Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File: yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier: AEP/MArhwfw63Pm4y1Pwfe7UcgnKVrx0e8T1UPg5ch4=
Subject key identifier: E4:68:AC:D7:8C:A0:68:5D:09:7F:38:DE:63:E8:10:D0:33:60:FA:8A
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 01968691E78221BC9DA31D30A6D1987E24EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number: 026B
Signing time: Wed 30 Apr 2025 12:00:31 +0000
Manifest this update: Wed 30 Apr 2025 12:00:31 +0000
Manifest next update: Thu 01 May 2025 12:00:31 +0000
Files and hashes: 1: DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa (hash: wBdx6PRDwqiRs1k8IOdYm4GWe7EZE4vtyKYESIsAUKo=)
2: ItPmNdTjNgHqBxANMhUVH1DC5UU.roa (hash: QPQB5rA9kwVStlIhdq0li1+Di1amgsoq6BbyBsFXRrc=)
3: xKKq4SF6-ObtvfC7jpcnypKexwg.roa (hash: qw4y1FHQavkl3C0h/hnsN3/lIOTC2hyOIzm3AanVe3c=)
4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: zLAxWNKW1mqbAwDvXobtCuEyQeBP3DH7viB8NRF8FU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:e7:82:21:bc:9d:a3:1d:30:a6:d1:98:7e:24:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: Apr 30 12:00:31 2025 GMT
Not After : May 1 12:00:31 2025 GMT
Subject: CN=e468acd78ca0685d097f38de63e810d03360fa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:ff:cf:6b:1b:6e:bd:b1:37:ec:50:f4:ac:
56:6e:ff:a2:36:f5:bd:49:20:ea:18:30:23:96:98:
48:1b:ec:12:81:57:61:b8:46:a6:c4:73:b0:78:88:
da:fc:a6:92:a5:25:66:2d:57:e9:61:9f:03:57:11:
41:ff:7f:66:27:b7:e7:f1:a2:65:ab:ea:6f:ca:fb:
b3:a3:2a:29:fd:e1:c0:0d:b0:da:6a:d7:a1:d1:7b:
7d:0d:9d:c4:de:aa:69:34:60:e8:d7:30:30:56:b4:
e3:0f:1b:85:26:80:e1:7c:1d:01:fc:be:26:8e:0e:
28:fc:c4:53:20:89:b8:e1:41:29:4f:9f:cb:61:b1:
dc:49:b1:4c:c9:07:3d:41:1a:b3:70:0b:b7:23:04:
df:bf:da:80:aa:d2:c5:24:66:ce:54:a1:de:40:57:
3e:e7:03:78:3a:61:f4:54:69:1f:eb:0a:14:7f:42:
22:43:8d:22:4a:c6:1b:34:a1:a0:aa:37:50:d5:38:
63:2d:dd:9d:9e:d6:93:64:61:c3:b3:c1:2d:6c:6b:
ba:fe:1a:3b:4d:8f:cd:8a:7b:be:0f:a6:96:91:68:
8f:ab:f8:79:fd:3c:c2:df:28:f4:76:53:b1:7e:3e:
73:f1:08:f3:6c:fc:66:d7:cc:67:3d:3f:4f:6d:e1:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:68:AC:D7:8C:A0:68:5D:09:7F:38:DE:63:E8:10:D0:33:60:FA:8A
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:82:94:6c:22:87:88:75:3c:9a:ea:22:92:8f:88:df:5d:
a1:0d:21:ef:69:ee:fc:ba:6f:69:ac:5d:83:1d:5a:1e:a3:0c:
29:27:66:4b:38:cb:38:2b:57:91:62:c7:5f:1c:d4:6c:97:62:
47:d0:3a:10:6a:77:62:2e:b6:57:df:97:49:52:13:e4:e8:9d:
95:82:06:b6:e5:62:72:28:d1:c3:f0:36:4f:e0:df:9a:8f:40:
2b:14:a6:ba:ab:2f:3b:70:c5:3e:a3:da:f4:ae:33:a9:4d:9f:
4f:0a:06:07:06:06:4f:6c:c3:62:71:28:f2:36:44:87:cf:c9:
fc:aa:ad:24:4e:a7:8e:4c:eb:60:6b:02:f1:f0:f3:2c:b1:0c:
9a:62:46:2d:93:32:52:81:29:6c:33:ea:eb:f7:eb:6d:dd:e9:
5b:a8:9a:5e:ae:ca:7d:9f:25:30:1c:53:3c:55:a5:8a:c2:53:
bf:9b:65:14:bb:8b:09:cc:a6:16:1e:5b:39:45:df:0e:0b:2b:
06:71:4b:4b:fb:8b:21:58:d1:fb:27:b6:f4:80:af:04:57:96:
17:b8:c1:6e:c6:62:73:57:fe:a9:db:e8:6b:a6:f8:b7:89:45:
df:22:b6:41:ac:c6:84:80:be:27:59:71:4d:6d:1f:53:4b:9b:
fc:7e:e9:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGkeeCIbydox0wptGYfiTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTEzNWU1ODdjYmIzOGJlMWViN2I2ZGU5YzQ4MDI5ZDA0
NWQyNzMwHhcNMjUwNDMwMTIwMDMxWhcNMjUwNTAxMTIwMDMxWjAzMTEwLwYDVQQD
EyhlNDY4YWNkNzhjYTA2ODVkMDk3ZjM4ZGU2M2U4MTBkMDMzNjBmYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4L/z2sbbr2xN+xQ9KxWbv+iNvW9
SSDqGDAjlphIG+wSgVdhuEamxHOweIja/KaSpSVmLVfpYZ8DVxFB/39mJ7fn8aJl
q+pvyvuzoyop/eHADbDaateh0Xt9DZ3E3qppNGDo1zAwVrTjDxuFJoDhfB0B/L4m
jg4o/MRTIIm44UEpT5/LYbHcSbFMyQc9QRqzcAu3IwTfv9qAqtLFJGbOVKHeQFc+
5wN4OmH0VGkf6woUf0IiQ40iSsYbNKGgqjdQ1ThjLd2dntaTZGHDs8EtbGu6/ho7
TY/Ninu+D6aWkWiPq/h5/TzC3yj0dlOxfj5z8QjzbPxm18xnPT9PbeHUnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORorNeMoGhdCX843mPoENAzYPqKMB8GA1UdIwQY
MBaAFMmRNeWHy7OL4et7benEgCnQRdJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYt
MTM0ZDk1M2NhMDkzLzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYtMTM0ZDk1M2NhMDkz
LzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWT6ClGwi
h4h1PJrqIpKPiN9doQ0h72nu/Lpvaaxdgx1aHqMMKSdmSzjLOCtXkWLHXxzUbJdi
R9A6EGp3Yi62V9+XSVIT5OidlYIGtuVicijRw/A2T+Dfmo9AKxSmuqsvO3DFPqPa
9K4zqU2fTwoGBwYGT2zDYnEo8jZEh8/J/KqtJE6njkzrYGsC8fDzLLEMmmJGLZMy
UoEpbDPq6/frbd3pW6iaXq7KfZ8lMBxTPFWlisJTv5tlFLuLCcymFh5bOUXfDgsr
BnFLS/uLIVjR+ye29ICvBFeWF7jBbsZic1f+qdvoa6b4t4lF3yK2QazGhIC+J1lx
TW0fU0ub/H7pMQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:33:19 2025 by rpki-client