Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: a41TOEteg2aAPgP4FJpJUE9wxOFRtg6rdDO6nNUJfZk=
Subject key identifier: B2:3F:D8:20:59:EC:D2:DF:EE:0C:95:FA:A2:88:DF:62:CA:7F:A6:D7
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 0196CA29775A529A106903718068B4DF0E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 14CC
Signing time: Tue 13 May 2025 15:00:37 +0000
Manifest this update: Tue 13 May 2025 15:00:37 +0000
Manifest next update: Wed 14 May 2025 15:00:37 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: eDqDDpLy+Ud72kjyv0uh2r6rUxQgEHjmbR3zjhJFcNk=)
2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:77:5a:52:9a:10:69:03:71:80:68:b4:df:0e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: May 13 15:00:37 2025 GMT
Not After : May 14 15:00:37 2025 GMT
Subject: CN=b23fd82059ecd2dfee0c95faa288df62ca7fa6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:67:46:3d:35:d2:5b:e9:04:40:93:33:93:
ae:62:4f:f0:12:51:2a:fd:26:fa:6d:f4:ae:46:5a:
ea:a2:06:4f:b1:9a:eb:a4:77:43:99:67:22:c6:1d:
dd:b0:d3:28:c3:bf:7c:a0:03:86:0a:76:bd:56:fd:
d1:24:85:50:cb:47:21:5c:06:5d:cb:3f:42:05:9c:
0b:bd:70:41:9d:4c:5d:f7:25:c3:60:23:2d:ee:53:
34:18:00:b5:8c:83:0e:49:d5:ba:a2:64:3a:33:8f:
14:81:4d:4b:09:5c:a5:58:29:40:3c:01:45:0c:c2:
e6:27:fd:3f:70:d1:3e:a0:83:88:75:b8:3c:79:33:
f5:a7:32:8c:9b:11:08:6b:dc:9f:18:cf:ec:01:dd:
a4:52:9c:2b:34:6b:7a:3b:fc:d1:dd:69:1c:e4:13:
51:ed:2a:d8:35:6b:59:bc:dc:d6:f9:a1:2d:3d:5a:
9c:68:3e:0e:58:d1:4f:8f:95:54:ad:0a:18:7b:76:
3e:92:2c:68:6f:30:f1:f6:7d:fc:08:94:0f:74:59:
5b:19:f9:96:f0:34:c5:46:c6:a6:86:db:bd:11:85:
3f:4e:03:82:60:11:02:1a:3f:c4:0d:10:f1:9a:c3:
0a:f9:4f:ec:5a:1b:64:55:ee:c3:71:7a:59:ce:4e:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3F:D8:20:59:EC:D2:DF:EE:0C:95:FA:A2:88:DF:62:CA:7F:A6:D7
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8c:d8:42:a1:bc:3f:50:62:91:4e:52:78:1e:6f:2f:03:84:
66:df:1a:9a:08:a9:b4:1f:f4:c2:64:b3:71:41:13:02:80:3a:
3d:75:8c:d8:1f:a3:c4:14:53:2e:23:97:42:52:f1:9f:35:8d:
9a:3d:f6:69:49:16:2f:d2:61:51:97:49:e1:60:ca:ee:3d:66:
d6:94:c5:90:4b:d9:3e:3b:17:c1:bb:b3:43:b9:67:28:9e:f0:
3c:45:dc:32:62:2f:23:18:33:81:16:d7:d1:2c:44:80:61:c7:
d2:50:77:a6:db:f9:0f:8a:8f:a4:03:53:0b:f9:62:d1:1a:c1:
99:3a:b3:fc:63:eb:61:d4:7e:65:fb:36:0f:5c:65:6a:5f:35:
b2:fa:c5:0e:ea:5c:4e:04:ec:ed:89:a6:b0:47:cc:30:dd:02:
64:45:92:1c:4b:e2:c8:42:cc:6c:81:61:03:50:ee:65:97:df:
f4:8a:99:fa:7e:0b:29:8f:f4:47:a7:03:af:1b:bf:e9:a5:72:
88:b8:fa:5e:97:82:95:f3:22:ed:47:14:24:3d:17:4c:0e:38:
53:27:08:4b:38:f2:f0:8b:5b:4a:58:88:b8:92:d9:b2:78:be:
44:9f:1b:73:b4:81:08:e3:79:c1:0f:1f:d5:2c:02:47:ab:a7:
29:9c:48:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKKXdaUpoQaQNxgGi03w5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjYwNGRjNzg5MmJhOTlmNTM1Mjk2YjkxMDJkOGQ3YTE4
NDQzODgwHhcNMjUwNTEzMTUwMDM3WhcNMjUwNTE0MTUwMDM3WjAzMTEwLwYDVQQD
EyhiMjNmZDgyMDU5ZWNkMmRmZWUwYzk1ZmFhMjg4ZGY2MmNhN2ZhNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn1nRj010lvpBECTM5OuYk/wElEq
/Sb6bfSuRlrqogZPsZrrpHdDmWcixh3dsNMow798oAOGCna9Vv3RJIVQy0chXAZd
yz9CBZwLvXBBnUxd9yXDYCMt7lM0GAC1jIMOSdW6omQ6M48UgU1LCVylWClAPAFF
DMLmJ/0/cNE+oIOIdbg8eTP1pzKMmxEIa9yfGM/sAd2kUpwrNGt6O/zR3Wkc5BNR
7SrYNWtZvNzW+aEtPVqcaD4OWNFPj5VUrQoYe3Y+kixobzDx9n38CJQPdFlbGfmW
8DTFRsamhtu9EYU/TgOCYBECGj/EDRDxmsMK+U/sWhtkVe7DcXpZzk7+UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLI/2CBZ7NLf7gyV+qKI32LKf6bXMB8GA1UdIwQY
MBaAFP/2BNx4krqZ9TUpa5EC2NehhEOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUt
MWMxOTk0OWI5NmI2LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUtMWMxOTk0OWI5NmI2
LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYzYQqG8
P1BikU5SeB5vLwOEZt8amgiptB/0wmSzcUETAoA6PXWM2B+jxBRTLiOXQlLxnzWN
mj32aUkWL9JhUZdJ4WDK7j1m1pTFkEvZPjsXwbuzQ7lnKJ7wPEXcMmIvIxgzgRbX
0SxEgGHH0lB3ptv5D4qPpANTC/li0RrBmTqz/GPrYdR+Zfs2D1xlal81svrFDupc
TgTs7YmmsEfMMN0CZEWSHEviyELMbIFhA1DuZZff9IqZ+n4LKY/0R6cDrxu/6aVy
iLj6XpeClfMi7UcUJD0XTA44UycISzjy8ItbSliIuJLZsni+RJ8bc7SBCON5wQ8f
1SwCR6unKZxINw==
-----END CERTIFICATE-----
Generated at Tue May 13 23:59:13 2025 by rpki-client