Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
File: YDe79svKAic6peIbuIjj4exnZ98.mft (raw, json)
Hash identifier: PCMqi4UTceTqszp7YleUyT3J9gkx0/i74jCgy3ZvW4o=
Subject key identifier: B4:C1:E7:2B:0E:39:17:DD:AC:EF:37:DE:92:1C:E8:AC:1E:F8:DA:7F
Authority key identifier: 60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
Certificate issuer: /CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Certificate serial: 0196C15D25E8DCC5DE9CB978FAFCB1FF6CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
Manifest number: 0A57
Signing time: Sun 11 May 2025 22:00:29 +0000
Manifest this update: Sun 11 May 2025 22:00:29 +0000
Manifest next update: Mon 12 May 2025 22:00:29 +0000
Files and hashes: 1: YDe79svKAic6peIbuIjj4exnZ98.crl (hash: nzkoIMD81GWnOHFX5VZ37a+6Cjp/b9uGgsATngrY9hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:25:e8:dc:c5:de:9c:b9:78:fa:fc:b1:ff:6c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Validity
Not Before: May 11 22:00:29 2025 GMT
Not After : May 12 22:00:29 2025 GMT
Subject: CN=b4c1e72b0e3917ddacef37de921ce8ac1ef8da7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:f0:68:cf:8a:49:3b:a1:50:48:a1:67:f1:
14:24:9a:63:02:8c:2c:7d:07:98:f8:22:06:ce:08:
37:a2:55:57:df:9e:d2:d6:5d:91:ed:d5:ca:87:3c:
c9:98:d0:a4:8f:da:d5:a6:45:70:f6:d9:33:b2:7a:
ff:7d:50:d6:c6:ba:34:71:66:ed:c5:ce:58:bc:39:
37:41:51:0d:de:36:92:5f:3a:e5:ac:95:17:c6:9f:
da:dc:40:fa:3e:58:5c:7b:42:d9:17:f3:2b:68:37:
30:32:df:2f:98:62:44:ab:ff:5b:f7:10:64:63:90:
da:24:55:d4:8e:b4:b9:1e:1a:b1:2a:c4:68:c9:3a:
13:39:25:68:a1:8a:21:e4:4b:b7:c2:89:5f:fd:45:
49:30:00:49:68:5c:2d:c7:b6:b5:e3:17:55:b6:62:
a3:6d:da:f1:6b:21:02:c7:c7:38:4e:67:d7:86:fe:
c3:44:1a:c0:a8:7e:de:2f:8d:0a:34:90:d1:b8:0d:
50:d3:37:29:27:8e:6f:47:7b:72:e8:6b:e5:eb:7a:
4a:e2:18:80:80:b7:79:f0:df:73:05:c2:d5:d5:b2:
fd:b2:ba:0c:cb:9d:5c:8d:f9:56:c5:ca:a3:ad:72:
2b:c8:05:d5:8f:e9:3e:13:b6:37:ab:d0:22:6f:e8:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:E7:2B:0E:39:17:DD:AC:EF:37:DE:92:1C:E8:AC:1E:F8:DA:7F
X509v3 Authority Key Identifier:
keyid:60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a4:dd:fe:f3:55:84:e0:ee:1a:68:fc:b9:9f:8d:f9:de:36:
ce:0a:d8:9b:4a:3f:ea:b4:7c:b3:ad:a8:69:60:76:1c:f6:36:
a5:19:87:f4:0d:fe:35:f5:22:89:e1:62:e6:ac:f0:63:a5:5f:
e8:65:ed:bf:36:a4:68:b5:c1:1b:98:91:5e:b9:11:eb:2b:1b:
f4:b2:ab:61:00:64:8b:60:e8:1e:fd:1b:1b:88:9a:96:79:a7:
cc:72:6f:7a:eb:a8:7f:ee:9a:e6:e8:12:f2:2d:b1:f3:8c:d1:
49:89:cc:39:d3:a1:4e:30:3b:b6:95:a4:f8:67:c0:ef:60:15:
b0:65:ac:d5:31:04:37:34:a2:70:90:88:53:9d:3f:37:e7:24:
1b:9e:a0:8f:a0:37:23:79:2c:e9:b8:e3:1b:a1:82:5f:c9:d6:
ee:7d:be:cf:ae:55:ab:2f:ff:68:bc:74:67:a8:f7:02:c6:e4:
a0:b4:44:6a:d1:f9:be:a5:78:25:8d:c5:f8:cd:47:f5:f8:61:
17:d9:46:b7:09:60:88:ee:6b:f2:96:d0:dd:8c:ae:cf:31:5f:
5a:23:81:76:45:09:53:d0:16:a0:d5:03:cb:0b:f7:aa:99:af:
7c:33:45:76:13:70:9f:3d:bb:ef:5f:8a:24:7e:c3:7f:f6:39:
5e:3c:b4:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXSXo3MXenLl4+vyx/2zeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzdiYmY2Y2JjYTAyMjczYWE1ZTIxYmI4ODhlM2UxZWM2
NzY3ZGYwHhcNMjUwNTExMjIwMDI5WhcNMjUwNTEyMjIwMDI5WjAzMTEwLwYDVQQD
EyhiNGMxZTcyYjBlMzkxN2RkYWNlZjM3ZGU5MjFjZThhYzFlZjhkYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47LwaM+KSTuhUEihZ/EUJJpjAows
fQeY+CIGzgg3olVX357S1l2R7dXKhzzJmNCkj9rVpkVw9tkzsnr/fVDWxro0cWbt
xc5YvDk3QVEN3jaSXzrlrJUXxp/a3ED6Plhce0LZF/MraDcwMt8vmGJEq/9b9xBk
Y5DaJFXUjrS5HhqxKsRoyToTOSVooYoh5Eu3wolf/UVJMABJaFwtx7a14xdVtmKj
bdrxayECx8c4TmfXhv7DRBrAqH7eL40KNJDRuA1Q0zcpJ45vR3ty6Gvl63pK4hiA
gLd58N9zBcLV1bL9sroMy51cjflWxcqjrXIryAXVj+k+E7Y3q9Aib+jqTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTB5ysOORfdrO833pIc6Kwe+Np/MB8GA1UdIwQY
MBaAFGA3u/bLygInOqXiG7iI4+HsZ2ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURlNzlzdktBaWM2cGVJYnVJamo0ZXhuWjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82NGUyMGMtOGY2MS00MzUxLTgwNzct
ZmMzYjNlMTExNjFkLzEvWURlNzlzdktBaWM2cGVJYnVJamo0ZXhuWjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82NGUyMGMtOGY2MS00MzUxLTgwNzctZmMzYjNlMTExNjFk
LzEvWURlNzlzdktBaWM2cGVJYnVJamo0ZXhuWjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6Td/vNV
hODuGmj8uZ+N+d42zgrYm0o/6rR8s62oaWB2HPY2pRmH9A3+NfUiieFi5qzwY6Vf
6GXtvzakaLXBG5iRXrkR6ysb9LKrYQBki2DoHv0bG4ialnmnzHJveuuof+6a5ugS
8i2x84zRSYnMOdOhTjA7tpWk+GfA72AVsGWs1TEENzSicJCIU50/N+ckG56gj6A3
I3ks6bjjG6GCX8nW7n2+z65Vqy//aLx0Z6j3AsbkoLREatH5vqV4JY3F+M1H9fhh
F9lGtwlgiO5r8pbQ3YyuzzFfWiOBdkUJU9AWoNUDywv3qpmvfDNFdhNwnz2771+K
JH7Df/Y5Xjy0BA==
-----END CERTIFICATE-----
Generated at Mon May 12 04:05:29 2025 by rpki-client