Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
File: YOiP_m8N5fLx_J0U72LyVnC9W0o.mft (raw, json)
Hash identifier: cXSmAZ23a5fOvTUKFjtK/XzZ9968RR5eXdaF83dQg5E=
Subject key identifier: 31:D6:CE:FF:D8:A8:8F:56:88:E8:01:8C:44:B7:B9:15:F3:B5:FB:C3
Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
Certificate issuer: /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
Certificate serial: 0196C2DD9AEE1160867056A2C71FFD6CC37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
Manifest number: 0504
Signing time: Mon 12 May 2025 05:00:24 +0000
Manifest this update: Mon 12 May 2025 05:00:24 +0000
Manifest next update: Tue 13 May 2025 05:00:24 +0000
Files and hashes: 1: YOiP_m8N5fLx_J0U72LyVnC9W0o.crl (hash: ULsUoX2DB0soUNTUifE89SaYJk8uz7zVfqoswWwZPBA=)
2: cBsFVB26JCMAz1JmmMw2rMdGhDc.roa (hash: T49iCpRELOVmeVt8pXk4tghuepmEHEqGlpGQeMuT87g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:9a:ee:11:60:86:70:56:a2:c7:1f:fd:6c:c3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
Validity
Not Before: May 12 05:00:24 2025 GMT
Not After : May 13 05:00:24 2025 GMT
Subject: CN=31d6ceffd8a88f5688e8018c44b7b915f3b5fbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:c3:ff:96:51:3d:e2:c2:b9:da:86:7a:ee:
38:9b:d8:2a:c4:66:f8:98:48:bf:9b:5d:5f:67:3d:
c6:88:40:1f:b4:20:e3:05:27:dd:18:fd:8c:77:fb:
c8:da:7d:4c:b8:08:80:1c:dd:93:78:ac:5f:54:0e:
fb:c3:e8:e8:a4:9a:eb:16:38:d2:00:6f:c9:a2:92:
b8:e4:fa:cf:8b:ca:43:fc:d5:8a:0f:1d:c6:22:dc:
d2:2e:ac:05:05:06:3c:0d:ad:7c:52:87:6f:31:f5:
0d:ae:c4:da:93:ff:a9:8e:5d:fd:a1:fb:ee:2e:c5:
6c:99:b0:50:f0:89:71:6c:ba:45:61:06:8a:cd:77:
b8:e5:bb:24:7b:a9:41:4a:7e:b9:24:69:d8:46:61:
10:e9:9d:ac:2d:85:94:cd:5b:2c:97:f5:04:9e:c0:
1a:de:8e:53:40:e1:84:18:13:09:04:00:20:65:26:
f7:24:f8:22:9e:7f:99:a8:aa:28:33:68:1f:47:55:
7f:9a:a3:72:8f:24:1d:4f:b2:55:62:70:5b:b0:ab:
a4:c7:73:ac:81:1f:96:53:43:da:63:ac:6c:89:97:
88:b6:38:5d:1e:74:71:fb:02:00:fb:09:35:47:a9:
e7:32:df:9d:95:f4:95:8d:fb:f2:21:3f:47:8b:3b:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:CE:FF:D8:A8:8F:56:88:E8:01:8C:44:B7:B9:15:F3:B5:FB:C3
X509v3 Authority Key Identifier:
keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:34:71:bc:88:ce:b5:7d:d8:db:51:ed:95:ec:90:1f:a9:5e:
2a:6b:26:c3:34:c5:aa:eb:1b:38:e5:17:d8:34:c8:ed:eb:77:
89:82:1a:f3:4c:c5:ad:7d:2e:f1:f9:9f:14:ba:a6:7c:70:84:
b7:76:be:a5:db:95:4e:8c:88:3b:d3:9d:5a:c4:1d:73:8c:86:
c6:01:9e:f8:3e:c0:29:7a:24:9b:cc:e1:09:37:56:2d:cb:f3:
19:32:f1:17:0f:a9:4c:38:1d:c6:b3:23:c3:ee:0a:19:ab:3b:
6b:8a:15:b0:96:79:d0:af:e7:bb:b8:ac:4a:c8:2d:84:96:63:
18:4a:64:0d:c0:6c:4e:60:96:d3:85:11:5e:7f:df:2b:1a:eb:
d0:04:ab:f3:ee:a2:92:37:3e:98:25:b3:92:82:5b:5e:ce:b9:
f8:b8:26:56:9f:e6:84:6c:42:0e:fb:85:35:d2:3e:3e:3d:56:
47:e4:74:24:4c:1c:b9:1e:39:53:ac:fa:6a:9c:2d:0f:0d:e8:
91:26:e4:8d:8f:14:25:a3:3c:96:68:a0:4a:53:ef:67:c4:aa:
0c:48:7a:b6:dc:1c:58:0c:22:ec:30:0f:65:fc:71:18:f0:fd:
c7:2f:15:70:1b:9c:4b:78:86:f3:55:01:37:66:12:45:dd:56:
94:9c:51:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbC3ZruEWCGcFaixx/9bMN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTg4ZmZlNmYwZGU1ZjJmMWZjOWQxNGVmNjJmMjU2NzBi
ZDViNGEwHhcNMjUwNTEyMDUwMDI0WhcNMjUwNTEzMDUwMDI0WjAzMTEwLwYDVQQD
EygzMWQ2Y2VmZmQ4YTg4ZjU2ODhlODAxOGM0NGI3YjkxNWYzYjVmYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxibD/5ZRPeLCudqGeu44m9gqxGb4
mEi/m11fZz3GiEAftCDjBSfdGP2Md/vI2n1MuAiAHN2TeKxfVA77w+jopJrrFjjS
AG/JopK45PrPi8pD/NWKDx3GItzSLqwFBQY8Da18UodvMfUNrsTak/+pjl39ofvu
LsVsmbBQ8IlxbLpFYQaKzXe45bske6lBSn65JGnYRmEQ6Z2sLYWUzVssl/UEnsAa
3o5TQOGEGBMJBAAgZSb3JPginn+ZqKooM2gfR1V/mqNyjyQdT7JVYnBbsKukx3Os
gR+WU0PaY6xsiZeItjhdHnRx+wIA+wk1R6nnMt+dlfSVjfvyIT9HiztyTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHWzv/YqI9WiOgBjES3uRXztfvDMB8GA1UdIwQY
MBaAFGDoj/5vDeXy8fydFO9i8lZwvVtKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEt
MDcyNWYwNjk3YjgzLzEvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEtMDcyNWYwNjk3Yjgz
LzEvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzRxvIjO
tX3Y21HtleyQH6leKmsmwzTFqusbOOUX2DTI7et3iYIa80zFrX0u8fmfFLqmfHCE
t3a+pduVToyIO9OdWsQdc4yGxgGe+D7AKXokm8zhCTdWLcvzGTLxFw+pTDgdxrMj
w+4KGas7a4oVsJZ50K/nu7isSsgthJZjGEpkDcBsTmCW04URXn/fKxrr0ASr8+6i
kjc+mCWzkoJbXs65+LgmVp/mhGxCDvuFNdI+Pj1WR+R0JEwcuR45U6z6apwtDw3o
kSbkjY8UJaM8lmigSlPvZ8SqDEh6ttwcWAwi7DAPZfxxGPD9xy8VcBucS3iG81UB
N2YSRd1WlJxRMg==
-----END CERTIFICATE-----
Generated at Mon May 12 07:50:54 2025 by rpki-client