Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
File: yydiBw8SVD8bCscZgqxxAlgQ_18.mft (raw, json)
Hash identifier: SFFRz8NylsOppNklxSZjwYm0yLOho0TwARS/u43K5pc=
Subject key identifier: 8D:42:C0:CC:23:C3:79:20:DF:F4:45:05:B8:6D:42:E2:CD:FC:97:47
Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
Certificate issuer: /CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Certificate serial: 01967EA17EDAA9CC8F44F6187F7E48B81485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
Manifest number: 072F
Signing time: Mon 28 Apr 2025 23:00:35 +0000
Manifest this update: Mon 28 Apr 2025 23:00:35 +0000
Manifest next update: Tue 29 Apr 2025 23:00:35 +0000
Files and hashes: 1: rnkd3aH7pF24TCTJAylZcN41MhA.roa (hash: 1F1EwEJKOPyNW/NE+25aYXPL5wdqrlw2U+Z2MniW564=)
2: yydiBw8SVD8bCscZgqxxAlgQ_18.crl (hash: 77btP39mg0IoQCj4yrVaaFwnW3zhssG4eksiyPy4TrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:7e:da:a9:cc:8f:44:f6:18:7f:7e:48:b8:14:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Validity
Not Before: Apr 28 23:00:35 2025 GMT
Not After : Apr 29 23:00:35 2025 GMT
Subject: CN=8d42c0cc23c37920dff44505b86d42e2cdfc9747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:43:5c:9f:e2:0d:c4:82:8f:2d:7d:9e:38:
42:51:3e:b6:30:15:ae:ae:39:50:30:68:2c:f4:a3:
91:32:9d:c3:ba:26:e1:77:e3:04:4f:64:96:4a:30:
d0:4a:07:f8:36:eb:92:9f:68:c5:24:84:e8:9a:23:
6d:e6:d1:0d:58:91:01:d3:ed:80:4c:a0:f8:62:4b:
9a:5a:4f:aa:cf:f1:43:7f:ee:11:0c:98:1e:df:74:
5a:37:9b:e0:5b:17:0b:86:7b:bc:df:74:c0:3e:f9:
fb:82:3c:ac:0e:2f:e2:46:17:f7:2d:0f:e2:f3:79:
67:2d:4c:c9:c3:9d:24:dc:0a:71:85:35:11:e5:31:
0c:f4:1c:f8:29:3d:8a:a4:b2:c8:40:6a:48:09:b5:
21:6d:14:f2:29:20:69:89:0a:bd:96:8b:ae:fd:43:
43:1b:f9:68:63:cf:f1:72:5c:81:06:db:86:0d:ef:
cc:d5:d4:ee:02:c8:2a:43:0a:de:47:26:63:ef:d9:
78:8e:a9:3b:5c:59:b9:2a:e6:7a:d4:18:e1:ef:ca:
8e:83:01:13:d8:1d:ca:73:f1:8d:f2:94:ef:6d:fd:
f2:70:0c:27:8a:75:9f:bb:ba:9a:7c:6e:fa:e7:7a:
aa:21:58:26:fd:e0:af:90:51:82:ad:26:08:9c:cd:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:42:C0:CC:23:C3:79:20:DF:F4:45:05:B8:6D:42:E2:CD:FC:97:47
X509v3 Authority Key Identifier:
keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:46:d7:0d:f5:e6:a3:ba:5d:50:1e:15:23:58:fa:3f:a8:e5:
1c:65:5e:e5:d5:c7:d1:81:8f:89:87:c4:9b:09:d6:20:51:bd:
9a:2c:80:ea:bb:98:e2:e2:a0:50:ec:e5:16:d9:f1:9b:d0:ed:
1d:c5:a1:61:69:0e:e8:a8:ae:61:74:5f:39:de:95:8b:5c:35:
6c:5f:55:19:30:2d:b0:55:03:57:08:41:c1:6f:a0:49:8f:21:
39:a4:6f:56:e3:a0:95:dd:c8:bd:d5:12:c6:c8:7a:b6:96:3a:
14:41:50:17:e2:1b:35:ee:57:15:15:07:2a:50:f3:35:90:4a:
60:50:3f:7e:20:cc:2d:24:a9:1d:c3:7d:da:79:b4:b0:cd:f9:
a0:0e:81:58:47:94:5a:0f:14:3d:b9:a1:80:ec:3d:41:3b:11:
1a:bf:34:f1:12:d2:14:62:0e:be:53:be:93:c7:39:d4:f7:09:
f9:f6:49:09:ae:1f:5f:67:16:25:ba:99:3e:60:70:c8:ff:58:
c0:2d:bf:9f:cc:b8:44:f0:9f:e1:56:b5:1d:c6:db:92:77:55:
ac:8e:35:08:b6:f8:28:e5:08:f0:b4:b7:a7:5c:ec:45:0d:1b:
0b:ab:aa:5f:12:7a:f8:13:0b:08:b7:26:a3:fe:b9:c9:61:20:
6b:fe:23:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+oX7aqcyPRPYYf35IuBSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjc2MjA3MGYxMjU0M2YxYjBhYzcxOTgyYWM3MTAyNTgx
MGZmNWYwHhcNMjUwNDI4MjMwMDM1WhcNMjUwNDI5MjMwMDM1WjAzMTEwLwYDVQQD
Eyg4ZDQyYzBjYzIzYzM3OTIwZGZmNDQ1MDViODZkNDJlMmNkZmM5NzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumRDXJ/iDcSCjy19njhCUT62MBWu
rjlQMGgs9KORMp3Duibhd+MET2SWSjDQSgf4NuuSn2jFJITomiNt5tENWJEB0+2A
TKD4YkuaWk+qz/FDf+4RDJge33RaN5vgWxcLhnu833TAPvn7gjysDi/iRhf3LQ/i
83lnLUzJw50k3ApxhTUR5TEM9Bz4KT2KpLLIQGpICbUhbRTyKSBpiQq9louu/UND
G/loY8/xclyBBtuGDe/M1dTuAsgqQwreRyZj79l4jqk7XFm5KuZ61Bjh78qOgwET
2B3Kc/GN8pTvbf3ycAwninWfu7qafG7653qqIVgm/eCvkFGCrSYInM0ewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1CwMwjw3kg3/RFBbhtQuLN/JdHMB8GA1UdIwQY
MBaAFMsnYgcPElQ/GwrHGYKscQJYEP9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZTZlM2EtOWNlYS00N2M3LWFiMTMt
ZWY0Y2RhNWY1MmNmLzEveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hZTZlM2EtOWNlYS00N2M3LWFiMTMtZWY0Y2RhNWY1MmNm
LzEveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEbXDfXm
o7pdUB4VI1j6P6jlHGVe5dXH0YGPiYfEmwnWIFG9miyA6ruY4uKgUOzlFtnxm9Dt
HcWhYWkO6KiuYXRfOd6Vi1w1bF9VGTAtsFUDVwhBwW+gSY8hOaRvVuOgld3IvdUS
xsh6tpY6FEFQF+IbNe5XFRUHKlDzNZBKYFA/fiDMLSSpHcN92nm0sM35oA6BWEeU
Wg8UPbmhgOw9QTsRGr808RLSFGIOvlO+k8c51PcJ+fZJCa4fX2cWJbqZPmBwyP9Y
wC2/n8y4RPCf4Va1HcbbkndVrI41CLb4KOUI8LS3p1zsRQ0bC6uqXxJ6+BMLCLcm
o/65yWEga/4j+Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:48:13 2025 by rpki-client