Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json)
Hash identifier: cq+zPsYVhdZHqIltPmIeTOkXVgJahiGB2wHCxamSw60=
Subject key identifier: 62:22:DC:A6:90:5D:5E:80:BD:C5:0E:84:8F:A0:AC:45:ED:7D:9E:37
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial: 0196C2A72BE6055507E6CBE2316A14353312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
Manifest number: 05D0
Signing time: Mon 12 May 2025 04:00:57 +0000
Manifest this update: Mon 12 May 2025 04:00:57 +0000
Manifest next update: Tue 13 May 2025 04:00:57 +0000
Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: h6PRFKzRX7s01iSgBE66S8jUEqEqXBkl9CI3UWJ+L6U=)
2: 1Xq5NcZrjlFL23QLXPQ2cW-IBls.roa (hash: HbBq96j6XF4InfiwCDfEHXOlCXag1YicK/gCEex0C0Y=)
3: WPkeJ7VVhsQIoqJp0qX_1NW0Ods.roa (hash: mxYAtiu5jjm0C1BeKBzzTHZkmyPXrcSCe59vx0mWEsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:2b:e6:05:55:07:e6:cb:e2:31:6a:14:35:33:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Validity
Not Before: May 12 04:00:57 2025 GMT
Not After : May 13 04:00:57 2025 GMT
Subject: CN=6222dca6905d5e80bdc50e848fa0ac45ed7d9e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:69:9b:f4:4d:72:9a:9b:12:63:1a:92:90:
10:bc:79:35:85:44:61:24:5d:8f:44:f6:43:f9:00:
51:46:40:b8:ab:88:13:d2:ce:13:6d:f1:18:54:35:
0f:b4:31:a1:b8:51:bc:8d:24:44:d2:2e:7f:96:58:
5d:b9:64:e8:89:f0:cc:15:99:ef:ce:f0:a1:eb:06:
bb:72:33:df:6f:ab:de:a1:99:45:50:64:ea:c6:36:
7e:4e:04:9b:98:76:4b:a9:26:6f:ad:27:d8:d5:17:
a6:6c:c5:5f:5d:09:a4:ac:5c:e1:b3:27:32:4d:8e:
79:cc:19:13:d7:88:32:90:b9:bb:64:95:0e:39:a9:
67:c8:09:31:01:e7:a8:d6:6c:af:7e:13:4f:5c:e1:
a5:4a:a3:79:2e:e7:d9:02:ec:e3:93:fd:06:95:e1:
61:ff:26:e0:11:09:ad:a5:89:df:71:3a:aa:92:b2:
9a:96:bf:17:0f:72:92:88:a5:77:b1:3e:1c:f4:36:
3c:f3:6a:d0:3b:93:aa:a9:f9:22:40:d6:28:7d:71:
f3:27:bb:dd:54:f1:1e:ed:75:7e:e5:1f:4c:66:6e:
4a:63:0b:81:a8:f2:4e:55:78:73:ed:e2:15:8e:07:
3a:e2:d7:7f:23:af:b6:c2:5e:6e:91:24:6d:d5:0a:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:22:DC:A6:90:5D:5E:80:BD:C5:0E:84:8F:A0:AC:45:ED:7D:9E:37
X509v3 Authority Key Identifier:
keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d1:e6:87:04:d2:9f:20:1f:c0:da:b8:0c:2e:d0:b2:c7:a3:
de:6f:ad:6d:0c:f8:12:43:93:f2:fe:3a:f6:f7:4f:75:50:5b:
b1:e0:6a:bb:d6:29:ea:96:90:31:28:82:9d:45:4e:2e:33:22:
7c:39:99:fd:e8:4f:35:c2:bb:c5:f3:8c:d2:35:22:f7:f4:b6:
d1:39:43:6f:0b:58:b1:67:f8:5f:f1:97:31:15:6d:f5:65:b9:
2b:f0:a8:6b:0b:95:d9:f6:c4:01:d8:8f:7a:51:75:36:61:b5:
36:36:e4:fa:f2:9d:d5:d1:47:b9:25:70:4c:95:e4:6a:3e:93:
ac:06:a9:72:9e:2b:b2:fa:f5:f4:3e:64:19:ac:bc:b4:b6:25:
8c:dc:f1:0f:8e:8a:c6:4c:3d:41:ea:1f:41:7a:6e:de:3c:02:
8a:1e:85:5b:4f:ce:e1:69:24:5c:76:6b:f8:3f:be:76:43:40:
1b:8a:3a:9f:f7:49:4e:bd:af:bc:e9:5c:e3:88:ae:52:94:37:
0f:cc:4a:3e:28:f7:33:49:f1:74:e5:c2:28:f1:eb:5d:c9:7f:
bf:fc:c2:1e:e5:37:4a:1d:4b:e6:b4:f6:c0:e6:07:c2:e7:05:
f8:1b:84:eb:60:39:73:2d:54:a6:bb:e8:84:7d:88:fc:7d:af:
43:1d:57:e3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbCpyvmBVUH5sviMWoUNTMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGRmZmY3ZjNjZGFhNzlhYThjNTFmNWNlMTJiMjM4NzA2
NDQwODEwHhcNMjUwNTEyMDQwMDU3WhcNMjUwNTEzMDQwMDU3WjAzMTEwLwYDVQQD
Eyg2MjIyZGNhNjkwNWQ1ZTgwYmRjNTBlODQ4ZmEwYWM0NWVkN2Q5ZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwJpm/RNcpqbEmMakpAQvHk1hURh
JF2PRPZD+QBRRkC4q4gT0s4TbfEYVDUPtDGhuFG8jSRE0i5/llhduWToifDMFZnv
zvCh6wa7cjPfb6veoZlFUGTqxjZ+TgSbmHZLqSZvrSfY1RembMVfXQmkrFzhsycy
TY55zBkT14gykLm7ZJUOOalnyAkxAeeo1myvfhNPXOGlSqN5LufZAuzjk/0GleFh
/ybgEQmtpYnfcTqqkrKalr8XD3KSiKV3sT4c9DY882rQO5OqqfkiQNYofXHzJ7vd
VPEe7XV+5R9MZm5KYwuBqPJOVXhz7eIVjgc64td/I6+2wl5ukSRt1QoUAwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGIi3KaQXV6AvcUOhI+grEXtfZ43MB8GA1UdIwQY
MBaAFPmN//fzzap5qoxR9c4SsjhwZECBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZM185X1BOcW5tcWpGSDF6aEt5T0hCa1FJRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNTQ3MWE4LWFlZGYtNGQ4Ni1hNDZk
LTc4OGM2MzA2YmIzZi8xLzEtWTNfOV9QTnFubXFqRkgxemhLeU9IQmtRSUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY4LzU0NzFhOC1hZWRmLTRkODYtYTQ2ZC03ODhjNjMwNmJi
M2YvMS8xLVkzXzlfUE5xbm1xakZIMXpoS3lPSEJrUUlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtHm
hwTSnyAfwNq4DC7Qssej3m+tbQz4EkOT8v469vdPdVBbseBqu9Yp6paQMSiCnUVO
LjMifDmZ/ehPNcK7xfOM0jUi9/S20TlDbwtYsWf4X/GXMRVt9WW5K/CoawuV2fbE
AdiPelF1NmG1Njbk+vKd1dFHuSVwTJXkaj6TrAapcp4rsvr19D5kGay8tLYljNzx
D46Kxkw9QeofQXpu3jwCih6FW0/O4WkkXHZr+D++dkNAG4o6n/dJTr2vvOlc44iu
UpQ3D8xKPij3M0nxdOXCKPHrXcl/v/zCHuU3Sh1L5rT2wOYHwucF+BuE62A5cy1U
prvohH2I/H2vQx1X4w==
-----END CERTIFICATE-----
Generated at Mon May 12 07:17:20 2025 by rpki-client