Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: fS1kMKDm5kSiypB/6EuwTC57eVhVZznHTFnLLY6DrGA=
Subject key identifier: 21:BD:40:5C:1E:E9:B4:9E:8E:72:BA:2F:9A:A6:3D:2C:6C:59:01:97
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 019679E90B974B588FFC8BFDB8474F8CADA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 052D
Signing time: Mon 28 Apr 2025 01:00:38 +0000
Manifest this update: Mon 28 Apr 2025 01:00:38 +0000
Manifest next update: Tue 29 Apr 2025 01:00:38 +0000
Files and hashes: 1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: vW9vzdnL5SJEV11PHcKKYlJKvnmF3N33yYzLmRTpLm4=)
3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:0b:97:4b:58:8f:fc:8b:fd:b8:47:4f:8c:ad:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Apr 28 01:00:38 2025 GMT
Not After : Apr 29 01:00:38 2025 GMT
Subject: CN=21bd405c1ee9b49e8e72ba2f9aa63d2c6c590197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:fb:45:c4:b0:33:38:7e:ce:9d:e8:59:4a:
dc:3c:ca:56:f6:78:3c:26:52:23:af:c3:a3:b7:e5:
98:c6:b6:51:ac:0f:77:79:ee:4e:ba:ab:75:20:23:
1a:ba:7d:88:0c:01:0c:f8:a9:4a:21:0c:ec:b9:54:
6d:32:6f:24:bf:a3:05:75:d0:f2:30:d6:cf:85:fb:
88:94:bd:6e:d4:55:3b:25:39:14:4a:e7:1b:4e:85:
46:b0:11:7e:40:e1:97:4e:8d:d8:86:ef:e9:d4:19:
08:7c:71:e7:95:8f:4c:5d:1b:8c:cd:d8:35:8b:3c:
0c:f5:45:f0:db:dc:a1:dd:2c:c2:ba:31:df:50:54:
4e:a5:a0:bc:6a:9c:27:78:3b:91:3c:92:bc:40:2f:
f8:c1:de:6d:a9:5a:ee:3b:44:71:5f:3a:3b:5e:e5:
c9:aa:98:36:a3:52:f2:f9:92:44:57:d6:5a:2f:11:
21:2a:12:39:5d:56:fc:3b:97:08:b4:35:45:78:01:
01:77:a7:e9:79:b3:4d:d9:d8:67:74:89:d7:0d:4b:
c2:11:18:5e:01:e2:e1:46:49:21:9f:f8:85:64:9e:
e4:63:be:1d:19:e5:43:6e:0e:0b:2f:f6:5d:66:b4:
95:0a:ff:07:fa:15:6a:d1:c5:2f:c5:48:1d:e3:d8:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BD:40:5C:1E:E9:B4:9E:8E:72:BA:2F:9A:A6:3D:2C:6C:59:01:97
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f6:cc:7a:e3:23:e0:a3:e4:ce:4f:a8:4c:57:78:46:60:86:
22:ba:39:cd:57:67:3c:98:b2:08:5b:f4:a0:66:a8:3e:5d:8d:
9e:02:56:b9:b8:3e:d8:eb:ce:5f:9b:9b:91:ca:46:50:ef:32:
0e:e8:f4:e6:56:74:d1:9a:62:99:7c:bc:b1:43:41:22:84:b2:
30:de:3f:7d:07:fa:f5:7b:de:ba:2c:85:17:d6:cb:99:72:a0:
98:0b:fa:07:d7:dc:d4:4b:86:b7:5b:56:98:e7:81:6d:9d:00:
a9:7a:c8:2c:a4:7b:b1:2c:95:2f:34:d9:8c:aa:67:92:be:a3:
56:5f:92:ab:4b:e7:06:10:5c:07:c1:89:da:42:80:76:fb:fd:
70:ff:ae:d9:02:5f:3a:15:d3:00:c6:2a:d9:6a:13:49:58:bd:
19:c9:5e:94:8e:3b:e4:d6:89:6a:46:b2:89:25:94:7c:d6:89:
63:9b:57:a9:4c:01:11:a6:7d:f8:3d:5d:6d:ae:e9:7a:20:81:
4b:21:4d:07:0c:53:8c:22:ef:91:3d:5c:cc:f1:72:b2:f3:b4:
6f:94:92:59:23:63:59:fd:a7:e2:1c:51:62:2f:f6:11:2a:1c:
72:05:98:04:24:0d:35:4b:d3:6a:06:d7:0a:92:09:3a:a9:47:
e0:b6:18:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56QuXS1iP/Iv9uEdPjK2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzY2MjY3OTQzZDQxM2NkZjc2MGRjNjg1MDEwNGMxYzBm
YzFkNjUwHhcNMjUwNDI4MDEwMDM4WhcNMjUwNDI5MDEwMDM4WjAzMTEwLwYDVQQD
EygyMWJkNDA1YzFlZTliNDllOGU3MmJhMmY5YWE2M2QyYzZjNTkwMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRj7RcSwMzh+zp3oWUrcPMpW9ng8
JlIjr8Ojt+WYxrZRrA93ee5Ouqt1ICMaun2IDAEM+KlKIQzsuVRtMm8kv6MFddDy
MNbPhfuIlL1u1FU7JTkUSucbToVGsBF+QOGXTo3Yhu/p1BkIfHHnlY9MXRuMzdg1
izwM9UXw29yh3SzCujHfUFROpaC8apwneDuRPJK8QC/4wd5tqVruO0RxXzo7XuXJ
qpg2o1Ly+ZJEV9ZaLxEhKhI5XVb8O5cItDVFeAEBd6fpebNN2dhndInXDUvCERhe
AeLhRkkhn/iFZJ7kY74dGeVDbg4LL/ZdZrSVCv8H+hVq0cUvxUgd49jxdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG9QFwe6bSejnK6L5qmPSxsWQGXMB8GA1UdIwQY
MBaAFGLGYmeUPUE833YNxoUBBMHA/B1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQt
YTlkN2FkNDQyYjNiLzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQtYTlkN2FkNDQyYjNi
LzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/bMeuMj
4KPkzk+oTFd4RmCGIro5zVdnPJiyCFv0oGaoPl2NngJWubg+2OvOX5ubkcpGUO8y
Duj05lZ00ZpimXy8sUNBIoSyMN4/fQf69XveuiyFF9bLmXKgmAv6B9fc1EuGt1tW
mOeBbZ0AqXrILKR7sSyVLzTZjKpnkr6jVl+Sq0vnBhBcB8GJ2kKAdvv9cP+u2QJf
OhXTAMYq2WoTSVi9GclelI475NaJakayiSWUfNaJY5tXqUwBEaZ9+D1dba7peiCB
SyFNBwxTjCLvkT1czPFysvO0b5SSWSNjWf2n4hxRYi/2ESoccgWYBCQNNUvTagbX
CpIJOqlH4LYYqw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:09:41 2025 by rpki-client