Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: dIa3wlIU23Iy5p0IgJXEtwJ55Ckq6RfncUeve5cXpUY=
Subject key identifier: 5E:DB:02:22:14:16:E3:6C:DD:3E:16:5E:65:F7:CC:19:B1:44:5B:E0
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 0196C34B5AB58D07C34DC5FAD1612BABA848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 0FE9
Signing time: Mon 12 May 2025 07:00:17 +0000
Manifest this update: Mon 12 May 2025 07:00:17 +0000
Manifest next update: Tue 13 May 2025 07:00:17 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: dG3+xCq+TuDsPgpceD6vKb2o7Ixi8Qt+DTRPuFcGpWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:5a:b5:8d:07:c3:4d:c5:fa:d1:61:2b:ab:a8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: May 12 07:00:17 2025 GMT
Not After : May 13 07:00:17 2025 GMT
Subject: CN=5edb02221416e36cdd3e165e65f7cc19b1445be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:43:40:84:e6:16:e0:2a:28:bd:e3:d0:69:
d6:86:cc:f0:7e:c3:23:d9:c2:83:d3:9b:2b:9c:b0:
dd:fc:34:65:fd:e7:3f:1c:09:59:bf:7a:2b:a1:33:
62:69:fc:bf:68:d5:81:a8:e6:26:0d:1a:a1:dd:de:
74:ad:e7:96:2c:83:eb:dd:f2:94:33:35:6f:a1:c5:
79:65:6d:c2:2a:96:aa:1d:c4:e2:8b:ee:83:88:c3:
6a:00:93:48:14:c9:1e:76:76:7d:ae:d7:5b:f4:38:
b9:8b:44:7a:7b:5e:48:d1:3a:84:7c:11:6a:58:a6:
d4:c6:ae:91:fb:48:fe:a1:1d:45:5f:69:fb:48:ac:
d8:88:3b:6a:f6:7e:62:24:63:2f:51:e5:55:df:07:
d6:94:db:32:ba:c8:66:f0:c4:5f:9f:67:8d:f2:8d:
af:6d:2c:b1:92:a9:18:6a:11:58:e5:c0:e4:86:a4:
5a:60:2e:6f:25:e3:73:4f:b2:6e:36:c9:f4:2d:0b:
7b:95:4d:80:2b:52:9c:88:06:ef:b1:6b:24:84:b4:
d5:d7:85:b5:9d:50:cb:fa:ed:84:25:eb:6c:b2:96:
e8:e9:8e:72:0d:a7:d9:70:a0:84:28:56:5f:a0:17:
f1:34:82:18:6d:9d:5d:1e:6e:ce:aa:71:43:4d:f9:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DB:02:22:14:16:E3:6C:DD:3E:16:5E:65:F7:CC:19:B1:44:5B:E0
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:bb:60:2c:cd:68:ae:fa:82:09:b0:1c:7a:f6:15:f7:57:
a0:32:6f:cd:bf:28:37:d0:23:19:26:00:36:4d:d0:38:c7:65:
2f:41:ec:ad:ce:5a:9f:e7:70:96:64:11:b6:32:22:13:10:7a:
d0:12:69:de:dc:f6:36:17:44:aa:7a:66:14:b9:a9:74:af:54:
7d:80:8e:fe:22:62:39:09:03:d9:31:2d:77:35:83:ab:66:36:
56:1b:65:fa:d0:bb:73:b9:58:70:e2:ae:42:ca:36:e4:d7:e3:
9d:a3:2e:6d:89:8d:9a:da:4a:9b:47:33:76:41:42:a3:0e:b0:
c7:21:c8:1b:8c:96:09:be:28:7a:3a:b9:f1:6b:3a:be:54:e8:
37:7e:f4:85:a5:ba:c4:16:22:ef:31:0a:96:14:3a:0f:a2:8e:
ed:4e:2e:dd:2a:64:90:a8:39:64:68:ae:a5:26:46:20:db:c1:
af:b4:e2:d2:f1:7f:b3:33:dd:12:95:f2:aa:46:04:5d:22:85:
67:6d:b5:08:64:96:86:7c:82:62:c7:73:6f:21:50:4b:b4:20:
91:0f:2f:9a:da:34:1c:16:50:5f:03:c9:e4:fb:47:bb:04:52:
65:c7:6c:9c:fa:46:74:b0:03:42:98:9d:30:2e:f0:6e:37:0a:
ca:40:56:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS1q1jQfDTcX60WErq6hIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDI0MzI0YzMxYTI4MTc5MjNlMGY2YzUzNzkwNDI2ZTE0
MmMyNGMwHhcNMjUwNTEyMDcwMDE3WhcNMjUwNTEzMDcwMDE3WjAzMTEwLwYDVQQD
Eyg1ZWRiMDIyMjE0MTZlMzZjZGQzZTE2NWU2NWY3Y2MxOWIxNDQ1YmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxNDQITmFuAqKL3j0GnWhszwfsMj
2cKD05srnLDd/DRl/ec/HAlZv3oroTNiafy/aNWBqOYmDRqh3d50reeWLIPr3fKU
MzVvocV5ZW3CKpaqHcTii+6DiMNqAJNIFMkednZ9rtdb9Di5i0R6e15I0TqEfBFq
WKbUxq6R+0j+oR1FX2n7SKzYiDtq9n5iJGMvUeVV3wfWlNsyushm8MRfn2eN8o2v
bSyxkqkYahFY5cDkhqRaYC5vJeNzT7JuNsn0LQt7lU2AK1KciAbvsWskhLTV14W1
nVDL+u2EJetsspbo6Y5yDafZcKCEKFZfoBfxNIIYbZ1dHm7OqnFDTflVYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7bAiIUFuNs3T4WXmX3zBmxRFvgMB8GA1UdIwQY
MBaAFGACQyTDGigXkj4PbFN5BCbhQsJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFKREpNTWFLQmVTUGc5c1Uza0VKdUZDd2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNDk3MDktZTRmMC00ZDBlLWIzZGQt
NjVlYTVkM2E4MDg4LzEvWUFKREpNTWFLQmVTUGc5c1Uza0VKdUZDd2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jNDk3MDktZTRmMC00ZDBlLWIzZGQtNjVlYTVkM2E4MDg4
LzEvWUFKREpNTWFLQmVTUGc5c1Uza0VKdUZDd2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjy7YCzN
aK76ggmwHHr2FfdXoDJvzb8oN9AjGSYANk3QOMdlL0Hsrc5an+dwlmQRtjIiExB6
0BJp3tz2NhdEqnpmFLmpdK9UfYCO/iJiOQkD2TEtdzWDq2Y2Vhtl+tC7c7lYcOKu
Qso25NfjnaMubYmNmtpKm0czdkFCow6wxyHIG4yWCb4oejq58Ws6vlToN370haW6
xBYi7zEKlhQ6D6KO7U4u3SpkkKg5ZGiupSZGINvBr7Ti0vF/szPdEpXyqkYEXSKF
Z221CGSWhnyCYsdzbyFQS7QgkQ8vmto0HBZQXwPJ5PtHuwRSZcdsnPpGdLADQpid
MC7wbjcKykBWjA==
-----END CERTIFICATE-----
Generated at Mon May 12 11:18:08 2025 by rpki-client