Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: VrrAIMGhn1zA4jHyMiercbHwjsdeYfZ3bZuhmM9TUdU=
Subject key identifier: 1D:17:54:C3:E5:B6:74:4F:E5:25:EF:91:58:3B:07:D4:4D:50:6F:27
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 0196BFA5BA3365FC8E487FB3E80EE6F82289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0814
Signing time: Sun 11 May 2025 14:00:31 +0000
Manifest this update: Sun 11 May 2025 14:00:31 +0000
Manifest next update: Mon 12 May 2025 14:00:31 +0000
Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=)
2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: hVg+8pc+oZZFR8YY5UsXqv4UykWyuNqE7q/DeNCGizU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:ba:33:65:fc:8e:48:7f:b3:e8:0e:e6:f8:22:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: May 11 14:00:31 2025 GMT
Not After : May 12 14:00:31 2025 GMT
Subject: CN=1d1754c3e5b6744fe525ef91583b07d44d506f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:2e:39:68:9a:98:c7:7a:28:fd:29:ca:61:
6e:5b:aa:be:07:0b:8c:9e:7b:4a:33:e8:09:91:60:
d0:c8:1b:8f:da:a7:07:e0:39:91:13:41:6c:2d:5d:
f3:f3:86:c3:59:a0:0f:b6:1d:a5:28:b5:67:29:b9:
db:a7:97:74:a2:c1:fc:a9:93:23:a8:8b:29:00:bd:
b0:85:ac:8c:36:32:0f:2a:5b:68:dd:6b:34:ea:50:
a6:72:b5:a4:60:1c:47:cd:ce:af:7b:68:a5:9e:31:
cd:11:9b:94:c4:37:2c:90:0a:c9:4d:ee:b7:13:b7:
b6:3b:0f:a4:c5:40:59:d6:8d:a1:f6:d4:78:10:55:
54:22:37:a3:f8:f1:96:41:a2:42:6a:14:fa:f9:09:
7a:3d:4f:47:ea:cb:3b:c4:fd:90:07:a8:78:3e:cf:
83:78:4c:fd:08:56:7b:62:69:ca:df:d6:a7:c6:ed:
4f:37:1c:2b:6a:f7:bd:97:b8:a8:0d:b1:c6:f5:69:
85:69:b5:46:cd:47:9f:47:ba:be:fe:5e:55:0e:6c:
f4:ed:71:c4:b6:bf:90:ea:a6:0a:47:74:f9:08:1b:
8d:a6:7d:af:e5:43:51:bb:77:89:85:1e:76:75:b8:
c5:ee:9a:97:cd:ad:2f:58:dd:1a:48:6a:8a:42:69:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:17:54:C3:E5:B6:74:4F:E5:25:EF:91:58:3B:07:D4:4D:50:6F:27
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f0:e2:a9:40:38:04:c8:41:f3:30:cc:90:6b:87:a5:d6:f8:
4e:85:e0:2d:22:5f:01:af:04:f2:bd:02:76:e2:a6:53:c5:a2:
f5:15:18:a7:52:7e:25:3f:22:0e:34:ed:17:a6:e4:5e:c6:56:
ee:89:0f:a4:56:8c:67:f8:e1:9b:ed:b8:06:99:6a:56:15:57:
6f:66:61:93:03:60:d0:d5:ab:78:c9:c1:c2:f4:24:55:63:ae:
c5:6f:53:f9:00:6e:90:a2:9c:b2:b8:29:5e:a6:38:76:0b:f5:
01:9b:54:5c:ef:47:f5:63:c6:55:ad:07:44:0b:1b:db:50:88:
59:ee:37:ea:a5:87:cf:07:ad:66:28:5b:df:44:40:79:49:73:
80:f0:18:f9:72:1a:66:62:9d:ca:01:b7:65:39:14:cc:5e:96:
0c:20:19:25:0a:b7:5e:57:1b:6a:0a:19:3c:bc:88:2f:84:1b:
1c:fe:5e:80:d8:65:ef:e8:f4:1e:83:a1:93:fd:e3:e1:24:ff:
01:c7:1c:80:b2:3f:12:fa:0f:0a:e3:3e:28:e6:cb:b2:b7:52:
15:72:5b:8d:ea:d7:91:d4:a4:33:d6:10:fa:44:3d:78:82:c0:
9f:64:8e:61:da:75:3f:65:b8:66:06:62:4d:12:3f:ee:86:c4:
26:cb:25:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pbozZfyOSH+z6A7m+CKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZTYwZDM4YmIzNzc5NGU3MmU4N2U2ODcwZDA3MWYyYTdk
ZDNlNTcwHhcNMjUwNTExMTQwMDMxWhcNMjUwNTEyMTQwMDMxWjAzMTEwLwYDVQQD
EygxZDE3NTRjM2U1YjY3NDRmZTUyNWVmOTE1ODNiMDdkNDRkNTA2ZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeEuOWiamMd6KP0pymFuW6q+BwuM
nntKM+gJkWDQyBuP2qcH4DmRE0FsLV3z84bDWaAPth2lKLVnKbnbp5d0osH8qZMj
qIspAL2whayMNjIPKlto3Ws06lCmcrWkYBxHzc6ve2ilnjHNEZuUxDcskArJTe63
E7e2Ow+kxUBZ1o2h9tR4EFVUIjej+PGWQaJCahT6+Ql6PU9H6ss7xP2QB6h4Ps+D
eEz9CFZ7YmnK39anxu1PNxwrave9l7ioDbHG9WmFabVGzUefR7q+/l5VDmz07XHE
tr+Q6qYKR3T5CBuNpn2v5UNRu3eJhR52dbjF7pqXza0vWN0aSGqKQmmtUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0XVMPltnRP5SXvkVg7B9RNUG8nMB8GA1UdIwQY
MBaAFLPmDTi7N3lOcuh+aHDQcfKn3T5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUt
N2E5NGM3YzM2MjE3LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUtN2E5NGM3YzM2MjE3
LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/DiqUA4
BMhB8zDMkGuHpdb4ToXgLSJfAa8E8r0CduKmU8Wi9RUYp1J+JT8iDjTtF6bkXsZW
7okPpFaMZ/jhm+24BplqVhVXb2ZhkwNg0NWreMnBwvQkVWOuxW9T+QBukKKcsrgp
XqY4dgv1AZtUXO9H9WPGVa0HRAsb21CIWe436qWHzwetZihb30RAeUlzgPAY+XIa
ZmKdygG3ZTkUzF6WDCAZJQq3XlcbagoZPLyIL4QbHP5egNhl7+j0HoOhk/3j4ST/
AcccgLI/EvoPCuM+KObLsrdSFXJbjerXkdSkM9YQ+kQ9eILAn2SOYdp1P2W4ZgZi
TRI/7obEJsslaQ==
-----END CERTIFICATE-----
Generated at Sun May 11 20:13:13 2025 by rpki-client