Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier: ArUoXw3bjgbdkMSWJfm2drgU4ueniuOUMsC7f5PXa9Q=
Subject key identifier: C3:C0:CF:4C:DA:95:04:93:96:81:C2:B7:69:5C:AC:1A:CC:4D:B1:DB
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 0196C4276EB7C9E8418C6CC2AFC605DADD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number: 09A9
Signing time: Mon 12 May 2025 11:00:40 +0000
Manifest this update: Mon 12 May 2025 11:00:40 +0000
Manifest next update: Tue 13 May 2025 11:00:40 +0000
Files and hashes: 1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: slEhIEaPv+E1cgyJ9mvKdTtzZS/wgxXUXiLOpdsdVN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:6e:b7:c9:e8:41:8c:6c:c2:af:c6:05:da:dd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: May 12 11:00:40 2025 GMT
Not After : May 13 11:00:40 2025 GMT
Subject: CN=c3c0cf4cda9504939681c2b7695cac1acc4db1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:17:07:aa:35:77:6d:74:43:a0:7d:ae:1e:
a4:d3:ce:04:44:30:e4:c7:a6:32:89:1f:fd:a1:a1:
ef:d9:c0:c7:01:77:71:bc:83:68:7a:83:41:0f:8a:
4e:34:1e:43:7c:78:52:db:39:e1:e7:82:66:7e:70:
58:76:f1:57:c9:15:42:10:74:12:d5:36:e7:b5:5e:
89:46:64:c5:fc:5a:6c:5d:5b:a1:75:f0:ba:d0:90:
2f:29:0b:bc:e6:18:5d:91:55:db:be:a6:4a:ef:e8:
a1:e4:46:08:3b:cf:50:74:f0:12:c0:d3:bf:73:c1:
3f:98:85:4e:47:6a:02:cb:b5:f2:b4:ff:f9:a5:e3:
ea:0a:c9:3d:e1:34:fb:ee:99:3b:56:73:d4:cd:33:
7a:7f:61:83:19:fc:3a:96:a6:3a:f9:d1:19:10:9f:
6f:e0:f2:3b:15:82:a5:0f:1f:9a:8f:5e:80:8b:d8:
b8:f7:1c:0f:3c:a8:7a:fa:c3:e8:b0:68:e4:97:26:
a9:72:7e:a5:be:44:5c:59:14:75:5a:47:7c:29:6d:
86:14:c7:db:f1:d2:7f:23:bc:79:44:d0:4f:42:1e:
d6:e1:5c:55:a4:2d:55:45:a0:fc:f4:9e:34:39:a1:
01:fb:30:c7:8d:83:d9:44:83:07:15:35:7b:a9:91:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:CF:4C:DA:95:04:93:96:81:C2:B7:69:5C:AC:1A:CC:4D:B1:DB
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:f1:c9:28:d1:a3:42:b8:96:9b:04:9b:fa:75:c6:bb:c5:
78:c8:05:ef:e3:eb:8a:fe:b6:97:b8:19:cc:e4:eb:55:28:e9:
c5:7e:55:89:ae:73:e8:5d:92:01:78:70:78:66:97:7a:d6:e6:
d0:b2:64:dc:23:4f:b6:ea:2d:40:c1:44:fc:9a:e6:f0:f1:6a:
95:57:85:3a:35:09:3f:15:0e:0e:ba:23:b2:f7:92:5b:6e:88:
06:2f:c2:3d:b9:ba:5a:bd:20:7c:b8:16:74:2c:35:4e:ac:83:
bf:d1:74:84:e8:14:2f:1c:9a:03:31:2b:02:97:c0:bc:18:f0:
ca:63:86:4f:c2:42:a1:1b:08:99:a2:0b:74:12:a7:e6:d2:72:
8a:f8:82:34:cb:c0:76:27:b4:09:fd:00:57:74:43:ad:a6:17:
20:ca:70:f2:d6:ae:f4:74:a7:42:59:ff:ff:64:96:93:ea:a2:
a3:6a:1a:e7:8c:25:6a:9e:2f:bc:df:0b:2f:27:a8:4f:a3:90:
a7:b3:36:a2:22:0d:06:7a:18:53:1d:9e:6f:86:30:93:3e:ed:
05:ef:a7:a8:ce:b0:d9:f3:bc:4e:1f:38:12:ee:7a:e6:35:08:
83:ba:ac:1b:44:da:0d:d8:9d:a1:1e:53:4d:6a:49:82:a5:8a:
92:f8:e2:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJ263yehBjGzCr8YF2t2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWRmMmJiY2NjMDJlNGU3ZjQ2NGQ2OWZhYWYzZDZjMzcy
MzQ5NWUwHhcNMjUwNTEyMTEwMDQwWhcNMjUwNTEzMTEwMDQwWjAzMTEwLwYDVQQD
EyhjM2MwY2Y0Y2RhOTUwNDkzOTY4MWMyYjc2OTVjYWMxYWNjNGRiMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10YXB6o1d210Q6B9rh6k084ERDDk
x6YyiR/9oaHv2cDHAXdxvINoeoNBD4pONB5DfHhS2znh54JmfnBYdvFXyRVCEHQS
1TbntV6JRmTF/FpsXVuhdfC60JAvKQu85hhdkVXbvqZK7+ih5EYIO89QdPASwNO/
c8E/mIVOR2oCy7XytP/5pePqCsk94TT77pk7VnPUzTN6f2GDGfw6lqY6+dEZEJ9v
4PI7FYKlDx+aj16Ai9i49xwPPKh6+sPosGjklyapcn6lvkRcWRR1Wkd8KW2GFMfb
8dJ/I7x5RNBPQh7W4VxVpC1VRaD89J40OaEB+zDHjYPZRIMHFTV7qZHe8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPAz0zalQSTloHCt2lcrBrMTbHbMB8GA1UdIwQY
MBaAFMod8rvMwC5Of0ZNafqvPWw3I0leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTkt
ZGQ0OWVjYzI2MDk1LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTktZGQ0OWVjYzI2MDk1
LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0LxySjR
o0K4lpsEm/p1xrvFeMgF7+Priv62l7gZzOTrVSjpxX5Via5z6F2SAXhweGaXetbm
0LJk3CNPtuotQMFE/Jrm8PFqlVeFOjUJPxUODrojsveSW26IBi/CPbm6Wr0gfLgW
dCw1TqyDv9F0hOgULxyaAzErApfAvBjwymOGT8JCoRsImaILdBKn5tJyiviCNMvA
die0Cf0AV3RDraYXIMpw8tau9HSnQln//2SWk+qio2oa54wlap4vvN8LLyeoT6OQ
p7M2oiINBnoYUx2eb4Ywkz7tBe+nqM6w2fO8Th84Eu565jUIg7qsG0TaDdidoR5T
TWpJgqWKkvjilA==
-----END CERTIFICATE-----
Generated at Mon May 12 19:51:13 2025 by rpki-client