
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
File: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft (raw, json)
Hash identifier: zskRJn1wP4fily/nmucrm5lja7QwJYqXHck8xMQUDto=
Subject key identifier: 23:9D:0D:1A:AE:7D:93:D8:61:90:4A:5A:B4:6B:6C:CF:8C:62:6D:55
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Certificate issuer: /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial: 0196C2DDEF23538BB23EF166A1F18B97487E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 05:00:46 +0000
Manifest this update: Mon 12 May 2025 05:00:46 +0000
Manifest next update: Tue 13 May 2025 05:00:46 +0000
Files and hashes: 1: BoZqZz072WMffBg633aOURbd2Lg.roa (hash: b9zcHNJaQ+Hj+ANj7i08VVN5oo2tzosCmEXhBWweaRk=)
2: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl (hash: Y3cDSL2gId5sS/MUi+PSbVsYuM2FTqhtc0n2XTHaVX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:ef:23:53:8b:b2:3e:f1:66:a1:f1:8b:97:48:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Validity
Not Before: May 12 05:00:46 2025 GMT
Not After : May 13 05:00:46 2025 GMT
Subject: CN=239d0d1aae7d93d861904a5ab46b6ccf8c626d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:11:30:71:25:b1:90:94:4c:08:4f:79:dd:
fb:f8:ad:de:e9:e1:b1:ce:05:41:40:0e:f1:7b:a7:
e3:a7:5f:21:37:16:8b:05:80:c8:8d:e5:df:7f:6a:
ee:70:f7:95:2d:41:93:c0:99:6e:5c:fb:29:65:58:
46:d2:81:60:c9:ff:f5:2a:3d:1f:a5:b8:d3:2e:16:
86:a6:05:ed:63:68:83:d8:17:62:bf:8e:53:b5:83:
99:92:87:48:e2:ae:f8:90:fd:74:4f:4d:ce:78:e0:
b0:aa:e8:53:a4:bb:6f:8a:aa:80:b2:52:31:85:8e:
e2:34:20:16:fc:25:2e:dd:1a:96:9b:d5:b6:c7:6d:
5a:ca:90:31:f4:a1:f1:99:61:f5:11:f8:55:5e:e4:
f7:65:27:43:83:2c:89:80:41:74:d9:10:cb:89:cc:
40:5d:17:13:63:c4:7e:ed:4b:f8:23:e4:66:03:77:
18:ae:98:3e:7a:a9:d3:27:f5:40:cc:99:9c:15:3b:
3d:65:ec:49:12:19:61:f1:da:4e:11:33:85:95:2a:
6c:ac:7a:44:d9:c8:35:ab:18:aa:94:c5:6a:42:a3:
ab:d4:a3:b9:c1:51:0c:f3:06:a3:6d:d6:77:ca:57:
e4:d9:42:f1:57:80:be:00:3d:13:de:88:6c:9c:a4:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9D:0D:1A:AE:7D:93:D8:61:90:4A:5A:B4:6B:6C:CF:8C:62:6D:55
X509v3 Authority Key Identifier:
keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:56:51:6a:9d:5a:68:2a:ad:71:04:74:8f:18:13:1b:22:a0:
c3:3f:c5:1c:a9:07:fe:92:94:e0:8e:35:9d:11:5f:86:58:b0:
d2:a3:46:d9:43:0a:23:26:21:bd:b2:36:04:4c:8b:09:43:1c:
77:91:b2:e4:0f:ac:35:ea:63:2a:31:09:4a:fa:ae:ff:57:2e:
53:af:8d:8a:37:5e:55:ed:8e:96:9d:f4:ff:97:34:f2:44:0e:
d6:db:cc:ef:85:48:fd:b7:91:cc:16:19:86:d3:8d:85:04:6f:
6f:5e:79:34:fd:a0:85:17:11:a8:75:55:ed:ff:19:98:65:83:
8e:a9:68:23:26:d7:df:29:22:cb:40:5e:67:d0:b2:ce:43:07:
60:10:17:2b:b6:a2:a5:57:e6:02:51:7b:49:9a:15:90:16:fe:
ed:ca:82:0b:fd:46:05:55:2c:68:17:8e:f7:65:ae:0f:83:61:
47:46:60:ac:bc:79:83:3b:e9:76:4e:40:80:5c:ab:9b:7e:93:
6e:6a:58:8b:05:4a:92:da:72:87:73:72:9c:a7:5d:1c:61:d2:
75:9f:a2:69:57:86:03:8a:05:b2:16:24:07:95:f2:be:23:81:
c0:39:32:81:a4:6b:da:45:86:b4:01:0e:c6:a4:03:13:1e:f1:
f1:e9:04:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbC3e8jU4uyPvFmofGLl0h+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDI1NmVkMzhmYjFlOTY5NDQ5MjZkYjRjNjZjNGQwODhh
Y2ZiZDYwHhcNMjUwNTEyMDUwMDQ2WhcNMjUwNTEzMDUwMDQ2WjAzMTEwLwYDVQQD
EygyMzlkMGQxYWFlN2Q5M2Q4NjE5MDRhNWFiNDZiNmNjZjhjNjI2ZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuwRMHElsZCUTAhPed37+K3e6eGx
zgVBQA7xe6fjp18hNxaLBYDIjeXff2rucPeVLUGTwJluXPspZVhG0oFgyf/1Kj0f
pbjTLhaGpgXtY2iD2Bdiv45TtYOZkodI4q74kP10T03OeOCwquhTpLtviqqAslIx
hY7iNCAW/CUu3RqWm9W2x21aypAx9KHxmWH1EfhVXuT3ZSdDgyyJgEF02RDLicxA
XRcTY8R+7Uv4I+RmA3cYrpg+eqnTJ/VAzJmcFTs9ZexJEhlh8dpOETOFlSpsrHpE
2cg1qxiqlMVqQqOr1KO5wVEM8wajbdZ3ylfk2ULxV4C+AD0T3ohsnKQnHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOdDRqufZPYYZBKWrRrbM+MYm1VMB8GA1UdIwQY
MBaAFGFCVu04+x6WlEkm20xmxNCIrPvWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEt
NjhiYTZjNTRlZjlhLzEvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEtNjhiYTZjNTRlZjlh
LzEvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1ZRap1a
aCqtcQR0jxgTGyKgwz/FHKkH/pKU4I41nRFfhliw0qNG2UMKIyYhvbI2BEyLCUMc
d5Gy5A+sNepjKjEJSvqu/1cuU6+NijdeVe2Olp30/5c08kQO1tvM74VI/beRzBYZ
htONhQRvb155NP2ghRcRqHVV7f8ZmGWDjqloIybX3ykiy0BeZ9CyzkMHYBAXK7ai
pVfmAlF7SZoVkBb+7cqCC/1GBVUsaBeO92WuD4NhR0ZgrLx5gzvpdk5AgFyrm36T
bmpYiwVKktpyh3NynKddHGHSdZ+iaVeGA4oFshYkB5XyviOBwDkygaRr2kWGtAEO
xqQDEx7x8ekEKw==
-----END CERTIFICATE-----
Generated at Mon May 12 12:22:11 2025 by rpki-client