Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: XG+TSHTdagkNMG6DSZ518Opsxaiolj7UVs6FGgsAoJE=
Subject key identifier: 85:B5:61:50:41:EF:3F:28:7F:8B:78:46:9F:41:95:08:00:D5:5A:0F
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 0196BD493DA5513731DABE6FAC0B57081606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 0369
Signing time: Sun 11 May 2025 03:00:15 +0000
Manifest this update: Sun 11 May 2025 03:00:15 +0000
Manifest next update: Mon 12 May 2025 03:00:15 +0000
Files and hashes: 1: nGn_W0gSwBrRPKhat5R4cEQoqhY.roa (hash: XVU8sWeUw+6VazizBI8PMCmNF85+iRw+0SNowFdIf08=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: j6hraLX/HF8p8NEOAa4dVSLkquH5PlHWv8Kyn9/+YlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:3d:a5:51:37:31:da:be:6f:ac:0b:57:08:16:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: May 11 03:00:15 2025 GMT
Not After : May 12 03:00:15 2025 GMT
Subject: CN=85b5615041ef3f287f8b78469f41950800d55a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:69:29:99:f6:04:85:9a:37:2a:b5:1d:63:
c6:9b:1e:21:ea:f3:12:f6:ed:36:52:bc:f8:b3:97:
21:88:c8:6f:ce:52:37:fb:81:6e:54:27:e7:62:36:
fd:fd:03:02:7e:0e:23:5b:6f:be:08:50:ff:a2:f5:
9c:d9:c9:db:f8:12:0a:41:b2:9f:61:e5:5a:10:f4:
bc:7f:30:d3:94:61:8e:46:47:71:56:82:30:57:ba:
ae:a5:30:e2:eb:09:6e:28:0a:27:16:b5:e7:87:9e:
f5:cf:e7:72:b0:28:9a:a5:7b:71:06:e6:69:fb:72:
e8:93:ea:7a:32:f9:9e:57:53:99:c2:7c:ea:48:14:
a1:f2:07:33:65:6c:27:26:ca:35:fe:22:b7:ed:9d:
f0:16:31:9f:82:33:d1:f2:73:26:72:46:20:70:fb:
80:6e:14:1b:62:77:c5:c8:ec:f8:6a:d1:44:8a:c3:
85:c2:60:f7:1a:08:a5:57:d8:2e:1c:8d:0e:2e:ea:
ab:d3:64:b9:2f:53:56:71:0c:de:80:70:a9:a7:cc:
0c:e9:e7:be:d8:d9:b1:0d:c9:1b:3b:66:4c:ec:86:
05:10:99:df:14:40:44:96:73:af:ba:40:b7:35:5c:
01:5b:8d:ed:32:39:b4:2d:c6:b9:42:ba:1f:97:f8:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:61:50:41:EF:3F:28:7F:8B:78:46:9F:41:95:08:00:D5:5A:0F
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fd:37:cc:c8:91:c9:e8:d8:a6:3f:7e:76:af:86:ee:d4:f0:
97:e1:c1:71:b8:8f:63:b6:f4:ff:87:e5:3d:64:d0:8b:7c:cb:
cf:4c:11:8d:b7:28:7f:4b:ae:fc:fe:f9:1a:1d:08:02:51:b3:
27:16:35:2d:11:73:84:a1:be:73:20:c0:2e:4e:ea:96:24:03:
9f:78:6c:c1:fa:ef:74:a0:96:64:7d:d1:0a:28:00:7b:5a:38:
48:e5:a2:e6:a1:52:ab:bc:fb:2c:47:36:1f:f9:87:b3:43:d1:
de:8a:4d:21:5b:80:3f:a6:5c:01:26:fd:04:c2:cd:36:a9:b0:
79:6a:aa:2e:f1:de:1b:98:07:ca:4f:5c:69:d3:96:6b:61:66:
f9:ab:64:03:0c:01:33:8b:51:5d:3a:b5:e4:52:27:3a:34:e9:
f0:86:d5:3a:67:7b:59:52:4e:56:3c:99:13:de:1e:5a:94:6d:
35:7b:98:9e:b9:9a:39:4b:a6:17:42:6a:52:d7:e0:f3:d6:e3:
37:88:e4:98:4f:9e:f3:95:1c:fa:da:30:f5:11:90:07:c3:4f:
e3:19:e5:f8:9a:00:84:9b:2c:63:81:be:6c:48:c0:61:0d:51:
67:6a:6d:8d:bf:78:1d:8b:69:5c:cb:c7:23:ff:32:23:d1:e6:
93:78:96:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9ST2lUTcx2r5vrAtXCBYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjQwNjI2NGU0OWNmNmY4OWNhNWQyYzZhZjc1MGIzNmUx
NTY1NjQwHhcNMjUwNTExMDMwMDE1WhcNMjUwNTEyMDMwMDE1WjAzMTEwLwYDVQQD
Eyg4NWI1NjE1MDQxZWYzZjI4N2Y4Yjc4NDY5ZjQxOTUwODAwZDU1YTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylVpKZn2BIWaNyq1HWPGmx4h6vMS
9u02Urz4s5chiMhvzlI3+4FuVCfnYjb9/QMCfg4jW2++CFD/ovWc2cnb+BIKQbKf
YeVaEPS8fzDTlGGORkdxVoIwV7qupTDi6wluKAonFrXnh571z+dysCiapXtxBuZp
+3Lok+p6MvmeV1OZwnzqSBSh8gczZWwnJso1/iK37Z3wFjGfgjPR8nMmckYgcPuA
bhQbYnfFyOz4atFEisOFwmD3GgilV9guHI0OLuqr02S5L1NWcQzegHCpp8wM6ee+
2NmxDckbO2ZM7IYFEJnfFEBElnOvukC3NVwBW43tMjm0Lca5Qrofl/gPawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW1YVBB7z8of4t4Rp9BlQgA1VoPMB8GA1UdIwQY
MBaAFMhkBiZOSc9vicpdLGr3ULNuFWVkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdRR0prNUp6Mi1KeWwwc2F2ZFFzMjRWWldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84NzRiM2ItNjdkZS00OWVmLThmYzEt
NjJkZDZlY2ZlNzI1LzEveUdRR0prNUp6Mi1KeWwwc2F2ZFFzMjRWWldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84NzRiM2ItNjdkZS00OWVmLThmYzEtNjJkZDZlY2ZlNzI1
LzEveUdRR0prNUp6Mi1KeWwwc2F2ZFFzMjRWWldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHP03zMiR
yejYpj9+dq+G7tTwl+HBcbiPY7b0/4flPWTQi3zLz0wRjbcof0uu/P75Gh0IAlGz
JxY1LRFzhKG+cyDALk7qliQDn3hswfrvdKCWZH3RCigAe1o4SOWi5qFSq7z7LEc2
H/mHs0PR3opNIVuAP6ZcASb9BMLNNqmweWqqLvHeG5gHyk9cadOWa2Fm+atkAwwB
M4tRXTq15FInOjTp8IbVOmd7WVJOVjyZE94eWpRtNXuYnrmaOUumF0JqUtfg89bj
N4jkmE+e85Uc+tow9RGQB8NP4xnl+JoAhJssY4G+bEjAYQ1RZ2ptjb94HYtpXMvH
I/8yI9Hmk3iWEw==
-----END CERTIFICATE-----
Generated at Sun May 11 08:49:53 2025 by rpki-client