Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: YgJ8Qm4a3+0ov6umfHxsMVlCuyRvAmoiJNy2pW/GgRI=
Subject key identifier: E5:C0:32:F3:77:F9:84:D8:4A:11:F9:00:E9:F9:1A:51:4E:A3:19:04
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 0196D7AE391D7A251FB459CA807423D3EAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 025D
Signing time: Fri 16 May 2025 06:00:41 +0000
Manifest this update: Fri 16 May 2025 06:00:41 +0000
Manifest next update: Sat 17 May 2025 06:00:41 +0000
Files and hashes: 1: iO6OOltzYSW2yZ_5E85X-P4mF_0.roa (hash: 2XDE+mCyZurCdSAHCb4+FLC8SwOf/SeiDXoheU8dhOI=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: KPLgncnkj/Usq9RhMFFTSjhFfTH7y1lWF9EMbJmk3Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:ae:39:1d:7a:25:1f:b4:59:ca:80:74:23:d3:ea:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: May 16 06:00:41 2025 GMT
Not After : May 17 06:00:41 2025 GMT
Subject: CN=e5c032f377f984d84a11f900e9f91a514ea31904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:d8:97:71:fc:90:26:47:98:42:6c:73:9e:
a7:f4:3f:93:d3:d8:86:ca:17:07:c9:26:46:30:61:
a2:a7:65:0a:2b:2d:20:4b:f3:df:12:22:f1:15:81:
3a:f9:09:ab:18:be:d6:ad:44:bc:3a:81:e8:2e:94:
1e:99:5a:39:bf:96:ce:da:de:e0:16:1c:f9:17:bc:
6b:09:84:ae:a1:bb:c4:dd:43:98:f5:df:81:0c:ac:
09:4d:ca:2d:8c:6f:e7:78:75:14:c1:e9:d0:21:9e:
b9:de:58:4d:66:99:3d:a7:00:de:b7:3d:60:f8:e4:
e3:5e:5b:0c:fe:7d:48:44:57:39:2f:e0:64:6d:78:
c3:44:43:55:d7:2c:34:8f:fc:54:bf:4b:98:00:73:
0b:49:18:7a:0a:19:2e:c1:be:11:b6:30:e5:e7:06:
0e:58:12:d6:f5:33:e3:eb:4c:aa:f4:3d:c7:16:08:
60:cb:cf:59:5d:56:df:b9:f8:4f:41:f2:92:db:50:
c0:6f:86:9f:aa:d5:9c:29:8e:1e:04:99:29:c9:40:
e5:76:d9:e4:47:75:ae:6f:a2:55:27:9a:4d:22:d4:
75:99:4b:93:28:bc:dd:21:a6:dc:32:3d:71:76:3a:
d6:cc:82:c5:1d:bb:a3:45:bc:71:fb:e5:f5:a9:48:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C0:32:F3:77:F9:84:D8:4A:11:F9:00:E9:F9:1A:51:4E:A3:19:04
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5d:76:b5:4b:c6:80:ce:13:23:26:0b:56:87:21:e3:f5:05:
21:d2:a6:95:11:45:d3:de:f9:45:5e:c9:f7:21:c9:0b:79:d9:
bd:98:89:46:3b:7b:2f:2b:ab:0e:e4:ec:e3:09:d0:6f:a1:d4:
83:24:56:c9:69:60:57:ec:65:e7:5d:52:47:60:df:c0:78:b7:
85:a8:dd:12:e5:b6:0b:f5:10:25:6a:0a:49:b5:2e:3e:6a:e0:
91:37:c4:65:2d:c9:3d:0f:16:d3:56:f1:37:61:ee:09:b6:10:
e4:c6:33:4e:75:95:81:8f:5e:13:76:27:cd:13:ea:75:5b:f0:
2c:63:59:8b:91:8c:24:b1:45:37:be:5e:7e:be:f4:24:6c:78:
80:e6:dd:c8:a8:bf:ee:d1:b0:67:bd:ba:b8:b7:21:da:87:2b:
af:50:59:32:6d:60:8f:66:20:e1:a2:da:39:15:83:9b:e2:3b:
ca:be:d6:22:ee:53:81:3e:2f:13:53:6a:2b:6d:7c:1f:7d:b5:
de:2a:b7:d8:f1:7b:54:8c:97:98:94:d7:9d:21:ce:61:f3:42:
19:2c:ea:b6:7f:59:50:8d:09:c5:54:87:36:39:0d:55:dc:aa:
07:be:e9:38:6a:cd:40:59:44:bc:1d:7e:5b:52:98:e7:aa:d9:
1d:6c:cd:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbXrjkdeiUftFnKgHQj0+rTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjExZjQ5M2IzMWE1YTJjMWYyM2NlMGUzMDA0NjQ3YTMy
NDI1NzYwHhcNMjUwNTE2MDYwMDQxWhcNMjUwNTE3MDYwMDQxWjAzMTEwLwYDVQQD
EyhlNWMwMzJmMzc3Zjk4NGQ4NGExMWY5MDBlOWY5MWE1MTRlYTMxOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vfYl3H8kCZHmEJsc56n9D+T09iG
yhcHySZGMGGip2UKKy0gS/PfEiLxFYE6+QmrGL7WrUS8OoHoLpQemVo5v5bO2t7g
Fhz5F7xrCYSuobvE3UOY9d+BDKwJTcotjG/neHUUwenQIZ653lhNZpk9pwDetz1g
+OTjXlsM/n1IRFc5L+BkbXjDRENV1yw0j/xUv0uYAHMLSRh6Chkuwb4RtjDl5wYO
WBLW9TPj60yq9D3HFghgy89ZXVbfufhPQfKS21DAb4afqtWcKY4eBJkpyUDldtnk
R3Wub6JVJ5pNItR1mUuTKLzdIabcMj1xdjrWzILFHbujRbxx++X1qUjJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXAMvN3+YTYShH5AOn5GlFOoxkEMB8GA1UdIwQY
MBaAFMqxH0k7MaWiwfI84OMARkejJCV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEt
MTUxZjZlZDE3NjkxLzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEtMTUxZjZlZDE3Njkx
LzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARl12tUvG
gM4TIyYLVoch4/UFIdKmlRFF0975RV7J9yHJC3nZvZiJRjt7LyurDuTs4wnQb6HU
gyRWyWlgV+xl511SR2DfwHi3hajdEuW2C/UQJWoKSbUuPmrgkTfEZS3JPQ8W01bx
N2HuCbYQ5MYzTnWVgY9eE3YnzRPqdVvwLGNZi5GMJLFFN75efr70JGx4gObdyKi/
7tGwZ726uLch2ocrr1BZMm1gj2Yg4aLaORWDm+I7yr7WIu5TgT4vE1NqK218H321
3iq32PF7VIyXmJTXnSHOYfNCGSzqtn9ZUI0JxVSHNjkNVdyqB77pOGrNQFlEvB1+
W1KY56rZHWzNtQ==
-----END CERTIFICATE-----
Generated at Fri May 16 08:16:25 2025 by rpki-client