Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier: hSaWGmO1ttOnEiiNJukngqR+b0ckTZnb8EM3pduXLXQ=
Subject key identifier: 0E:1F:89:48:47:7C:17:2C:5A:5D:3B:48:93:7A:4D:C8:44:CB:FB:6A
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 01969F75C0E98A80A26AF79054CEC7C099E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 08:00:16 +0000
Manifest this update: Mon 05 May 2025 08:00:16 +0000
Manifest next update: Tue 06 May 2025 08:00:16 +0000
Files and hashes: 1: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: QPjjNsx7Or/NtrcqGN5WIMLQQInUxoqNd6XIFpr77p4=)
2: apB7016k1B8Xf8viYBYRSP8KhJw.roa (hash: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:c0:e9:8a:80:a2:6a:f7:90:54:ce:c7:c0:99:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: May 5 08:00:16 2025 GMT
Not After : May 6 08:00:16 2025 GMT
Subject: CN=0e1f8948477c172c5a5d3b48937a4dc844cbfb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:34:7c:07:0d:fb:87:d6:40:1e:0c:be:36:
44:3f:09:cb:8b:88:51:88:1c:11:3d:66:10:58:5d:
a9:97:b7:dd:ef:40:07:64:37:0a:d1:58:8c:11:86:
50:66:57:ec:35:af:e1:d8:0f:ff:ab:e3:bd:47:27:
4c:19:c1:6f:df:89:3f:ca:6f:31:8a:e5:09:7b:8f:
d2:10:4a:7d:8d:b8:1b:58:e1:10:88:58:3e:b4:fd:
95:0f:3c:6a:2d:c4:d2:f7:75:38:4c:2c:22:7c:d8:
11:11:49:f4:f0:8d:f8:35:41:5c:c6:fd:7e:a2:f4:
53:89:15:bf:f1:e9:15:88:4b:3f:83:23:e3:07:77:
51:46:fd:8d:5b:1a:05:5d:3d:6e:81:cc:74:93:3f:
f3:e6:d0:41:7d:e1:77:c8:07:14:0d:fe:3b:2e:db:
7c:c0:58:c4:34:33:f4:75:02:ca:fd:ee:6b:6d:73:
db:82:d5:75:01:95:5b:fb:25:8d:73:a3:a4:c9:19:
dd:be:98:1c:78:1a:90:b1:36:fa:c1:fa:cd:df:7f:
90:44:f0:4b:d9:fa:0a:47:c1:77:92:19:74:7f:1b:
8d:d8:03:08:04:a8:49:80:86:cd:a0:ea:01:d4:76:
a0:bc:6e:c4:b6:d6:7a:64:9c:44:2e:c2:6d:65:3e:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1F:89:48:47:7C:17:2C:5A:5D:3B:48:93:7A:4D:C8:44:CB:FB:6A
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:83:04:6a:db:20:6c:e8:53:62:bf:18:af:f5:46:82:d7:3a:
9e:42:a6:88:32:97:9a:ef:99:28:7b:d5:7d:04:7e:fe:05:01:
e8:8c:e6:11:68:5b:9a:dd:20:a1:45:1f:be:61:aa:e1:7d:86:
9f:db:3e:18:65:36:af:0d:60:7a:22:40:cd:90:4d:b5:ad:9e:
99:10:17:49:d6:b8:34:66:f5:8f:24:a1:da:fe:3a:73:da:14:
c4:5e:f3:d6:28:74:7c:bb:50:24:2f:82:98:5b:13:4a:a2:95:
66:77:14:71:84:b2:f8:62:92:0f:7e:74:e4:3c:96:76:56:c7:
ee:c1:00:7c:6f:a5:a0:eb:a9:01:96:e9:ba:c2:90:da:4f:78:
8c:cd:ff:80:00:bd:03:b9:4c:88:11:96:20:c2:21:57:38:93:
cc:bb:b6:84:41:41:73:b3:a3:4e:34:ad:6a:d6:79:f6:5e:06:
f1:77:fa:b4:f2:ec:d6:fb:0d:d6:c0:7d:06:80:e2:43:5d:4a:
f0:46:3a:ae:7c:39:27:c2:65:b9:02:f1:6e:7d:12:8e:3d:ca:
3e:b1:3d:b4:8a:a4:e5:4d:51:0c:1a:1f:d4:73:e1:85:36:9c:
50:38:e7:ae:85:67:4b:19:65:9c:ed:e7:58:f0:81:98:3c:fd:
dc:5c:14:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafdcDpioCiaveQVM7HwJnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzZjMjUyZGIwOWJlODE3Yjg3MmE3MTdhOTU5ZWRjYWM0
NDI2NmIwHhcNMjUwNTA1MDgwMDE2WhcNMjUwNTA2MDgwMDE2WjAzMTEwLwYDVQQD
EygwZTFmODk0ODQ3N2MxNzJjNWE1ZDNiNDg5MzdhNGRjODQ0Y2JmYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuew0fAcN+4fWQB4MvjZEPwnLi4hR
iBwRPWYQWF2pl7fd70AHZDcK0ViMEYZQZlfsNa/h2A//q+O9RydMGcFv34k/ym8x
iuUJe4/SEEp9jbgbWOEQiFg+tP2VDzxqLcTS93U4TCwifNgREUn08I34NUFcxv1+
ovRTiRW/8ekViEs/gyPjB3dRRv2NWxoFXT1ugcx0kz/z5tBBfeF3yAcUDf47Ltt8
wFjENDP0dQLK/e5rbXPbgtV1AZVb+yWNc6OkyRndvpgceBqQsTb6wfrN33+QRPBL
2foKR8F3khl0fxuN2AMIBKhJgIbNoOoB1HagvG7EttZ6ZJxELsJtZT7HmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4fiUhHfBcsWl07SJN6TchEy/tqMB8GA1UdIwQY
MBaAFGN2wlLbCb6Be4cqcXqVntysRCZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAt
ZGNhMGZkNTA5ZmI2LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAtZGNhMGZkNTA5ZmI2
LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYMEatsg
bOhTYr8Yr/VGgtc6nkKmiDKXmu+ZKHvVfQR+/gUB6IzmEWhbmt0goUUfvmGq4X2G
n9s+GGU2rw1geiJAzZBNta2emRAXSda4NGb1jySh2v46c9oUxF7z1ih0fLtQJC+C
mFsTSqKVZncUcYSy+GKSD3505DyWdlbH7sEAfG+loOupAZbpusKQ2k94jM3/gAC9
A7lMiBGWIMIhVziTzLu2hEFBc7OjTjStatZ59l4G8Xf6tPLs1vsN1sB9BoDiQ11K
8EY6rnw5J8JluQLxbn0Sjj3KPrE9tIqk5U1RDBof1HPhhTacUDjnroVnSxllnO3n
WPCBmDz93FwU8Q==
-----END CERTIFICATE-----
Generated at Mon May 5 10:50:11 2025 by rpki-client