Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: JH5dAeGYCHoQ6tEj7QNUswJWxjdDtKwloFF/CaQkanE=
Subject key identifier: 62:58:18:09:DB:AF:12:45:E9:9F:BC:36:6E:E3:35:C8:3B:C2:93:5B
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 0196760CB2BA42239DB01CFDCE71F15FCB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 1237
Signing time: Sun 27 Apr 2025 07:01:05 +0000
Manifest this update: Sun 27 Apr 2025 07:01:05 +0000
Manifest next update: Mon 28 Apr 2025 07:01:05 +0000
Files and hashes: 1: 0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa (hash: usdtXTbOrc0vwd46ZO8C/l/xue6j9QcbuHgY1Bupvvo=)
2: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: CxybF0hkI7cMVY9a/qnmqsBGpwz5R1oXjPpWZ3JwQiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:b2:ba:42:23:9d:b0:1c:fd:ce:71:f1:5f:cb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Apr 27 07:01:05 2025 GMT
Not After : Apr 28 07:01:05 2025 GMT
Subject: CN=62581809dbaf1245e99fbc366ee335c83bc2935b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:01:ed:d3:17:d6:68:ee:62:81:ea:b6:b7:
8f:c9:8d:69:9e:0d:e5:e9:4b:b0:a7:e5:4a:45:a8:
7b:69:f0:1b:b2:30:cc:1c:52:4f:59:8c:74:63:32:
01:cf:1f:6c:d5:0e:17:a4:bb:09:9f:71:28:ae:bc:
eb:40:df:a2:0c:74:1a:48:ca:f3:a3:b6:86:2c:89:
e4:d9:11:bb:fa:d6:1e:a1:7d:09:df:14:f1:91:45:
78:95:e8:c3:d0:da:43:87:ef:45:71:ce:01:2d:01:
e5:9d:d5:f8:4b:d0:b5:3c:df:53:1e:3c:e5:08:82:
01:8f:34:de:6f:91:9e:fd:6d:fc:d5:dc:ba:4e:88:
83:91:e8:a8:d4:b9:81:10:61:63:d2:d1:4a:41:65:
58:41:66:48:88:37:1e:53:52:c1:08:7a:f8:8f:45:
3a:75:4a:24:bd:1d:a0:02:e9:bc:9b:cc:7d:99:8a:
be:a1:c7:6a:49:61:48:1a:cb:84:6e:77:42:d1:1c:
70:10:b0:2c:4a:16:b4:86:af:9d:b9:42:58:73:55:
ca:a2:05:cb:fc:e4:58:f8:2b:69:ca:5a:ef:3e:36:
2e:4d:1d:71:72:bd:39:fe:dc:ce:9f:3f:31:c7:3e:
23:f0:26:4c:1b:d1:ef:11:69:45:66:e2:45:cf:00:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:58:18:09:DB:AF:12:45:E9:9F:BC:36:6E:E3:35:C8:3B:C2:93:5B
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:57:48:10:a3:54:6f:33:80:17:2e:a7:84:99:de:9a:89:6e:
46:bb:fe:7f:28:7b:01:b4:ef:5d:32:b3:07:9b:57:d3:57:f4:
87:ed:1f:eb:c2:36:00:da:be:06:4e:a1:19:03:fc:90:1f:de:
61:47:f5:f8:a8:c3:f5:db:cb:dc:45:92:6f:dc:38:9f:63:b7:
77:15:d9:81:3a:06:d8:66:69:74:e2:32:b7:c4:e6:30:99:69:
d8:a9:4c:3d:2f:8d:20:69:2f:70:40:3c:47:aa:3f:1e:c3:9b:
a1:6b:8d:33:5b:41:49:ca:cb:4a:69:5d:5c:4b:08:2d:3c:d8:
63:7f:7e:73:e8:96:41:73:2b:ce:f1:fb:8c:94:5a:6f:70:55:
98:b9:22:66:d1:39:d5:3c:29:91:b7:1c:97:42:2d:95:b9:28:
92:0d:57:4e:c9:5f:9f:2c:42:cc:f0:3d:1d:88:48:c4:9a:b2:
73:49:55:37:d8:22:67:4a:ca:76:13:87:0f:b1:f2:4c:94:42:
91:b5:d8:36:b3:5b:14:fc:14:9e:9a:35:8e:a0:2c:fa:3d:3f:
34:16:44:aa:55:54:2b:06:81:25:8b:a7:a8:6e:f0:06:bb:c5:
e7:6f:eb:1e:f4:e8:f4:18:98:bb:3e:99:90:9d:4f:72:78:14:
f4:aa:63:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DLK6QiOdsBz9znHxX8sDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDljYmJhM2U2NjI5YmVhZWJmYjY5NjY4Njc4YWRhNTE3
NDQ4OTgwHhcNMjUwNDI3MDcwMTA1WhcNMjUwNDI4MDcwMTA1WjAzMTEwLwYDVQQD
Eyg2MjU4MTgwOWRiYWYxMjQ1ZTk5ZmJjMzY2ZWUzMzVjODNiYzI5MzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBIB7dMX1mjuYoHqtrePyY1png3l
6Uuwp+VKRah7afAbsjDMHFJPWYx0YzIBzx9s1Q4XpLsJn3EorrzrQN+iDHQaSMrz
o7aGLInk2RG7+tYeoX0J3xTxkUV4lejD0NpDh+9Fcc4BLQHlndX4S9C1PN9THjzl
CIIBjzTeb5Ge/W381dy6ToiDkeio1LmBEGFj0tFKQWVYQWZIiDceU1LBCHr4j0U6
dUokvR2gAum8m8x9mYq+ocdqSWFIGsuEbndC0RxwELAsSha0hq+duUJYc1XKogXL
/ORY+CtpylrvPjYuTR1xcr05/tzOnz8xxz4j8CZMG9HvEWlFZuJFzwCs4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJYGAnbrxJF6Z+8Nm7jNcg7wpNbMB8GA1UdIwQY
MBaAFGFJy7o+Zim+rr+2lmhnitpRdEiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2It
NGQ0M2Y2NmFiNzMxLzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2ItNGQ0M2Y2NmFiNzMx
LzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFdIEKNU
bzOAFy6nhJnemoluRrv+fyh7AbTvXTKzB5tX01f0h+0f68I2ANq+Bk6hGQP8kB/e
YUf1+KjD9dvL3EWSb9w4n2O3dxXZgToG2GZpdOIyt8TmMJlp2KlMPS+NIGkvcEA8
R6o/HsOboWuNM1tBScrLSmldXEsILTzYY39+c+iWQXMrzvH7jJRab3BVmLkiZtE5
1Twpkbccl0Itlbkokg1XTslfnyxCzPA9HYhIxJqyc0lVN9giZ0rKdhOHD7HyTJRC
kbXYNrNbFPwUnpo1jqAs+j0/NBZEqlVUKwaBJYunqG7wBrvF52/rHvTo9BiYuz6Z
kJ1PcngU9KpjQg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:52 2025 by rpki-client