Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: RtDjXsDTdRZC/cGE16M6qLadah9GUGLD8No5E/V+O/k=
Subject key identifier: FA:39:16:F5:30:9A:72:D7:40:2F:0B:2A:C1:CD:EB:F0:37:BF:B4:C5
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 0196760D0267410D39BFF3824B0F927CC49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 052A
Signing time: Sun 27 Apr 2025 07:01:26 +0000
Manifest this update: Sun 27 Apr 2025 07:01:26 +0000
Manifest next update: Mon 28 Apr 2025 07:01:26 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: R6YICzz+993wXDNRdF29q+Orz1uQhvf/VkUvxFCJgjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:02:67:41:0d:39:bf:f3:82:4b:0f:92:7c:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Apr 27 07:01:26 2025 GMT
Not After : Apr 28 07:01:26 2025 GMT
Subject: CN=fa3916f5309a72d7402f0b2ac1cdebf037bfb4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:38:11:4a:a4:28:df:e4:cc:02:f4:72:77:
69:2b:b8:30:00:e6:69:2f:68:6d:dc:e7:d0:1f:73:
55:56:fc:9d:0e:d3:4c:3e:d7:0e:5e:7d:ce:e1:50:
b4:28:3f:fa:21:0f:2e:d2:9d:ea:e1:10:f3:b9:82:
44:c6:41:69:06:c1:c8:fc:d3:b7:bc:3a:ab:01:dd:
07:a3:ad:2e:2b:be:54:50:52:4b:58:8f:1d:7e:2b:
7c:c7:22:ec:eb:b3:ef:68:a6:1b:89:e1:19:d3:2c:
3c:81:25:d9:8b:ae:45:66:9e:7a:bd:25:1b:19:c4:
95:87:19:f7:7e:94:dd:8e:41:03:92:29:18:08:e4:
01:d2:dd:8b:23:28:8e:cf:ec:82:27:02:64:56:df:
8c:79:6a:c8:ab:cc:89:3e:29:62:93:76:f5:2f:7e:
b1:e1:5d:39:b3:86:cc:72:50:68:46:13:86:f9:ad:
1e:03:80:cf:cd:40:01:2c:c5:0a:ff:3b:8d:07:6f:
00:ea:ff:a3:69:ab:4d:a4:66:73:5f:ca:66:e8:14:
54:89:15:80:2f:34:50:04:d6:df:7a:1a:06:e2:e6:
7d:b0:da:ab:98:7b:0b:cc:c7:d4:f4:9d:e6:b1:25:
be:1a:8a:ec:f7:84:90:b9:03:eb:1f:5a:0b:64:98:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:39:16:F5:30:9A:72:D7:40:2F:0B:2A:C1:CD:EB:F0:37:BF:B4:C5
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dd:f8:bf:c9:7b:a1:2b:05:25:f1:0e:ea:da:f5:94:7f:b0:
a2:5c:2a:59:97:b0:f7:0a:25:b1:51:3f:5e:30:2b:75:df:58:
31:49:4c:20:4f:f8:5c:7d:57:a0:87:ec:03:c1:8f:0b:22:95:
36:52:76:6e:e4:b9:70:dd:d8:bd:ef:c9:88:1c:b5:8c:bc:12:
1c:7a:e0:05:a3:5f:d7:83:1c:54:5c:9b:1f:b7:c7:4c:9b:f6:
db:72:6b:a2:c6:10:92:dd:8b:2d:6c:2d:ce:c7:32:1a:ff:64:
63:ff:c2:e3:3b:4c:c7:86:dc:b6:03:c7:e4:6f:49:c8:3b:b6:
1c:65:28:05:88:da:66:ec:97:ef:42:5d:b6:ef:67:55:2e:ba:
37:69:18:aa:1f:17:a8:b5:e5:eb:56:d3:15:f9:1f:24:eb:ec:
0f:46:2b:40:72:a9:bd:44:33:e9:32:f7:41:8e:8b:b8:2f:73:
60:ae:c8:6b:a5:54:9c:77:cc:a1:0c:a3:d3:38:68:0a:33:97:
a2:49:bf:29:9b:ba:62:df:f8:db:d2:f2:5e:3c:c6:ec:fe:c9:
58:14:14:8f:22:e5:9e:83:0c:7f:a0:b2:ba:2f:fc:e2:11:1b:
72:36:b9:d5:7e:6b:f6:3b:e2:95:32:10:d3:d0:30:52:ac:59:
c6:aa:b8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DQJnQQ05v/OCSw+SfMSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZjIzYzliN2IzZWEwNTQ5MTQyYjcwMTU5NzcwNmZjN2E2
Mzg1ZTcwHhcNMjUwNDI3MDcwMTI2WhcNMjUwNDI4MDcwMTI2WjAzMTEwLwYDVQQD
EyhmYTM5MTZmNTMwOWE3MmQ3NDAyZjBiMmFjMWNkZWJmMDM3YmZiNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBk4EUqkKN/kzAL0cndpK7gwAOZp
L2ht3OfQH3NVVvydDtNMPtcOXn3O4VC0KD/6IQ8u0p3q4RDzuYJExkFpBsHI/NO3
vDqrAd0Ho60uK75UUFJLWI8dfit8xyLs67PvaKYbieEZ0yw8gSXZi65FZp56vSUb
GcSVhxn3fpTdjkEDkikYCOQB0t2LIyiOz+yCJwJkVt+MeWrIq8yJPilik3b1L36x
4V05s4bMclBoRhOG+a0eA4DPzUABLMUK/zuNB28A6v+jaatNpGZzX8pm6BRUiRWA
LzRQBNbfehoG4uZ9sNqrmHsLzMfU9J3msSW+Gors94SQuQPrH1oLZJjhewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo5FvUwmnLXQC8LKsHN6/A3v7TFMB8GA1UdIwQY
MBaAFMnyPJt7PqBUkUK3AVl3Bvx6Y4XnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQt
M2Y5MjJiNDAxNjhhLzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQtM2Y5MjJiNDAxNjhh
LzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWt34v8l7
oSsFJfEO6tr1lH+wolwqWZew9wolsVE/XjArdd9YMUlMIE/4XH1XoIfsA8GPCyKV
NlJ2buS5cN3Yve/JiBy1jLwSHHrgBaNf14McVFybH7fHTJv223JrosYQkt2LLWwt
zscyGv9kY//C4ztMx4bctgPH5G9JyDu2HGUoBYjaZuyX70Jdtu9nVS66N2kYqh8X
qLXl61bTFfkfJOvsD0YrQHKpvUQz6TL3QY6LuC9zYK7Ia6VUnHfMoQyj0zhoCjOX
okm/KZu6Yt/429LyXjzG7P7JWBQUjyLlnoMMf6Cyui/84hEbcja51X5r9jvilTIQ
09AwUqxZxqq46g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:12:20 2025 by rpki-client