Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: J6QGaM8MYM05CISzDpU4eVCPLU3sYMnAh9HeGTIzRvg=
Subject key identifier: 7E:FE:B9:00:15:F0:D6:1F:56:8F:37:BF:30:88:A9:04:63:9C:E6:A1
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 0196CE3D4DC5C423F809ACD5052534745C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 10:00:46 +0000
Manifest this update: Wed 14 May 2025 10:00:46 +0000
Manifest next update: Thu 15 May 2025 10:00:46 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: cEFhucHVkOu1DrNSXByiBBAMMK/yUswF0vD0E/F6lLw=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3d:4d:c5:c4:23:f8:09:ac:d5:05:25:34:74:5c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: May 14 10:00:46 2025 GMT
Not After : May 15 10:00:46 2025 GMT
Subject: CN=7efeb90015f0d61f568f37bf3088a904639ce6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4d:de:f6:72:94:1b:08:f7:2d:d0:3a:66:8e:
3d:ff:53:1d:5f:5e:f3:3f:d6:54:e3:64:a9:ba:e2:
16:81:55:6a:f5:ef:8f:6f:fe:4f:18:a7:12:de:19:
a2:2b:6d:1b:78:5e:d9:79:64:08:0c:63:02:84:d6:
6b:04:f2:15:57:f9:95:80:31:e7:44:82:d2:7d:5d:
ac:aa:34:b0:e7:80:14:78:c4:d6:94:bc:d8:a9:83:
19:8d:81:f6:21:8d:96:be:fa:71:48:e5:30:ae:3d:
a8:9d:3e:f2:ce:8e:ce:89:1e:86:a1:c0:20:11:88:
11:91:aa:4b:ff:41:c7:66:92:a2:75:d7:4e:9c:2e:
ba:ea:17:a2:29:fe:46:6d:e7:15:43:e4:d7:6b:97:
8e:87:c5:c5:21:06:ba:ca:03:9f:80:ca:ca:6d:72:
fc:d6:dd:96:0c:33:7c:aa:ef:d7:b3:2a:ca:8c:c5:
88:e3:71:ef:f1:f0:2a:15:3c:3f:e4:75:93:04:10:
91:fc:ad:1c:10:48:4b:d6:4a:8d:93:c2:92:a5:9c:
d1:59:a8:aa:c7:07:ce:db:3c:6d:e6:7a:57:b2:fc:
c9:62:41:28:d9:13:05:ca:9e:89:e8:ef:d5:2e:02:
7e:4c:45:8e:ed:82:9d:d5:0b:79:ef:47:63:32:37:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FE:B9:00:15:F0:D6:1F:56:8F:37:BF:30:88:A9:04:63:9C:E6:A1
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:74:d9:21:7a:c2:dc:77:c5:50:1b:14:74:98:d9:40:9c:2e:
e0:fb:15:b4:35:87:c6:be:8b:df:f1:93:9f:b9:26:6c:ea:55:
eb:1d:7a:89:af:b7:6e:cf:b2:8d:ee:f9:52:a5:74:61:7f:a9:
5a:90:d9:e6:36:33:f1:58:21:5c:84:4c:2d:1a:3a:c3:f9:32:
34:f2:35:2f:ed:0f:ca:36:4a:b3:be:d4:40:b9:fb:77:5e:08:
ce:9a:18:b9:2d:d9:9a:6f:53:c9:b5:c5:bf:d3:68:3d:9f:1c:
e7:40:9a:5c:68:34:b0:43:3b:91:37:b7:b8:83:e8:16:37:53:
ea:d2:13:15:96:6b:03:af:5a:ac:8d:63:a8:f5:eb:51:8e:9e:
d0:f0:e7:9d:59:ac:45:a5:cc:32:26:e6:c0:fa:23:77:ab:5c:
15:79:cd:7b:ef:01:f6:81:9f:be:8e:1e:3f:c7:91:62:19:c3:
75:5e:31:46:e0:88:5d:df:01:c5:48:6c:b6:8c:e0:23:54:d4:
97:3f:44:d4:0d:eb:db:2a:31:30:11:0b:bc:c7:b2:ab:d9:78:
53:96:2e:98:12:b6:e7:0e:70:d5:d6:67:50:19:8c:e2:61:4c:
9c:f1:de:19:21:0d:96:ac:2f:42:4f:b8:67:dc:2a:41:12:de:
2d:58:22:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbOPU3FxCP4CazVBSU0dFxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OGExODZlOGVlYjg3MTRlZGNhNWIwZDcxNmU1MWQ2NmMx
NjhjZTEwHhcNMjUwNTE0MTAwMDQ2WhcNMjUwNTE1MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg3ZWZlYjkwMDE1ZjBkNjFmNTY4ZjM3YmYzMDg4YTkwNDYzOWNlNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k3e9nKUGwj3LdA6Zo49/1MdX17z
P9ZU42SpuuIWgVVq9e+Pb/5PGKcS3hmiK20beF7ZeWQIDGMChNZrBPIVV/mVgDHn
RILSfV2sqjSw54AUeMTWlLzYqYMZjYH2IY2WvvpxSOUwrj2onT7yzo7OiR6GocAg
EYgRkapL/0HHZpKidddOnC666heiKf5GbecVQ+TXa5eOh8XFIQa6ygOfgMrKbXL8
1t2WDDN8qu/XsyrKjMWI43Hv8fAqFTw/5HWTBBCR/K0cEEhL1kqNk8KSpZzRWaiq
xwfO2zxt5npXsvzJYkEo2RMFyp6J6O/VLgJ+TEWO7YKd1Qt570djMjf17wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7+uQAV8NYfVo83vzCIqQRjnOahMB8GA1UdIwQY
MBaAFMmKGG6O64cU7cpbDXFuUdZsFozhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTkt
N2E1YThkMDk2N2M4LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTktN2E1YThkMDk2N2M4
LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXTZIXrC
3HfFUBsUdJjZQJwu4PsVtDWHxr6L3/GTn7kmbOpV6x16ia+3bs+yje75UqV0YX+p
WpDZ5jYz8VghXIRMLRo6w/kyNPI1L+0PyjZKs77UQLn7d14IzpoYuS3Zmm9TybXF
v9NoPZ8c50CaXGg0sEM7kTe3uIPoFjdT6tITFZZrA69arI1jqPXrUY6e0PDnnVms
RaXMMibmwPojd6tcFXnNe+8B9oGfvo4eP8eRYhnDdV4xRuCIXd8BxUhstozgI1TU
lz9E1A3r2yoxMBELvMeyq9l4U5YumBK25w5w1dZnUBmM4mFMnPHeGSENlqwvQk+4
Z9wqQRLeLVgitQ==
-----END CERTIFICATE-----
Generated at Wed May 14 12:53:28 2025 by rpki-client