Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: bZVJCJYmkaDuKM7Mr+74Obf9ZLOiAyET1t7NpY+clEA=
Subject key identifier: 64:F3:A1:66:42:64:5A:62:68:11:8C:15:1B:16:23:7C:A7:9B:02:6F
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 0196748B5D3B8D71C64E36F8F52D5752213B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 13E3
Signing time: Sun 27 Apr 2025 00:00:12 +0000
Manifest this update: Sun 27 Apr 2025 00:00:12 +0000
Manifest next update: Mon 28 Apr 2025 00:00:12 +0000
Files and hashes: 1: 0TtFz6wVP0jqaQNw01V55drmS3k.roa (hash: TMVD5m2P0IJi74IF8JJhCFdWfhDxP8MQCO9QQGNNZr4=)
2: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: mWQrwtQbIRKWDe0h2mRsG5WADBJDMZejUodCH3OUQvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:5d:3b:8d:71:c6:4e:36:f8:f5:2d:57:52:21:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Apr 27 00:00:12 2025 GMT
Not After : Apr 28 00:00:12 2025 GMT
Subject: CN=64f3a16642645a6268118c151b16237ca79b026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:0b:1c:3c:e4:a0:e0:de:ea:5a:f9:a6:b9:
62:b4:95:ef:04:71:01:cd:d6:a3:60:b4:76:5e:7c:
9b:10:0d:11:0d:31:d5:f4:62:88:db:c3:32:ab:1d:
15:01:a8:f4:19:6a:fb:e8:99:34:7f:74:f0:7e:43:
13:d6:dd:10:fa:46:83:da:2d:62:a2:f6:18:bb:34:
16:27:98:0f:00:4f:c8:c7:0e:ab:17:a2:11:a7:63:
7d:ee:52:87:c3:14:2e:8f:09:de:84:d6:3d:16:bc:
79:40:18:56:db:4e:da:84:a6:12:3e:0e:d9:98:ae:
7e:f5:10:46:77:d3:3d:7c:80:40:db:0f:a3:40:e7:
46:14:ce:38:00:50:b9:74:1e:a1:d8:d0:92:ab:d9:
81:01:22:b5:d8:0f:68:2c:95:80:02:76:4c:b2:24:
26:40:97:78:2d:84:4e:2a:76:ff:21:13:10:98:b9:
1c:e8:b9:2e:6e:56:8b:04:9e:20:04:a2:09:d0:7e:
2a:d2:91:50:1c:14:a0:7b:95:3a:8e:59:e1:e3:c6:
21:88:f9:7c:5d:89:0a:c6:29:89:84:b7:2b:91:cf:
62:1b:28:6d:33:37:3c:40:be:f3:45:a7:c7:ea:c2:
3d:60:13:fc:56:87:a0:82:cc:22:64:d5:4e:13:be:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F3:A1:66:42:64:5A:62:68:11:8C:15:1B:16:23:7C:A7:9B:02:6F
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:07:9c:2e:21:09:94:23:4d:df:cf:7c:41:5f:a8:f1:cd:d7:
bc:b8:12:51:e1:70:16:76:1e:27:77:04:24:57:40:0d:3c:86:
c8:43:fd:0c:ec:ab:d6:be:63:55:c8:a5:bb:1d:a3:47:d1:c3:
96:47:1c:c3:b6:f3:68:a1:2e:a8:a1:1e:63:7a:81:57:d8:e1:
19:67:52:c8:6d:8c:48:57:98:be:af:6f:ee:50:19:8f:fa:e5:
36:39:f7:5b:a2:e6:34:00:6c:d1:c6:f1:a8:24:5e:11:a9:20:
3e:9d:ee:87:62:e0:39:32:0e:8a:10:f5:8d:ec:4e:74:e3:17:
43:53:13:79:f8:8c:99:65:8c:c1:7b:3d:43:59:88:6b:59:d6:
76:86:5f:75:d0:43:38:72:a1:30:3f:dd:5e:e7:2b:7b:61:ed:
80:3a:86:e1:cd:dd:1b:cd:3b:4b:3e:07:e4:c5:d5:11:74:47:
3b:6c:97:96:33:0d:43:66:76:d2:bd:50:81:6e:4c:e3:48:9e:
88:98:26:74:9a:18:9f:c5:e1:eb:ca:c4:1b:be:1d:8d:fa:0e:
13:ee:bc:05:7b:e9:b9:33:70:1e:10:5d:39:f6:9f:a1:d8:3e:
c6:ac:73:63:d6:36:6c:21:9c:56:5e:73:4c:49:86:fe:f7:80:
25:0b:9f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i107jXHGTjb49S1XUiE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMTA2ZDJkZmY3MTE2ZjM1YWI3ZmExMDI3NWE0NWUzODNi
Y2U1MjMwHhcNMjUwNDI3MDAwMDEyWhcNMjUwNDI4MDAwMDEyWjAzMTEwLwYDVQQD
Eyg2NGYzYTE2NjQyNjQ1YTYyNjgxMThjMTUxYjE2MjM3Y2E3OWIwMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlALHDzkoODe6lr5prlitJXvBHEB
zdajYLR2XnybEA0RDTHV9GKI28Myqx0VAaj0GWr76Jk0f3TwfkMT1t0Q+kaD2i1i
ovYYuzQWJ5gPAE/Ixw6rF6IRp2N97lKHwxQujwnehNY9Frx5QBhW207ahKYSPg7Z
mK5+9RBGd9M9fIBA2w+jQOdGFM44AFC5dB6h2NCSq9mBASK12A9oLJWAAnZMsiQm
QJd4LYROKnb/IRMQmLkc6LkublaLBJ4gBKIJ0H4q0pFQHBSge5U6jlnh48YhiPl8
XYkKximJhLcrkc9iGyhtMzc8QL7zRafH6sI9YBP8VoeggswiZNVOE758mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTzoWZCZFpiaBGMFRsWI3ynmwJvMB8GA1UdIwQY
MBaAFGEQbS3/cRbzWrf6ECdaReODvOUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEt
YTQ5NDRlOTYyNWMwLzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEtYTQ5NDRlOTYyNWMw
LzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQecLiEJ
lCNN3898QV+o8c3XvLgSUeFwFnYeJ3cEJFdADTyGyEP9DOyr1r5jVcilux2jR9HD
lkccw7bzaKEuqKEeY3qBV9jhGWdSyG2MSFeYvq9v7lAZj/rlNjn3W6LmNABs0cbx
qCReEakgPp3uh2LgOTIOihD1jexOdOMXQ1MTefiMmWWMwXs9Q1mIa1nWdoZfddBD
OHKhMD/dXucre2HtgDqG4c3dG807Sz4H5MXVEXRHO2yXljMNQ2Z20r1QgW5M40ie
iJgmdJoYn8Xh68rEG74djfoOE+68BXvpuTNwHhBdOfafodg+xqxzY9Y2bCGcVl5z
TEmG/veAJQufrg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:21:59 2025 by rpki-client