Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: 2WBTxldTV3dpQaXO29ArCN7wK0MIC3tY2VftHgxwWgk=
Subject key identifier: A1:BE:3B:65:55:C2:A7:D0:26:EB:16:F1:6D:44:C5:7E:46:DE:93:23
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 01969F3F6443DE92E0694018BCFCCC5D4349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0C18
Signing time: Mon 05 May 2025 07:00:53 +0000
Manifest this update: Mon 05 May 2025 07:00:53 +0000
Manifest next update: Tue 06 May 2025 07:00:53 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: 8L4VoTI3jxZDF6YFMzYhdjEUyld8VHLFDcXKvPdNC+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:64:43:de:92:e0:69:40:18:bc:fc:cc:5d:43:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: May 5 07:00:53 2025 GMT
Not After : May 6 07:00:53 2025 GMT
Subject: CN=a1be3b6555c2a7d026eb16f16d44c57e46de9323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:d7:a4:89:34:54:02:bb:a4:39:b2:89:e3:
4c:da:96:e8:dc:2f:2c:d0:c8:cc:d8:d1:be:48:ba:
5e:5a:6b:8c:e3:3f:c2:7a:90:4f:94:27:c8:5d:f7:
4a:60:3a:42:59:42:d5:96:a2:6e:53:e0:ec:b8:72:
9e:ac:49:91:b1:a2:a0:90:34:0d:15:2e:90:9e:67:
08:cd:4c:11:b5:4b:c5:3e:12:d8:25:e6:c0:1f:7b:
62:e6:3d:0e:15:6d:37:2e:af:cc:a9:9e:f2:8a:30:
f3:a1:5b:ac:72:33:bd:a2:dc:a3:69:50:5d:cb:9b:
09:02:40:62:fc:38:6f:2c:ba:ee:52:02:56:2f:af:
70:18:47:e1:4d:44:33:75:1a:1e:ad:33:0c:29:1c:
2d:c2:87:13:99:ce:a8:f0:af:05:14:67:5f:74:c1:
94:58:8e:7d:50:ee:35:10:27:bd:b3:d4:f3:af:ef:
51:f0:cf:e6:51:4b:69:8a:e7:1c:2f:dd:0a:39:32:
bd:75:8b:37:c8:85:85:bb:cc:ad:53:dd:d5:9b:a8:
0f:7a:3e:f4:d7:dc:f4:2c:6a:a0:50:26:84:a3:3e:
aa:a9:c7:f8:8a:9f:74:31:2e:0f:7f:d3:82:02:99:
38:97:e7:0d:b6:4f:bf:f1:7e:81:f4:47:76:2f:e7:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BE:3B:65:55:C2:A7:D0:26:EB:16:F1:6D:44:C5:7E:46:DE:93:23
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:98:5b:7b:5e:f2:c1:51:30:ae:ef:7c:a3:19:a2:da:06:80:
e3:19:1d:5f:cd:98:ef:6e:a3:cb:93:9a:dd:0f:29:34:a6:31:
05:81:59:16:1a:71:3f:59:e7:b4:76:06:47:86:e7:fc:da:45:
fd:a6:c1:62:9a:ca:a7:35:10:ef:2e:c3:67:e9:61:57:0a:23:
c6:e1:11:45:7c:0a:0f:69:51:73:bf:ce:d8:4d:b8:d9:49:a4:
a4:39:62:87:ee:69:73:77:b8:d5:83:8e:63:92:8f:d5:03:ce:
7c:05:ec:8a:e3:70:4e:9f:fa:6c:db:4c:6f:e7:6b:37:99:23:
31:46:c5:42:ae:d8:af:e2:aa:1f:79:c5:be:11:19:c6:d7:71:
d5:7d:13:1a:48:b0:6a:78:4f:b9:94:e6:e9:7b:0d:75:ec:37:
06:02:7b:93:90:4b:e9:2e:a9:95:0d:79:bf:40:66:c4:7d:6f:
80:96:6f:22:65:c8:19:88:9a:d7:82:c2:c9:49:9a:9d:49:ce:
36:91:63:82:ea:77:bd:cc:ff:75:28:16:03:a9:aa:19:0a:8f:
95:e1:09:fc:d2:4f:5e:81:ca:25:9f:bd:d7:05:ba:2f:9e:93:
a3:ce:4c:67:84:cb:93:7d:9e:f2:b3:c8:59:15:db:e5:05:08:
f8:9e:2c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafP2RD3pLgaUAYvPzMXUNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MGE3ZThlYzQ3Y2FkZDg2NTM3MmRlNTAzZjg3OTBlZjYy
YzcxNDEwHhcNMjUwNTA1MDcwMDUzWhcNMjUwNTA2MDcwMDUzWjAzMTEwLwYDVQQD
EyhhMWJlM2I2NTU1YzJhN2QwMjZlYjE2ZjE2ZDQ0YzU3ZTQ2ZGU5MzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle/XpIk0VAK7pDmyieNM2pbo3C8s
0MjM2NG+SLpeWmuM4z/CepBPlCfIXfdKYDpCWULVlqJuU+DsuHKerEmRsaKgkDQN
FS6QnmcIzUwRtUvFPhLYJebAH3ti5j0OFW03Lq/MqZ7yijDzoVuscjO9otyjaVBd
y5sJAkBi/DhvLLruUgJWL69wGEfhTUQzdRoerTMMKRwtwocTmc6o8K8FFGdfdMGU
WI59UO41ECe9s9Tzr+9R8M/mUUtpiuccL90KOTK9dYs3yIWFu8ytU93Vm6gPej70
19z0LGqgUCaEoz6qqcf4ip90MS4Pf9OCApk4l+cNtk+/8X6B9Ed2L+dH2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG+O2VVwqfQJusW8W1ExX5G3pMjMB8GA1UdIwQY
MBaAFMgKfo7EfK3YZTct5QP4eQ72LHFBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jYjViZWYtN2U4YS00MzkyLWE5YzYt
ZTEyZmFiMTg1NTQwLzEveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9jYjViZWYtN2U4YS00MzkyLWE5YzYtZTEyZmFiMTg1NTQw
LzEveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZhbe17y
wVEwru98oxmi2gaA4xkdX82Y726jy5Oa3Q8pNKYxBYFZFhpxP1nntHYGR4bn/NpF
/abBYprKpzUQ7y7DZ+lhVwojxuERRXwKD2lRc7/O2E242UmkpDlih+5pc3e41YOO
Y5KP1QPOfAXsiuNwTp/6bNtMb+drN5kjMUbFQq7Yr+KqH3nFvhEZxtdx1X0TGkiw
anhPuZTm6XsNdew3BgJ7k5BL6S6plQ15v0BmxH1vgJZvImXIGYia14LCyUmanUnO
NpFjgup3vcz/dSgWA6mqGQqPleEJ/NJPXoHKJZ+91wW6L56To85MZ4TLk32e8rPI
WRXb5QUI+J4sXA==
-----END CERTIFICATE-----
Generated at Mon May 5 16:25:55 2025 by rpki-client