Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: WssiHCRQYuCp5Cl86rdziJECveXQsuetUVz7Y+Evpko=
Subject key identifier: 7B:7C:22:24:C3:71:CE:16:AB:E5:2A:36:B8:61:CC:C3:72:23:A4:76
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 01967642FCCE8AAC13E3BFE8B80F833C3547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 0565
Signing time: Sun 27 Apr 2025 08:00:23 +0000
Manifest this update: Sun 27 Apr 2025 08:00:23 +0000
Manifest next update: Mon 28 Apr 2025 08:00:23 +0000
Files and hashes: 1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=)
2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: gHZFXUCxET9MeH3zNqlvgXVRDyziCjujmr8hrgFsgvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:fc:ce:8a:ac:13:e3:bf:e8:b8:0f:83:3c:35:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Apr 27 08:00:23 2025 GMT
Not After : Apr 28 08:00:23 2025 GMT
Subject: CN=7b7c2224c371ce16abe52a36b861ccc37223a476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:58:d3:f4:dc:d6:6f:22:62:d3:c8:0b:c6:
5e:08:d1:36:80:ea:49:85:af:9f:cf:77:e3:1e:34:
74:8b:dc:bc:fa:a7:f8:16:3c:29:dc:4a:88:c9:06:
c6:e8:a0:9f:9a:bf:c9:06:40:38:f3:ec:e9:41:ff:
35:da:10:90:1a:ea:a5:3d:45:04:79:20:dc:e3:c2:
e7:59:b3:0f:39:e3:4a:a8:e4:a0:3f:95:b4:77:8e:
af:f1:7a:dc:60:09:89:79:e9:46:c4:94:a0:92:fd:
45:2e:82:0b:d3:2c:b9:dc:a6:5d:9f:17:e9:01:c0:
6f:f3:e3:f3:0f:84:18:58:97:dd:ed:18:2b:03:16:
db:51:04:d0:e7:6a:a9:cc:b7:ec:2a:f9:10:43:07:
48:73:91:0a:84:cc:30:99:f4:85:2b:8e:0d:47:5f:
30:c4:95:e3:cc:78:59:9e:1d:56:7c:aa:d9:da:4e:
44:4f:83:16:02:17:42:2c:4c:c4:ad:e9:2a:84:05:
1e:8a:ef:36:87:00:af:d2:da:48:22:68:77:97:38:
ee:8b:bf:4f:00:50:f3:df:41:c4:0f:1c:01:81:c1:
28:32:58:92:16:fb:f6:a8:22:ee:a4:24:14:e5:72:
0d:bf:9d:fb:a0:72:24:42:c0:99:74:b2:8d:57:9d:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7C:22:24:C3:71:CE:16:AB:E5:2A:36:B8:61:CC:C3:72:23:A4:76
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a7:ac:ce:3f:fc:81:2e:d9:b1:e4:7f:4f:d1:69:b4:5b:60:
81:e8:f2:2f:c1:6a:7f:63:d7:b3:69:cc:f0:c8:d5:ff:15:81:
49:47:14:c9:df:90:ad:7a:b1:06:a2:59:72:b7:a8:97:b0:99:
83:cf:65:9b:0f:c5:10:4a:22:95:5d:ce:7d:3e:a4:51:16:0a:
34:26:7e:61:86:fc:4f:14:13:5f:df:2d:26:20:85:28:3a:e1:
72:ab:f2:4a:b3:b6:fb:9c:51:44:b5:b3:c1:78:e2:14:36:b8:
74:82:51:43:b0:1e:83:8c:3a:57:61:d5:ce:05:4f:13:f8:c0:
3e:a4:0f:cd:93:d4:15:50:1d:d9:14:aa:8a:38:7e:90:b1:db:
f3:76:3f:f8:cd:7c:50:ec:9c:b8:ee:83:4a:3e:f3:e4:2d:94:
52:30:9a:2f:88:e0:b6:cf:21:52:10:5c:7c:bb:35:00:26:f5:
4a:c2:5f:1c:11:6d:7a:72:00:99:84:61:b7:c3:9d:b7:09:ff:
a2:8e:5d:02:8a:d0:78:f4:79:3a:c4:a5:ec:c5:ff:75:34:03:
f1:e2:77:60:cf:1e:cc:59:4f:2e:d4:2b:d8:8d:95:90:d8:de:
d1:78:3d:07:ea:50:51:6e:9d:54:2b:f2:df:7a:2a:e0:89:04:
73:f4:02:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QvzOiqwT47/ouA+DPDVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YTRiYmQ3OGFmMzYzZmE1YmVlZTYzMmU4YmRjNDhiNjI5
NzM0M2MwHhcNMjUwNDI3MDgwMDIzWhcNMjUwNDI4MDgwMDIzWjAzMTEwLwYDVQQD
Eyg3YjdjMjIyNGMzNzFjZTE2YWJlNTJhMzZiODYxY2NjMzcyMjNhNDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt5Y0/Tc1m8iYtPIC8ZeCNE2gOpJ
ha+fz3fjHjR0i9y8+qf4Fjwp3EqIyQbG6KCfmr/JBkA48+zpQf812hCQGuqlPUUE
eSDc48LnWbMPOeNKqOSgP5W0d46v8XrcYAmJeelGxJSgkv1FLoIL0yy53KZdnxfp
AcBv8+PzD4QYWJfd7RgrAxbbUQTQ52qpzLfsKvkQQwdIc5EKhMwwmfSFK44NR18w
xJXjzHhZnh1WfKrZ2k5ET4MWAhdCLEzErekqhAUeiu82hwCv0tpIImh3lzjui79P
AFDz30HEDxwBgcEoMliSFvv2qCLupCQU5XINv537oHIkQsCZdLKNV51ufQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHt8IiTDcc4Wq+UqNrhhzMNyI6R2MB8GA1UdIwQY
MBaAFMiku9eK82P6W+7mMui9xItilzQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDct
YWM2OGE1MGQwYzk5LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDctYWM2OGE1MGQwYzk5
LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6eszj/8
gS7ZseR/T9FptFtggejyL8Fqf2PXs2nM8MjV/xWBSUcUyd+QrXqxBqJZcreol7CZ
g89lmw/FEEoilV3OfT6kURYKNCZ+YYb8TxQTX98tJiCFKDrhcqvySrO2+5xRRLWz
wXjiFDa4dIJRQ7Aeg4w6V2HVzgVPE/jAPqQPzZPUFVAd2RSqijh+kLHb83Y/+M18
UOycuO6DSj7z5C2UUjCaL4jgts8hUhBcfLs1ACb1SsJfHBFtenIAmYRht8Odtwn/
oo5dAorQePR5OsSl7MX/dTQD8eJ3YM8ezFlPLtQr2I2VkNje0Xg9B+pQUW6dVCvy
33oq4IkEc/QC6w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:13 2025 by rpki-client