Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier: aZxIc0Db9r1lmfzvZFHv5Mgz+nHi3hIinjhswj4gtq8=
Subject key identifier: 9D:0B:2F:38:FE:5F:03:46:DB:C7:95:09:73:88:7C:39:A1:AA:4B:D3
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial: 0196B17C3DE1F7E64DFAB017DB55A7AF361B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 20:00:31 +0000
Manifest this update: Thu 08 May 2025 20:00:31 +0000
Manifest next update: Fri 09 May 2025 20:00:31 +0000
Files and hashes: 1: Xr6lOU6Tyn_u4v5GW5vdi-zMXGM.roa (hash: 80FIdGSyhpgpiEyJdmuxntmRKHZK2fr3v8thq23exzs=)
2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: rSzM8EcEQjvdtcYH3Ne2jUaB7UHc/cB3wj3HHfb8pmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:3d:e1:f7:e6:4d:fa:b0:17:db:55:a7:af:36:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Validity
Not Before: May 8 20:00:31 2025 GMT
Not After : May 9 20:00:31 2025 GMT
Subject: CN=9d0b2f38fe5f0346dbc7950973887c39a1aa4bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:69:41:77:6b:24:7c:46:ed:82:a0:15:a7:
90:f5:a7:9a:64:37:d9:bd:a4:41:c5:8b:76:5c:eb:
58:e6:04:6c:4f:be:cf:70:bb:90:8f:86:b7:c3:b6:
1d:45:b3:d8:6f:9c:cc:42:d0:63:be:41:22:d9:04:
a5:d4:01:da:5d:7b:0d:d5:12:74:67:62:1d:e2:e0:
57:84:5a:bb:12:58:6e:31:9b:65:83:82:78:7f:c7:
3d:79:62:d7:dc:12:aa:92:d8:cc:2f:d9:dd:65:01:
a1:bc:a3:89:c1:d8:47:e4:47:4d:d8:ed:10:5a:a5:
78:27:6b:0c:4d:35:73:7e:d0:fa:b8:24:43:89:82:
95:67:17:b2:4e:38:27:9d:3a:27:f3:93:be:b5:93:
5f:24:65:63:aa:41:b8:ba:ec:6b:92:5c:b7:ca:28:
8c:10:7f:5e:d1:53:ac:13:e2:7a:9e:66:19:3e:73:
0a:48:5d:e9:d1:db:b8:a8:9b:e1:1e:df:95:db:c6:
af:25:64:79:2f:db:cc:9f:b8:43:e9:7b:dd:46:96:
be:fa:f5:60:f0:48:f2:75:2c:9a:34:87:37:91:7b:
72:40:68:20:d4:3b:59:7f:a7:3c:0f:db:a6:32:13:
2e:ec:29:3e:5d:df:c5:03:c9:0e:89:ad:78:7f:b5:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0B:2F:38:FE:5F:03:46:DB:C7:95:09:73:88:7C:39:A1:AA:4B:D3
X509v3 Authority Key Identifier:
keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:33:55:63:d2:60:6b:dc:30:46:ec:65:20:e9:75:38:e0:af:
fe:3e:73:87:21:eb:5b:5b:8f:90:ed:93:30:97:49:18:2a:4a:
39:8d:0c:38:e0:d2:da:16:95:d2:e9:ae:5d:69:7f:4d:ea:10:
a2:2f:13:a4:e4:1f:6a:bc:7f:a4:7d:42:55:4e:79:5b:2f:e5:
74:00:28:af:cf:4e:4b:d5:5c:82:32:82:0d:11:c0:97:46:eb:
76:d9:33:7b:f1:e9:8e:a4:34:2b:a7:0e:94:62:d4:18:f9:3a:
ed:58:1c:6b:cc:a3:63:9d:50:2e:2f:fa:70:4f:54:7a:51:05:
78:1b:50:96:f8:86:38:c7:a4:70:2a:b2:22:71:36:74:44:cc:
a8:f4:5d:fb:02:36:17:48:e1:37:12:60:ed:9a:78:13:4d:48:
21:d2:96:34:27:84:87:68:0d:8b:cd:96:67:3b:69:66:8a:b4:
58:ab:20:a6:b8:8b:f9:13:b3:d2:1c:db:9a:0a:88:45:1f:0e:
8f:d7:63:c2:af:5d:d5:33:fd:9d:49:f8:26:c0:81:b5:4a:25:
72:04:78:29:24:d1:74:fd:63:38:73:ab:6e:2c:60:e0:e7:67:
79:18:70:86:82:38:a2:98:e5:05:b3:25:8f:ba:90:ae:d8:17:
f5:61:17:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxfD3h9+ZN+rAX21WnrzYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMjYwYWFmZWZlMmVlMDcyZTQwNjJlN2JmMWFiOGQ5YzQy
MDg1NjEwHhcNMjUwNTA4MjAwMDMxWhcNMjUwNTA5MjAwMDMxWjAzMTEwLwYDVQQD
Eyg5ZDBiMmYzOGZlNWYwMzQ2ZGJjNzk1MDk3Mzg4N2MzOWExYWE0YmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/hpQXdrJHxG7YKgFaeQ9aeaZDfZ
vaRBxYt2XOtY5gRsT77PcLuQj4a3w7YdRbPYb5zMQtBjvkEi2QSl1AHaXXsN1RJ0
Z2Id4uBXhFq7ElhuMZtlg4J4f8c9eWLX3BKqktjML9ndZQGhvKOJwdhH5EdN2O0Q
WqV4J2sMTTVzftD6uCRDiYKVZxeyTjgnnTon85O+tZNfJGVjqkG4uuxrkly3yiiM
EH9e0VOsE+J6nmYZPnMKSF3p0du4qJvhHt+V28avJWR5L9vMn7hD6XvdRpa++vVg
8EjydSyaNIc3kXtyQGgg1DtZf6c8D9umMhMu7Ck+Xd/FA8kOia14f7UcGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0LLzj+XwNG28eVCXOIfDmhqkvTMB8GA1UdIwQY
MBaAFHMmCq/v4u4HLkBi578auNnEIIVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3lZS3ItX2k3Z2N1UUdMbnZ4cTQyY1FnaFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zNmMyYjgtMTJkZi00NTUyLTlhMWUt
OGFkMGYwNjhkMTYxLzEvY3lZS3ItX2k3Z2N1UUdMbnZ4cTQyY1FnaFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zNmMyYjgtMTJkZi00NTUyLTlhMWUtOGFkMGYwNjhkMTYx
LzEvY3lZS3ItX2k3Z2N1UUdMbnZ4cTQyY1FnaFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDNVY9Jg
a9wwRuxlIOl1OOCv/j5zhyHrW1uPkO2TMJdJGCpKOY0MOODS2haV0umuXWl/TeoQ
oi8TpOQfarx/pH1CVU55Wy/ldAAor89OS9VcgjKCDRHAl0brdtkze/HpjqQ0K6cO
lGLUGPk67Vgca8yjY51QLi/6cE9UelEFeBtQlviGOMekcCqyInE2dETMqPRd+wI2
F0jhNxJg7Zp4E01IIdKWNCeEh2gNi82WZztpZoq0WKsgpriL+ROz0hzbmgqIRR8O
j9djwq9d1TP9nUn4JsCBtUolcgR4KSTRdP1jOHOrbixg4OdneRhwhoI4opjlBbMl
j7qQrtgX9WEXPA==
-----END CERTIFICATE-----
Generated at Thu May 8 22:09:26 2025 by rpki-client