Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: zmHHMD/TmgDRRBTfJrDnDmu+6ldWsmKZNjrwYB7awuo=
Subject key identifier: FB:2B:FF:41:1C:EC:A7:94:8F:49:7C:D8:39:32:E0:11:F9:D5:61:DE
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 0196C0EF849B10FEC23A8B3F597D658C92E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 0F9B
Signing time: Sun 11 May 2025 20:00:44 +0000
Manifest this update: Sun 11 May 2025 20:00:44 +0000
Manifest next update: Mon 12 May 2025 20:00:44 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: ke4rkQ2HDOH6WRYJIAwB3FTW/TM3NDCAVosx6Fm9Fvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:84:9b:10:fe:c2:3a:8b:3f:59:7d:65:8c:92:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: May 11 20:00:44 2025 GMT
Not After : May 12 20:00:44 2025 GMT
Subject: CN=fb2bff411ceca7948f497cd83932e011f9d561de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:c3:d0:8a:53:a2:4e:76:41:94:e0:98:c9:
96:3c:10:42:41:31:cf:04:64:2b:3a:37:ad:6d:58:
a5:eb:b0:83:f0:67:06:67:82:25:ce:92:5f:60:28:
04:c1:33:41:44:de:81:b7:8d:0f:7d:d5:aa:5d:c7:
7d:4c:e2:58:fe:76:b3:96:cd:13:cc:72:2e:44:56:
06:af:b2:47:f3:1a:5c:cd:b3:ec:d5:e7:65:92:1f:
3f:d1:4d:1d:7e:80:52:80:b5:71:99:86:37:09:33:
49:17:81:50:9c:6d:8b:86:7f:ff:fb:b7:73:b6:ee:
b8:a2:2b:7c:4c:74:a4:82:32:a4:45:52:ec:ea:28:
1a:bf:50:43:87:8a:9a:eb:33:c2:ed:6e:c0:13:e3:
eb:f8:ba:3d:ec:af:b5:56:cc:7b:94:a2:41:37:88:
55:90:8f:3f:8f:b5:91:de:c9:59:54:38:19:2e:43:
ff:cb:03:96:dc:09:cc:5f:c7:83:dd:39:96:63:c1:
9f:dd:18:00:d2:8b:d5:a5:df:9c:16:4e:41:e8:63:
ee:45:be:18:e4:7c:db:1a:93:b7:31:ae:25:bb:c3:
c6:65:c3:45:98:a4:80:12:51:62:61:3e:4b:88:2c:
4e:2c:81:36:20:fe:76:38:25:c0:2c:df:b9:47:c1:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2B:FF:41:1C:EC:A7:94:8F:49:7C:D8:39:32:E0:11:F9:D5:61:DE
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:94:0d:12:0f:00:67:a7:38:ec:f6:0b:9e:5f:e7:38:80:a1:
04:80:80:d6:0a:ff:db:02:b7:61:02:14:6b:52:61:14:93:20:
9a:81:a0:4d:41:e9:4e:8c:b0:a2:53:6f:a0:a2:8a:f4:8e:5e:
72:25:ce:03:0d:f8:9f:9e:fc:04:6f:ef:87:84:43:0b:57:01:
a0:89:77:2c:f3:b6:01:ee:77:8d:59:36:34:90:1f:0e:3d:3e:
e3:74:e3:8b:20:fa:d4:32:bb:20:0e:d9:12:a9:ec:4d:84:15:
f3:32:93:3c:6a:af:e1:ec:85:59:f0:dd:de:83:60:1a:45:86:
15:59:cb:30:21:f8:4d:74:0c:11:b7:3b:c3:70:02:d6:de:1f:
6d:8b:f0:a7:9d:3e:eb:c0:45:e8:51:77:87:27:6f:ea:e4:c7:
a9:e3:7c:c4:5d:8e:54:97:32:b0:42:8e:0e:11:d5:c2:f7:7a:
ed:12:b3:b0:3f:9f:38:cd:8c:92:19:ba:f8:f3:82:0a:08:4a:
ce:de:83:bb:fd:94:34:0b:fc:67:0f:31:cd:a7:9a:b6:b0:e7:
e0:d5:1b:fd:40:3c:d7:2b:03:56:1d:5f:4d:27:f3:51:d3:c8:
fb:cf:4e:9c:6f:e9:79:27:54:d2:d0:54:fc:bd:c3:79:07:07:
0c:1e:99:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbA74SbEP7COos/WX1ljJLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYmUwOGRhMWFiMzFlM2Y5OGY1NTRmYTAxMzczZjk0Y2M5
MDExZWQwHhcNMjUwNTExMjAwMDQ0WhcNMjUwNTEyMjAwMDQ0WjAzMTEwLwYDVQQD
EyhmYjJiZmY0MTFjZWNhNzk0OGY0OTdjZDgzOTMyZTAxMWY5ZDU2MWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+HD0IpTok52QZTgmMmWPBBCQTHP
BGQrOjetbVil67CD8GcGZ4IlzpJfYCgEwTNBRN6Bt40PfdWqXcd9TOJY/nazls0T
zHIuRFYGr7JH8xpczbPs1edlkh8/0U0dfoBSgLVxmYY3CTNJF4FQnG2Lhn//+7dz
tu64oit8THSkgjKkRVLs6igav1BDh4qa6zPC7W7AE+Pr+Lo97K+1Vsx7lKJBN4hV
kI8/j7WR3slZVDgZLkP/ywOW3AnMX8eD3TmWY8Gf3RgA0ovVpd+cFk5B6GPuRb4Y
5HzbGpO3Ma4lu8PGZcNFmKSAElFiYT5LiCxOLIE2IP52OCXALN+5R8EdHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsr/0Ec7KeUj0l82Dky4BH51WHeMB8GA1UdIwQY
MBaAFGO+CNoasx4/mPVU+gE3P5TMkBHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1Nzct
Y2M4MDU0YTUxZDY2LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1NzctY2M4MDU0YTUxZDY2
LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5QNEg8A
Z6c47PYLnl/nOIChBICA1gr/2wK3YQIUa1JhFJMgmoGgTUHpToywolNvoKKK9I5e
ciXOAw34n578BG/vh4RDC1cBoIl3LPO2Ae53jVk2NJAfDj0+43TjiyD61DK7IA7Z
EqnsTYQV8zKTPGqv4eyFWfDd3oNgGkWGFVnLMCH4TXQMEbc7w3AC1t4fbYvwp50+
68BF6FF3hydv6uTHqeN8xF2OVJcysEKODhHVwvd67RKzsD+fOM2Mkhm6+POCCghK
zt6Du/2UNAv8Zw8xzaeatrDn4NUb/UA81ysDVh1fTSfzUdPI+89OnG/peSdU0tBU
/L3DeQcHDB6ZZg==
-----END CERTIFICATE-----
Generated at Mon May 12 05:13:14 2025 by rpki-client