Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: gdpLpc7wtUeXy5MwWcwvVUxIwZmUCuz+/k+U9/WO6Y4=
Subject key identifier: 08:53:7B:E8:E1:96:A4:47:8D:14:22:DB:DE:97:C1:54:26:61:E6:73
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 01967DC567AB7E1AE1B681DDD8BEA143DBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 116B
Signing time: Mon 28 Apr 2025 19:00:11 +0000
Manifest this update: Mon 28 Apr 2025 19:00:11 +0000
Manifest next update: Tue 29 Apr 2025 19:00:11 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: c3VIE76eDAE18FuZ2ZXlUL0WQDSxsORvlJZpnUoZcp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:67:ab:7e:1a:e1:b6:81:dd:d8:be:a1:43:db:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Apr 28 19:00:11 2025 GMT
Not After : Apr 29 19:00:11 2025 GMT
Subject: CN=08537be8e196a4478d1422dbde97c1542661e673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ac:fc:77:ef:b7:b4:80:52:2b:cb:40:1c:04:
23:04:39:07:1f:92:69:d1:96:32:61:6a:15:06:25:
58:be:13:62:1f:69:45:04:20:85:1c:0b:b3:9a:9f:
42:ee:f6:01:55:7d:05:76:71:95:de:22:3e:56:26:
b2:c5:97:df:26:e8:bd:f8:7d:e2:92:eb:1b:33:c6:
71:de:a4:11:8b:35:70:ad:97:d0:4b:f9:40:3f:6d:
58:f3:dc:50:6b:67:67:93:ec:49:f6:86:ab:74:1a:
ea:e7:97:d6:a6:62:a4:7a:75:1f:ef:bd:0e:18:eb:
ba:1e:5d:2d:51:ea:63:5f:f3:56:e6:93:7d:ca:04:
d1:4d:38:f9:b9:0a:96:26:c9:56:56:2d:26:9c:1b:
f1:12:eb:e9:cf:78:76:6a:9e:d4:03:f5:50:16:39:
65:54:7e:cf:fa:14:c6:2d:4b:74:2e:70:68:bd:b0:
3e:b4:2e:4c:d0:cc:5b:ec:57:a9:e9:a4:76:88:d3:
36:c6:7a:22:a1:17:f3:8b:06:32:70:87:d3:64:e2:
43:05:54:87:a6:0b:08:e7:8d:e3:f3:8d:7c:4c:29:
44:e6:70:8c:7c:b5:f0:eb:a5:6c:18:7c:08:60:46:
b9:6c:d8:db:a5:7f:07:9e:6a:74:c2:02:32:f3:55:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:53:7B:E8:E1:96:A4:47:8D:14:22:DB:DE:97:C1:54:26:61:E6:73
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:48:a8:de:6d:b1:d2:f3:46:2d:d4:5d:33:44:8b:6f:7d:ac:
27:20:04:cb:9c:12:17:ac:94:22:ce:76:01:0f:d6:2f:29:2d:
ee:ca:42:c1:66:c2:25:c6:65:1b:2f:43:0c:86:5b:62:20:d3:
e0:de:d7:63:ec:34:46:67:c5:2f:74:07:11:fc:5e:5d:89:db:
4a:43:bb:9a:4a:fc:61:6f:f1:29:43:f3:84:73:68:38:ef:3d:
48:07:e9:6e:bf:fa:20:60:14:7d:df:31:90:26:e3:3d:a9:93:
23:4d:9e:fe:f9:73:1c:bb:9f:da:9e:91:c9:da:2f:d2:a4:da:
35:81:9e:5e:e0:ed:b8:d9:0c:73:de:a2:97:ad:52:c6:c6:b1:
3c:cb:53:18:ab:9f:4e:05:6f:64:dc:8d:35:10:51:de:b8:46:
e1:a3:ea:79:b1:89:bb:f6:55:98:6a:e2:65:6c:64:06:bd:2f:
60:b5:a6:b8:79:ac:29:8d:94:74:71:b7:cd:62:be:d2:79:44:
a7:36:85:a6:5e:57:28:37:97:eb:41:63:2f:cc:13:f4:f4:58:
80:76:c1:37:24:a5:64:f6:e6:83:9f:92:62:4a:79:2a:a3:57:
13:55:0d:90:5a:3e:99:d7:e5:90:90:e5:3c:25:d6:5d:6f:76:
58:c1:0f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xWerfhrhtoHd2L6hQ9u4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjU2Njg0M2UwM2Q2MzlhNDYwYjFiZDg2YmY2OWMxYzM5
ZjhiMTEwHhcNMjUwNDI4MTkwMDExWhcNMjUwNDI5MTkwMDExWjAzMTEwLwYDVQQD
EygwODUzN2JlOGUxOTZhNDQ3OGQxNDIyZGJkZTk3YzE1NDI2NjFlNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qz8d++3tIBSK8tAHAQjBDkHH5Jp
0ZYyYWoVBiVYvhNiH2lFBCCFHAuzmp9C7vYBVX0FdnGV3iI+ViayxZffJui9+H3i
kusbM8Zx3qQRizVwrZfQS/lAP21Y89xQa2dnk+xJ9oardBrq55fWpmKkenUf770O
GOu6Hl0tUepjX/NW5pN9ygTRTTj5uQqWJslWVi0mnBvxEuvpz3h2ap7UA/VQFjll
VH7P+hTGLUt0LnBovbA+tC5M0Mxb7Fep6aR2iNM2xnoioRfziwYycIfTZOJDBVSH
pgsI543j8418TClE5nCMfLXw66VsGHwIYEa5bNjbpX8Hnmp0wgIy81WBoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhTe+jhlqRHjRQi296XwVQmYeZzMB8GA1UdIwQY
MBaAFMslZoQ+A9Y5pGCxvYa/acHDn4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYt
MDZiODEyODk4OGY4LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYtMDZiODEyODk4OGY4
LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukio3m2x
0vNGLdRdM0SLb32sJyAEy5wSF6yUIs52AQ/WLykt7spCwWbCJcZlGy9DDIZbYiDT
4N7XY+w0RmfFL3QHEfxeXYnbSkO7mkr8YW/xKUPzhHNoOO89SAfpbr/6IGAUfd8x
kCbjPamTI02e/vlzHLuf2p6Rydov0qTaNYGeXuDtuNkMc96il61SxsaxPMtTGKuf
TgVvZNyNNRBR3rhG4aPqebGJu/ZVmGriZWxkBr0vYLWmuHmsKY2UdHG3zWK+0nlE
pzaFpl5XKDeX60FjL8wT9PRYgHbBNySlZPbmg5+SYkp5KqNXE1UNkFo+mdflkJDl
PCXWXW92WMEP5w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:38 2025 by rpki-client