Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: iQsr8fqroKAdDEiIXrNlchDKbNWDFn33Li/FHhlIbcA=
Subject key identifier: 52:F2:33:36:FD:F8:BB:5A:9A:93:FB:39:F3:69:A2:26:74:A4:9A:76
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 0196C0141FD992DB53286ECCD968F11CBA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 0642
Signing time: Sun 11 May 2025 16:01:06 +0000
Manifest this update: Sun 11 May 2025 16:01:06 +0000
Manifest next update: Mon 12 May 2025 16:01:06 +0000
Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: 7gNMTJbMAhnvOHW+r5g0HxW3beidv4GI59T783O8cMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:1f:d9:92:db:53:28:6e:cc:d9:68:f1:1c:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: May 11 16:01:06 2025 GMT
Not After : May 12 16:01:06 2025 GMT
Subject: CN=52f23336fdf8bb5a9a93fb39f369a22674a49a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:f1:f7:6e:af:36:94:23:01:07:90:f1:df:
7f:e0:62:16:04:01:60:38:bc:5c:cf:cf:4f:98:bd:
7c:d7:11:a4:f6:09:c9:3c:2f:18:52:00:be:c1:b3:
de:71:99:23:bf:97:3e:f4:63:25:71:5c:e7:e6:0c:
f0:f3:d7:c1:d1:43:18:33:e6:d4:2d:21:de:61:82:
a0:43:46:94:68:26:80:c2:90:fc:e5:fa:eb:ca:fa:
c1:18:0f:4b:57:3b:32:13:ea:ca:00:6c:32:29:8e:
ad:a9:10:a7:70:5e:35:c2:c9:b2:44:57:c1:f7:cc:
1f:b0:a0:8f:7e:6f:72:4e:bc:96:ab:17:93:76:9f:
84:27:56:44:8a:9d:b2:98:14:07:04:3d:3b:f6:4e:
0c:95:d1:10:e5:76:94:65:fc:2c:f0:48:3c:71:50:
f3:f4:60:79:61:d6:5f:70:cf:6d:ea:af:1d:7a:cb:
9c:25:f6:df:c3:a8:a2:2b:8d:50:90:e3:28:2f:6a:
d9:d9:26:25:d8:bc:c9:4f:4f:35:f7:96:e7:13:c4:
54:e5:0a:74:40:0f:d1:ad:89:df:f1:08:b0:37:39:
cf:f3:e3:3a:d5:f0:27:e5:72:2e:15:6e:87:f5:98:
04:ea:f1:1e:e5:57:82:b3:d8:09:6e:7a:80:ce:40:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F2:33:36:FD:F8:BB:5A:9A:93:FB:39:F3:69:A2:26:74:A4:9A:76
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:4b:55:c6:0a:07:9f:76:76:62:fb:85:5d:ce:95:c1:a9:
a2:61:5d:71:60:84:6f:42:ab:38:47:2a:2e:aa:18:d6:0d:a4:
66:3f:74:a6:44:a4:12:75:6e:36:d7:b5:f2:99:82:ec:79:fa:
1a:ca:3b:25:5d:b9:fc:21:1a:2a:62:1f:67:12:b6:a1:0e:da:
07:3e:ed:ed:92:08:d1:5b:b3:9b:e0:bb:26:7c:1a:c5:c9:8a:
77:d9:2f:9d:7a:80:d7:c8:16:2d:76:ff:d2:72:2a:02:27:d8:
c5:88:aa:f8:14:60:e7:72:58:d1:61:2f:30:e8:70:c1:7c:10:
33:4b:76:f6:72:32:5a:6e:4b:91:ad:03:24:bc:1e:d2:10:f8:
ba:bd:94:d9:16:3c:8c:fb:4b:a8:ca:38:0b:2d:60:43:e5:92:
93:3d:c6:22:56:eb:15:78:2f:86:2b:ec:31:1c:bb:e1:46:f3:
24:af:cc:1a:3d:5e:ad:74:50:b7:5c:76:88:e0:b1:ac:bd:94:
79:a3:5f:ea:dd:f3:38:39:d7:fc:fa:bd:11:b4:72:a3:0d:b5:
43:9a:9a:2a:44:ac:0d:57:b1:a7:f5:97:e9:07:6b:a1:a3:b7:
17:dc:bf:8a:ac:ee:11:e4:bb:e0:bb:8a:32:e6:be:d3:c1:97:
c7:aa:59:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAFB/ZkttTKG7M2WjxHLo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTYwZDRhZTcwZjZmNTU5OTg0Yzc2YjUyMWNlMzc3Y2Mx
ZWU3MjEwHhcNMjUwNTExMTYwMTA2WhcNMjUwNTEyMTYwMTA2WjAzMTEwLwYDVQQD
Eyg1MmYyMzMzNmZkZjhiYjVhOWE5M2ZiMzlmMzY5YTIyNjc0YTQ5YTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuafx926vNpQjAQeQ8d9/4GIWBAFg
OLxcz89PmL181xGk9gnJPC8YUgC+wbPecZkjv5c+9GMlcVzn5gzw89fB0UMYM+bU
LSHeYYKgQ0aUaCaAwpD85frryvrBGA9LVzsyE+rKAGwyKY6tqRCncF41wsmyRFfB
98wfsKCPfm9yTryWqxeTdp+EJ1ZEip2ymBQHBD079k4MldEQ5XaUZfws8Eg8cVDz
9GB5YdZfcM9t6q8desucJfbfw6iiK41QkOMoL2rZ2SYl2LzJT08195bnE8RU5Qp0
QA/RrYnf8QiwNznP8+M61fAn5XIuFW6H9ZgE6vEe5VeCs9gJbnqAzkBeOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLyMzb9+LtampP7OfNpoiZ0pJp2MB8GA1UdIwQY
MBaAFJvmDUrnD29VmYTHa1Ic43fMHuchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQt
Y2M4ODU4NTdmYWYyLzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQtY2M4ODU4NTdmYWYy
LzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanpLVcYK
B592dmL7hV3OlcGpomFdcWCEb0KrOEcqLqoY1g2kZj90pkSkEnVuNte18pmC7Hn6
Gso7JV25/CEaKmIfZxK2oQ7aBz7t7ZII0Vuzm+C7JnwaxcmKd9kvnXqA18gWLXb/
0nIqAifYxYiq+BRg53JY0WEvMOhwwXwQM0t29nIyWm5Lka0DJLwe0hD4ur2U2RY8
jPtLqMo4Cy1gQ+WSkz3GIlbrFXgvhivsMRy74UbzJK/MGj1erXRQt1x2iOCxrL2U
eaNf6t3zODnX/Pq9EbRyow21Q5qaKkSsDVexp/WX6QdroaO3F9y/iqzuEeS74LuK
Mua+08GXx6pZLA==
-----END CERTIFICATE-----
Generated at Sun May 11 20:06:24 2025 by rpki-client