Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
File: yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft (raw, json)
Hash identifier: 2yd2iZ98YWWCOJZLH/TSj1M5wfM8J4Iau5B3SC1b1EU=
Subject key identifier: 60:6A:DE:D5:38:C9:07:85:30:B7:6A:F8:AF:D4:CB:72:3C:3C:99:F3
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Certificate issuer: /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial: 0196C3BA0DCA2EABA83F49C6B9ECD4149C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 09:01:12 +0000
Manifest this update: Mon 12 May 2025 09:01:12 +0000
Manifest next update: Tue 13 May 2025 09:01:12 +0000
Files and hashes: 1: pYoc9X1YFz8YYR89i5sgiEjfdJw.roa (hash: sFvU0iwBwXOnCyH6HrRHLCBIGEqrilg6LM2sI9y67eU=)
2: yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl (hash: kvfMOfBZWQKCWbBOCrMQ1qK/IKrTCyeVF3AB0hAj+co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:ba:0d:ca:2e:ab:a8:3f:49:c6:b9:ec:d4:14:9c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Validity
Not Before: May 12 09:01:12 2025 GMT
Not After : May 13 09:01:12 2025 GMT
Subject: CN=606aded538c9078530b76af8afd4cb723c3c99f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:14:22:77:59:6c:af:d0:61:0d:65:fd:cd:
28:05:bb:1f:89:42:f4:8c:3b:2e:73:65:61:a1:25:
69:1b:9d:31:a9:ca:a0:d8:d7:e8:bc:a9:8f:02:70:
47:c2:0d:31:a5:72:ea:ce:35:8d:9b:a8:b1:c8:26:
e4:0e:ea:4f:ec:4e:0c:10:8b:aa:79:d0:a8:31:d2:
b5:b7:3f:27:b6:2f:b6:e4:ff:45:f8:50:94:b5:6a:
98:01:01:3c:24:90:9e:6b:f2:06:00:cf:49:ef:8b:
4b:63:a8:63:36:88:01:7b:ff:1e:af:d9:e5:eb:b7:
4b:5a:0c:ef:38:1a:ee:75:e0:2f:f5:19:f1:e0:cf:
7c:ed:86:d2:d4:11:f3:70:b5:05:76:68:71:e6:0a:
1f:52:bc:48:93:84:ec:52:c4:89:6c:c8:7b:96:23:
f6:eb:b0:a1:a0:7b:63:33:aa:5a:8e:3b:19:70:00:
04:18:29:32:9d:83:79:99:b7:c9:60:02:9c:a3:fc:
ce:bb:25:44:0f:f3:81:5d:3c:78:6c:a9:3e:d1:3b:
1e:68:47:6d:33:a1:a9:13:7e:b6:4d:15:b5:f8:69:
e0:f2:9a:11:18:a9:4e:71:1d:6a:be:f8:7f:51:c1:
3d:68:d6:84:f0:56:be:08:79:65:e7:98:09:b4:f5:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6A:DE:D5:38:C9:07:85:30:B7:6A:F8:AF:D4:CB:72:3C:3C:99:F3
X509v3 Authority Key Identifier:
keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b4:20:e7:1d:4b:26:1c:bf:57:0c:4d:1a:b1:49:3e:8a:09:
a4:e9:4d:06:3a:45:01:f7:0a:38:73:7c:13:5b:10:2d:4f:8e:
30:e3:7c:e4:e8:28:0f:88:58:fc:24:7b:f1:75:89:62:9b:01:
d2:01:3e:91:15:a4:99:f4:4c:1c:4a:ab:3f:59:71:d9:21:a2:
4a:8f:14:fc:ea:09:73:89:86:ef:c6:3c:77:8c:f8:b8:f3:78:
34:b1:13:48:88:4a:53:f6:ee:9e:59:f0:e8:2a:f3:97:c6:bd:
5e:ea:f2:2c:26:ff:11:1a:dd:01:79:5c:ca:01:a1:30:42:84:
0c:be:11:10:ca:88:e1:b8:dc:72:91:ed:4c:2a:19:92:35:68:
4a:d6:93:cd:29:81:21:e5:69:77:af:2c:d1:81:16:2b:da:a5:
79:54:b0:35:f2:93:82:fe:fa:12:7e:4c:92:83:d8:d9:3c:5a:
30:66:c4:a8:26:a3:0a:46:e5:f6:1a:5f:2c:61:8c:b7:bd:ba:
3a:4c:92:ea:17:cc:4b:2e:e7:aa:fb:97:8e:29:e1:94:c7:9d:
86:54:4f:91:c3:d7:8c:b0:44:98:1d:d6:9c:f3:0f:50:39:24:
3b:34:f3:6b:e9:d2:a5:71:e0:2d:9b:6b:6b:7c:91:29:eb:9f:
14:62:01:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDug3KLquoP0nGuezUFJw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMmE0OWZiYTE0OWUxYTFiMTMxMzliZDAxNjAxYzg2Y2Qy
OTU4YTUwHhcNMjUwNTEyMDkwMTEyWhcNMjUwNTEzMDkwMTEyWjAzMTEwLwYDVQQD
Eyg2MDZhZGVkNTM4YzkwNzg1MzBiNzZhZjhhZmQ0Y2I3MjNjM2M5OWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp34UIndZbK/QYQ1l/c0oBbsfiUL0
jDsuc2VhoSVpG50xqcqg2NfovKmPAnBHwg0xpXLqzjWNm6ixyCbkDupP7E4MEIuq
edCoMdK1tz8nti+25P9F+FCUtWqYAQE8JJCea/IGAM9J74tLY6hjNogBe/8er9nl
67dLWgzvOBrudeAv9Rnx4M987YbS1BHzcLUFdmhx5gofUrxIk4TsUsSJbMh7liP2
67ChoHtjM6pajjsZcAAEGCkynYN5mbfJYAKco/zOuyVED/OBXTx4bKk+0TseaEdt
M6GpE362TRW1+Gng8poRGKlOcR1qvvh/UcE9aNaE8Fa+CHll55gJtPXFcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBq3tU4yQeFMLdq+K/Uy3I8PJnzMB8GA1UdIwQY
MBaAFMsqSfuhSeGhsTE5vQFgHIbNKVilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlwSi02Rko0YUd4TVRtOUFXQWNoczBwV0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MTAyM2MtMjE0Ny00OWI5LWIyNjct
NjJkNGExZjFhNTBjLzEveXlwSi02Rko0YUd4TVRtOUFXQWNoczBwV0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85MTAyM2MtMjE0Ny00OWI5LWIyNjctNjJkNGExZjFhNTBj
LzEveXlwSi02Rko0YUd4TVRtOUFXQWNoczBwV0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7Qg5x1L
Jhy/VwxNGrFJPooJpOlNBjpFAfcKOHN8E1sQLU+OMON85OgoD4hY/CR78XWJYpsB
0gE+kRWkmfRMHEqrP1lx2SGiSo8U/OoJc4mG78Y8d4z4uPN4NLETSIhKU/bunlnw
6Crzl8a9XuryLCb/ERrdAXlcygGhMEKEDL4REMqI4bjccpHtTCoZkjVoStaTzSmB
IeVpd68s0YEWK9qleVSwNfKTgv76En5MkoPY2TxaMGbEqCajCkbl9hpfLGGMt726
OkyS6hfMSy7nqvuXjinhlMedhlRPkcPXjLBEmB3WnPMPUDkkOzTza+nSpXHgLZtr
a3yRKeufFGIBNQ==
-----END CERTIFICATE-----
Generated at Mon May 12 11:01:10 2025 by rpki-client