Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: JLxFRhNkyjC5TfLCmogtmFKmF9KKbGCHj3aT0Nrc944=
Subject key identifier: CE:DC:52:41:CC:F0:A9:16:32:45:A2:2C:1F:43:C5:93:40:A5:B5:44
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 01969E2C7D7D8386FAB48B3E27205296E5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 0373
Signing time: Mon 05 May 2025 02:00:37 +0000
Manifest this update: Mon 05 May 2025 02:00:37 +0000
Manifest next update: Tue 06 May 2025 02:00:37 +0000
Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: T6ypKMBrdvrw8qv7/oB1YxAwGiVt9Mv1m0n+BIBzWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:7d:7d:83:86:fa:b4:8b:3e:27:20:52:96:e5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: May 5 02:00:37 2025 GMT
Not After : May 6 02:00:37 2025 GMT
Subject: CN=cedc5241ccf0a9163245a22c1f43c59340a5b544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:a0:1c:e5:61:ec:93:81:d1:a8:6e:b8:00:
c6:43:27:5b:85:0a:85:10:00:2a:95:1f:ee:c5:5f:
56:32:d8:80:90:95:e8:32:3f:ca:a9:97:80:72:a8:
8e:af:9f:5d:cc:c9:be:b1:dc:c2:be:a2:52:d7:89:
e3:a3:d8:54:b8:cf:98:07:2d:c1:48:e0:cc:13:9b:
85:bc:ba:9f:90:65:0e:f9:96:b4:49:61:85:2f:f2:
80:79:f2:d5:d1:f0:19:55:90:a2:a5:b1:18:75:4f:
26:d0:32:2a:d5:36:16:c4:ce:75:da:87:dd:1f:96:
62:b7:dc:1f:7f:76:cb:5d:13:3b:af:d5:4e:2c:86:
95:9f:da:19:af:d8:9b:2e:68:43:f1:6f:3f:62:37:
55:32:33:6c:58:e2:21:c7:f7:54:e9:e0:20:5e:27:
c1:cf:bf:63:2d:d8:a9:0b:c2:18:7e:e2:fb:1b:84:
aa:66:28:a8:ea:0a:fd:a3:6a:ae:8b:af:12:bc:3d:
c1:88:f1:89:fd:20:59:2b:48:90:4a:2f:e5:57:58:
47:c6:b4:d7:2d:8b:12:d4:ad:2e:b5:ef:26:5d:63:
e8:75:86:f2:51:c7:4a:f5:a7:5e:7e:0c:5b:72:a8:
39:84:dd:91:63:ff:7e:6f:8c:c5:b5:cc:ae:b0:05:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DC:52:41:CC:F0:A9:16:32:45:A2:2C:1F:43:C5:93:40:A5:B5:44
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:29:a9:5c:89:dd:e7:d0:e7:56:33:c0:30:18:27:0a:77:79:
16:fa:79:99:e1:59:f1:5c:f8:f3:d7:f9:d5:19:07:0d:1e:c1:
cd:55:60:0c:77:c2:4c:fa:bf:8a:64:1b:9f:22:07:de:ce:de:
e0:13:8c:32:bd:ca:01:c0:40:62:ed:c5:c0:a5:0c:14:d6:81:
db:c5:e6:42:0a:09:25:18:53:42:ce:af:0b:0f:d8:fa:11:19:
09:2c:78:70:98:3b:f4:07:db:bf:69:a1:93:3f:b9:48:37:e6:
14:43:6b:b9:f3:34:5c:b0:11:6b:b0:df:65:c1:4f:b3:b0:1c:
f6:9a:60:cd:dd:0e:1c:ba:bb:4d:c3:3e:3c:a8:b8:ea:b3:bc:
02:87:bf:f5:94:86:59:f8:4f:8d:c0:7d:11:1f:4f:1e:39:ca:
3a:43:0e:a8:15:39:5a:1e:6d:09:a8:ef:8a:d1:53:d0:28:14:
39:b8:6b:2b:eb:94:21:c7:9f:7b:1b:4b:fd:12:79:5f:5c:12:
84:c9:ca:41:d3:91:f5:b3:df:ea:52:fd:91:45:2c:df:7f:bf:
27:1e:4e:f0:9f:08:fe:e3:b0:17:9d:45:1e:41:16:a7:15:b6:
5c:a1:26:e3:81:b0:fb:00:b1:f1:53:35:32:96:16:e1:19:2a:
ad:6a:dd:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLH19g4b6tIs+JyBSluXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzBlYjQzNTNlZDc1MGZhZjIzZjJmMWUxNDAxOGM2Y2Zj
NjI3MTUwHhcNMjUwNTA1MDIwMDM3WhcNMjUwNTA2MDIwMDM3WjAzMTEwLwYDVQQD
EyhjZWRjNTI0MWNjZjBhOTE2MzI0NWEyMmMxZjQzYzU5MzQwYTViNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxKgHOVh7JOB0ahuuADGQydbhQqF
EAAqlR/uxV9WMtiAkJXoMj/KqZeAcqiOr59dzMm+sdzCvqJS14njo9hUuM+YBy3B
SODME5uFvLqfkGUO+Za0SWGFL/KAefLV0fAZVZCipbEYdU8m0DIq1TYWxM512ofd
H5Zit9wff3bLXRM7r9VOLIaVn9oZr9ibLmhD8W8/YjdVMjNsWOIhx/dU6eAgXifB
z79jLdipC8IYfuL7G4SqZiio6gr9o2qui68SvD3BiPGJ/SBZK0iQSi/lV1hHxrTX
LYsS1K0ute8mXWPodYbyUcdK9adefgxbcqg5hN2RY/9+b4zFtcyusAUuewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7cUkHM8KkWMkWiLB9DxZNApbVEMB8GA1UdIwQY
MBaAFMsw60NT7XUPryPy8eFAGMbPxicVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgt
MWI5YTMyM2M1NzBiLzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgtMWI5YTMyM2M1NzBi
LzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArimpXInd
59DnVjPAMBgnCnd5Fvp5meFZ8Vz489f51RkHDR7BzVVgDHfCTPq/imQbnyIH3s7e
4BOMMr3KAcBAYu3FwKUMFNaB28XmQgoJJRhTQs6vCw/Y+hEZCSx4cJg79Afbv2mh
kz+5SDfmFENrufM0XLARa7DfZcFPs7Ac9ppgzd0OHLq7TcM+PKi46rO8Aoe/9ZSG
WfhPjcB9ER9PHjnKOkMOqBU5Wh5tCajvitFT0CgUObhrK+uUIcefextL/RJ5X1wS
hMnKQdOR9bPf6lL9kUUs33+/Jx5O8J8I/uOwF51FHkEWpxW2XKEm44Gw+wCx8VM1
MpYW4RkqrWrdDA==
-----END CERTIFICATE-----
Generated at Mon May 5 04:29:36 2025 by rpki-client