Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: Ie+bt0FIFs6bXo6yHxk5mqrOrUnG/vvSegE010E2N+E=
Subject key identifier: 67:C6:D6:7D:B8:CC:11:D5:D9:57:B1:F5:71:BC:97:BD:4B:ED:61:E2
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 0196BAB68B87B3F7A0C9CDBE46AA88A32591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0A1A
Signing time: Sat 10 May 2025 15:00:47 +0000
Manifest this update: Sat 10 May 2025 15:00:47 +0000
Manifest next update: Sun 11 May 2025 15:00:47 +0000
Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: ulod0vCvb//j0h81JRJ4bGDW+8bVIBiYkFaKj4axB3c=)
3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:8b:87:b3:f7:a0:c9:cd:be:46:aa:88:a3:25:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: May 10 15:00:47 2025 GMT
Not After : May 11 15:00:47 2025 GMT
Subject: CN=67c6d67db8cc11d5d957b1f571bc97bd4bed61e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:e2:f2:35:52:24:3e:f4:43:2f:81:f9:54:
cb:96:b9:fb:0c:83:59:5c:4c:d0:5f:ad:3a:df:c8:
4c:a3:98:35:74:6b:f5:c6:a2:5f:cc:2f:d4:88:60:
86:68:9d:a0:d3:c2:4f:df:86:a9:55:4e:8d:a9:23:
2b:b4:db:ac:36:ee:e7:af:65:ec:20:5e:2a:35:04:
6e:17:f0:f4:76:19:48:0a:9e:ea:21:be:9d:5d:12:
d0:81:bc:ef:98:07:62:5b:b3:e6:9a:c6:b8:ce:28:
9e:03:65:ca:d2:6d:19:9e:3e:f6:59:5b:c7:69:4e:
7c:ad:75:74:3d:cb:4d:2d:30:49:ea:b3:ba:d0:3a:
c0:51:f4:e6:07:00:d0:ee:02:ef:1b:c3:db:4f:cd:
6c:b3:36:b0:80:69:f6:11:61:4e:cc:cf:0a:a8:43:
e1:be:8f:5e:4a:b0:42:ce:3d:7f:19:94:70:7f:18:
f2:1d:d6:58:0b:57:9f:c7:d7:bf:70:3a:8f:00:3a:
b2:50:08:fa:00:6e:89:da:4c:42:2c:35:52:0c:e1:
bc:03:25:8d:95:ad:f0:36:cb:2b:16:5a:ce:ab:de:
07:64:f3:1e:01:4d:6d:ac:e4:f7:0c:e5:56:15:26:
6a:41:f7:88:fd:01:e8:6d:34:14:68:c0:d8:14:88:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:D6:7D:B8:CC:11:D5:D9:57:B1:F5:71:BC:97:BD:4B:ED:61:E2
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b0:5e:64:c9:0a:40:88:7b:16:bf:01:b6:24:42:99:34:00:
a7:d7:27:ef:95:cc:98:9b:ba:f7:f5:c5:cb:8f:e9:4a:88:37:
d5:2a:c9:0e:3f:2e:eb:55:e3:74:99:93:ff:1a:f9:43:26:7a:
95:f2:97:52:fa:42:30:7d:b8:a2:58:ee:73:0f:9b:53:84:68:
f4:dc:9c:38:8c:f2:23:eb:49:bf:09:80:69:07:4e:8c:30:9e:
38:f3:1a:5e:60:ed:ff:5c:33:59:1f:7b:16:c3:6e:0b:c3:09:
2c:7e:20:41:bd:7f:eb:ca:55:6d:67:57:87:0a:cb:aa:66:4a:
ef:3e:0e:f9:38:49:2d:6f:a0:82:67:a0:58:c0:87:0c:d9:ac:
06:cf:5b:46:e4:ce:9a:38:e4:e5:5c:eb:c8:ca:06:2b:89:20:
43:34:7f:58:cc:61:2e:eb:62:95:fb:e9:05:6e:3f:18:8d:d6:
d1:4a:2e:c5:82:13:63:e1:dd:cf:2e:9a:df:0c:b0:fa:8d:50:
31:73:04:ea:52:e3:d1:4e:44:66:69:04:1e:46:f9:33:b8:54:
bc:58:54:db:3f:fe:14:0c:36:b7:a3:04:8d:90:6f:70:06:98:
c4:cb:d7:07:fa:e3:26:7d:88:d3:05:65:ea:6f:1e:f8:f5:cb:
d5:38:a5:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6touHs/egyc2+RqqIoyWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODc3ZjRjZTBkMzYxNjE3NzI0ZDRiMjg5YTg5MThjNWM2
ZDcyMmQwHhcNMjUwNTEwMTUwMDQ3WhcNMjUwNTExMTUwMDQ3WjAzMTEwLwYDVQQD
Eyg2N2M2ZDY3ZGI4Y2MxMWQ1ZDk1N2IxZjU3MWJjOTdiZDRiZWQ2MWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7fi8jVSJD70Qy+B+VTLlrn7DINZ
XEzQX60638hMo5g1dGv1xqJfzC/UiGCGaJ2g08JP34apVU6NqSMrtNusNu7nr2Xs
IF4qNQRuF/D0dhlICp7qIb6dXRLQgbzvmAdiW7Pmmsa4ziieA2XK0m0Znj72WVvH
aU58rXV0PctNLTBJ6rO60DrAUfTmBwDQ7gLvG8PbT81sszawgGn2EWFOzM8KqEPh
vo9eSrBCzj1/GZRwfxjyHdZYC1efx9e/cDqPADqyUAj6AG6J2kxCLDVSDOG8AyWN
la3wNssrFlrOq94HZPMeAU1trOT3DOVWFSZqQfeI/QHobTQUaMDYFIiSvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfG1n24zBHV2Vex9XG8l71L7WHiMB8GA1UdIwQY
MBaAFGGHf0zg02FhdyTUsomokYxcbXItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEt
YzcyMjIxN2U1M2I2LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEtYzcyMjIxN2U1M2I2
LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLBeZMkK
QIh7Fr8BtiRCmTQAp9cn75XMmJu69/XFy4/pSog31SrJDj8u61XjdJmT/xr5QyZ6
lfKXUvpCMH24oljucw+bU4Ro9NycOIzyI+tJvwmAaQdOjDCeOPMaXmDt/1wzWR97
FsNuC8MJLH4gQb1/68pVbWdXhwrLqmZK7z4O+ThJLW+ggmegWMCHDNmsBs9bRuTO
mjjk5VzryMoGK4kgQzR/WMxhLutilfvpBW4/GI3W0UouxYITY+Hdzy6a3wyw+o1Q
MXME6lLj0U5EZmkEHkb5M7hUvFhU2z/+FAw2t6MEjZBvcAaYxMvXB/rjJn2I0wVl
6m8e+PXL1Til/g==
-----END CERTIFICATE-----
Generated at Sat May 10 16:57:02 2025 by rpki-client