Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json)
Hash identifier: tbgn7FY232S4vubFEKDy4lyKjRcksFF7cFLeTs/8rrg=
Subject key identifier: DC:85:58:E7:EC:2D:8E:4B:6B:C3:09:75:5E:E8:F8:24:B1:64:1E:BB
Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74
Certificate serial: 0196C3B9241F7625FDC5E170DE872A6399D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
Manifest number: 02C5
Signing time: Mon 12 May 2025 09:00:12 +0000
Manifest this update: Mon 12 May 2025 09:00:12 +0000
Manifest next update: Tue 13 May 2025 09:00:12 +0000
Files and hashes: 1: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: IA0U4Bx5tKP+naUMX7/lu/qm6OajmhJ8A5ByIx9hZ+M=)
2: sqHnWw_DTKSgc5zNQG4iPku5PBw.roa (hash: w6R1JeMOp3KdC2WjMvic0T8urUWBQwEZKMQrdXTts0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:24:1f:76:25:fd:c5:e1:70:de:87:2a:63:99:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Validity
Not Before: May 12 09:00:12 2025 GMT
Not After : May 13 09:00:12 2025 GMT
Subject: CN=dc8558e7ec2d8e4b6bc309755ee8f824b1641ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:e5:ff:a0:5d:b8:ea:5d:a6:56:0c:f8:98:
b3:84:a5:65:15:06:7e:42:1d:56:c7:d7:5e:36:f8:
21:1d:ec:ff:ee:f2:2d:1b:2f:9e:5a:56:5b:2b:99:
48:8f:1d:1f:d2:d0:ff:e0:ce:34:9b:d2:67:0e:07:
b3:a9:9e:82:04:b5:2f:05:20:a1:06:da:74:6f:3c:
f3:a1:9b:16:0d:fe:f3:76:c8:72:43:93:55:bf:37:
c4:95:f1:c2:6d:65:e8:87:f4:24:db:61:b8:75:1a:
82:6e:ae:92:bd:31:b0:8c:a7:01:3c:96:17:7b:aa:
24:a8:ad:54:b7:58:80:cd:bc:f2:91:91:1f:60:40:
13:28:c2:61:31:50:48:01:19:2a:85:95:ff:c0:ea:
10:7b:f5:fc:1c:c5:00:de:49:a6:62:1e:a0:1b:9d:
89:77:4d:cb:9a:0e:c0:02:ee:bc:7a:e3:04:02:30:
30:07:14:00:89:13:8e:ed:fa:97:74:4c:a9:06:f7:
61:59:82:4e:3c:9a:65:73:2f:17:fd:8b:d0:91:8c:
26:e4:16:28:e4:ba:54:73:ec:62:7b:02:9d:3d:4c:
1f:4f:0b:e2:9d:6e:6e:74:4d:dc:fc:d9:20:0b:53:
cd:6c:88:c4:35:50:e0:2e:9a:28:73:8f:dd:7e:3d:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:58:E7:EC:2D:8E:4B:6B:C3:09:75:5E:E8:F8:24:B1:64:1E:BB
X509v3 Authority Key Identifier:
keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ae:78:1a:00:60:1b:ad:93:4d:33:64:d8:c6:48:25:23:f4:
e1:d2:53:85:d9:cd:1c:de:b7:af:ad:6e:7d:d1:f7:fd:4d:11:
41:05:15:b0:a6:54:9a:9d:71:85:61:12:f5:a8:b7:62:ae:46:
77:78:78:5d:e9:36:48:de:2d:cb:a2:fc:ba:35:c5:23:b5:b1:
c8:dc:52:e8:80:c4:81:d0:29:e0:95:40:8f:e2:e5:07:41:ea:
a8:cd:a7:66:24:03:54:5e:db:38:35:89:91:b2:1f:bc:3e:12:
c1:b6:8f:0e:29:ca:ea:a7:43:c0:37:6b:ad:9b:0a:16:0b:f1:
9d:6e:40:9d:59:f4:a0:cc:75:06:e9:e8:ac:b0:ef:0e:98:12:
f8:de:99:fb:cb:02:7b:44:25:52:2f:83:89:9a:1c:28:80:ec:
81:ad:6f:d5:44:d4:d2:1b:1f:2c:cd:6c:fa:8d:01:8e:dc:02:
8f:37:ac:6e:e6:26:e6:05:ca:b9:f2:34:1f:9b:6e:79:d0:4a:
fc:68:36:4b:09:a5:62:8b:37:3e:5e:3e:35:fb:7d:59:c2:00:
b6:7d:62:8b:c5:2c:b3:4b:e3:61:0c:bc:9b:71:d9:86:4a:98:
15:04:f1:84:5a:92:0c:bc:40:2f:b3:38:62:66:cd:0e:74:76:
93:7a:6b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDuSQfdiX9xeFw3ocqY5nYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjE2NWJmYjIzZGRhMWY5ODcwYjI0MTdmNDk2NDg1ZTZj
MDhhNzQwHhcNMjUwNTEyMDkwMDEyWhcNMjUwNTEzMDkwMDEyWjAzMTEwLwYDVQQD
EyhkYzg1NThlN2VjMmQ4ZTRiNmJjMzA5NzU1ZWU4ZjgyNGIxNjQxZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfHl/6BduOpdplYM+JizhKVlFQZ+
Qh1Wx9deNvghHez/7vItGy+eWlZbK5lIjx0f0tD/4M40m9JnDgezqZ6CBLUvBSCh
Btp0bzzzoZsWDf7zdshyQ5NVvzfElfHCbWXoh/Qk22G4dRqCbq6SvTGwjKcBPJYX
e6okqK1Ut1iAzbzykZEfYEATKMJhMVBIARkqhZX/wOoQe/X8HMUA3kmmYh6gG52J
d03Lmg7AAu68euMEAjAwBxQAiROO7fqXdEypBvdhWYJOPJplcy8X/YvQkYwm5BYo
5LpUc+xiewKdPUwfTwvinW5udE3c/NkgC1PNbIjENVDgLpooc4/dfj2YBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyFWOfsLY5La8MJdV7o+CSxZB67MB8GA1UdIwQY
MBaAFGJhZb+yPdofmHCyQX9JZIXmwIp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAt
NDYwZmI0YmFjMmRiLzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAtNDYwZmI0YmFjMmRi
LzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApK54GgBg
G62TTTNk2MZIJSP04dJThdnNHN63r61ufdH3/U0RQQUVsKZUmp1xhWES9ai3Yq5G
d3h4Xek2SN4ty6L8ujXFI7WxyNxS6IDEgdAp4JVAj+LlB0HqqM2nZiQDVF7bODWJ
kbIfvD4SwbaPDinK6qdDwDdrrZsKFgvxnW5AnVn0oMx1BunorLDvDpgS+N6Z+8sC
e0QlUi+DiZocKIDsga1v1UTU0hsfLM1s+o0BjtwCjzesbuYm5gXKufI0H5tuedBK
/Gg2SwmlYos3Pl4+Nft9WcIAtn1ii8Uss0vjYQy8m3HZhkqYFQTxhFqSDLxAL7M4
YmbNDnR2k3prmg==
-----END CERTIFICATE-----
Generated at Mon May 12 17:59:41 2025 by rpki-client