Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier: qVOaO1Xqcq/hoq1WE+uS6c3xuiP6SQ4f1Rh7o3uxP+0=
Subject key identifier: DF:79:A5:4E:38:91:D7:16:F7:6E:BE:57:66:27:26:AE:79:68:0B:5E
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 01967C45605FE223E02E0A2B85A36B005990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number: 0922
Signing time: Mon 28 Apr 2025 12:00:43 +0000
Manifest this update: Mon 28 Apr 2025 12:00:43 +0000
Manifest next update: Tue 29 Apr 2025 12:00:43 +0000
Files and hashes: 1: X6ZYSC-zk_X-vkVmhmsDz5ImQYg.roa (hash: ejdwRSw1lilKiCxqAuj8PMfvm39/1GCNMitYFT+EINw=)
2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: ONMP4KPRe9wjk+Id0Psm5K/lVPOyJ3SN/Lc4P4IhO/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:60:5f:e2:23:e0:2e:0a:2b:85:a3:6b:00:59:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Apr 28 12:00:43 2025 GMT
Not After : Apr 29 12:00:43 2025 GMT
Subject: CN=df79a54e3891d716f76ebe57662726ae79680b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:e5:00:27:3c:51:de:01:3d:fe:be:27:37:
a4:a2:2d:cd:54:a8:95:9d:5f:fd:e6:20:44:87:62:
66:4e:22:da:fc:68:84:e3:e7:6c:94:9e:6d:58:69:
cc:ae:3b:d2:a8:69:ca:25:68:7e:5d:b1:8e:07:a1:
78:ac:f8:d3:e7:ef:5b:e3:b7:c9:cf:58:1a:2a:71:
12:41:3d:2e:21:9b:35:c8:23:c4:ce:13:a7:03:6e:
5e:79:75:94:81:6f:d6:b7:36:13:2f:2e:38:1d:97:
54:3a:23:d3:64:46:1d:b9:4a:cd:23:2d:24:9f:75:
29:a4:2d:e1:bc:d9:f9:62:f1:77:17:3f:88:30:3d:
91:d9:94:d5:e9:14:85:57:aa:84:3e:1a:7c:05:34:
60:07:e1:90:c3:96:cf:f7:81:76:90:33:c7:bf:5d:
0e:40:2f:96:c4:95:1d:39:52:5f:7c:93:63:bc:88:
d3:cf:71:ee:6f:57:62:94:c9:7f:aa:aa:e8:dc:6c:
34:9f:bc:24:fc:be:bf:17:57:8c:3b:cd:2b:fe:79:
9d:f4:b6:6e:1e:f5:6e:b8:01:cd:63:45:e6:f7:81:
f2:90:d8:de:da:77:8d:7b:b1:9c:23:9c:7b:a7:3d:
6b:5f:f7:a2:25:06:cd:aa:2e:05:a8:60:9e:d7:f5:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:79:A5:4E:38:91:D7:16:F7:6E:BE:57:66:27:26:AE:79:68:0B:5E
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6b:cd:54:2e:57:b5:3e:42:cb:6f:05:78:be:93:21:00:9d:
8f:d3:d0:8b:1d:97:5d:35:96:89:94:50:71:51:05:52:7b:aa:
37:a5:0f:0f:aa:8b:3c:66:63:ee:1c:09:d3:1f:f4:44:58:2a:
64:be:18:09:de:dc:bc:09:f6:0a:af:44:fc:2a:48:24:b3:39:
01:ba:c9:6e:59:55:ce:0c:27:a6:3e:ea:24:e4:59:28:40:0e:
01:79:f4:b1:fe:86:dc:4c:aa:1c:df:a4:62:55:cc:12:b6:7e:
3f:15:86:c8:89:7c:f7:4f:e7:e9:c0:77:77:a4:66:ad:41:1b:
cb:5a:d3:b8:fd:c9:5c:6f:06:52:39:15:86:c8:fe:85:2b:0a:
ab:22:9a:36:86:91:71:6e:80:e0:2d:ec:77:10:c5:e0:c1:aa:
5c:f7:3f:5c:5b:11:9e:29:c2:28:cb:cf:73:3e:5e:67:3c:a8:
40:98:28:0e:fa:23:92:e9:08:a4:57:e5:77:32:7b:cd:3a:9b:
6d:3f:22:dc:85:50:e4:ec:b6:d6:9a:20:55:13:a7:b1:78:6b:
88:36:36:58:86:de:7a:ed:7e:3c:2f:4e:e7:dc:7a:30:b9:fb:
1b:88:e7:98:32:36:bb:33:fd:4b:bc:67:16:0f:c8:bc:58:53:
4f:ab:ba:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RWBf4iPgLgorhaNrAFmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNTlhNjQ5YjAzNjEwM2U4MGEzY2U4ZjNkMWIwMTM4YTYw
NTgxZDcwHhcNMjUwNDI4MTIwMDQzWhcNMjUwNDI5MTIwMDQzWjAzMTEwLwYDVQQD
EyhkZjc5YTU0ZTM4OTFkNzE2Zjc2ZWJlNTc2NjI3MjZhZTc5NjgwYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDLlACc8Ud4BPf6+Jzekoi3NVKiV
nV/95iBEh2JmTiLa/GiE4+dslJ5tWGnMrjvSqGnKJWh+XbGOB6F4rPjT5+9b47fJ
z1gaKnESQT0uIZs1yCPEzhOnA25eeXWUgW/WtzYTLy44HZdUOiPTZEYduUrNIy0k
n3UppC3hvNn5YvF3Fz+IMD2R2ZTV6RSFV6qEPhp8BTRgB+GQw5bP94F2kDPHv10O
QC+WxJUdOVJffJNjvIjTz3Hub1dilMl/qqro3Gw0n7wk/L6/F1eMO80r/nmd9LZu
HvVuuAHNY0Xm94HykNje2neNe7GcI5x7pz1rX/eiJQbNqi4FqGCe1/WqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN95pU44kdcW926+V2YnJq55aAteMB8GA1UdIwQY
MBaAFGNZpkmwNhA+gKPOjz0bATimBYHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTFtbVNiQTJFRDZBbzg2UFBSc0JPS1lGZ2RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80NTc0YmMtMjk2ZC00YTU4LWFlZjct
ZDJiYmQ5NDljNDUyLzEvWTFtbVNiQTJFRDZBbzg2UFBSc0JPS1lGZ2RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi80NTc0YmMtMjk2ZC00YTU4LWFlZjctZDJiYmQ5NDljNDUy
LzEvWTFtbVNiQTJFRDZBbzg2UFBSc0JPS1lGZ2RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmvNVC5X
tT5Cy28FeL6TIQCdj9PQix2XXTWWiZRQcVEFUnuqN6UPD6qLPGZj7hwJ0x/0RFgq
ZL4YCd7cvAn2Cq9E/CpIJLM5AbrJbllVzgwnpj7qJORZKEAOAXn0sf6G3EyqHN+k
YlXMErZ+PxWGyIl890/n6cB3d6RmrUEby1rTuP3JXG8GUjkVhsj+hSsKqyKaNoaR
cW6A4C3sdxDF4MGqXPc/XFsRninCKMvPcz5eZzyoQJgoDvojkukIpFfldzJ7zTqb
bT8i3IVQ5Oy21pogVROnsXhriDY2WIbeeu1+PC9O59x6MLn7G4jnmDI2uzP9S7xn
Fg/IvFhTT6u69w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:28:51 2025 by rpki-client