Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
File: yuBptmPuJf0TVZEB2sHVAyuf1m4.mft (raw, json)
Hash identifier: Ud1NswjDjD9getHdgFlUvoNb0Y+TpwI95krXIEMyb8s=
Subject key identifier: CA:86:86:64:B3:40:1A:01:BB:E6:51:A5:03:BB:B2:41:19:94:52:C4
Authority key identifier: CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E
Certificate issuer: /CN=cae069b663ee25fd13559101dac1d5032b9fd66e
Certificate serial: 0196BBFFDB1442468BDCBCB1F4FACC285214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
Manifest number: 0E82
Signing time: Sat 10 May 2025 21:00:29 +0000
Manifest this update: Sat 10 May 2025 21:00:29 +0000
Manifest next update: Sun 11 May 2025 21:00:29 +0000
Files and hashes: 1: J-eKojxMi6UoXnAnWpcgCgfxWzI.roa (hash: 3mfOivDPBdA5JQvXcz+RrhjkTiZkiP3KgPuzQa9ZrxM=)
2: yuBptmPuJf0TVZEB2sHVAyuf1m4.crl (hash: 1EC4Z2YRHvta7Fd+9tVzIPJ/HBicx3eHnGVLffFxCoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:db:14:42:46:8b:dc:bc:b1:f4:fa:cc:28:52:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae069b663ee25fd13559101dac1d5032b9fd66e
Validity
Not Before: May 10 21:00:29 2025 GMT
Not After : May 11 21:00:29 2025 GMT
Subject: CN=ca868664b3401a01bbe651a503bbb241199452c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:7c:91:ca:c9:9a:63:1c:a0:a4:d4:91:4c:
9b:59:a1:af:de:55:4e:51:4d:2a:e7:43:e5:f1:c9:
02:0e:99:c7:e5:f7:4e:a4:ef:e8:dd:e3:77:d7:c5:
49:62:21:46:54:68:06:af:30:9c:e9:2c:02:c9:d4:
95:6a:3b:89:b6:02:f1:6e:da:b8:6b:09:b7:c6:e4:
6b:f0:f7:0d:33:6d:9a:82:41:5f:46:9e:0a:61:59:
d7:ca:9e:da:f9:8e:32:18:b7:1d:2c:ad:87:20:5b:
37:16:d2:05:6a:90:9f:ed:54:f3:2e:00:64:8a:24:
b0:ca:e9:46:d5:d6:11:e7:a5:67:67:36:06:b7:5c:
3d:9f:9e:31:9b:49:a1:e5:be:03:57:67:a3:c9:84:
51:a3:d5:b8:10:e2:fe:07:40:81:1a:1b:27:54:4a:
c9:d6:5e:92:d3:ba:55:da:e2:f1:5d:1e:66:38:a3:
b8:3e:6c:38:12:3a:40:61:e7:00:b2:27:98:52:63:
8c:14:ec:f6:3b:1c:e3:20:57:d1:0f:8b:92:be:2a:
26:0b:5d:a2:a3:44:14:fb:22:07:f4:c3:1f:5e:c4:
5e:17:6e:03:71:42:14:ad:6a:a1:bf:6e:b4:b1:e8:
45:48:80:ca:fe:d4:67:a4:0d:4c:39:30:c3:66:1a:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:86:86:64:B3:40:1A:01:BB:E6:51:A5:03:BB:B2:41:19:94:52:C4
X509v3 Authority Key Identifier:
keyid:CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:da:81:b1:35:2e:a3:4d:98:15:b1:81:cc:b2:b8:76:84:00:
ac:d9:51:05:b1:a5:de:0c:0c:a1:b5:4a:91:7f:e5:7f:ae:8f:
25:a8:3e:11:4a:c8:6b:12:62:84:b7:b5:4a:cd:30:07:e8:e4:
70:7c:1d:95:2c:57:bc:6d:0d:b2:5c:6f:e9:15:e0:49:ff:9e:
ab:28:43:fd:c9:47:aa:1d:2a:1d:c3:1c:54:43:5b:43:0f:a7:
9a:06:19:80:14:5c:c0:d8:1f:c8:0c:22:b1:f0:ce:0a:25:50:
8f:88:4e:b6:b9:a8:97:43:c9:e3:38:18:ce:2d:2a:2a:bf:ad:
5b:30:76:b1:c4:b4:36:a7:fe:81:c5:f0:76:c9:33:2b:22:ae:
57:c9:d9:fe:28:32:db:f5:5e:c5:a3:93:19:fb:f8:a1:96:e3:
e0:8e:2f:d3:5c:1f:f9:de:a8:cb:1e:c6:ba:dd:42:bb:c3:11:
ca:e4:ce:10:3e:20:17:81:e8:44:21:6a:01:ca:b1:7e:ed:eb:
3c:54:fd:cb:7d:af:f8:92:93:ad:2e:33:29:fa:11:1c:6e:67:
79:5a:ad:ff:43:59:a8:6f:a8:d2:26:e8:16:c6:c7:2a:94:6c:
21:74:7a:74:e0:a5:7b:47:c2:6f:66:25:bd:e1:81:e0:87:71:
2d:6a:56:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7/9sUQkaL3Lyx9PrMKFIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZTA2OWI2NjNlZTI1ZmQxMzU1OTEwMWRhYzFkNTAzMmI5
ZmQ2NmUwHhcNMjUwNTEwMjEwMDI5WhcNMjUwNTExMjEwMDI5WjAzMTEwLwYDVQQD
EyhjYTg2ODY2NGIzNDAxYTAxYmJlNjUxYTUwM2JiYjI0MTE5OTQ1MmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBN8kcrJmmMcoKTUkUybWaGv3lVO
UU0q50Pl8ckCDpnH5fdOpO/o3eN318VJYiFGVGgGrzCc6SwCydSVajuJtgLxbtq4
awm3xuRr8PcNM22agkFfRp4KYVnXyp7a+Y4yGLcdLK2HIFs3FtIFapCf7VTzLgBk
iiSwyulG1dYR56VnZzYGt1w9n54xm0mh5b4DV2ejyYRRo9W4EOL+B0CBGhsnVErJ
1l6S07pV2uLxXR5mOKO4Pmw4EjpAYecAsieYUmOMFOz2OxzjIFfRD4uSviomC12i
o0QU+yIH9MMfXsReF24DcUIUrWqhv260sehFSIDK/tRnpA1MOTDDZho0JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqGhmSzQBoBu+ZRpQO7skEZlFLEMB8GA1UdIwQY
MBaAFMrgabZj7iX9E1WRAdrB1QMrn9ZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lNWY1ZjgtMWNhMS00MjM0LTlhM2Mt
ZWNjZWVlZTExMGE0LzEveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lNWY1ZjgtMWNhMS00MjM0LTlhM2MtZWNjZWVlZTExMGE0
LzEveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1dqBsTUu
o02YFbGBzLK4doQArNlRBbGl3gwMobVKkX/lf66PJag+EUrIaxJihLe1Ss0wB+jk
cHwdlSxXvG0Nslxv6RXgSf+eqyhD/clHqh0qHcMcVENbQw+nmgYZgBRcwNgfyAwi
sfDOCiVQj4hOtrmol0PJ4zgYzi0qKr+tWzB2scS0Nqf+gcXwdskzKyKuV8nZ/igy
2/VexaOTGfv4oZbj4I4v01wf+d6oyx7Gut1Cu8MRyuTOED4gF4HoRCFqAcqxfu3r
PFT9y32v+JKTrS4zKfoRHG5neVqt/0NZqG+o0iboFsbHKpRsIXR6dOCle0fCb2Yl
veGB4IdxLWpW7w==
-----END CERTIFICATE-----
Generated at Sun May 11 02:28:42 2025 by rpki-client