Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: WkGpdiwgsIklSVQvER/Q2HZ3qLfJuX4ihX1jhkvfeGk=
Subject key identifier: D3:61:5C:7A:A0:89:D9:54:84:3F:34:D1:00:62:F1:2E:86:C6:17:25
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 0196CBE14EF5C59EEBC0CEFFB9C9DC5338E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 05A0
Signing time: Tue 13 May 2025 23:01:02 +0000
Manifest this update: Tue 13 May 2025 23:01:02 +0000
Manifest next update: Wed 14 May 2025 23:01:02 +0000
Files and hashes: 1: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: 1aTnYyQU00Qed96j6161xTob5+3bVd9vRQP1XWyTzN0=)
2: f17g18QFfdvHYwpt8j5c-Ut0KIg.roa (hash: tbPWxLgOnzeuUddm3+/kPda4AB0ACHo9QXxycRR4QlM=)
3: za-qKZumAJe5b0iEnZwziy5sjdU.roa (hash: XmSM2jKwnfhXk2mj4bb8vX6fKWH5CT7ewc4M4Z9cJsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:4e:f5:c5:9e:eb:c0:ce:ff:b9:c9:dc:53:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: May 13 23:01:02 2025 GMT
Not After : May 14 23:01:02 2025 GMT
Subject: CN=d3615c7aa089d954843f34d10062f12e86c61725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:96:93:2f:34:39:1f:7f:c6:c0:3a:c5:4a:
80:18:10:de:59:4d:43:c0:91:f6:f3:20:94:63:5a:
44:97:f1:8c:17:f1:43:af:e6:f3:00:46:99:48:1d:
d0:a5:81:85:6e:af:99:c8:12:1c:c4:d7:08:0e:44:
b5:82:4b:b9:b6:13:f7:ed:19:8a:c2:91:16:29:93:
ed:ef:f4:5c:86:36:e3:bc:6b:74:d8:73:eb:b1:8c:
60:2b:7b:52:2b:e0:be:8a:e2:3d:5b:50:fc:5b:68:
c8:02:74:53:f1:2e:a0:c1:03:d3:6c:40:a6:aa:3b:
64:76:7a:27:02:74:5e:52:d9:d0:b7:cf:4f:df:b9:
4a:89:b0:ba:eb:6a:e7:a0:0a:b9:0b:ad:4f:59:8a:
c8:48:38:02:6c:e1:1f:01:b7:73:bf:6f:6a:0e:2c:
fd:62:31:af:e3:c7:cc:f1:95:7e:4d:91:7a:ff:aa:
0b:67:ae:40:24:65:f5:21:a3:b1:38:91:2c:90:b4:
b3:73:31:54:ee:bd:a7:ef:32:5b:18:f4:c7:9b:fa:
dd:1b:b1:a6:c5:8c:7a:9b:c6:ae:fa:4b:c5:31:e8:
dc:a9:8c:99:07:a1:bf:a7:71:13:a0:8f:d7:d1:a7:
81:47:0f:45:34:4e:95:66:1f:80:df:8b:6b:78:6a:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:61:5C:7A:A0:89:D9:54:84:3F:34:D1:00:62:F1:2E:86:C6:17:25
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8a:bd:ad:7b:d9:cf:f9:f0:e1:f5:97:3f:3e:4c:77:0d:b4:
24:b0:72:4c:43:be:78:5d:d6:49:88:ec:69:23:73:05:9a:c3:
6b:2c:eb:c1:03:71:81:6a:65:10:6b:d4:19:17:3a:85:4e:fc:
f7:29:20:bc:e5:49:b4:d5:37:02:f4:c3:26:aa:21:20:70:1f:
50:94:4c:9b:d2:4e:9a:75:07:ac:ca:70:84:9e:d5:09:91:3e:
0c:9f:4e:5e:3c:20:50:39:65:e0:7a:f1:c0:b1:66:18:5c:aa:
38:a6:89:1e:43:8e:00:5c:e8:96:64:27:4f:ac:a3:e9:db:f1:
47:6c:ff:af:42:59:58:0b:41:a1:b2:1f:13:98:1c:db:59:dc:
16:31:27:57:8a:2d:17:c9:46:bb:9f:5c:02:38:f0:ce:6d:07:
03:8d:77:a0:69:f2:af:bb:6b:f0:48:29:2b:35:ac:b0:02:d0:
99:42:cf:a7:48:dd:64:78:bc:31:43:f9:e8:d0:91:f7:05:0a:
9e:e2:4c:fd:73:f8:dd:15:df:f2:cc:89:77:b9:31:f0:5b:46:
34:44:17:e3:c4:e6:4e:1f:bc:67:71:4d:77:97:24:19:29:cd:
b6:c3:1b:a5:93:ea:a3:fe:0c:cb:63:8f:37:d4:e4:f9:73:f3:
a4:fb:f9:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbL4U71xZ7rwM7/ucncUzjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw
MjY1YTIwHhcNMjUwNTEzMjMwMTAyWhcNMjUwNTE0MjMwMTAyWjAzMTEwLwYDVQQD
EyhkMzYxNWM3YWEwODlkOTU0ODQzZjM0ZDEwMDYyZjEyZTg2YzYxNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgqWky80OR9/xsA6xUqAGBDeWU1D
wJH28yCUY1pEl/GMF/FDr+bzAEaZSB3QpYGFbq+ZyBIcxNcIDkS1gku5thP37RmK
wpEWKZPt7/RchjbjvGt02HPrsYxgK3tSK+C+iuI9W1D8W2jIAnRT8S6gwQPTbECm
qjtkdnonAnReUtnQt89P37lKibC662rnoAq5C61PWYrISDgCbOEfAbdzv29qDiz9
YjGv48fM8ZV+TZF6/6oLZ65AJGX1IaOxOJEskLSzczFU7r2n7zJbGPTHm/rdG7Gm
xYx6m8au+kvFMejcqYyZB6G/p3EToI/X0aeBRw9FNE6VZh+A34treGqnrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNhXHqgidlUhD800QBi8S6GxhclMB8GA1UdIwQY
MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt
YzE4YWQzNmE3YjMwLzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw
LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYq9rXvZ
z/nw4fWXPz5Mdw20JLByTEO+eF3WSYjsaSNzBZrDayzrwQNxgWplEGvUGRc6hU78
9ykgvOVJtNU3AvTDJqohIHAfUJRMm9JOmnUHrMpwhJ7VCZE+DJ9OXjwgUDll4Hrx
wLFmGFyqOKaJHkOOAFzolmQnT6yj6dvxR2z/r0JZWAtBobIfE5gc21ncFjEnV4ot
F8lGu59cAjjwzm0HA413oGnyr7tr8EgpKzWssALQmULPp0jdZHi8MUP56NCR9wUK
nuJM/XP43RXf8syJd7kx8FtGNEQX48TmTh+8Z3FNd5ckGSnNtsMbpZPqo/4My2OP
N9Tk+XPzpPv5Jw==
-----END CERTIFICATE-----
Generated at Wed May 14 06:04:01 2025 by rpki-client