Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File: YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier: xO8TJd+JBty3enCquHvURZ4hRQZ6vgblyTbtKyl8pYE=
Subject key identifier: 45:61:48:29:45:11:5F:71:9E:13:B3:DA:26:E8:DF:B8:2F:4D:BC:77
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer: /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial: 01967F7D0E9D0099D0E0396D3977C7D82C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number: 08FE
Signing time: Tue 29 Apr 2025 03:00:24 +0000
Manifest this update: Tue 29 Apr 2025 03:00:24 +0000
Manifest next update: Wed 30 Apr 2025 03:00:24 +0000
Files and hashes: 1: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: 0jadhXBRcQFk7CYrE9w9r+8Y4t9wJs8DKQHwurLyFwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:0e:9d:00:99:d0:e0:39:6d:39:77:c7:d8:2c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
Validity
Not Before: Apr 29 03:00:24 2025 GMT
Not After : Apr 30 03:00:24 2025 GMT
Subject: CN=4561482945115f719e13b3da26e8dfb82f4dbc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:17:36:ec:ac:9f:9e:d0:63:ec:ec:f7:e0:
fb:ff:13:70:dc:89:63:fa:c9:1f:98:e9:0c:b5:37:
e0:90:1b:88:11:fa:86:3b:f3:5f:c4:41:5c:e5:1b:
28:86:0b:69:9f:29:ed:78:ef:8e:59:ed:5d:fd:34:
74:51:92:07:12:0d:a7:49:0a:77:1b:cd:62:5f:20:
0d:80:46:c3:ba:56:55:e7:d9:25:dc:27:91:e7:19:
9b:a1:6b:7b:10:99:60:8d:04:e3:1c:67:fb:f8:ab:
9b:1a:cb:f6:d4:99:f6:35:d5:4e:7b:93:04:67:35:
c5:93:27:bf:43:dc:aa:bc:a2:ad:8a:b7:d4:f6:3d:
fb:0e:fa:08:00:0a:50:86:65:f4:67:78:2f:e4:fc:
a3:68:c1:ae:f5:b8:90:34:70:6a:05:d5:ec:fa:3c:
f8:5a:c5:13:4f:4b:ca:f4:21:35:54:ac:43:ec:d1:
3f:39:4f:04:ec:e8:9a:02:0c:97:38:26:0c:11:e8:
2b:07:b7:51:e8:3e:33:1a:2a:f5:4a:7e:19:a5:79:
88:44:95:08:e9:8f:7a:52:4e:8a:58:81:49:a3:0a:
64:2a:28:45:7e:cf:64:97:a1:84:60:a8:f6:40:a4:
11:7d:60:e0:aa:c0:3b:a6:88:47:03:fe:f0:d6:69:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:61:48:29:45:11:5F:71:9E:13:B3:DA:26:E8:DF:B8:2F:4D:BC:77
X509v3 Authority Key Identifier:
keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b9:b4:e4:4f:07:6e:3f:f8:be:d9:48:94:0f:62:0f:9b:38:
e7:ee:49:18:40:98:a3:96:6f:8d:82:fd:64:79:c7:2e:c8:05:
54:8e:57:e7:5c:2b:e1:57:3b:92:c6:e5:84:b6:b7:b5:20:9c:
14:b1:d1:0d:85:df:1f:d5:2f:01:cf:7d:e4:82:4f:0e:dc:e9:
52:0c:39:47:2c:56:c6:53:ee:87:67:55:cf:ee:aa:05:e3:5f:
c1:12:1c:aa:9f:f6:c8:0f:9e:95:42:4c:9f:a3:38:36:13:72:
39:c4:3e:2a:ef:bd:03:8b:05:18:b4:8d:bd:b5:0d:8c:b8:a6:
47:5a:a1:60:5e:26:f7:fa:85:25:40:0b:a0:9c:6b:da:14:48:
f4:3f:37:19:84:c5:40:fe:ac:35:0b:01:0f:d0:73:ac:18:cc:
b1:09:e2:4f:4b:06:d6:9b:44:23:4e:94:84:ef:87:9b:0d:29:
87:aa:a7:69:46:9d:e2:bb:d3:4a:a0:f7:29:b2:0d:46:fe:60:
b4:68:5a:ef:6a:bd:4b:1e:54:a1:76:18:02:be:32:e7:cb:0b:
be:70:be:41:eb:d6:6e:ea:91:1a:a0:67:72:83:65:e0:b3:a6:
9a:e2:3c:74:da:7d:c3:42:86:f0:a7:75:8a:ae:6f:70:82:9d:
01:bf:7f:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/fQ6dAJnQ4DltOXfH2CxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDYyMzAyYjQzODU5MjM3NmM0MjY0ZjQ5ZGM1ZTY3M2Vk
YjJjZmIwHhcNMjUwNDI5MDMwMDI0WhcNMjUwNDMwMDMwMDI0WjAzMTEwLwYDVQQD
Eyg0NTYxNDgyOTQ1MTE1ZjcxOWUxM2IzZGEyNmU4ZGZiODJmNGRiYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4MXNuysn57QY+zs9+D7/xNw3Ilj
+skfmOkMtTfgkBuIEfqGO/NfxEFc5RsohgtpnynteO+OWe1d/TR0UZIHEg2nSQp3
G81iXyANgEbDulZV59kl3CeR5xmboWt7EJlgjQTjHGf7+KubGsv21Jn2NdVOe5ME
ZzXFkye/Q9yqvKKtirfU9j37DvoIAApQhmX0Z3gv5PyjaMGu9biQNHBqBdXs+jz4
WsUTT0vK9CE1VKxD7NE/OU8E7OiaAgyXOCYMEegrB7dR6D4zGir1Sn4ZpXmIRJUI
6Y96Uk6KWIFJowpkKihFfs9kl6GEYKj2QKQRfWDgqsA7pohHA/7w1mnadQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVhSClFEV9xnhOz2ibo37gvTbx3MB8GA1UdIwQY
MBaAFGMGIwK0OFkjdsQmT0ncXmc+2yz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84YmRkMDAtNzk0My00NTg0LTg0ZjMt
M2IyNDJkNTRlNzg4LzEvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84YmRkMDAtNzk0My00NTg0LTg0ZjMtM2IyNDJkNTRlNzg4
LzEvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrm05E8H
bj/4vtlIlA9iD5s45+5JGECYo5ZvjYL9ZHnHLsgFVI5X51wr4Vc7ksblhLa3tSCc
FLHRDYXfH9UvAc995IJPDtzpUgw5RyxWxlPuh2dVz+6qBeNfwRIcqp/2yA+elUJM
n6M4NhNyOcQ+Ku+9A4sFGLSNvbUNjLimR1qhYF4m9/qFJUALoJxr2hRI9D83GYTF
QP6sNQsBD9BzrBjMsQniT0sG1ptEI06UhO+Hmw0ph6qnaUad4rvTSqD3KbINRv5g
tGha72q9Sx5UoXYYAr4y58sLvnC+QevWbuqRGqBncoNl4LOmmuI8dNp9w0KG8Kd1
iq5vcIKdAb9/Lg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:17:20 2025 by rpki-client