Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier: NM3infOmNE1cs7f4+Obrt6SAJZaWoOEff1B8rf6vBPE=
Subject key identifier: 88:03:D9:42:12:7A:55:25:96:03:02:FB:06:61:9A:39:93:6D:AD:18
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 0196BFA5B482F775F050C4F250811FD17468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 14:00:29 +0000
Manifest this update: Sun 11 May 2025 14:00:29 +0000
Manifest next update: Mon 12 May 2025 14:00:29 +0000
Files and hashes: 1: 2c5hJsdBUeeCiChk_4V2w2gh6lU.roa (hash: D53Q1f7eGpeEwEpkqzHT1XzbHYkVzvcMu+bdTa1FNsw=)
2: TEuCPuBwv_2lyF72kvKuFoWc7_M.roa (hash: PAEddVQWD0GjFhS/Z0wF1zxF3c8P9Lqj+mpgI3WA80g=)
3: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: 02T2jQGQKOXEyrImmgLemKaJdyvXwZvcha68TFNi/Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:b4:82:f7:75:f0:50:c4:f2:50:81:1f:d1:74:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: May 11 14:00:29 2025 GMT
Not After : May 12 14:00:29 2025 GMT
Subject: CN=8803d942127a5525960302fb06619a39936dad18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:57:c7:7b:96:c9:b3:2b:5b:7b:8a:e5:d7:
64:50:05:0d:9b:ad:d9:c2:37:54:f2:48:2b:44:f6:
42:1c:da:c9:4f:a7:34:70:c3:44:f9:a6:85:f4:4a:
fd:45:bd:8f:da:ef:8c:a8:de:da:92:0b:a8:c3:f2:
46:73:f0:9f:07:cc:eb:cb:eb:6d:6e:04:c8:2d:9e:
ec:35:ce:ee:56:cb:4e:d0:07:52:36:56:7a:ef:42:
d1:00:47:22:fd:24:91:79:94:27:a2:b8:b9:de:a3:
5f:29:79:df:4c:dc:fa:73:e7:1d:75:2f:62:53:06:
e7:94:2b:95:5a:c0:cd:8d:c2:ca:7b:4c:1a:9f:0c:
bc:cf:90:d4:d1:76:e0:05:02:a7:de:b8:1b:7a:b4:
fd:24:41:d5:55:71:0d:0b:52:9e:28:46:0a:1f:1b:
e7:b8:6a:01:de:b1:8f:50:be:98:95:09:a1:d2:0a:
39:4e:34:69:f1:53:46:4a:7f:08:28:af:41:98:ad:
0a:1e:ee:07:16:8a:5e:db:d8:25:59:2c:4a:8c:48:
14:ec:61:15:fb:26:cb:e9:20:7e:73:45:23:89:84:
a3:9c:f1:d2:70:53:1f:c6:bc:71:c8:4d:fa:a1:ff:
48:1e:96:0e:75:de:0e:21:7c:2d:85:80:19:a1:d6:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:03:D9:42:12:7A:55:25:96:03:02:FB:06:61:9A:39:93:6D:AD:18
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:35:1b:50:e1:15:27:a8:8c:57:b8:38:91:d8:b5:ac:65:d0:
9a:5f:47:e5:a2:fc:70:79:0d:8c:63:8c:34:e2:f9:b5:80:f3:
b7:52:06:ff:39:bf:85:c3:eb:97:12:28:e4:96:9c:0b:29:ad:
2c:57:b2:ff:f8:24:e0:29:fb:04:f0:a4:8c:58:7a:e1:ef:40:
0a:b5:f0:cc:3e:ae:28:93:9a:07:1f:ef:2a:65:56:46:aa:59:
60:88:f3:3e:a1:da:66:8d:27:c8:15:53:c7:f6:91:f6:cd:39:
6e:ad:dc:71:50:b9:47:49:c9:4d:22:f3:30:09:08:9c:e7:89:
24:36:e8:1e:8d:2d:5d:eb:5a:00:69:ce:50:28:c4:87:3c:54:
e9:e3:f1:b2:41:8c:20:97:b3:22:c5:b0:39:f6:48:e0:04:20:
28:75:f0:8a:cb:b8:f2:c3:86:2e:18:eb:ae:ed:ee:ab:21:bb:
b6:ae:1a:b3:2b:03:bc:41:a2:50:72:fb:23:37:8d:cf:1d:37:
7a:7c:33:9c:0b:09:22:64:d3:da:34:a3:6a:8a:d5:2f:ec:5b:
71:c3:c4:73:66:c8:91:97:65:29:cd:ef:68:39:c9:9a:7d:f0:
9e:cb:3c:03:5e:99:ce:c6:3c:38:10:1e:f4:90:27:a0:08:4c:
ef:f8:33:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pbSC93XwUMTyUIEf0XRoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZjE0ZjhlMTQ0YzZkNTBjMzhhYjRmYWZmNWFjNmU1NDdm
ZTFkNDcwHhcNMjUwNTExMTQwMDI5WhcNMjUwNTEyMTQwMDI5WjAzMTEwLwYDVQQD
Eyg4ODAzZDk0MjEyN2E1NTI1OTYwMzAyZmIwNjYxOWEzOTkzNmRhZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23pXx3uWybMrW3uK5ddkUAUNm63Z
wjdU8kgrRPZCHNrJT6c0cMNE+aaF9Er9Rb2P2u+MqN7akguow/JGc/CfB8zry+tt
bgTILZ7sNc7uVstO0AdSNlZ670LRAEci/SSReZQnori53qNfKXnfTNz6c+cddS9i
UwbnlCuVWsDNjcLKe0wanwy8z5DU0XbgBQKn3rgberT9JEHVVXENC1KeKEYKHxvn
uGoB3rGPUL6YlQmh0go5TjRp8VNGSn8IKK9BmK0KHu4HFope29glWSxKjEgU7GEV
+ybL6SB+c0UjiYSjnPHScFMfxrxxyE36of9IHpYOdd4OIXwthYAZodY9IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgD2UISelUllgMC+wZhmjmTba0YMB8GA1UdIwQY
MBaAFGPxT44UTG1Qw4q0+v9axuVH/h1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YjBhYWUtOWQyNy00OTUxLWJhYjct
ZGEzOTQzODRlOTI1LzEvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YjBhYWUtOWQyNy00OTUxLWJhYjctZGEzOTQzODRlOTI1
LzEvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTUbUOEV
J6iMV7g4kdi1rGXQml9H5aL8cHkNjGOMNOL5tYDzt1IG/zm/hcPrlxIo5JacCymt
LFey//gk4Cn7BPCkjFh64e9ACrXwzD6uKJOaBx/vKmVWRqpZYIjzPqHaZo0nyBVT
x/aR9s05bq3ccVC5R0nJTSLzMAkInOeJJDboHo0tXetaAGnOUCjEhzxU6ePxskGM
IJezIsWwOfZI4AQgKHXwisu48sOGLhjrru3uqyG7tq4asysDvEGiUHL7IzeNzx03
enwznAsJImTT2jSjaorVL+xbccPEc2bIkZdlKc3vaDnJmn3wnss8A16ZzsY8OBAe
9JAnoAhM7/gzqA==
-----END CERTIFICATE-----
Generated at Sun May 11 18:56:53 2025 by rpki-client