Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
File: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft (raw, json)
Hash identifier: tpwxAn3HcBP/KL130k/c05mWqiMWfBdttfdjFZi3E8I=
Subject key identifier: F4:8C:8D:43:24:41:ED:ED:BB:05:B1:96:D0:BD:BA:D7:F0:80:72:27
Authority key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Certificate issuer: /CN=63e30980305345fd5365b3515e3568f9cee58541
Certificate serial: 0196C34C8DC3597562910EC3437896F70AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 07:01:36 +0000
Manifest this update: Mon 12 May 2025 07:01:36 +0000
Manifest next update: Tue 13 May 2025 07:01:36 +0000
Files and hashes: 1: Hs2TvjBAbChswFTm05pNrXJsCJA.roa (hash: xtJBUOZoNvBaKTOo18EAAqIaZQ4IjdLX9G/viT94FJA=)
2: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl (hash: ocpv9FKdjHz8VyoBMGyA407RZIM7XRBAOBlxkiAvhbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:8d:c3:59:75:62:91:0e:c3:43:78:96:f7:0a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e30980305345fd5365b3515e3568f9cee58541
Validity
Not Before: May 12 07:01:36 2025 GMT
Not After : May 13 07:01:36 2025 GMT
Subject: CN=f48c8d432441ededbb05b196d0bdbad7f0807227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:59:e6:3b:b2:94:43:da:eb:95:74:58:00:
d3:ca:a3:3a:98:80:7f:a8:4d:8f:33:b8:c3:51:87:
8e:0e:e1:33:6f:55:6d:15:0c:bb:7e:14:b3:b3:ac:
aa:f0:74:63:6a:e4:02:13:e4:5b:20:7a:2a:5d:6a:
21:26:cd:12:68:12:fa:70:10:f3:13:39:54:1e:3f:
54:86:16:72:a1:9d:1c:61:9f:05:af:d3:44:78:ff:
3d:41:a9:6c:80:e7:f7:83:36:cc:a3:35:7a:18:21:
95:62:4c:a1:e1:77:2b:0a:be:02:89:14:7e:33:2e:
41:35:ea:b1:4a:6d:d2:79:5e:f6:49:5b:3c:cb:8e:
ec:d6:38:22:2d:6f:01:19:d8:81:d1:c5:39:7e:e7:
a4:8b:06:9c:62:75:87:35:e6:9f:2b:31:ec:41:7d:
bc:18:1d:48:fa:e7:c5:10:ca:57:08:1c:8a:8c:04:
5b:76:16:36:f4:ab:71:4f:a9:f7:b2:4a:4b:fb:5c:
30:57:5c:c2:c9:2f:84:51:64:e8:ee:17:5c:d1:17:
cd:58:df:4f:47:47:87:67:a2:b8:4c:00:e4:4a:35:
38:ee:63:0d:ac:e4:af:b3:94:c8:6a:ed:58:24:a5:
93:b2:b3:21:71:e0:42:e5:d9:19:f6:7b:23:ff:dc:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8C:8D:43:24:41:ED:ED:BB:05:B1:96:D0:BD:BA:D7:F0:80:72:27
X509v3 Authority Key Identifier:
keyid:63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a9:9f:82:29:24:49:13:dc:0c:a0:b1:5a:60:e8:4e:58:69:
1f:d5:08:a8:30:24:91:f1:96:02:0f:f0:93:1f:8a:3d:f5:88:
98:bc:92:50:84:84:27:47:b4:16:ee:1e:ea:10:08:96:f5:9d:
11:08:f7:64:ab:03:cc:d7:bc:ce:0b:ce:56:d1:5c:a3:18:8a:
98:97:be:fb:9a:e3:f4:9b:2f:bf:93:41:02:21:e3:da:4c:57:
76:23:83:91:c0:3a:af:8d:10:00:2f:1c:9d:1b:dd:b6:8e:12:
70:07:18:85:6f:8d:be:2d:d9:c4:34:5b:85:97:54:95:77:82:
b6:f3:23:92:8d:9c:ba:ec:65:d2:4a:5e:8e:a3:e5:fe:eb:fc:
46:2e:97:47:bc:e4:7f:32:1b:a6:63:e1:f2:96:d1:78:c4:b6:
0e:64:50:fd:d4:da:22:fc:46:6b:87:1f:4c:67:4e:d7:06:a6:
bc:51:94:fc:4a:f8:43:5f:b0:51:e9:18:c8:b8:d7:a7:04:a3:
7a:2a:47:53:b0:2b:ce:32:49:51:71:29:10:66:63:b8:d9:92:
60:40:8a:49:42:d8:3c:96:aa:48:ef:07:75:b8:1a:3b:f4:17:
25:6c:20:8f:9e:9f:47:49:f5:cc:76:ce:02:87:cd:e2:57:2c:
1c:d7:a3:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDTI3DWXVikQ7DQ3iW9wrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTMwOTgwMzA1MzQ1ZmQ1MzY1YjM1MTVlMzU2OGY5Y2Vl
NTg1NDEwHhcNMjUwNTEyMDcwMTM2WhcNMjUwNTEzMDcwMTM2WjAzMTEwLwYDVQQD
EyhmNDhjOGQ0MzI0NDFlZGVkYmIwNWIxOTZkMGJkYmFkN2YwODA3MjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsVZ5juylEPa65V0WADTyqM6mIB/
qE2PM7jDUYeODuEzb1VtFQy7fhSzs6yq8HRjauQCE+RbIHoqXWohJs0SaBL6cBDz
EzlUHj9UhhZyoZ0cYZ8Fr9NEeP89QalsgOf3gzbMozV6GCGVYkyh4XcrCr4CiRR+
My5BNeqxSm3SeV72SVs8y47s1jgiLW8BGdiB0cU5fuekiwacYnWHNeafKzHsQX28
GB1I+ufFEMpXCByKjARbdhY29KtxT6n3skpL+1wwV1zCyS+EUWTo7hdc0RfNWN9P
R0eHZ6K4TADkSjU47mMNrOSvs5TIau1YJKWTsrMhceBC5dkZ9nsj/9wa+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSMjUMkQe3tuwWxltC9utfwgHInMB8GA1UdIwQY
MBaAFGPjCYAwU0X9U2WzUV41aPnO5YVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1NSmdEQlRSZjFUWmJOUlhqVm8tYzdsaFVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjU3ODctYzJjOC00MjliLTgxMzct
Y2JmNmMxODQ5YzQ0LzEvWS1NSmdEQlRSZjFUWmJOUlhqVm8tYzdsaFVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYjU3ODctYzJjOC00MjliLTgxMzctY2JmNmMxODQ5YzQ0
LzEvWS1NSmdEQlRSZjFUWmJOUlhqVm8tYzdsaFVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKmfgikk
SRPcDKCxWmDoTlhpH9UIqDAkkfGWAg/wkx+KPfWImLySUISEJ0e0Fu4e6hAIlvWd
EQj3ZKsDzNe8zgvOVtFcoxiKmJe++5rj9Jsvv5NBAiHj2kxXdiODkcA6r40QAC8c
nRvdto4ScAcYhW+Nvi3ZxDRbhZdUlXeCtvMjko2cuuxl0kpejqPl/uv8Ri6XR7zk
fzIbpmPh8pbReMS2DmRQ/dTaIvxGa4cfTGdO1wamvFGU/Er4Q1+wUekYyLjXpwSj
eipHU7ArzjJJUXEpEGZjuNmSYECKSULYPJaqSO8HdbgaO/QXJWwgj56fR0n1zHbO
AofN4lcsHNejDw==
-----END CERTIFICATE-----
Generated at Mon May 12 11:11:13 2025 by rpki-client