Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: /Q9Wo4L0ll1/RJ/RSm6s+EK/+rQksOMkZx9HBqNl+eI=
Subject key identifier: 15:64:B4:57:38:90:0C:A1:47:04:C1:DD:22:B8:69:51:A1:45:9A:B3
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 0196865AE3553C735B41E860F8D098631166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0BE9
Signing time: Wed 30 Apr 2025 11:00:25 +0000
Manifest this update: Wed 30 Apr 2025 11:00:25 +0000
Manifest next update: Thu 01 May 2025 11:00:25 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: GgAhnm75O/4habUuTRDdEkqrt5oHjA2TlcUKkazxBuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5a:e3:55:3c:73:5b:41:e8:60:f8:d0:98:63:11:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Apr 30 11:00:25 2025 GMT
Not After : May 1 11:00:25 2025 GMT
Subject: CN=1564b45738900ca14704c1dd22b86951a1459ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:62:71:c9:1f:b6:55:3d:62:e7:15:3a:2b:
ee:8b:2b:2e:db:7f:6d:ec:60:6a:d9:23:6c:b4:4c:
95:b6:64:7f:0b:56:1f:dd:49:10:4b:17:28:1b:7e:
21:5b:72:bf:69:ea:14:c9:e7:71:b4:ac:70:d4:db:
20:71:d0:f5:83:41:d5:06:2e:73:e8:e1:93:2a:07:
cb:57:ff:52:79:9b:50:11:b7:7e:58:7b:86:72:b2:
e7:46:85:53:91:39:f9:bc:b6:da:b3:5a:e7:3d:1c:
5b:35:a6:ff:99:32:bc:b1:d3:33:dc:2b:7d:38:b6:
df:66:22:79:b8:bd:5f:70:f0:6a:84:52:56:2e:50:
11:77:48:c7:2c:58:e9:a6:9c:8d:ca:37:fc:a1:04:
99:23:93:31:03:d6:de:5f:c7:56:ea:6c:92:e4:9f:
9d:0f:4f:04:b9:b1:1a:4e:55:c8:68:56:cc:fb:8f:
bd:31:06:dd:9b:ec:7d:9c:cc:75:94:27:f7:7b:fa:
b8:5a:c1:1d:a9:76:22:ae:8c:07:cd:e9:73:11:b3:
91:75:b1:82:67:58:04:d2:d6:36:d6:10:eb:87:d4:
1e:8d:a7:a7:28:df:9c:f7:ce:9c:50:67:6d:d6:16:
b1:2e:65:f8:3c:0c:19:b1:08:18:4a:2a:b9:ea:d7:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:B4:57:38:90:0C:A1:47:04:C1:DD:22:B8:69:51:A1:45:9A:B3
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ef:65:b4:a8:fd:91:f1:f5:d1:21:41:48:a5:e0:50:c6:67:
22:7a:d4:42:d4:8c:98:aa:ad:3f:0a:51:fb:62:49:a5:35:8c:
b3:86:57:8e:ee:a2:3d:03:a3:ff:16:08:8a:1e:a0:4b:5a:28:
7c:07:6e:27:5f:7d:4c:12:b5:2c:7f:d6:63:ea:26:f4:11:f4:
ac:1f:5a:46:81:8f:64:59:68:ff:2f:5d:b2:e5:a3:63:8c:30:
92:47:c5:5b:41:4c:a0:88:56:cd:ba:dd:56:5b:3f:07:e8:12:
70:0d:e4:9c:c9:e2:75:23:78:2a:a9:a7:88:3b:a5:2a:4c:99:
54:4d:cd:8f:46:0f:7c:84:23:b6:83:5c:4b:b3:1d:ea:00:d9:
f0:cf:6c:9b:5e:e2:86:52:d8:96:07:1b:51:e4:78:2f:9b:08:
1f:d0:a3:4b:9e:23:c4:94:e6:96:17:3a:1e:fe:ac:c4:e5:30:
dd:52:6b:e0:66:4b:71:c9:30:30:51:53:aa:32:0f:a3:b8:b6:
54:51:0a:72:2e:8b:a0:f3:95:6f:b7:b6:f5:15:ef:f7:89:67:
c0:53:3f:b2:9b:5a:f7:16:db:73:7d:ed:c2:9c:d6:55:0b:86:
1c:f8:81:67:68:bc:40:1b:3d:40:ef:63:44:f0:df:7a:fb:4c:
c2:fb:e3:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGWuNVPHNbQehg+NCYYxFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWI1YjI5Njk5ZTJkZDQxODA0MGMwZWRmNzUwMDg1ZDg3
MjA0NDIwHhcNMjUwNDMwMTEwMDI1WhcNMjUwNTAxMTEwMDI1WjAzMTEwLwYDVQQD
EygxNTY0YjQ1NzM4OTAwY2ExNDcwNGMxZGQyMmI4Njk1MWExNDU5YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytRicckftlU9YucVOivuiysu239t
7GBq2SNstEyVtmR/C1Yf3UkQSxcoG34hW3K/aeoUyedxtKxw1NsgcdD1g0HVBi5z
6OGTKgfLV/9SeZtQEbd+WHuGcrLnRoVTkTn5vLbas1rnPRxbNab/mTK8sdMz3Ct9
OLbfZiJ5uL1fcPBqhFJWLlARd0jHLFjpppyNyjf8oQSZI5MxA9beX8dW6myS5J+d
D08EubEaTlXIaFbM+4+9MQbdm+x9nMx1lCf3e/q4WsEdqXYirowHzelzEbORdbGC
Z1gE0tY21hDrh9QejaenKN+c986cUGdt1haxLmX4PAwZsQgYSiq56tdVbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVktFc4kAyhRwTB3SK4aVGhRZqzMB8GA1UdIwQY
MBaAFMibWylpni3UGAQMDt91AIXYcgRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEt
Njc1NzU5YTNiMGI3LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEtNjc1NzU5YTNiMGI3
LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe9ltKj9
kfH10SFBSKXgUMZnInrUQtSMmKqtPwpR+2JJpTWMs4ZXju6iPQOj/xYIih6gS1oo
fAduJ199TBK1LH/WY+om9BH0rB9aRoGPZFlo/y9dsuWjY4wwkkfFW0FMoIhWzbrd
Vls/B+gScA3knMnidSN4KqmniDulKkyZVE3Nj0YPfIQjtoNcS7Md6gDZ8M9sm17i
hlLYlgcbUeR4L5sIH9CjS54jxJTmlhc6Hv6sxOUw3VJr4GZLcckwMFFTqjIPo7i2
VFEKci6LoPOVb7e29RXv94lnwFM/spta9xbbc33twpzWVQuGHPiBZ2i8QBs9QO9j
RPDfevtMwvvj1Q==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:43:53 2025 by rpki-client