Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: O3fxQqnwnWJH/L7TaZsDL1jxcdV48QCfXr7hiFN8OF4=
Subject key identifier: FA:1D:CC:75:98:E2:92:B3:9D:B5:78:93:DC:CC:14:14:A5:DE:DE:E9
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 0196BA1130FCF64F672467C02381FBC547EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0B2B
Signing time: Sat 10 May 2025 12:00:10 +0000
Manifest this update: Sat 10 May 2025 12:00:10 +0000
Manifest next update: Sun 11 May 2025 12:00:10 +0000
Files and hashes: 1: IUu38IEhp9FcGXHXO7VwuMNYV6E.roa (hash: 0chzG77l4zUiIxP7svJWJ4YTzi1qnItTODpt8dd9BKQ=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: aOCe6JoYHr3U7U1tx8ctbI/cX8/jRcGV7a2Bpaca1f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:30:fc:f6:4f:67:24:67:c0:23:81:fb:c5:47:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: May 10 12:00:10 2025 GMT
Not After : May 11 12:00:10 2025 GMT
Subject: CN=fa1dcc7598e292b39db57893dccc1414a5dedee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:e6:ae:10:43:14:21:6b:8b:28:b1:c6:10:
dc:91:8e:a3:dc:eb:ac:f9:98:6c:4f:a1:2b:f1:f6:
c2:1f:4f:8e:bc:a5:3e:19:46:c7:ee:fd:ce:30:b4:
8f:d0:9e:cb:64:67:46:2b:fe:ff:b0:e8:5a:5b:22:
66:8f:4f:93:f4:c8:fb:f2:9c:38:23:aa:0c:25:ef:
ed:9c:4c:cc:8e:7b:ed:09:52:ba:06:fc:eb:e7:7f:
fa:7f:65:7b:9b:ec:3a:a5:62:33:78:cf:be:9b:7a:
94:11:6b:ed:6f:04:52:09:07:01:04:87:0d:05:8e:
01:0b:29:96:26:95:7d:ac:ad:73:65:ac:45:a7:4d:
e0:b5:ab:65:24:89:82:79:3b:fe:ec:30:b1:73:7f:
77:27:e2:e8:79:52:91:b6:1f:9f:17:7d:94:f0:33:
88:c7:99:fa:1e:3d:93:aa:5c:00:f6:72:db:80:e1:
8b:e7:ca:1f:ee:06:d9:49:e0:fe:f1:92:de:33:ef:
4d:9b:04:0d:7b:3a:ac:c9:73:d2:00:e4:6d:91:1f:
8a:92:20:ab:2e:55:c3:33:c4:17:d0:b3:52:91:52:
4c:76:43:75:ec:89:87:77:a7:19:31:cd:58:17:87:
6d:2b:f1:d8:45:1a:91:12:c0:84:68:9f:f0:fc:02:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:CC:75:98:E2:92:B3:9D:B5:78:93:DC:CC:14:14:A5:DE:DE:E9
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e0:25:ba:87:57:d9:b7:16:99:c0:b3:69:49:59:ea:8a:3c:
69:63:a8:17:ae:e2:7a:f2:ad:44:0a:78:45:7b:bc:97:f2:fc:
64:f0:9c:77:73:d2:bb:e2:43:2d:e6:e6:3e:99:13:95:de:66:
17:84:e3:8f:23:cb:89:a6:4f:49:5e:dc:99:95:84:7c:1f:c4:
99:0f:0d:a1:97:7f:33:a2:12:d0:7c:3a:18:2c:2a:3b:1f:59:
f2:80:53:7c:16:50:35:6f:4a:80:90:0d:e6:e1:66:4e:74:0a:
e4:e4:9b:a6:66:64:70:78:5c:45:b3:dd:5c:fb:df:14:48:26:
f6:fc:64:e8:05:90:88:b6:98:92:ac:b6:f0:5f:90:68:55:c5:
38:a2:04:19:b9:0d:72:e5:3c:10:23:2d:67:02:7f:15:13:83:
4b:fd:53:c5:c3:81:15:b7:4a:01:ff:71:eb:b3:94:10:a5:b9:
96:95:a7:0e:89:3f:2a:f3:85:93:f1:dd:15:05:ec:ee:33:f1:
bd:f0:e5:3f:06:d6:35:26:4e:a4:9d:ad:bc:58:91:34:9f:18:
25:9f:46:cf:83:19:e9:db:bf:b1:68:b3:93:e2:85:86:10:38:
2a:d3:de:44:f2:01:44:8b:0f:1e:81:84:cb:ad:b1:21:cd:43:
4b:ce:93:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6ETD89k9nJGfAI4H7xUfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MDkxNDkyZDJjZThhODBjMDg3Yjg3NmY5MWQ2YTNjMjli
ZTdhMjUwHhcNMjUwNTEwMTIwMDEwWhcNMjUwNTExMTIwMDEwWjAzMTEwLwYDVQQD
EyhmYTFkY2M3NTk4ZTI5MmIzOWRiNTc4OTNkY2NjMTQxNGE1ZGVkZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2PmrhBDFCFriyixxhDckY6j3Ous
+ZhsT6Er8fbCH0+OvKU+GUbH7v3OMLSP0J7LZGdGK/7/sOhaWyJmj0+T9Mj78pw4
I6oMJe/tnEzMjnvtCVK6Bvzr53/6f2V7m+w6pWIzeM++m3qUEWvtbwRSCQcBBIcN
BY4BCymWJpV9rK1zZaxFp03gtatlJImCeTv+7DCxc393J+LoeVKRth+fF32U8DOI
x5n6Hj2TqlwA9nLbgOGL58of7gbZSeD+8ZLeM+9NmwQNezqsyXPSAORtkR+KkiCr
LlXDM8QX0LNSkVJMdkN17ImHd6cZMc1YF4dtK/HYRRqREsCEaJ/w/AISNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPodzHWY4pKznbV4k9zMFBSl3t7pMB8GA1UdIwQY
MBaAFMgJFJLSzoqAwIe4dvkdajwpvnolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2Et
ODFlMjEwNmE1ODU3LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2EtODFlMjEwNmE1ODU3
LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuAluodX
2bcWmcCzaUlZ6oo8aWOoF67ievKtRAp4RXu8l/L8ZPCcd3PSu+JDLebmPpkTld5m
F4TjjyPLiaZPSV7cmZWEfB/EmQ8NoZd/M6IS0Hw6GCwqOx9Z8oBTfBZQNW9KgJAN
5uFmTnQK5OSbpmZkcHhcRbPdXPvfFEgm9vxk6AWQiLaYkqy28F+QaFXFOKIEGbkN
cuU8ECMtZwJ/FRODS/1TxcOBFbdKAf9x67OUEKW5lpWnDok/KvOFk/HdFQXs7jPx
vfDlPwbWNSZOpJ2tvFiRNJ8YJZ9Gz4MZ6du/sWizk+KFhhA4KtPeRPIBRIsPHoGE
y62xIc1DS86TTQ==
-----END CERTIFICATE-----
Generated at Sat May 10 20:09:34 2025 by rpki-client