Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: 1OD5cUQQOIw0gOSkPgHCu/5ApxlEisWKphKoIQzatoc=
Subject key identifier: 95:59:40:F5:BC:D8:C8:CE:2A:91:FD:FA:C2:A3:76:D4:E9:14:DD:96
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 0196A8B08957863DA9FD4FA75F4E4D096EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 13F2
Signing time: Wed 07 May 2025 03:01:03 +0000
Manifest this update: Wed 07 May 2025 03:01:03 +0000
Manifest next update: Thu 08 May 2025 03:01:03 +0000
Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: fsfRh2Xqxq+2OevYfkegBcDcdh86jUS0i/dlLzafQ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:89:57:86:3d:a9:fd:4f:a7:5f:4e:4d:09:6e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: May 7 03:01:03 2025 GMT
Not After : May 8 03:01:03 2025 GMT
Subject: CN=955940f5bcd8c8ce2a91fdfac2a376d4e914dd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:08:d0:20:18:e3:e4:37:95:e0:1b:9d:d2:
60:00:4d:53:9c:21:2c:93:84:01:3b:a9:36:ca:16:
94:1f:06:a5:7a:78:81:df:35:6b:d0:0e:cd:59:75:
32:65:55:9f:4f:8a:3d:2c:e9:b9:82:b9:23:69:7e:
58:cc:a8:3e:db:84:e9:49:35:d2:2a:2f:85:07:57:
12:ba:40:4c:4c:a8:04:69:33:7e:b4:59:9b:2b:8e:
93:f2:88:d2:8b:32:96:bd:47:ab:bf:b1:88:74:be:
59:c5:8b:f8:2c:4f:f1:ab:9b:f3:bd:95:c1:85:f5:
1d:d0:05:df:47:4a:bf:68:d9:74:69:af:46:10:9a:
12:1f:8e:d0:7d:e3:61:14:5e:89:13:9f:cf:54:18:
98:09:21:12:79:4d:fd:83:29:7d:35:24:94:3c:34:
dd:5d:67:8e:c2:b7:5f:f4:83:f1:18:02:af:d5:5d:
c5:d8:93:c6:b8:00:55:f4:8a:e9:af:0c:1d:95:06:
31:02:23:9b:0d:b3:f7:d9:d7:e0:e0:f0:f0:87:ed:
39:cd:17:84:f8:8f:30:f5:28:3c:ac:76:4d:4e:e6:
1d:1f:c0:ae:78:3b:41:7e:e5:12:2a:28:ad:02:04:
5b:98:8c:ab:d0:97:4b:73:e3:51:b3:01:2b:01:a9:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:59:40:F5:BC:D8:C8:CE:2A:91:FD:FA:C2:A3:76:D4:E9:14:DD:96
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:10:d6:10:b2:31:e9:36:31:de:b4:b3:b4:91:8d:d8:fd:56:
3d:41:9b:ea:db:19:77:a3:c6:b8:86:cd:1f:e9:a5:5a:79:74:
4d:ae:24:4f:67:e3:ab:ae:a9:1a:73:c4:f8:3a:3c:e2:50:b9:
8a:46:85:d0:81:40:f0:1e:a9:73:2e:9e:e0:24:21:20:97:99:
68:e5:d2:41:4b:5c:81:6d:41:91:76:87:16:82:f6:fe:85:01:
9d:b4:de:7a:f8:92:e3:1c:a4:73:6f:35:a3:10:85:10:85:98:
3f:56:e1:b6:90:27:0a:17:a2:d7:95:9b:9c:8b:50:2a:95:b4:
33:6f:b1:58:67:3e:05:b5:f7:5e:21:a4:75:4a:11:69:5e:44:
e0:86:54:f2:3c:53:02:69:5b:e9:4e:25:8a:1c:db:a0:d6:a8:
f3:13:99:32:9e:46:a4:fc:15:f2:d5:51:f7:49:bd:dd:2c:c6:
a2:29:2a:59:69:7e:b4:2f:76:47:1e:a2:4a:03:64:44:bf:20:
e5:16:18:36:96:90:0b:72:8a:92:66:a6:24:3b:8d:cf:81:db:
e1:57:78:9f:a9:72:28:ed:82:dc:36:18:d5:eb:55:a5:af:c1:
7b:2a:4d:58:5e:f0:da:63:6b:90:0d:1c:1d:03:42:5f:c1:db:
22:6e:72:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaosIlXhj2p/U+nX05NCW7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwY2VlYjI1Mzg0NWM2ZGNhMTkwZDM2MTZkYmEyM2YzN2Q4
YjYzOTcwHhcNMjUwNTA3MDMwMTAzWhcNMjUwNTA4MDMwMTAzWjAzMTEwLwYDVQQD
Eyg5NTU5NDBmNWJjZDhjOGNlMmE5MWZkZmFjMmEzNzZkNGU5MTRkZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroII0CAY4+Q3leAbndJgAE1TnCEs
k4QBO6k2yhaUHwaleniB3zVr0A7NWXUyZVWfT4o9LOm5grkjaX5YzKg+24TpSTXS
Ki+FB1cSukBMTKgEaTN+tFmbK46T8ojSizKWvUerv7GIdL5ZxYv4LE/xq5vzvZXB
hfUd0AXfR0q/aNl0aa9GEJoSH47QfeNhFF6JE5/PVBiYCSESeU39gyl9NSSUPDTd
XWeOwrdf9IPxGAKv1V3F2JPGuABV9IrprwwdlQYxAiObDbP32dfg4PDwh+05zReE
+I8w9Sg8rHZNTuYdH8CueDtBfuUSKiitAgRbmIyr0JdLc+NRswErAamJXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVZQPW82MjOKpH9+sKjdtTpFN2WMB8GA1UdIwQY
MBaAFGDO6yU4RcbcoZDTYW26I/N9i2OXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUt
OWY5MzIyZDY3MzJiLzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUtOWY5MzIyZDY3MzJi
LzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRDWELIx
6TYx3rSztJGN2P1WPUGb6tsZd6PGuIbNH+mlWnl0Ta4kT2fjq66pGnPE+Do84lC5
ikaF0IFA8B6pcy6e4CQhIJeZaOXSQUtcgW1BkXaHFoL2/oUBnbTeeviS4xykc281
oxCFEIWYP1bhtpAnChei15WbnItQKpW0M2+xWGc+BbX3XiGkdUoRaV5E4IZU8jxT
Amlb6U4lihzboNao8xOZMp5GpPwV8tVR90m93SzGoikqWWl+tC92Rx6iSgNkRL8g
5RYYNpaQC3KKkmamJDuNz4Hb4Vd4n6lyKO2C3DYY1etVpa/BeypNWF7w2mNrkA0c
HQNCX8HbIm5ylw==
-----END CERTIFICATE-----
Generated at Wed May 7 10:22:55 2025 by rpki-client