Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
File: ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json)
Hash identifier: a2XnI5GJDK2UeLFWY7MZPd5ceo9A6RaTfuLn9vtkRbY=
Subject key identifier: 68:77:BC:58:60:4A:86:DC:51:5A:02:E2:93:45:CC:C0:F0:D6:01:0D
Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
Certificate issuer: /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Certificate serial: 0196B710828D3F61334986AD1CE3F9631D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
Manifest number: 04A5
Signing time: Fri 09 May 2025 22:00:34 +0000
Manifest this update: Fri 09 May 2025 22:00:34 +0000
Manifest next update: Sat 10 May 2025 22:00:34 +0000
Files and hashes: 1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: AE+uMhvbmhG/PWBaSILm4cupkwDBhQqYySKYiZXjERU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:82:8d:3f:61:33:49:86:ad:1c:e3:f9:63:1d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Validity
Not Before: May 9 22:00:34 2025 GMT
Not After : May 10 22:00:34 2025 GMT
Subject: CN=6877bc58604a86dc515a02e29345ccc0f0d6010d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:fb:65:fe:1b:b7:4a:f5:b8:88:a4:8f:11:
17:c1:dd:59:a0:15:b2:e4:6d:43:ac:cc:9e:eb:cf:
60:ea:2f:04:76:4a:13:ef:e3:d3:02:0b:1d:3d:27:
e9:88:86:a9:b9:cc:5d:4d:29:e3:82:90:bc:14:54:
aa:b0:4e:0b:33:c7:d0:71:13:94:19:39:a6:53:61:
15:ed:83:ef:b5:0e:c7:79:94:a1:61:73:25:d2:f5:
b6:0d:dd:bb:41:07:6d:87:4a:69:b5:a9:f2:cb:fa:
7a:59:03:8a:de:b1:c2:c1:10:97:fe:b4:e7:2a:b8:
16:10:dc:68:1e:bf:87:87:1d:54:83:98:b9:ba:e3:
13:35:b7:d0:75:cf:ac:fe:f2:2d:a4:ae:38:70:2d:
e1:fd:3e:82:0b:e6:ca:15:1d:db:59:57:40:b2:19:
69:1f:1b:50:fb:05:1a:94:26:2e:b8:5e:ca:7d:c2:
30:f9:07:33:08:71:24:06:c5:d5:4f:8a:a7:a2:62:
23:00:f8:db:4a:3e:90:af:d7:54:0a:2f:62:24:06:
a7:42:77:be:63:b3:1d:59:4c:1a:59:5e:99:9d:05:
95:0b:5e:1a:2c:84:33:79:60:97:4e:93:9c:3f:8d:
1e:79:92:51:05:ae:ea:8d:c7:5c:33:61:ab:2a:c1:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:77:BC:58:60:4A:86:DC:51:5A:02:E2:93:45:CC:C0:F0:D6:01:0D
X509v3 Authority Key Identifier:
keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:96:3f:ea:dc:81:cc:8e:a9:68:53:06:a7:0c:ad:29:15:eb:
29:be:8f:8e:15:05:f8:ee:6c:b0:bc:8f:8c:56:1f:14:e0:f8:
25:73:11:8d:64:28:35:af:3b:e0:20:0c:41:5b:06:69:6b:b8:
f9:4d:4e:59:03:03:b2:02:6a:e0:98:21:a8:cc:65:a5:11:22:
dd:b4:97:90:13:3c:b5:b0:ce:34:97:be:48:93:2c:66:a8:5b:
b6:c2:0f:5e:0c:ca:12:fa:1e:37:23:9f:2d:44:d5:25:9e:f6:
26:53:0b:54:a1:e8:d7:a2:6e:09:f6:c2:e7:e6:e9:45:ac:26:
b5:82:1d:34:a6:58:03:60:7c:05:11:8a:ab:f9:ec:97:65:2c:
c0:0b:de:de:cb:0b:28:33:35:96:b6:33:f2:36:bf:26:b3:bc:
58:b9:58:47:77:03:41:6e:f1:f5:10:ec:e7:bc:7d:e2:4d:33:
1c:3c:f5:f3:d7:6b:39:c2:a9:e2:c3:91:dd:0a:9d:37:9f:32:
13:a7:8e:b8:20:bf:56:66:4f:5c:10:ce:a4:ce:e0:86:15:19:
48:c9:22:8a:28:27:90:55:9d:f7:0a:a1:18:ab:78:de:91:8b:
67:2e:b9:52:9a:e4:8b:ce:83:0d:74:6a:45:23:0c:50:ff:27:
c0:55:77:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3EIKNP2EzSYatHOP5Yx2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YzI0MmM2ZDFjMDRiZTAyY2RjNDI3ZmNmMDRlZDU4OWIy
MWMyYmMwHhcNMjUwNTA5MjIwMDM0WhcNMjUwNTEwMjIwMDM0WjAzMTEwLwYDVQQD
Eyg2ODc3YmM1ODYwNGE4NmRjNTE1YTAyZTI5MzQ1Y2NjMGYwZDYwMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKf7Zf4bt0r1uIikjxEXwd1ZoBWy
5G1DrMye689g6i8EdkoT7+PTAgsdPSfpiIapucxdTSnjgpC8FFSqsE4LM8fQcROU
GTmmU2EV7YPvtQ7HeZShYXMl0vW2Dd27QQdth0pptanyy/p6WQOK3rHCwRCX/rTn
KrgWENxoHr+Hhx1Ug5i5uuMTNbfQdc+s/vItpK44cC3h/T6CC+bKFR3bWVdAshlp
HxtQ+wUalCYuuF7KfcIw+QczCHEkBsXVT4qnomIjAPjbSj6Qr9dUCi9iJAanQne+
Y7MdWUwaWV6ZnQWVC14aLIQzeWCXTpOcP40eeZJRBa7qjcdcM2GrKsES9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh3vFhgSobcUVoC4pNFzMDw1gENMB8GA1UdIwQY
MBaAFMnCQsbRwEvgLNxCf88E7VibIcK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUt
OTQ5NWYyNzUzMzE4LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUtOTQ5NWYyNzUzMzE4
LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5Y/6tyB
zI6paFMGpwytKRXrKb6PjhUF+O5ssLyPjFYfFOD4JXMRjWQoNa874CAMQVsGaWu4
+U1OWQMDsgJq4JghqMxlpREi3bSXkBM8tbDONJe+SJMsZqhbtsIPXgzKEvoeNyOf
LUTVJZ72JlMLVKHo16JuCfbC5+bpRawmtYIdNKZYA2B8BRGKq/nsl2UswAve3ssL
KDM1lrYz8ja/JrO8WLlYR3cDQW7x9RDs57x94k0zHDz189drOcKp4sOR3QqdN58y
E6eOuCC/VmZPXBDOpM7ghhUZSMkiiignkFWd9wqhGKt43pGLZy65Uprki86DDXRq
RSMMUP8nwFV3dw==
-----END CERTIFICATE-----
Generated at Sat May 10 04:54:52 2025 by rpki-client