Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: fP0g7eWTyWEY1Ra+sGf5z+ZTSHyTlRTVVpa0NPWUEVU=
Subject key identifier: CA:58:00:A6:03:A2:FA:26:71:52:AD:1B:AD:EF:81:E9:C3:EE:1B:5B
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 0196B7477DB615DE5FFB6C8AD52E865C66E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0A23
Signing time: Fri 09 May 2025 23:00:37 +0000
Manifest this update: Fri 09 May 2025 23:00:37 +0000
Manifest next update: Sat 10 May 2025 23:00:37 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: oFRIO6nRCS32rkmL/eHR4WX2LzpnC9gPgjo3RAU7Qt8=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:7d:b6:15:de:5f:fb:6c:8a:d5:2e:86:5c:66:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: May 9 23:00:37 2025 GMT
Not After : May 10 23:00:37 2025 GMT
Subject: CN=ca5800a603a2fa267152ad1badef81e9c3ee1b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:56:58:d7:30:bb:95:89:03:eb:74:98:b7:
93:6c:bb:51:e4:0c:2b:e4:3b:a5:f5:af:db:65:70:
ae:2f:6e:c9:6a:7d:3d:35:2b:af:0d:73:57:a6:2f:
1b:dc:d0:e8:57:f6:97:e6:b3:40:d3:5a:d2:08:14:
28:36:6b:50:e9:39:2f:73:2b:22:30:cd:be:f9:1d:
51:ce:49:50:74:22:e8:cf:4b:6a:de:05:4c:9f:17:
00:21:98:82:8c:27:f4:54:6f:f6:81:12:d9:45:1e:
bd:94:c5:13:45:c6:cc:8c:77:ce:ca:7d:24:6a:52:
db:da:fa:0a:1f:81:8b:54:46:ce:70:3a:fd:9f:de:
81:60:9f:21:cc:7c:5d:46:ae:f1:6e:18:d2:00:ac:
f5:45:cc:b0:f5:7b:3d:77:7d:9e:03:70:c8:bf:75:
44:3b:14:48:f4:9b:a1:64:17:d2:52:55:58:51:50:
e4:1c:cf:e7:d9:c7:53:ef:06:e6:62:89:18:7f:3d:
66:33:4c:35:e2:cd:49:8e:fe:39:aa:64:36:c9:80:
48:ea:52:5e:d1:34:55:2d:b1:3a:d9:af:68:ad:39:
f1:6c:34:ee:47:40:2a:17:a6:28:ac:0c:85:06:99:
ee:57:c5:7d:63:fc:6b:7b:55:07:5b:a9:cb:16:67:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:00:A6:03:A2:FA:26:71:52:AD:1B:AD:EF:81:E9:C3:EE:1B:5B
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9f:7d:3d:30:6b:f8:d0:b2:18:93:c3:68:c6:34:5b:20:bc:
45:5f:4f:de:aa:3e:ed:15:c0:5e:ae:50:e0:8b:97:9a:60:d1:
14:b9:41:96:6d:64:b0:25:06:d3:14:32:fb:74:63:19:de:b4:
25:c3:16:4f:67:82:bc:7e:a6:3b:ad:eb:9c:a5:09:a4:64:75:
da:fe:e7:dc:97:28:21:71:3d:3e:0b:d6:5f:53:d0:a4:c3:41:
cc:39:0b:92:b5:23:3e:74:26:3a:00:aa:f4:5c:50:c1:05:b0:
ab:b9:fd:03:18:10:db:f3:e8:c6:68:f7:f7:fb:41:a7:00:34:
41:08:e2:24:f9:f9:ee:61:1b:4d:a2:fb:33:82:be:87:02:21:
f8:4a:4c:35:c7:ea:bd:26:16:b5:8e:92:2b:8f:de:2b:16:5e:
6e:5e:c2:e2:c0:48:91:a8:2d:f9:b1:5e:0e:04:cb:15:24:08:
b9:af:2c:3d:35:0a:ea:d6:a1:1a:4f:5d:7d:25:9a:88:2e:a9:
55:52:1f:c6:57:7d:ad:ab:91:25:75:36:09:52:2f:c9:ea:91:
12:fd:56:08:d4:5c:d2:11:be:e3:a8:83:dd:1a:c3:92:60:b3:
02:68:5c:00:7a:0c:6d:ed:e4:d7:3d:ca:0e:bc:5d:94:25:3c:
32:a4:58:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3R322Fd5f+2yK1S6GXGbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmZjNzcxZjJlZDU4ZmMyODIxZWU3NGNkYTg1M2ZkMmUz
NmM0MjgwHhcNMjUwNTA5MjMwMDM3WhcNMjUwNTEwMjMwMDM3WjAzMTEwLwYDVQQD
EyhjYTU4MDBhNjAzYTJmYTI2NzE1MmFkMWJhZGVmODFlOWMzZWUxYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwRWWNcwu5WJA+t0mLeTbLtR5Awr
5Dul9a/bZXCuL27Jan09NSuvDXNXpi8b3NDoV/aX5rNA01rSCBQoNmtQ6Tkvcysi
MM2++R1RzklQdCLoz0tq3gVMnxcAIZiCjCf0VG/2gRLZRR69lMUTRcbMjHfOyn0k
alLb2voKH4GLVEbOcDr9n96BYJ8hzHxdRq7xbhjSAKz1Rcyw9Xs9d32eA3DIv3VE
OxRI9JuhZBfSUlVYUVDkHM/n2cdT7wbmYokYfz1mM0w14s1Jjv45qmQ2yYBI6lJe
0TRVLbE62a9orTnxbDTuR0AqF6YorAyFBpnuV8V9Y/xre1UHW6nLFmdGEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpYAKYDovomcVKtG63vgenD7htbMB8GA1UdIwQY
MBaAFMv/x3Hy7Vj8KCHudM2oU/0uNsQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQt
N2E0MDU0NTUxZmQ0LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQtN2E0MDU0NTUxZmQ0
LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZ99PTBr
+NCyGJPDaMY0WyC8RV9P3qo+7RXAXq5Q4IuXmmDRFLlBlm1ksCUG0xQy+3RjGd60
JcMWT2eCvH6mO63rnKUJpGR12v7n3JcoIXE9PgvWX1PQpMNBzDkLkrUjPnQmOgCq
9FxQwQWwq7n9AxgQ2/Poxmj39/tBpwA0QQjiJPn57mEbTaL7M4K+hwIh+EpMNcfq
vSYWtY6SK4/eKxZebl7C4sBIkagt+bFeDgTLFSQIua8sPTUK6tahGk9dfSWaiC6p
VVIfxld9rauRJXU2CVIvyeqREv1WCNRc0hG+46iD3RrDkmCzAmhcAHoMbe3k1z3K
DrxdlCU8MqRYkA==
-----END CERTIFICATE-----
Generated at Sat May 10 05:15:45 2025 by rpki-client