Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier: g2nNs+zUiXan1onPKzpmnwWRZrvXd7QqVMC83eDX47c=
Subject key identifier: 63:44:D8:48:A3:E9:92:7B:5E:91:8D:D8:3E:62:F4:EB:69:17:8D:66
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 0196778CFBB075375D80193EE3F7D6BA0365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number: 078D
Signing time: Sun 27 Apr 2025 14:00:49 +0000
Manifest this update: Sun 27 Apr 2025 14:00:49 +0000
Manifest next update: Mon 28 Apr 2025 14:00:49 +0000
Files and hashes: 1: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (hash: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=)
2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=)
3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=)
4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: Ee1o8CGorJcDN/IZBM7F6KmEObj62OKqWNqq3btFLAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:fb:b0:75:37:5d:80:19:3e:e3:f7:d6:ba:03:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Apr 27 14:00:49 2025 GMT
Not After : Apr 28 14:00:49 2025 GMT
Subject: CN=6344d848a3e9927b5e918dd83e62f4eb69178d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:b5:d9:42:11:cb:4e:56:4b:27:76:ec:2e:
33:00:20:7f:5f:01:1a:3f:eb:56:a8:21:58:0c:ec:
8a:e0:6f:fd:ca:5c:e9:e7:28:82:33:30:f7:8c:a1:
84:dc:ff:e1:08:37:48:b2:8e:b4:5a:9d:fb:8a:6e:
da:ad:4e:ad:cb:8b:77:6f:78:e4:a8:57:d1:f4:ef:
2e:9f:4e:45:6f:86:1a:85:d5:f3:f0:5a:22:0b:4a:
5c:3c:a8:cb:a7:f5:fa:0a:52:0c:b4:95:c8:bf:6b:
30:f2:7a:30:db:4f:83:30:ab:d2:26:61:70:39:6b:
dc:fc:9e:70:f4:37:58:95:81:ab:9b:f6:ae:fc:69:
82:b8:6d:5e:44:50:64:7b:97:31:73:7b:d3:bc:b8:
cd:60:08:7a:20:cf:45:80:39:c0:d0:d9:ca:ee:21:
c4:66:90:a3:b3:4f:b2:ea:35:61:03:0f:99:ef:7a:
9f:51:49:ec:b4:34:23:cd:30:be:b0:e6:1e:3c:92:
63:c3:46:19:6e:91:31:1d:15:bf:d6:02:9b:a9:26:
66:17:f2:e7:df:37:66:bd:8d:cb:cc:5d:9b:63:5a:
d4:d5:99:eb:75:9b:06:63:0d:90:4f:e9:8e:4f:ae:
d8:29:d3:a9:d8:68:1d:e2:7e:eb:2c:f6:a6:64:b4:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:D8:48:A3:E9:92:7B:5E:91:8D:D8:3E:62:F4:EB:69:17:8D:66
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ad:e7:18:48:bc:03:31:19:55:11:98:40:38:47:6f:a4:6a:
61:a0:3f:90:42:84:71:3b:fe:8c:64:e8:1a:c1:53:e5:c7:e9:
9d:77:10:95:02:29:10:7e:7c:70:9a:06:c1:1c:c0:82:b8:8e:
8c:65:f7:6b:88:d1:61:3f:eb:f8:23:13:c2:3e:f2:fb:72:e3:
6d:ba:7a:60:f0:2b:9a:d3:c8:c5:f4:fd:78:13:31:ad:49:74:
17:6e:16:f3:c9:a8:ba:8c:8e:d0:2e:b6:07:9d:79:4a:84:ac:
ee:3c:b7:63:f0:9a:8d:1e:07:ee:4c:9e:a8:95:22:db:a9:fa:
04:3a:42:a6:65:45:04:55:3b:b5:7c:e7:3a:45:ad:87:33:c6:
35:0a:fd:c3:c0:f0:8c:0e:7b:a4:ee:8c:7d:5c:67:ea:41:27:
6b:d1:af:ba:7e:37:4a:db:9e:b9:f6:d2:5b:ff:2d:42:ec:e8:
08:74:04:e3:ed:3e:19:4d:d9:ed:e7:d9:03:80:7e:07:f5:2a:
4c:4e:31:57:e7:79:20:51:73:ef:c4:f6:9a:52:10:fb:4f:a8:
39:de:fb:85:36:c2:54:bc:01:d0:cc:39:c2:93:2b:12:51:6a:
79:7a:a4:f8:6a:68:49:78:e1:b0:68:c2:a9:2f:79:1e:58:c2:
0c:af:f3:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jPuwdTddgBk+4/fWugNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1
MzEzNjEwHhcNMjUwNDI3MTQwMDQ5WhcNMjUwNDI4MTQwMDQ5WjAzMTEwLwYDVQQD
Eyg2MzQ0ZDg0OGEzZTk5MjdiNWU5MThkZDgzZTYyZjRlYjY5MTc4ZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9a12UIRy05WSyd27C4zACB/XwEa
P+tWqCFYDOyK4G/9ylzp5yiCMzD3jKGE3P/hCDdIso60Wp37im7arU6ty4t3b3jk
qFfR9O8un05Fb4YahdXz8FoiC0pcPKjLp/X6ClIMtJXIv2sw8now20+DMKvSJmFw
OWvc/J5w9DdYlYGrm/au/GmCuG1eRFBke5cxc3vTvLjNYAh6IM9FgDnA0NnK7iHE
ZpCjs0+y6jVhAw+Z73qfUUnstDQjzTC+sOYePJJjw0YZbpExHRW/1gKbqSZmF/Ln
3zdmvY3LzF2bY1rU1ZnrdZsGYw2QT+mOT67YKdOp2Ggd4n7rLPamZLQgiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNE2Eij6ZJ7XpGN2D5i9OtpF41mMB8GA1UdIwQY
MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct
MzE2NjBjMjJkMTllLzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll
LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL63nGEi8
AzEZVRGYQDhHb6RqYaA/kEKEcTv+jGToGsFT5cfpnXcQlQIpEH58cJoGwRzAgriO
jGX3a4jRYT/r+CMTwj7y+3Ljbbp6YPArmtPIxfT9eBMxrUl0F24W88mouoyO0C62
B515SoSs7jy3Y/CajR4H7kyeqJUi26n6BDpCpmVFBFU7tXznOkWthzPGNQr9w8Dw
jA57pO6MfVxn6kEna9Gvun43StueufbSW/8tQuzoCHQE4+0+GU3Z7efZA4B+B/Uq
TE4xV+d5IFFz78T2mlIQ+0+oOd77hTbCVLwB0Mw5wpMrElFqeXqk+GpoSXjhsGjC
qS95HljCDK/zjw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:45 2025 by rpki-client