Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: mLdqI/WK62+p6DF1Z8f4fq2WS43CIeJrYmRvpI6HMjE=
Subject key identifier: 19:8F:8E:54:F7:05:AE:3C:46:EB:EA:18:EA:B7:08:F3:E6:C6:D6:92
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 0196759E5ADB5C3572E04DB4443F28F85A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 1181
Signing time: Sun 27 Apr 2025 05:00:34 +0000
Manifest this update: Sun 27 Apr 2025 05:00:34 +0000
Manifest next update: Mon 28 Apr 2025 05:00:34 +0000
Files and hashes: 1: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
2: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
3: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: 8a3V8IK6FSeG4PjnUt5WeLzd5IC+WFCN6iSzg+sg7+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:5a:db:5c:35:72:e0:4d:b4:44:3f:28:f8:5a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Apr 27 05:00:34 2025 GMT
Not After : Apr 28 05:00:34 2025 GMT
Subject: CN=198f8e54f705ae3c46ebea18eab708f3e6c6d692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:7b:0b:11:57:b2:02:d8:13:10:40:ad:c8:
81:dc:97:9b:05:67:e7:6c:d4:e6:16:81:c8:3d:46:
82:10:41:8b:37:10:e9:1e:c0:3b:99:b7:f8:e3:b0:
0d:de:dd:2b:83:85:c5:7d:eb:2e:1b:bf:44:4a:dc:
36:27:30:00:45:9d:e3:79:d9:9c:c8:39:6c:6d:eb:
f3:2b:dd:3a:f1:31:3e:0f:9d:98:7d:9c:eb:6e:21:
cf:0d:c0:1b:3d:13:12:6e:f8:71:47:18:21:97:f3:
44:61:1d:b6:e6:07:37:7c:f5:6f:69:da:cf:d7:73:
07:d4:e4:f5:4d:6f:e9:3f:49:08:10:c7:3e:42:42:
ba:3f:7b:e1:5a:1c:37:2e:cb:b9:37:1f:d6:80:4c:
94:e6:56:c5:7e:1d:22:84:b7:76:69:1f:be:4b:b4:
f5:e6:29:03:a4:1f:6a:30:06:0f:47:ed:01:7d:fa:
3e:16:57:53:d8:91:eb:5c:bd:b4:50:f8:ec:5e:91:
86:ac:ee:16:95:8b:2a:77:48:61:d7:08:3f:7c:fe:
33:09:f5:73:93:a9:69:ae:8b:e9:23:4a:34:2a:8f:
45:90:d5:6a:81:61:6f:46:4e:d7:d3:70:78:f2:54:
95:52:4e:ee:32:7d:45:59:96:e9:27:18:54:a8:78:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8F:8E:54:F7:05:AE:3C:46:EB:EA:18:EA:B7:08:F3:E6:C6:D6:92
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4f:a4:44:0f:5b:36:26:e7:ae:a9:5b:70:63:8c:06:d3:07:
57:9c:34:f6:11:06:a7:d3:c0:f4:b7:74:7f:1c:2b:d1:67:9e:
7f:56:d8:c2:c5:19:21:c4:2e:a0:76:22:7d:ec:d6:77:93:ba:
c4:f6:df:b0:12:2c:41:60:a3:60:f7:01:95:ce:08:97:a4:e3:
44:36:73:2e:59:5f:1d:1b:51:46:45:d5:0b:ca:e5:27:53:52:
e1:c5:fa:27:19:69:49:44:3c:4a:dd:e7:38:0b:12:17:b4:9e:
85:f9:51:a5:fe:41:02:a2:a1:7a:a2:9c:3f:0c:49:0f:7a:5e:
b6:f1:59:95:ce:bb:4f:35:b9:83:4b:e1:dd:f9:d4:11:16:da:
14:9e:65:33:01:b5:21:05:49:0c:e3:af:5d:ab:e5:37:ea:35:
8f:6a:c8:82:00:be:62:ce:52:c8:07:e4:c5:3e:8b:5d:87:95:
ae:3d:9d:ac:00:00:40:78:cd:a0:8e:66:b1:50:b8:3c:5c:ee:
90:d5:49:03:84:4a:36:d8:0e:8c:76:23:88:66:de:1a:e4:f6:
ec:e7:3e:be:c7:42:51:5a:81:b8:c0:a8:cc:05:e3:f2:8d:28:
a4:ac:a5:18:72:b8:01:b5:29:d3:e6:a6:7f:7e:fb:75:b6:8f:
b6:65:56:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nlrbXDVy4E20RD8o+FoEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh
NGNjOTQwHhcNMjUwNDI3MDUwMDM0WhcNMjUwNDI4MDUwMDM0WjAzMTEwLwYDVQQD
EygxOThmOGU1NGY3MDVhZTNjNDZlYmVhMThlYWI3MDhmM2U2YzZkNjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIN7CxFXsgLYExBArciB3JebBWfn
bNTmFoHIPUaCEEGLNxDpHsA7mbf447AN3t0rg4XFfesuG79EStw2JzAARZ3jedmc
yDlsbevzK9068TE+D52YfZzrbiHPDcAbPRMSbvhxRxghl/NEYR225gc3fPVvadrP
13MH1OT1TW/pP0kIEMc+QkK6P3vhWhw3Lsu5Nx/WgEyU5lbFfh0ihLd2aR++S7T1
5ikDpB9qMAYPR+0Bffo+FldT2JHrXL20UPjsXpGGrO4WlYsqd0hh1wg/fP4zCfVz
k6lprovpI0o0Ko9FkNVqgWFvRk7X03B48lSVUk7uMn1FWZbpJxhUqHjc5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmPjlT3Ba48RuvqGOq3CPPmxtaSMB8GA1UdIwQY
MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt
YzZhODgyMWFkZWE5LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5
LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0+kRA9b
NibnrqlbcGOMBtMHV5w09hEGp9PA9Ld0fxwr0Weef1bYwsUZIcQuoHYifezWd5O6
xPbfsBIsQWCjYPcBlc4Il6TjRDZzLllfHRtRRkXVC8rlJ1NS4cX6JxlpSUQ8St3n
OAsSF7SehflRpf5BAqKheqKcPwxJD3petvFZlc67TzW5g0vh3fnUERbaFJ5lMwG1
IQVJDOOvXavlN+o1j2rIggC+Ys5SyAfkxT6LXYeVrj2drAAAQHjNoI5msVC4PFzu
kNVJA4RKNtgOjHYjiGbeGuT27Oc+vsdCUVqBuMCozAXj8o0opKylGHK4AbUp0+am
f377dbaPtmVW/g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:58:20 2025 by rpki-client