Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: SZzY+fhfuGxwqAHoUebpWKMr4ztT/8JPk/Ys9FBgpz8=
Subject key identifier: B2:AE:B8:1C:B8:62:2C:52:63:82:3A:AC:B5:F9:58:AF:DF:A3:88:07
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 0196CB72AF3A2DF1FF0B17A81648B7DBB607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 074A
Signing time: Tue 13 May 2025 21:00:12 +0000
Manifest this update: Tue 13 May 2025 21:00:12 +0000
Manifest next update: Wed 14 May 2025 21:00:12 +0000
Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: CDweYtrCgk/eQVLE+oQlH5I4IJfoK+UPnMSV+0RZfYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:af:3a:2d:f1:ff:0b:17:a8:16:48:b7:db:b6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: May 13 21:00:12 2025 GMT
Not After : May 14 21:00:12 2025 GMT
Subject: CN=b2aeb81cb8622c5263823aacb5f958afdfa38807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:58:ea:de:0f:7f:fe:7e:cf:91:5e:df:a5:
a1:73:52:ca:b3:ac:93:3c:18:21:a5:62:4d:c5:48:
fc:57:05:ee:c4:b7:e2:3b:09:8c:ae:a2:32:50:3b:
55:7f:97:3a:57:81:78:3c:95:05:08:d9:70:98:b8:
ae:0b:a4:b9:67:11:5f:b6:7e:c6:d4:91:eb:77:4c:
79:f7:64:3b:89:11:01:d9:0d:7d:7a:30:ff:c9:8f:
c2:10:0e:6e:f6:17:d1:8c:53:87:44:e9:23:43:f1:
bd:1b:ac:f1:7d:b2:43:18:d5:d2:ef:fe:4a:c5:ef:
17:64:22:54:db:a1:94:2b:8e:8d:58:f8:a0:b5:e4:
b3:b8:6a:27:04:a7:dd:3c:22:45:b8:fe:f8:94:aa:
ea:2e:eb:72:17:64:c1:ad:40:3e:40:3c:18:41:2d:
f9:66:41:a8:6a:ac:19:49:5d:4c:9c:9a:69:60:14:
57:03:20:35:01:12:c9:f9:4f:60:64:6f:2c:71:97:
2b:47:33:21:55:02:6f:e2:49:5f:60:7d:40:51:82:
20:fd:03:d7:29:8f:16:98:35:97:48:19:bc:29:c2:
df:88:38:89:d7:16:a5:d2:01:65:12:c0:ac:85:15:
5d:7d:b4:41:d2:2d:ef:e0:5d:e8:f9:cd:c9:36:89:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AE:B8:1C:B8:62:2C:52:63:82:3A:AC:B5:F9:58:AF:DF:A3:88:07
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3d:a8:e2:a4:52:82:86:da:92:54:0c:8e:b6:df:d5:01:9a:
81:b2:c2:a5:b7:c1:8f:e2:15:13:8c:37:ce:5c:13:53:7b:9c:
e6:26:32:4f:b8:3b:46:7b:d3:c9:a8:58:90:0b:e7:cd:94:2b:
da:7d:2d:4f:b7:33:81:11:31:1d:c4:e8:13:eb:55:94:08:5b:
c1:b1:bf:be:cb:14:d9:44:28:0b:e7:bb:21:4b:33:ca:8c:a9:
b4:02:e9:e9:50:67:45:27:3e:a8:36:77:7b:91:93:a8:1f:28:
52:b9:0f:0f:ef:51:1c:48:f3:d8:28:df:2c:cc:ce:ed:0c:86:
f4:2f:ed:b3:e2:64:b7:01:56:3e:3d:7e:39:ef:29:43:71:da:
4d:36:2c:85:49:ca:43:af:c0:e2:60:59:5e:6e:db:1e:29:49:
c2:71:a8:c7:09:dd:bd:3b:e0:dd:f1:42:b9:71:6b:4a:66:11:
9e:15:71:3d:a6:c9:ff:c6:a3:60:69:bc:88:93:f7:09:13:1f:
8c:41:0a:a1:3a:42:c3:0e:c2:0f:f7:34:17:19:d3:7a:a4:c6:
d4:e0:5a:9e:03:1d:2a:2a:7d:79:68:f6:aa:8b:b4:30:3a:fc:
4a:e6:3d:43:42:de:42:a1:10:86:b9:93:13:de:d8:a7:6a:02:
af:1b:0b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLcq86LfH/CxeoFki327YHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh
MjBiMjMwHhcNMjUwNTEzMjEwMDEyWhcNMjUwNTE0MjEwMDEyWjAzMTEwLwYDVQQD
EyhiMmFlYjgxY2I4NjIyYzUyNjM4MjNhYWNiNWY5NThhZmRmYTM4ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgRY6t4Pf/5+z5Fe36Whc1LKs6yT
PBghpWJNxUj8VwXuxLfiOwmMrqIyUDtVf5c6V4F4PJUFCNlwmLiuC6S5ZxFftn7G
1JHrd0x592Q7iREB2Q19ejD/yY/CEA5u9hfRjFOHROkjQ/G9G6zxfbJDGNXS7/5K
xe8XZCJU26GUK46NWPigteSzuGonBKfdPCJFuP74lKrqLutyF2TBrUA+QDwYQS35
ZkGoaqwZSV1MnJppYBRXAyA1ARLJ+U9gZG8scZcrRzMhVQJv4klfYH1AUYIg/QPX
KY8WmDWXSBm8KcLfiDiJ1xal0gFlEsCshRVdfbRB0i3v4F3o+c3JNome5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKuuBy4YixSY4I6rLX5WK/fo4gHMB8GA1UdIwQY
MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt
NmUzNmIyZjE3MDZiLzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi
LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYz2o4qRS
gobaklQMjrbf1QGagbLCpbfBj+IVE4w3zlwTU3uc5iYyT7g7RnvTyahYkAvnzZQr
2n0tT7czgRExHcToE+tVlAhbwbG/vssU2UQoC+e7IUszyoyptALp6VBnRSc+qDZ3
e5GTqB8oUrkPD+9RHEjz2CjfLMzO7QyG9C/ts+JktwFWPj1+Oe8pQ3HaTTYshUnK
Q6/A4mBZXm7bHilJwnGoxwndvTvg3fFCuXFrSmYRnhVxPabJ/8ajYGm8iJP3CRMf
jEEKoTpCww7CD/c0FxnTeqTG1OBangMdKip9eWj2qou0MDr8SuY9Q0LeQqEQhrmT
E97Yp2oCrxsL/w==
-----END CERTIFICATE-----
Generated at Wed May 14 02:30:38 2025 by rpki-client