Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: 1caDh9+NBvypEvt01DaiiPW9yMNgQ1MLvweFy2TlVis=
Subject key identifier: 93:22:1E:AF:9F:AF:8B:5C:7D:6A:BA:C3:4B:A5:B9:14:AE:88:CE:74
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 0196895C1328A20A1DBBD88C7CA43CF30166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 0468
Signing time: Thu 01 May 2025 01:00:34 +0000
Manifest this update: Thu 01 May 2025 01:00:34 +0000
Manifest next update: Fri 02 May 2025 01:00:34 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: NzyCGyQ4L89JHcReNmvTFbK8TQbUBIwVKVXGq+yX99A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:13:28:a2:0a:1d:bb:d8:8c:7c:a4:3c:f3:01:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: May 1 01:00:34 2025 GMT
Not After : May 2 01:00:34 2025 GMT
Subject: CN=93221eaf9faf8b5c7d6abac34ba5b914ae88ce74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:52:31:df:0d:be:16:79:fe:75:0b:20:e7:
71:ec:ba:34:7c:cb:2d:9e:dd:d3:a3:a2:29:b7:56:
20:64:12:ac:0c:35:5b:d6:b7:fe:69:06:86:1c:1e:
37:b5:cb:25:ee:00:3c:8b:cf:51:74:c1:84:ce:c3:
9a:7b:af:ea:0b:5e:90:9f:7f:c8:24:aa:67:b7:20:
ee:56:6e:e0:56:80:3d:f4:75:55:f6:99:55:2c:dc:
8e:ea:af:59:59:a9:83:a1:08:05:1b:8d:d9:49:37:
b6:04:d5:1a:f9:e7:58:10:d1:bf:44:92:95:3f:ab:
ed:69:10:b9:f2:0b:cb:9e:c4:95:8a:f5:b1:50:3d:
b7:05:0a:89:63:f8:84:1f:ac:f5:51:a6:8f:ee:5e:
5e:d3:b7:9b:b7:c3:fc:96:8a:3d:d8:fd:0f:14:7f:
9c:83:e6:f4:f3:f0:5a:f8:74:e2:b6:50:dd:99:d9:
0e:a2:be:89:a7:38:75:da:a0:c1:77:a5:a4:2e:45:
fd:62:c6:41:de:9b:98:09:6d:a9:2a:b1:51:b9:cf:
17:b5:0f:c5:71:72:6c:d1:51:48:56:23:2c:6e:86:
45:06:86:f1:9b:19:58:67:ad:da:67:f4:f4:a8:a7:
04:c6:eb:e8:db:a6:2e:3a:ef:72:9d:ca:ab:88:a8:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:22:1E:AF:9F:AF:8B:5C:7D:6A:BA:C3:4B:A5:B9:14:AE:88:CE:74
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:06:54:7e:6d:b8:3e:37:07:4d:15:34:01:37:1f:39:bb:02:
6d:a2:0c:5b:5d:53:e1:24:49:00:71:25:0e:11:14:52:48:b7:
8c:99:7a:42:79:2e:95:fd:24:b3:3f:60:5e:f5:93:c5:50:00:
6c:c5:f5:48:ac:fe:3b:27:a6:9c:3e:a8:6d:8c:f1:b3:69:45:
e5:80:95:93:0b:9f:2b:72:8c:28:80:f3:49:0a:70:b3:db:4c:
a3:ec:2f:61:c4:ef:8a:d4:5a:74:b2:69:92:04:90:58:16:3a:
74:10:17:0d:be:b7:25:c5:eb:b7:6a:27:e5:d4:ff:d3:68:09:
4a:27:66:3f:04:ac:c3:ed:fa:96:fe:36:2a:68:2c:33:20:4f:
a8:9e:30:b0:7f:1a:93:af:26:37:a5:15:b0:64:86:74:0d:f7:
84:32:bd:e7:93:2c:1a:97:e0:b3:11:f9:00:7b:28:28:72:84:
45:09:c9:6a:ea:cc:df:6a:ca:90:55:12:b7:0f:31:cd:05:18:
83:09:8c:ea:16:26:63:e7:25:5a:96:4b:74:2c:a9:22:b3:92:
8c:d9:bd:19:73:1a:95:b9:3b:48:74:4a:72:35:e2:9f:9f:e1:
01:24:ce:35:f3:a5:dd:b7:2b:c9:4e:89:e6:e2:5c:e3:c7:5c:
c8:53:66:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJXBMoogodu9iMfKQ88wFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzdkMmY2ZjBiNzhjMGVkNzViOGVmYzI4MDA5ZDc5Nzk2
MTQwMDMwHhcNMjUwNTAxMDEwMDM0WhcNMjUwNTAyMDEwMDM0WjAzMTEwLwYDVQQD
Eyg5MzIyMWVhZjlmYWY4YjVjN2Q2YWJhYzM0YmE1YjkxNGFlODhjZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5NSMd8NvhZ5/nULIOdx7Lo0fMst
nt3To6Ipt1YgZBKsDDVb1rf+aQaGHB43tcsl7gA8i89RdMGEzsOae6/qC16Qn3/I
JKpntyDuVm7gVoA99HVV9plVLNyO6q9ZWamDoQgFG43ZSTe2BNUa+edYENG/RJKV
P6vtaRC58gvLnsSVivWxUD23BQqJY/iEH6z1UaaP7l5e07ebt8P8loo92P0PFH+c
g+b08/Ba+HTitlDdmdkOor6Jpzh12qDBd6WkLkX9YsZB3puYCW2pKrFRuc8XtQ/F
cXJs0VFIViMsboZFBobxmxlYZ63aZ/T0qKcExuvo26YuOu9yncqriKilQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMiHq+fr4tcfWq6w0uluRSuiM50MB8GA1UdIwQY
MBaAFMk30vbwt4wO11uO/CgAnXl5YUADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTIt
OTM3NzU0Y2JiNTA1LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTItOTM3NzU0Y2JiNTA1
LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAZUfm24
PjcHTRU0ATcfObsCbaIMW11T4SRJAHElDhEUUki3jJl6Qnkulf0ksz9gXvWTxVAA
bMX1SKz+OyemnD6obYzxs2lF5YCVkwufK3KMKIDzSQpws9tMo+wvYcTvitRadLJp
kgSQWBY6dBAXDb63JcXrt2on5dT/02gJSidmPwSsw+36lv42KmgsMyBPqJ4wsH8a
k68mN6UVsGSGdA33hDK955MsGpfgsxH5AHsoKHKERQnJaurM32rKkFUStw8xzQUY
gwmM6hYmY+clWpZLdCypIrOSjNm9GXMalbk7SHRKcjXin5/hASTONfOl3bcryU6J
5uJc48dcyFNmKA==
-----END CERTIFICATE-----
Generated at Thu May 1 05:28:20 2025 by rpki-client