Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
File: yYDRnDv8xARxVndvAqNJiY5GuQ0.mft (raw, json)
Hash identifier: TzbPR/787o8RbAinWv8uB7un7iLmY2AoYSuj2WyTPWY=
Subject key identifier: B0:A8:D2:94:53:FC:F9:3C:CB:D3:C5:CB:79:0D:FC:25:A6:20:1A:BA
Authority key identifier: C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
Certificate issuer: /CN=c980d19c3bfcc4047156776f02a349898e46b90d
Certificate serial: 0196C53A29D05C189E8FF14724E63BFD59A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
Manifest number: 0853
Signing time: Mon 12 May 2025 16:00:45 +0000
Manifest this update: Mon 12 May 2025 16:00:45 +0000
Manifest next update: Tue 13 May 2025 16:00:45 +0000
Files and hashes: 1: yYDRnDv8xARxVndvAqNJiY5GuQ0.crl (hash: 50CjJHheDZrHbsvN5o2leMctYu/fGFU2l3SY52lnles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:29:d0:5c:18:9e:8f:f1:47:24:e6:3b:fd:59:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c980d19c3bfcc4047156776f02a349898e46b90d
Validity
Not Before: May 12 16:00:45 2025 GMT
Not After : May 13 16:00:45 2025 GMT
Subject: CN=b0a8d29453fcf93ccbd3c5cb790dfc25a6201aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:bd:d0:3c:43:73:a8:0f:40:48:7f:30:c5:
1a:f5:d9:b1:4d:f0:23:b8:1b:90:82:9c:3f:b9:e2:
5d:b9:a2:36:85:3c:27:55:4d:ad:40:c1:fa:78:4b:
01:39:07:5f:17:c7:5a:22:3d:1b:42:d7:73:58:d6:
36:3a:8e:a1:c3:e4:0e:c3:75:73:91:d4:d8:d2:fa:
09:15:4f:11:7a:60:a6:80:36:93:03:85:5a:83:bd:
4f:6d:e2:1f:19:f5:b9:71:7c:65:d3:c4:b3:55:2e:
9c:40:58:4b:83:8f:ae:58:ee:58:33:aa:a1:18:46:
e3:3f:b6:01:a5:5b:74:e9:d2:b3:72:e3:03:89:6f:
b7:f9:e4:ee:27:05:9b:83:3d:92:b0:8c:32:19:96:
b9:e1:be:05:38:56:c2:01:63:ae:e8:4f:6b:bf:c9:
d3:08:09:96:29:07:29:31:0d:a7:5d:be:5f:99:32:
3f:e4:d4:4a:c5:f5:a1:90:ea:1d:f7:a1:3c:a6:b0:
61:30:b7:54:24:48:d1:af:72:19:38:18:21:84:96:
ca:3d:6d:e3:89:d9:67:d6:05:a2:e1:ba:d2:80:bf:
f5:14:3e:90:60:8c:c0:f2:6a:7b:a5:32:04:be:81:
9f:7d:a7:5e:86:3a:c3:25:4a:d3:13:cc:f0:22:ad:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A8:D2:94:53:FC:F9:3C:CB:D3:C5:CB:79:0D:FC:25:A6:20:1A:BA
X509v3 Authority Key Identifier:
keyid:C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:de:e6:c3:20:6f:99:72:4c:00:3e:5b:93:3e:0e:42:45:6b:
31:8f:fb:ef:28:cc:79:56:85:05:5f:ca:7e:37:a9:af:96:25:
d6:ed:49:45:8b:39:d3:96:64:39:3d:d2:94:5b:a4:3a:98:41:
6a:b6:cf:db:ef:46:4d:44:24:80:18:7e:61:34:1f:62:0f:88:
95:81:f0:79:a7:cb:6f:66:18:36:23:d0:3f:94:0b:4d:cd:42:
27:68:fc:41:2b:40:ca:64:76:a6:89:b0:af:e7:ce:44:a6:8a:
f9:75:1a:fb:b9:36:3d:a2:1a:4e:3d:95:da:b8:7f:87:bb:91:
0d:7c:5b:74:7e:52:10:d8:66:e8:4f:1c:aa:0f:22:e5:4c:fb:
a6:bf:9f:14:0c:2b:41:aa:2f:93:97:12:db:7a:b6:2b:0c:a1:
d8:74:b0:ce:94:56:31:aa:2b:00:e6:61:f4:b1:83:ad:8c:d7:
94:9d:d2:54:6e:6a:76:64:ff:e1:3c:ed:97:22:e9:c7:ca:cf:
68:b9:d3:ee:75:1d:31:32:ed:af:bc:a6:b3:9c:8b:6c:a5:e0:
da:21:6e:02:86:26:f2:15:35:91:9b:ff:37:46:57:3c:ee:71:
8c:a3:cc:c4:66:f4:07:b2:9e:bd:00:6a:68:b0:7b:95:66:a5:
0b:36:b4:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFOinQXBiej/FHJOY7/VmoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ODBkMTljM2JmY2M0MDQ3MTU2Nzc2ZjAyYTM0OTg5OGU0
NmI5MGQwHhcNMjUwNTEyMTYwMDQ1WhcNMjUwNTEzMTYwMDQ1WjAzMTEwLwYDVQQD
EyhiMGE4ZDI5NDUzZmNmOTNjY2JkM2M1Y2I3OTBkZmMyNWE2MjAxYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpm90DxDc6gPQEh/MMUa9dmxTfAj
uBuQgpw/ueJduaI2hTwnVU2tQMH6eEsBOQdfF8daIj0bQtdzWNY2Oo6hw+QOw3Vz
kdTY0voJFU8RemCmgDaTA4Vag71PbeIfGfW5cXxl08SzVS6cQFhLg4+uWO5YM6qh
GEbjP7YBpVt06dKzcuMDiW+3+eTuJwWbgz2SsIwyGZa54b4FOFbCAWOu6E9rv8nT
CAmWKQcpMQ2nXb5fmTI/5NRKxfWhkOod96E8prBhMLdUJEjRr3IZOBghhJbKPW3j
idln1gWi4brSgL/1FD6QYIzA8mp7pTIEvoGffadehjrDJUrTE8zwIq30xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCo0pRT/Pk8y9PFy3kN/CWmIBq6MB8GA1UdIwQY
MBaAFMmA0Zw7/MQEcVZ3bwKjSYmORrkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlEUm5Edjh4QVJ4Vm5kdkFxTkppWTVHdVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82OGMwNjMtNDAwYS00ZWQxLTlmYmYt
Yjg2NjE5NzUyMDM5LzEveVlEUm5Edjh4QVJ4Vm5kdkFxTkppWTVHdVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy82OGMwNjMtNDAwYS00ZWQxLTlmYmYtYjg2NjE5NzUyMDM5
LzEveVlEUm5Edjh4QVJ4Vm5kdkFxTkppWTVHdVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk97mwyBv
mXJMAD5bkz4OQkVrMY/77yjMeVaFBV/Kfjepr5Yl1u1JRYs505ZkOT3SlFukOphB
arbP2+9GTUQkgBh+YTQfYg+IlYHweafLb2YYNiPQP5QLTc1CJ2j8QStAymR2pomw
r+fORKaK+XUa+7k2PaIaTj2V2rh/h7uRDXxbdH5SENhm6E8cqg8i5Uz7pr+fFAwr
Qaovk5cS23q2Kwyh2HSwzpRWMaorAOZh9LGDrYzXlJ3SVG5qdmT/4TztlyLpx8rP
aLnT7nUdMTLtr7yms5yLbKXg2iFuAoYm8hU1kZv/N0ZXPO5xjKPMxGb0B7KevQBq
aLB7lWalCza0PQ==
-----END CERTIFICATE-----
Generated at Tue May 13 02:36:09 2025 by rpki-client