Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: ArhE+Nnl2LMC+k5XeAeZhCf86XiTzDzuKhwPLthiRFc=
Subject key identifier: 37:63:96:52:52:2B:6D:3F:9A:86:81:13:C6:08:C5:2C:5D:AA:7D:B6
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019691F195485049297BC771EC31B5E6C469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 13E4
Signing time: Fri 02 May 2025 17:00:50 +0000
Manifest this update: Fri 02 May 2025 17:00:50 +0000
Manifest next update: Sat 03 May 2025 17:00:50 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: bhprw8sxTBo3Y6Qirp41NR87OzqKmXSpFHZjFSHxy7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:95:48:50:49:29:7b:c7:71:ec:31:b5:e6:c4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: May 2 17:00:50 2025 GMT
Not After : May 3 17:00:50 2025 GMT
Subject: CN=37639652522b6d3f9a868113c608c52c5daa7db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:9b:9b:70:94:fa:39:08:dd:26:73:25:08:
df:1f:97:02:d5:35:42:c2:6d:b9:77:98:ef:9b:6f:
78:f5:e6:5a:91:11:8a:30:a6:19:e6:f2:cc:d9:a6:
b5:f0:d4:6e:5e:69:69:5e:4a:43:28:4e:43:57:0d:
2f:68:4f:d9:b9:5b:f6:dc:73:35:eb:a5:6d:c0:9d:
8f:47:b2:20:f7:1b:9f:a1:56:41:39:0f:e8:3a:3a:
53:28:1a:b2:5d:da:41:1b:0a:c7:4f:32:62:86:46:
5f:39:92:1a:ef:25:91:63:ec:36:ac:7a:dc:44:30:
05:be:20:aa:23:14:03:f8:14:c1:f3:17:aa:f7:43:
7c:eb:7d:b2:c2:18:0e:a8:e9:b9:e6:4d:31:39:8a:
9d:9d:58:b5:14:ff:48:bc:fc:b6:99:8a:a8:c6:f3:
4b:a9:5b:45:be:fd:da:4f:a0:90:79:d6:d2:03:e2:
cb:58:a0:0a:1d:b5:51:fa:d0:7e:02:7f:f8:30:6c:
0d:b9:24:e9:9b:24:1f:3e:3a:37:4f:27:bf:62:07:
a0:e0:0c:05:b0:fd:35:99:42:2f:f1:67:ba:ff:98:
07:24:61:a1:e8:9e:39:bd:c6:26:00:64:c7:f7:b4:
b3:73:be:7d:1c:67:f1:c0:97:89:39:19:ec:f9:ac:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:96:52:52:2B:6D:3F:9A:86:81:13:C6:08:C5:2C:5D:AA:7D:B6
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ed:44:5d:ae:26:89:d4:80:1b:7e:07:05:b9:b7:34:8b:ef:
c1:69:73:a3:dc:bb:65:b0:a9:55:5f:36:f1:ba:72:1a:44:75:
8c:76:0e:5e:47:69:79:ee:50:be:d2:ea:a5:35:bc:0b:eb:b7:
6e:a1:10:cd:00:1f:85:7b:aa:2c:0b:cf:21:da:67:d1:02:ac:
73:26:3a:83:99:8e:b5:5a:e9:55:da:ef:e8:b5:d3:5e:f4:20:
16:f3:cc:b9:a0:88:87:ba:09:30:a6:88:2f:26:2a:a2:c3:52:
d2:3a:07:4f:2e:3a:0c:3d:25:f6:70:94:be:a4:5a:03:43:7c:
11:51:9b:af:8d:7c:8a:6a:67:0b:ac:ad:2d:26:02:df:07:a8:
00:e3:e9:63:eb:18:e3:c4:14:e9:35:11:60:1c:4d:69:73:a9:
53:1d:93:48:53:c2:77:20:af:d2:32:db:1d:d2:49:2d:0c:3f:
16:53:d3:85:03:38:e6:6f:cc:f4:58:06:8d:6f:6c:c7:27:5c:
ec:23:e1:7d:a7:15:39:a5:45:66:d6:aa:2a:66:be:ee:ce:ee:
88:e3:a1:31:37:31:1c:a0:93:eb:80:76:f2:c3:6c:9e:a8:b5:
47:3a:1f:5c:d0:3c:f9:25:d0:18:0b:a1:09:4b:92:da:cd:2f:
87:45:23:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaR8ZVIUEkpe8dx7DG15sRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Yzg4MTI0N2NhZGJjYmY1MmFhMmFkNzYyY2M3NDU0YTdh
ODcyNmUwHhcNMjUwNTAyMTcwMDUwWhcNMjUwNTAzMTcwMDUwWjAzMTEwLwYDVQQD
EygzNzYzOTY1MjUyMmI2ZDNmOWE4NjgxMTNjNjA4YzUyYzVkYWE3ZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq6bm3CU+jkI3SZzJQjfH5cC1TVC
wm25d5jvm2949eZakRGKMKYZ5vLM2aa18NRuXmlpXkpDKE5DVw0vaE/ZuVv23HM1
66VtwJ2PR7Ig9xufoVZBOQ/oOjpTKBqyXdpBGwrHTzJihkZfOZIa7yWRY+w2rHrc
RDAFviCqIxQD+BTB8xeq90N8632ywhgOqOm55k0xOYqdnVi1FP9IvPy2mYqoxvNL
qVtFvv3aT6CQedbSA+LLWKAKHbVR+tB+An/4MGwNuSTpmyQfPjo3Tye/Ygeg4AwF
sP01mUIv8We6/5gHJGGh6J45vcYmAGTH97Szc759HGfxwJeJORns+azLMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdjllJSK20/moaBE8YIxSxdqn22MB8GA1UdIwQY
MBaAFMnIgSR8rby/Uqoq12LMdFSnqHJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQt
N2VmZTkwNWZmMjkxLzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQtN2VmZTkwNWZmMjkx
LzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmu1EXa4m
idSAG34HBbm3NIvvwWlzo9y7ZbCpVV828bpyGkR1jHYOXkdpee5QvtLqpTW8C+u3
bqEQzQAfhXuqLAvPIdpn0QKscyY6g5mOtVrpVdrv6LXTXvQgFvPMuaCIh7oJMKaI
LyYqosNS0joHTy46DD0l9nCUvqRaA0N8EVGbr418impnC6ytLSYC3weoAOPpY+sY
48QU6TURYBxNaXOpUx2TSFPCdyCv0jLbHdJJLQw/FlPThQM45m/M9FgGjW9sxydc
7CPhfacVOaVFZtaqKma+7s7uiOOhMTcxHKCT64B28sNsnqi1RzofXNA8+SXQGAuh
CUuS2s0vh0Uj8Q==
-----END CERTIFICATE-----
Generated at Sat May 3 00:06:49 2025 by rpki-client