Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
File: yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json)
Hash identifier: X/Zj0lw9+WIv7cBE+RlCXp8Xc+3Q8KWrjhDaoxR76N0=
Subject key identifier: 78:91:AC:E6:32:43:E4:69:79:C7:E0:6E:07:6F:E0:23:11:53:E7:CE
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 0196C8E0038DC1DDDF30BE6B3837210DE551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
Manifest number: 1542
Signing time: Tue 13 May 2025 09:00:46 +0000
Manifest this update: Tue 13 May 2025 09:00:46 +0000
Manifest next update: Wed 14 May 2025 09:00:46 +0000
Files and hashes: 1: Db8DTjUYkYFq1VL2utnrt9ZhoOQ.roa (hash: d9GgydKG9uk/HAxIswAdFFBoSDorEX71FTaOERwLhzg=)
2: RfiogXB75ZZcw60YgsMcLXMGreQ.roa (hash: CxagJfgQ+HRjqYYAQUHG4nzSSm5GU9hHUNpe0/HqHLA=)
3: Vsvw7zSK2cjlfLBPzsEjNibepw0.roa (hash: fMTdJF0J/U/sST/3YzLYOWjYa8T84ONedHLdQ86kfmA=)
4: WTl9wt0Rp1_SP8V72BWndXzvVXk.roa (hash: BI9xuqlMchALIUZfnOAm1MAIdvbV4MZUCOFrf3rfZgA=)
5: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: vxIMKU8+elSHEsO0AhwrZq5Sd557+/0AUOzheZ+pvEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:e0:03:8d:c1:dd:df:30:be:6b:38:37:21:0d:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: May 13 09:00:46 2025 GMT
Not After : May 14 09:00:46 2025 GMT
Subject: CN=7891ace63243e46979c7e06e076fe0231153e7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:55:93:c2:2d:f7:65:4e:78:53:ab:ee:3b:
a6:2f:52:9a:87:a5:46:13:1c:0c:4d:e5:b9:69:92:
e2:2c:7b:cb:ff:b9:a0:96:37:54:16:94:3b:37:34:
7a:03:e9:9f:ee:59:3d:4c:e6:23:ab:e2:a7:c2:82:
94:e2:76:76:41:18:45:0c:8e:42:bf:e1:c4:87:2b:
b5:83:9a:5d:3f:5b:ec:ca:f2:a6:14:61:62:53:ba:
8f:47:45:5e:2b:db:3f:cc:d9:40:c9:3f:ee:d5:e9:
12:1f:f0:ea:e9:d5:b7:8c:d3:02:d9:37:62:f7:af:
83:14:20:ec:90:56:a1:87:d3:e8:b6:2b:ef:7c:49:
ba:1b:d7:5d:04:ca:fc:8b:20:2c:6c:d6:95:e9:85:
d1:6d:c7:b4:64:85:db:e6:89:01:3f:90:ff:7a:71:
c6:a8:27:59:6b:c5:78:54:40:30:30:35:3a:b6:f0:
32:a6:fe:c6:67:37:01:7f:03:11:28:c0:56:b4:d2:
f5:eb:88:7d:e1:bc:6b:16:32:b9:db:30:70:a5:40:
8f:58:d9:9f:6c:71:4b:f4:b5:6d:b1:d4:3f:d5:65:
a8:a2:71:9d:23:7a:ae:2a:b5:7e:74:46:af:3c:70:
b7:b6:e7:7d:18:22:93:f9:3c:3a:d5:d1:f2:20:cc:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:91:AC:E6:32:43:E4:69:79:C7:E0:6E:07:6F:E0:23:11:53:E7:CE
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:87:18:cd:3c:4a:a5:e1:10:59:ab:a0:23:40:67:ef:13:0a:
a1:f4:73:99:4e:e7:d3:d1:bd:ce:e5:31:c5:59:93:77:60:cd:
68:c7:47:e4:20:51:28:52:79:b0:6e:81:d2:b2:52:bc:bd:d3:
72:8d:ae:6b:ee:66:0a:1d:ed:54:d6:03:a0:69:7e:68:63:57:
c0:3b:22:23:a2:85:00:09:d9:7f:32:60:5d:81:76:c5:49:a7:
4c:de:89:ef:b5:5f:a0:ba:99:4c:32:c5:d8:89:88:f3:57:37:
36:5b:92:03:e9:ef:02:22:3f:25:1e:e1:8c:4e:0b:8e:71:06:
17:eb:72:58:20:d6:35:01:2d:9e:7e:57:e8:90:25:10:09:4d:
2a:6f:06:d6:f3:6b:29:97:cd:e3:19:18:75:2e:f8:50:2c:35:
aa:2e:2b:0c:f6:1f:b7:86:d3:6a:f4:13:39:9d:a2:d8:46:d3:
8e:d4:0e:2e:b3:60:a6:a5:5c:23:d9:2b:d5:f6:70:0a:fe:99:
a5:f7:af:8b:1d:b9:54:f2:1f:f3:a2:ae:0d:46:e7:c7:a3:0e:
6e:52:df:f6:68:00:53:37:e8:52:f9:bf:5a:17:cb:7b:1e:41:
48:62:16:c4:f4:e3:9b:30:9e:c0:38:fd:6c:45:b1:64:62:7c:
fc:f1:82:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbI4AONwd3fML5rODchDeVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2I4NmU2NTQ3MGY5OTRkZmE2ZDZmZWU4ZTI2NGRiNjJl
MjRhZjkwHhcNMjUwNTEzMDkwMDQ2WhcNMjUwNTE0MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg3ODkxYWNlNjMyNDNlNDY5NzljN2UwNmUwNzZmZTAyMzExNTNlN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgRVk8It92VOeFOr7jumL1Kah6VG
ExwMTeW5aZLiLHvL/7mgljdUFpQ7NzR6A+mf7lk9TOYjq+KnwoKU4nZ2QRhFDI5C
v+HEhyu1g5pdP1vsyvKmFGFiU7qPR0VeK9s/zNlAyT/u1ekSH/Dq6dW3jNMC2Tdi
96+DFCDskFahh9PotivvfEm6G9ddBMr8iyAsbNaV6YXRbce0ZIXb5okBP5D/enHG
qCdZa8V4VEAwMDU6tvAypv7GZzcBfwMRKMBWtNL164h94bxrFjK52zBwpUCPWNmf
bHFL9LVtsdQ/1WWoonGdI3quKrV+dEavPHC3tud9GCKT+Tw61dHyIMxzxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiRrOYyQ+Rpecfgbgdv4CMRU+fOMB8GA1UdIwQY
MBaAFMo7huZUcPmU36bW/ujiZNti4kr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgt
OTUzMWQyNGUwNjEwLzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgtOTUzMWQyNGUwNjEw
LzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIcYzTxK
peEQWaugI0Bn7xMKofRzmU7n09G9zuUxxVmTd2DNaMdH5CBRKFJ5sG6B0rJSvL3T
co2ua+5mCh3tVNYDoGl+aGNXwDsiI6KFAAnZfzJgXYF2xUmnTN6J77VfoLqZTDLF
2ImI81c3NluSA+nvAiI/JR7hjE4LjnEGF+tyWCDWNQEtnn5X6JAlEAlNKm8G1vNr
KZfN4xkYdS74UCw1qi4rDPYft4bTavQTOZ2i2EbTjtQOLrNgpqVcI9kr1fZwCv6Z
pfevix25VPIf86KuDUbnx6MOblLf9mgAUzfoUvm/WhfLex5BSGIWxPTjmzCewDj9
bEWxZGJ8/PGCTw==
-----END CERTIFICATE-----
Generated at Tue May 13 13:32:19 2025 by rpki-client