
Not After : May 12 14:00:24 2025 GMT
Subject: CN=22f1ee0ae2ad5228cb99e964877eba29b819f5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:c9:b2:d6:9c:a1:ed:c7:92:af:02:26:30:
ea:e9:63:69:cf:64:cc:dd:64:d7:16:81:cd:16:f3:
bd:2a:c3:0b:70:7d:4d:ca:88:00:08:dc:eb:77:6a:
52:e4:4a:5a:1c:13:8c:b8:f8:a6:df:66:36:5b:ff:
76:26:e4:f3:a7:1e:b7:78:a9:64:b5:a7:ec:92:cd:
26:ed:b3:53:be:a3:77:ea:ca:aa:20:57:e7:3f:30:
2f:7b:98:64:17:62:44:71:a9:4e:bc:02:27:1a:4f:
a7:38:89:98:7c:b1:7d:0e:a9:a5:95:9e:b9:49:45:
3f:5d:02:97:68:a6:72:b4:d9:44:6e:58:f0:1c:e1:
c2:ec:37:7e:71:c5:18:c0:1a:98:ce:ff:10:68:b2:
0a:09:23:b5:c9:cd:db:c2:62:3c:f4:5e:06:53:8d:
99:9f:5e:eb:99:74:d0:71:01:93:5c:22:97:c5:75:
2e:f3:b4:02:fa:65:ff:8b:a7:4e:4e:63:03:e2:5a:
b0:66:f2:3b:38:6c:3f:9b:8e:d7:a5:02:8a:39:53:
c0:4a:66:33:a5:fc:8a:52:6f:9f:61:4f:97:97:79:
e1:7f:bb:8e:10:9d:92:e5:2c:5f:a9:d3:4d:a9:2f:
28:71:38:ba:30:be:48:08:96:ee:0f:75:a6:68:0f:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F1:EE:0A:E2:AD:52:28:CB:99:E9:64:87:7E:BA:29:B8:19:F5:B9
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8a:89:b4:9d:7c:2a:1b:be:04:e4:5e:0e:6e:5f:27:47:ae:
c9:46:7b:12:4b:4f:d2:1d:55:cb:ae:c1:0f:cb:eb:47:e6:6e:
f8:51:66:94:e2:e5:d1:ac:80:d3:e6:a4:13:47:e0:c1:36:56:
ea:7a:ac:da:88:d9:45:b5:26:02:71:f0:37:fc:fb:02:36:d9:
28:68:b2:13:83:16:58:aa:f5:4b:11:f6:91:e2:77:24:da:d2:
27:d6:f1:b2:a1:2c:72:b3:b0:00:2c:a1:a6:52:ab:59:93:da:
79:9c:45:0f:72:f4:07:e4:5a:bc:b9:ac:3d:70:a5:6a:69:d0:
e1:d9:33:ce:46:4a:0d:de:6b:d2:5a:26:80:ad:ec:99:ad:2d:
42:9b:24:22:28:81:fa:4e:c2:35:35:28:96:ac:d5:2d:53:f1:
78:8c:87:fd:66:5b:1e:b5:0d:f2:bf:ea:09:43:5f:1f:6b:06:
c2:6b:f3:d0:29:b3:55:14:44:fc:ac:dd:02:ad:cd:76:fd:90:
76:c2:31:2a:de:cc:56:3a:d5:33:38:9a:2a:78:35:6e:5f:95:
a8:d2:f8:59:46:16:22:44:66:6e:90:dd:34:25:be:68:b9:a4:
28:1e:0e:cf:09:7e:83:c1:27:68:98:46:84:47:4c:d7:64:af:
fc:90:c4:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pZ7K4zcIPnbBBR+W+rqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDc3ZjIyYzY0MjhiYzg4OWIzNjViMDA2Y2I1MjQ4ZDRi
ZjYxY2YwHhcNMjUwNTExMTQwMDI0WhcNMjUwNTEyMTQwMDI0WjAzMTEwLwYDVQQD
EygyMmYxZWUwYWUyYWQ1MjI4Y2I5OWU5NjQ4NzdlYmEyOWI4MTlmNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0obJstacoe3Hkq8CJjDq6WNpz2TM
3WTXFoHNFvO9KsMLcH1NyogACNzrd2pS5EpaHBOMuPim32Y2W/92JuTzpx63eKlk
tafsks0m7bNTvqN36sqqIFfnPzAve5hkF2JEcalOvAInGk+nOImYfLF9DqmllZ65
SUU/XQKXaKZytNlEbljwHOHC7Dd+ccUYwBqYzv8QaLIKCSO1yc3bwmI89F4GU42Z
n17rmXTQcQGTXCKXxXUu87QC+mX/i6dOTmMD4lqwZvI7OGw/m47XpQKKOVPASmYz
pfyKUm+fYU+Xl3nhf7uOEJ2S5SxfqdNNqS8ocTi6ML5ICJbuD3WmaA8klQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLx7grirVIoy5npZId+uim4GfW5MB8GA1UdIwQY
MBaAFGAHfyLGQovIibNlsAbLUkjUv2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDct
ODdmZTJlNTRiYTc5LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDctODdmZTJlNTRiYTc5
LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoqJtJ18
Khu+BOReDm5fJ0euyUZ7EktP0h1Vy67BD8vrR+Zu+FFmlOLl0ayA0+akE0fgwTZW
6nqs2ojZRbUmAnHwN/z7AjbZKGiyE4MWWKr1SxH2keJ3JNrSJ9bxsqEscrOwACyh
plKrWZPaeZxFD3L0B+RavLmsPXClamnQ4dkzzkZKDd5r0lomgK3sma0tQpskIiiB
+k7CNTUolqzVLVPxeIyH/WZbHrUN8r/qCUNfH2sGwmvz0CmzVRRE/KzdAq3Ndv2Q
dsIxKt7MVjrVMziaKng1bl+VqNL4WUYWIkRmbpDdNCW+aLmkKB4Ozwl+g8EnaJhG
hEdM12Sv/JDEOw==
-----END CERTIFICATE-----
Generated at Sun May 11 18:22:00 2025 by rpki-client