Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: SQIuUc0dbamQaiyy2lfS6yaekHZ9flc2pCKvIshOZy4=
Subject key identifier: 74:9F:A4:D8:E9:F8:2F:EF:2E:A6:EE:CC:FB:23:D9:72:5D:09:7E:20
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 0196BB5B3AD475BB769757730E85861C94D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0DBA
Signing time: Sat 10 May 2025 18:00:40 +0000
Manifest this update: Sat 10 May 2025 18:00:40 +0000
Manifest next update: Sun 11 May 2025 18:00:40 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: xzzwhpkrF5PsDg0RI5DWF8pzkunxjRoecwcOFlITmI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:3a:d4:75:bb:76:97:57:73:0e:85:86:1c:94:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: May 10 18:00:40 2025 GMT
Not After : May 11 18:00:40 2025 GMT
Subject: CN=749fa4d8e9f82fef2ea6eeccfb23d9725d097e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:40:2a:a7:b7:47:2d:dc:92:c0:fa:d7:69:
6e:bc:9a:25:ed:83:04:65:08:d1:32:9c:b3:2f:1c:
15:b9:5e:8d:a7:49:ae:40:74:c1:b3:b8:2e:13:6f:
2d:ee:08:d8:cb:af:c0:5f:a9:e2:f5:11:4b:0b:5b:
78:ef:8c:1d:d0:44:73:83:92:f5:d6:b6:aa:a8:f7:
18:63:fe:b9:6a:84:e1:cc:98:c6:34:6d:58:15:05:
82:b1:28:77:8b:f0:65:87:f0:9b:e6:ab:6a:7c:2f:
de:20:97:df:91:ea:32:3d:97:c5:f5:98:52:17:40:
57:62:d9:06:7b:eb:ad:42:4d:a2:07:87:7a:19:10:
02:f8:ff:79:5b:5f:12:e4:a5:ae:40:70:90:1d:9a:
66:26:c0:82:8a:c3:91:28:d1:cf:e4:fb:9f:4d:34:
97:5c:d1:58:8f:fa:88:e9:1a:30:c0:d5:d6:1d:7d:
72:5d:9a:66:dd:82:88:40:79:76:a5:76:70:ac:5d:
b0:3b:ab:1d:98:9a:bb:8f:d7:56:d6:b5:8d:04:45:
7e:24:34:58:73:4f:da:02:e3:66:ff:23:76:fd:cc:
67:50:24:21:ad:37:e4:ea:a5:d9:6b:c0:03:f1:c7:
aa:68:fa:a4:8e:69:cd:b8:a0:a2:98:b4:66:1b:d6:
1a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:A4:D8:E9:F8:2F:EF:2E:A6:EE:CC:FB:23:D9:72:5D:09:7E:20
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:55:68:7b:7c:36:b9:a8:7e:52:d2:fb:81:0d:b2:c4:95:1f:
dc:02:a7:6b:c7:3c:62:77:de:68:1a:ec:aa:c2:a1:84:14:71:
ee:d1:f7:68:38:97:36:e2:96:07:b3:f0:be:e2:dd:40:f4:07:
fe:31:fb:17:0e:3d:7f:68:75:e9:67:b1:f7:1c:b4:32:5a:51:
0f:12:93:81:77:65:0d:18:56:05:94:82:b9:b6:8c:67:7f:8c:
9f:02:0d:b1:91:d1:bb:9f:c3:c9:bc:c8:1e:47:27:c9:dc:62:
89:0c:26:96:75:cf:1e:21:e4:2e:ac:e7:63:81:d8:3e:f2:49:
17:61:c1:a0:ed:16:f3:e6:7a:f3:f9:f1:c3:10:d7:be:5f:c7:
09:24:68:31:c2:75:e1:7b:f5:b9:4d:d8:ce:ff:c1:30:8b:29:
84:fd:e0:c6:cd:67:62:c1:08:5f:85:31:70:b5:ad:7f:c9:cf:
d2:80:8b:04:cf:2f:49:39:f7:8d:59:19:3c:59:21:90:aa:a8:
1c:46:18:1d:41:a0:22:25:61:71:4c:0b:ad:c5:26:86:c4:98:
45:b0:d1:ae:52:ce:39:19:54:f2:1f:4e:fb:bf:43:04:26:b7:
0c:9b:d0:e2:20:5a:b8:87:f1:95:54:77:80:f3:34:85:4a:2c:
0d:85:2e:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WzrUdbt2l1dzDoWGHJTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDZiZDAwZGFhNGRhOTJhMGMzNmZhY2RkOWNkNjk0OTFk
OTZjNjgwHhcNMjUwNTEwMTgwMDQwWhcNMjUwNTExMTgwMDQwWjAzMTEwLwYDVQQD
Eyg3NDlmYTRkOGU5ZjgyZmVmMmVhNmVlY2NmYjIzZDk3MjVkMDk3ZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu29AKqe3Ry3cksD612luvJol7YME
ZQjRMpyzLxwVuV6Np0muQHTBs7guE28t7gjYy6/AX6ni9RFLC1t474wd0ERzg5L1
1raqqPcYY/65aoThzJjGNG1YFQWCsSh3i/Blh/Cb5qtqfC/eIJffkeoyPZfF9ZhS
F0BXYtkGe+utQk2iB4d6GRAC+P95W18S5KWuQHCQHZpmJsCCisORKNHP5PufTTSX
XNFYj/qI6RowwNXWHX1yXZpm3YKIQHl2pXZwrF2wO6sdmJq7j9dW1rWNBEV+JDRY
c0/aAuNm/yN2/cxnUCQhrTfk6qXZa8AD8ceqaPqkjmnNuKCimLRmG9YaUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSfpNjp+C/vLqbuzPsj2XJdCX4gMB8GA1UdIwQY
MBaAFGJGvQDapNqSoMNvrN2c1pSR2WxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzQ3MzgtNTgzMC00MTdjLTgzNjAt
MGQ2MGQ2NDczMmJmLzEvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzQ3MzgtNTgzMC00MTdjLTgzNjAtMGQ2MGQ2NDczMmJm
LzEvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1Voe3w2
uah+UtL7gQ2yxJUf3AKna8c8YnfeaBrsqsKhhBRx7tH3aDiXNuKWB7PwvuLdQPQH
/jH7Fw49f2h16Wex9xy0MlpRDxKTgXdlDRhWBZSCubaMZ3+MnwINsZHRu5/DybzI
HkcnydxiiQwmlnXPHiHkLqznY4HYPvJJF2HBoO0W8+Z68/nxwxDXvl/HCSRoMcJ1
4Xv1uU3Yzv/BMIsphP3gxs1nYsEIX4UxcLWtf8nP0oCLBM8vSTn3jVkZPFkhkKqo
HEYYHUGgIiVhcUwLrcUmhsSYRbDRrlLOORlU8h9O+79DBCa3DJvQ4iBauIfxlVR3
gPM0hUosDYUuCw==
-----END CERTIFICATE-----
Generated at Sun May 11 04:12:26 2025 by rpki-client