Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: fxlUlsi4cS11lAP76c5PDVAR8gxdr9+HoxDLxTmOhko=
Subject key identifier: 07:C6:13:2B:E5:0D:1A:D3:6E:BC:F3:71:52:97:DD:E6:86:70:AD:61
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 0196C94D54B2123F85F9D4577961112F8597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 14CC
Signing time: Tue 13 May 2025 11:00:10 +0000
Manifest this update: Tue 13 May 2025 11:00:10 +0000
Manifest next update: Wed 14 May 2025 11:00:10 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: AjmIj1PTMp/A3utbh0ZfcMNW0XptCInOVdT6Erzl5hs=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:54:b2:12:3f:85:f9:d4:57:79:61:11:2f:85:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: May 13 11:00:10 2025 GMT
Not After : May 14 11:00:10 2025 GMT
Subject: CN=07c6132be50d1ad36ebcf3715297dde68670ad61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:83:44:b8:ad:ee:39:e8:87:ae:f5:ed:6a:
5d:3f:bd:de:50:52:10:59:aa:35:9a:84:c4:f0:d4:
62:88:bb:1a:57:2e:0d:6b:6b:ae:fc:37:bf:63:25:
13:46:1f:f0:7d:d3:b3:6a:56:36:55:2d:25:b5:7c:
29:a0:30:c2:cc:10:29:a2:d9:85:c5:7d:13:02:80:
2e:69:80:69:18:8d:81:ad:6c:d7:7c:7a:25:b0:28:
84:c6:10:0b:cc:ab:8e:4c:58:9a:21:66:f6:eb:29:
e2:f2:4c:dd:3c:f7:75:ee:c4:2f:4f:88:a0:ea:76:
8e:a1:33:d6:dd:31:f9:31:f8:91:6a:05:e2:df:61:
fd:5f:67:a5:de:77:d2:c4:5c:7d:b7:31:62:d5:e6:
35:6e:03:83:2a:7e:34:58:98:76:cb:7c:c1:b3:80:
ee:6f:b1:19:80:18:05:a0:c1:08:03:c1:1e:3a:7a:
fc:80:46:8f:13:42:c5:7c:4c:fb:01:00:93:ac:79:
1d:6e:ea:01:4e:48:f1:83:37:07:ca:86:87:d4:4f:
33:98:f4:55:35:32:a6:49:d6:7c:9a:4b:55:3d:82:
7e:7a:21:9f:21:e7:e5:d0:ae:e0:91:9f:09:31:4e:
28:87:20:64:78:62:d3:ca:a6:af:fb:ee:c8:6a:82:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C6:13:2B:E5:0D:1A:D3:6E:BC:F3:71:52:97:DD:E6:86:70:AD:61
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8b:cb:2d:ed:d3:a0:78:45:1d:2d:51:9e:c0:40:d0:ad:22:
81:c9:c7:c7:d7:ec:86:05:aa:7c:29:98:c2:ee:c9:bb:c9:1e:
e8:ee:a9:1d:48:e9:a8:70:eb:da:e5:41:73:47:b0:9e:88:c6:
c8:49:12:3c:b7:8d:d7:32:60:d6:e6:5a:e1:5b:7d:51:f1:c1:
48:31:c4:2d:de:07:30:1d:86:bf:a2:19:f1:c7:04:28:9b:48:
46:f7:7a:f1:c3:12:36:4d:a4:c6:0a:cc:1b:b9:dd:79:5a:e3:
41:e4:f7:81:64:10:de:5c:a4:3c:19:e7:a4:d5:ce:8d:a8:7a:
af:8c:b7:69:1e:64:f3:d9:80:17:a9:73:8a:45:08:94:59:99:
30:ea:05:0b:30:78:d3:6b:e4:76:24:9d:f7:db:d5:3b:32:b7:
52:2c:10:92:9a:cc:a3:da:7c:2e:ff:49:fd:6f:f5:fd:a0:64:
88:ca:46:37:1b:c7:d3:22:96:f9:26:80:aa:2c:f2:03:d2:93:
36:03:14:1c:14:12:98:f1:f4:08:03:5e:da:de:9e:26:10:74:
62:15:b1:15:79:d2:65:16:66:32:bc:3f:51:ee:05:6b:4a:d3:
96:b4:17:5d:7b:75:98:53:cc:08:5f:2c:08:63:e1:a8:60:83:
7d:72:40:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJTVSyEj+F+dRXeWERL4WXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MTc3MDBkZGMwZTcyOGIwNzJhZDQxYTNkMWU4YjZhODBh
YTc1MTAwHhcNMjUwNTEzMTEwMDEwWhcNMjUwNTE0MTEwMDEwWjAzMTEwLwYDVQQD
EygwN2M2MTMyYmU1MGQxYWQzNmViY2YzNzE1Mjk3ZGRlNjg2NzBhZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcWDRLit7jnoh6717WpdP73eUFIQ
Wao1moTE8NRiiLsaVy4Na2uu/De/YyUTRh/wfdOzalY2VS0ltXwpoDDCzBApotmF
xX0TAoAuaYBpGI2BrWzXfHolsCiExhALzKuOTFiaIWb26yni8kzdPPd17sQvT4ig
6naOoTPW3TH5MfiRagXi32H9X2el3nfSxFx9tzFi1eY1bgODKn40WJh2y3zBs4Du
b7EZgBgFoMEIA8EeOnr8gEaPE0LFfEz7AQCTrHkdbuoBTkjxgzcHyoaH1E8zmPRV
NTKmSdZ8mktVPYJ+eiGfIefl0K7gkZ8JMU4ohyBkeGLTyqav++7IaoJKoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfGEyvlDRrTbrzzcVKX3eaGcK1hMB8GA1UdIwQY
MBaAFMkXcA3cDnKLByrUGj0ei2qAqnUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWIt
N2ViZWMwZTI3YjI4LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWItN2ViZWMwZTI3YjI4
LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIvLLe3T
oHhFHS1RnsBA0K0igcnHx9fshgWqfCmYwu7Ju8ke6O6pHUjpqHDr2uVBc0ewnojG
yEkSPLeN1zJg1uZa4Vt9UfHBSDHELd4HMB2Gv6IZ8ccEKJtIRvd68cMSNk2kxgrM
G7ndeVrjQeT3gWQQ3lykPBnnpNXOjah6r4y3aR5k89mAF6lzikUIlFmZMOoFCzB4
02vkdiSd99vVOzK3UiwQkprMo9p8Lv9J/W/1/aBkiMpGNxvH0yKW+SaAqizyA9KT
NgMUHBQSmPH0CANe2t6eJhB0YhWxFXnSZRZmMrw/Ue4Fa0rTlrQXXXt1mFPMCF8s
CGPhqGCDfXJA8w==
-----END CERTIFICATE-----
Generated at Tue May 13 15:28:42 2025 by rpki-client