Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: uEu1KigGBiIdap4diMMJfuib5GswBR1TgML/pvtqPtM=
Subject key identifier: 80:39:D2:BC:38:A2:CF:A7:BA:4F:7A:4C:AA:84:3E:F9:33:17:16:7B
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 0196A5E5CB7525786A4582F5AB8816809E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 11E9
Signing time: Tue 06 May 2025 14:00:22 +0000
Manifest this update: Tue 06 May 2025 14:00:22 +0000
Manifest next update: Wed 07 May 2025 14:00:22 +0000
Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: iTB4EXyWqJgWuoHuaLel50Bn8sQHhdgNqohSIB2Aedg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:e5:cb:75:25:78:6a:45:82:f5:ab:88:16:80:9e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: May 6 14:00:22 2025 GMT
Not After : May 7 14:00:22 2025 GMT
Subject: CN=8039d2bc38a2cfa7ba4f7a4caa843ef93317167b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:cc:d4:c6:1d:21:5d:12:22:49:12:85:68:
d3:73:88:6e:1b:d0:fa:ec:fa:22:fe:16:b3:2d:1a:
aa:54:1c:1d:04:e9:6a:1d:0b:2e:06:ba:35:1c:7b:
0e:9f:cb:b6:d7:7d:8b:bd:51:d3:53:ed:6b:dc:0c:
89:43:8d:3f:e4:5d:bb:df:72:79:53:b4:80:d5:1e:
22:d9:09:47:1e:96:27:e1:39:8d:92:8b:89:16:ac:
87:b7:1b:38:90:fb:ca:46:9b:70:ca:0f:f1:50:a6:
d9:b1:a8:4e:97:a8:dd:be:5e:f8:4f:cb:15:6a:aa:
d9:30:b2:6c:c8:e8:fe:1c:e7:d1:21:30:19:8d:30:
6b:c5:b2:6e:50:ab:d1:35:d7:63:f3:2d:b9:f1:95:
1c:a6:3b:bf:31:e2:41:65:a6:bb:0e:d1:dd:09:0b:
60:5d:f6:2b:9b:b9:87:bd:51:b8:a5:a4:f3:17:ae:
ca:b6:6a:45:86:82:8a:7f:b1:f2:26:9c:b5:3d:f6:
0d:20:99:bc:3e:78:12:84:75:33:de:8e:b6:fd:b6:
ec:3c:ac:56:f1:44:21:75:d9:22:ce:ba:31:a4:70:
dc:73:9f:65:60:91:92:5e:d8:56:13:5b:f4:36:19:
b7:f8:aa:14:32:03:b5:03:26:46:2c:b9:73:90:e5:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:39:D2:BC:38:A2:CF:A7:BA:4F:7A:4C:AA:84:3E:F9:33:17:16:7B
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:25:b5:ce:80:88:08:ea:18:35:b9:3d:48:09:b6:8d:be:06:
e1:1a:97:91:87:20:83:15:1c:cf:e2:9e:29:69:1b:d5:f8:98:
92:27:6e:1d:e7:67:9a:4a:e7:bb:bf:3e:de:8c:d6:4d:5b:e9:
21:42:a4:af:14:2c:29:eb:b0:d5:32:9e:a5:47:aa:ef:de:02:
bf:0d:8a:99:5e:ac:ba:6a:e6:61:f9:7d:d9:a5:90:88:24:4f:
5f:8d:e2:e4:00:dd:6e:c2:c4:4d:23:a0:2e:e6:6e:8f:06:5f:
7f:d0:65:7a:f5:80:24:e3:9b:9e:e4:67:9c:95:cd:9c:4c:6e:
a1:4b:0f:38:0c:fc:92:af:70:52:55:53:5c:e0:3a:b6:05:81:
c0:aa:a3:34:d2:dd:cd:30:37:11:e9:07:a9:8a:b5:fc:8f:bc:
ff:f5:7f:ee:92:38:aa:4f:72:9a:c7:14:23:ba:46:28:f4:75:
b9:1c:4d:b8:2a:8e:18:bc:ab:01:47:ba:dd:73:a3:36:a1:08:
0f:bd:bc:fa:dd:5d:05:8e:59:ac:ba:64:99:e2:38:81:07:46:
07:ea:dc:72:75:fb:ba:b1:de:5d:c1:bf:05:37:71:55:b9:1b:
63:39:64:fc:1d:c0:cc:eb:fa:44:00:ea:cd:9e:be:6a:c1:9a:
1b:05:b4:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZal5ct1JXhqRYL1q4gWgJ6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZjk3MjY3ZTdjMDA3OTUzMDk1MDlmMWU4ZDNkOWNkZTBh
NzZjNGUwHhcNMjUwNTA2MTQwMDIyWhcNMjUwNTA3MTQwMDIyWjAzMTEwLwYDVQQD
Eyg4MDM5ZDJiYzM4YTJjZmE3YmE0ZjdhNGNhYTg0M2VmOTMzMTcxNjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs53M1MYdIV0SIkkShWjTc4huG9D6
7Poi/hazLRqqVBwdBOlqHQsuBro1HHsOn8u2132LvVHTU+1r3AyJQ40/5F2733J5
U7SA1R4i2QlHHpYn4TmNkouJFqyHtxs4kPvKRptwyg/xUKbZsahOl6jdvl74T8sV
aqrZMLJsyOj+HOfRITAZjTBrxbJuUKvRNddj8y258ZUcpju/MeJBZaa7DtHdCQtg
XfYrm7mHvVG4paTzF67KtmpFhoKKf7HyJpy1PfYNIJm8PngShHUz3o62/bbsPKxW
8UQhddkizroxpHDcc59lYJGSXthWE1v0Nhm3+KoUMgO1AyZGLLlzkOUKmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA50rw4os+nuk96TKqEPvkzFxZ7MB8GA1UdIwQY
MBaAFGP5cmfnwAeVMJUJ8ejT2c3gp2xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83YTFjMmUtNzVmYi00NGM2LWE4M2Mt
MTQ2NzNjNzJhMWRmLzEvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83YTFjMmUtNzVmYi00NGM2LWE4M2MtMTQ2NzNjNzJhMWRm
LzEvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSW1zoCI
COoYNbk9SAm2jb4G4RqXkYcggxUcz+KeKWkb1fiYkiduHednmkrnu78+3ozWTVvp
IUKkrxQsKeuw1TKepUeq794Cvw2KmV6sumrmYfl92aWQiCRPX43i5ADdbsLETSOg
LuZujwZff9BlevWAJOObnuRnnJXNnExuoUsPOAz8kq9wUlVTXOA6tgWBwKqjNNLd
zTA3EekHqYq1/I+8//V/7pI4qk9ymscUI7pGKPR1uRxNuCqOGLyrAUe63XOjNqEI
D728+t1dBY5ZrLpkmeI4gQdGB+rccnX7urHeXcG/BTdxVbkbYzlk/B3AzOv6RADq
zZ6+asGaGwW0pw==
-----END CERTIFICATE-----
Generated at Tue May 6 21:36:20 2025 by rpki-client