Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: pb/xB7INztIFlq9Q2pere+8msi4YyTG1BnBgOokQzGk=
Subject key identifier: 71:F6:28:93:FF:9D:A4:C5:9E:5A:33:B4:4C:D7:C8:A6:D1:B6:D9:D6
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 0196A051F0C9FC5FAC79DAFA8B9C1EBF86FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0DD3
Signing time: Mon 05 May 2025 12:00:46 +0000
Manifest this update: Mon 05 May 2025 12:00:46 +0000
Manifest next update: Tue 06 May 2025 12:00:46 +0000
Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: SuRcyfajyfo9TwrmPh/IhDc6nBVIPgMkDlDyypcuQ9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:f0:c9:fc:5f:ac:79:da:fa:8b:9c:1e:bf:86:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: May 5 12:00:46 2025 GMT
Not After : May 6 12:00:46 2025 GMT
Subject: CN=71f62893ff9da4c59e5a33b44cd7c8a6d1b6d9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:ce:7a:4a:72:83:89:a0:9f:a0:24:de:46:
c3:40:1e:0f:21:65:c9:f3:ee:19:b5:fb:38:f7:c8:
bf:c8:1a:de:08:b6:d8:5c:95:a2:bb:cf:f5:24:21:
07:55:64:3c:aa:15:04:5e:21:e2:2f:c1:f8:eb:86:
e0:33:39:9f:e5:04:4b:24:f0:2c:92:ff:ed:68:ba:
d2:71:9a:5a:a9:e4:6c:b3:0c:8b:bd:5b:c1:0c:85:
31:36:73:5d:57:81:8f:46:7d:16:c7:c3:c2:95:67:
3d:da:dc:3c:29:c9:34:6f:1c:88:0e:a9:58:71:9b:
77:cb:34:b8:a3:d4:f2:36:b8:fa:cf:3d:a8:5b:76:
ac:ed:0f:ef:2f:5e:21:15:1f:fb:3a:15:13:c9:8c:
94:38:2c:88:b0:20:06:ad:48:09:1d:a5:e3:01:33:
c5:21:c9:59:88:5c:ee:13:eb:0d:59:94:88:9b:18:
bc:cc:e9:91:e4:b7:12:70:b2:c9:b4:13:36:b1:f4:
67:aa:ac:75:2a:73:e8:92:61:09:9e:e7:20:0d:a2:
fd:8a:26:22:16:a5:48:11:b7:7b:f7:07:68:c1:f7:
ca:45:92:65:45:8b:8a:6e:f5:1d:76:54:a6:99:d6:
34:d5:f5:e3:81:c0:55:85:c3:d2:9f:02:ab:5c:85:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F6:28:93:FF:9D:A4:C5:9E:5A:33:B4:4C:D7:C8:A6:D1:B6:D9:D6
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:db:ea:37:af:a8:ec:67:28:97:bf:a7:dd:be:02:67:b5:72:
0d:29:40:07:0f:b7:d6:03:34:71:ca:44:d0:96:55:ae:fb:53:
33:df:c4:76:cc:66:38:20:72:53:8d:2d:66:7c:4f:9a:f0:3d:
f9:c9:e1:f6:a4:e5:73:60:55:cb:f3:79:f0:17:b8:05:f3:7f:
d7:9d:9a:1e:08:d7:3e:ec:f8:a5:6f:41:0d:93:44:58:29:56:
bb:8d:3c:aa:70:e4:cc:26:6c:1a:9a:fb:c2:26:0f:bf:a0:08:
76:d1:ff:9c:7d:d4:4c:31:46:8e:33:64:cc:22:c4:c4:6e:3e:
f6:d9:a7:ee:8f:cd:80:b7:e3:6a:34:4d:3b:27:cf:0e:7f:82:
5b:27:3f:df:47:f8:44:41:8b:11:3a:04:af:e6:49:b9:3b:90:
26:6f:37:0e:b4:6c:81:74:26:23:ff:79:91:0f:17:3e:8d:92:
25:dd:d5:88:94:d6:24:92:2c:61:55:36:79:92:2e:9a:1b:56:
ce:c4:f3:e6:ff:91:fc:c5:a5:be:ef:20:a3:20:3b:75:eb:0b:
51:ff:f5:85:23:99:f5:4c:0e:a9:4a:1d:4e:79:5a:a1:1f:e8:
a4:04:b6:d5:ff:7a:02:73:ec:04:d4:7b:e7:7b:08:9e:02:b5:
26:74:46:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagUfDJ/F+sedr6i5wev4b9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZTBlNGM5YWNiZjcwMWY5MzAxNDliMzI1Y2UwNDJjZjlm
OTJhNTkwHhcNMjUwNTA1MTIwMDQ2WhcNMjUwNTA2MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg3MWY2Mjg5M2ZmOWRhNGM1OWU1YTMzYjQ0Y2Q3YzhhNmQxYjZkOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2djOekpyg4mgn6Ak3kbDQB4PIWXJ
8+4Ztfs498i/yBreCLbYXJWiu8/1JCEHVWQ8qhUEXiHiL8H464bgMzmf5QRLJPAs
kv/taLrScZpaqeRsswyLvVvBDIUxNnNdV4GPRn0Wx8PClWc92tw8Kck0bxyIDqlY
cZt3yzS4o9TyNrj6zz2oW3as7Q/vL14hFR/7OhUTyYyUOCyIsCAGrUgJHaXjATPF
IclZiFzuE+sNWZSImxi8zOmR5LcScLLJtBM2sfRnqqx1KnPokmEJnucgDaL9iiYi
FqVIEbd79wdowffKRZJlRYuKbvUddlSmmdY01fXjgcBVhcPSnwKrXIXRKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH2KJP/naTFnloztEzXyKbRttnWMB8GA1UdIwQY
MBaAFMng5Mmsv3AfkwFJsyXOBCz5+SpZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEt
YmU3YzgyOGMzNjkzLzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEtYmU3YzgyOGMzNjkz
LzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdvqN6+o
7Gcol7+n3b4CZ7VyDSlABw+31gM0ccpE0JZVrvtTM9/EdsxmOCByU40tZnxPmvA9
+cnh9qTlc2BVy/N58Be4BfN/152aHgjXPuz4pW9BDZNEWClWu408qnDkzCZsGpr7
wiYPv6AIdtH/nH3UTDFGjjNkzCLExG4+9tmn7o/NgLfjajRNOyfPDn+CWyc/30f4
REGLEToEr+ZJuTuQJm83DrRsgXQmI/95kQ8XPo2SJd3ViJTWJJIsYVU2eZIumhtW
zsTz5v+R/MWlvu8goyA7desLUf/1hSOZ9UwOqUodTnlaoR/opAS21f96AnPsBNR7
53sIngK1JnRG+Q==
-----END CERTIFICATE-----
Generated at Mon May 5 16:41:25 2025 by rpki-client