Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
File: yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft (raw, json)
Hash identifier: ffFWYCoTAu2lhpL2Osydmw4xBdpcvTRdx5MhSvck/WU=
Subject key identifier: 18:2F:7D:AF:E6:F5:75:84:F4:A8:66:33:E4:28:7E:67:C9:58:A6:AA
Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
Certificate issuer: /CN=caacc4febb487996d4ee01d53b11f84203ca8367
Certificate serial: 0196C1CB4A43516E785C15CC76BF3170AE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
Manifest number: 91
Signing time: Mon 12 May 2025 00:00:47 +0000
Manifest this update: Mon 12 May 2025 00:00:47 +0000
Manifest next update: Tue 13 May 2025 00:00:47 +0000
Files and hashes: 1: _8GeUycs83lRu9jroip2TNtqpH8.roa (hash: xKuAFuMNSLN3xOnIRiVJqWVq/u5hK123DBKLWdaFAC0=)
2: yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl (hash: jQzSRQcLWnNQMXXGzbvZNThdl7qqIf02FC2rbEf/H4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:4a:43:51:6e:78:5c:15:cc:76:bf:31:70:ae:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367
Validity
Not Before: May 12 00:00:47 2025 GMT
Not After : May 13 00:00:47 2025 GMT
Subject: CN=182f7dafe6f57584f4a86633e4287e67c958a6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:e9:68:7e:e5:15:97:d5:7a:8f:10:cf:c4:
83:36:79:19:75:4b:83:2a:ca:88:b1:6a:55:7b:bc:
47:aa:8a:af:ea:b2:7a:ce:09:f5:6f:5b:d9:ad:da:
be:47:22:84:04:43:6d:f9:f0:63:83:92:78:9d:2a:
d2:5a:08:e8:01:4a:cc:ad:d3:b8:cb:34:e6:78:5c:
c6:80:d1:a6:1b:61:1e:d4:42:af:01:6d:0c:5a:3c:
84:11:70:38:05:25:11:68:58:21:79:af:10:db:b1:
b2:cb:4e:fc:35:b1:30:2e:6b:66:f2:64:21:11:86:
e6:c9:96:ff:40:9a:c1:ea:04:7f:fc:60:b5:48:69:
ed:30:77:e5:8f:02:fc:dc:c6:5c:a4:9e:f6:a5:bd:
78:c1:c1:ec:b6:c1:ad:f0:dd:b4:de:71:c8:64:06:
60:6d:74:e4:4b:ce:fb:2a:a8:cf:39:22:ab:91:0e:
36:60:c8:bf:03:e6:a8:9f:5e:f4:4b:72:c4:49:66:
6d:8e:2d:6c:b4:95:7a:98:d0:8b:31:c2:27:7d:da:
11:94:1a:b3:16:5d:39:4e:9f:b5:ab:6d:f1:35:c0:
07:33:bb:1f:bd:09:3a:7d:be:9e:59:30:89:89:58:
b7:c3:d4:a9:94:11:93:7e:b6:62:94:7c:26:09:c5:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:7D:AF:E6:F5:75:84:F4:A8:66:33:E4:28:7E:67:C9:58:A6:AA
X509v3 Authority Key Identifier:
keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:6c:6c:d8:15:18:81:04:0a:c4:4c:a7:b1:ff:dd:09:5e:
b0:6d:b0:c8:47:0b:d5:f2:4a:cf:07:d8:55:c8:50:2e:8c:1b:
87:0c:b9:56:cf:0c:23:0b:a9:11:1e:6a:cd:ab:dc:1d:12:f5:
3e:18:9d:52:50:76:20:9e:ed:a7:f4:fa:9e:83:1a:f0:a0:ad:
d7:a7:39:04:a9:f6:68:b0:c6:06:41:b2:66:71:11:34:52:d5:
8f:19:31:31:28:18:66:bd:d5:5e:78:90:e0:17:7d:d2:4f:7a:
c9:3c:f6:fe:bd:5a:a4:6d:4f:6a:ae:51:57:b5:ab:91:c9:52:
18:a5:c0:bb:a7:5a:0a:c1:44:5d:c7:3e:8f:a1:1c:82:9d:65:
e7:57:10:8a:c5:82:5a:94:8d:d1:2f:39:70:07:c3:0c:97:0c:
7a:e5:96:a8:d7:7f:72:76:ce:d7:8e:8f:8b:c8:61:b0:a7:21:
99:7d:d4:3f:13:e8:37:3a:67:4e:69:9e:04:34:95:bc:17:2f:
75:66:ad:b4:eb:9d:12:a0:e4:82:0b:48:e1:54:60:37:02:b9:
60:76:10:6a:0e:84:a3:05:78:a5:1e:d1:24:88:07:ea:ab:ac:
96:f2:fb:f8:bb:2f:c7:5a:31:52:cf:e5:8f:bb:24:e2:01:7e:
ef:ee:5f:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBy0pDUW54XBXMdr8xcK6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYWNjNGZlYmI0ODc5OTZkNGVlMDFkNTNiMTFmODQyMDNj
YTgzNjcwHhcNMjUwNTEyMDAwMDQ3WhcNMjUwNTEzMDAwMDQ3WjAzMTEwLwYDVQQD
EygxODJmN2RhZmU2ZjU3NTg0ZjRhODY2MzNlNDI4N2U2N2M5NThhNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqPpaH7lFZfVeo8Qz8SDNnkZdUuD
KsqIsWpVe7xHqoqv6rJ6zgn1b1vZrdq+RyKEBENt+fBjg5J4nSrSWgjoAUrMrdO4
yzTmeFzGgNGmG2Ee1EKvAW0MWjyEEXA4BSURaFghea8Q27Gyy078NbEwLmtm8mQh
EYbmyZb/QJrB6gR//GC1SGntMHfljwL83MZcpJ72pb14wcHstsGt8N203nHIZAZg
bXTkS877KqjPOSKrkQ42YMi/A+aon170S3LESWZtji1stJV6mNCLMcInfdoRlBqz
Fl05Tp+1q23xNcAHM7sfvQk6fb6eWTCJiVi3w9SplBGTfrZilHwmCcXMqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgvfa/m9XWE9KhmM+QofmfJWKaqMB8GA1UdIwQY
MBaAFMqsxP67SHmW1O4B1TsR+EIDyoNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83MWIyYWItMTU3ZS00ODIwLWE1OGIt
YTdlZGM0Yzk5OTQ3LzEveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83MWIyYWItMTU3ZS00ODIwLWE1OGItYTdlZGM0Yzk5OTQ3
LzEveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHxsbNgV
GIEECsRMp7H/3QlesG2wyEcL1fJKzwfYVchQLowbhwy5Vs8MIwupER5qzavcHRL1
PhidUlB2IJ7tp/T6noMa8KCt16c5BKn2aLDGBkGyZnERNFLVjxkxMSgYZr3VXniQ
4Bd90k96yTz2/r1apG1Paq5RV7WrkclSGKXAu6daCsFEXcc+j6Ecgp1l51cQisWC
WpSN0S85cAfDDJcMeuWWqNd/cnbO146Pi8hhsKchmX3UPxPoNzpnTmmeBDSVvBcv
dWattOudEqDkggtI4VRgNwK5YHYQag6EowV4pR7RJIgH6quslvL7+Lsvx1oxUs/l
j7sk4gF+7+5fqQ==
-----END CERTIFICATE-----
Generated at Mon May 12 03:09:44 2025 by rpki-client