Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: 4vN9/WRjNpfatw7Mhw6cRQxKhE0WS16deoDpgjxrNoQ=
Subject key identifier: 7E:B7:3F:8B:06:16:E9:04:E0:15:E0:85:CE:42:5E:D9:58:4A:CB:A8
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 01967341E64C2C9F7BEF2E0CD9082A6F16E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 058A
Signing time: Sat 26 Apr 2025 18:00:20 +0000
Manifest this update: Sat 26 Apr 2025 18:00:20 +0000
Manifest next update: Sun 27 Apr 2025 18:00:20 +0000
Files and hashes: 1: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (hash: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: k4X2m44zHmIc8XM5A+MuvH2FLsWLzJPQoJqjukwgmCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:41:e6:4c:2c:9f:7b:ef:2e:0c:d9:08:2a:6f:16:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Apr 26 18:00:20 2025 GMT
Not After : Apr 27 18:00:20 2025 GMT
Subject: CN=7eb73f8b0616e904e015e085ce425ed9584acba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:67:99:d1:2b:d8:b5:e1:1f:c7:22:f3:e7:
e0:f1:62:f5:2d:92:b4:76:2f:54:c1:a1:c5:a2:17:
15:21:59:10:1f:0d:0b:26:b1:0a:5e:3a:23:92:88:
47:79:99:4b:71:cd:4f:96:f5:31:8a:8f:b9:2c:2f:
b6:ca:f6:3f:b4:fb:ec:9d:c4:36:57:ca:b1:ca:36:
7c:50:77:e7:f0:b9:86:13:bf:46:3a:57:db:7e:d0:
e6:d7:ac:fa:fd:23:f8:d2:52:0d:20:3e:bd:52:b2:
01:a8:99:44:f5:5a:10:23:06:d0:36:16:d4:ef:f4:
a1:22:86:d0:3a:0f:eb:8c:db:11:23:93:66:00:87:
7d:94:db:ec:a3:6a:05:52:d2:f3:86:63:54:5e:76:
37:c2:2a:24:48:94:2b:30:73:14:41:12:26:01:f6:
17:08:20:fd:38:d2:19:ed:9f:af:fe:0f:d8:2f:52:
c3:7e:b1:5c:2c:74:17:27:73:3c:7c:55:da:a6:43:
9b:22:ef:78:f9:87:7a:86:27:e5:8e:97:a4:50:bd:
43:f6:f7:36:4b:58:a4:c3:bf:ae:e3:7b:a1:33:6c:
6f:84:83:e0:f2:cd:56:bc:87:3d:24:27:63:eb:b3:
d1:2a:7e:d6:2e:4d:b8:92:55:75:44:c0:ae:91:0f:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:3F:8B:06:16:E9:04:E0:15:E0:85:CE:42:5E:D9:58:4A:CB:A8
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e4:ed:ac:b8:67:45:e9:b1:5f:8d:08:60:07:42:1c:66:04:
68:9a:08:0f:c3:09:13:37:88:2b:95:9b:c2:d5:9c:90:60:a2:
6a:fd:20:ca:2d:0f:5f:e4:33:49:1d:68:8d:d0:62:62:9e:53:
1a:87:b5:a3:b0:c6:79:0b:8a:74:b4:fd:1f:44:72:34:a4:3a:
49:66:91:3c:18:9d:d5:33:65:1a:c5:7f:fb:4e:76:83:70:76:
38:7a:d8:5d:32:e3:17:8b:5a:54:d1:6d:1f:4a:8c:3b:af:9c:
57:5b:12:b8:ec:05:95:b5:0f:fc:09:e9:24:3b:b1:db:79:77:
96:2b:f6:b3:c3:a4:da:87:b9:76:73:1d:0e:e4:99:6c:70:86:
13:60:70:32:5b:da:08:34:8f:fb:9e:43:34:ec:b8:11:0d:94:
88:76:bf:40:b5:c9:e5:4e:09:4d:7b:ad:b8:7c:50:d4:53:30:
90:50:d5:22:0e:83:db:ab:a2:68:0c:a4:6a:66:75:2a:ae:70:
49:2d:83:9c:57:dc:11:c9:b3:5b:01:97:4b:d9:f1:47:3b:78:
78:60:00:aa:ed:8c:1e:e8:04:ef:2f:f3:b5:f9:c1:ac:d4:f1:
62:6c:49:32:ec:69:15:48:55:c8:71:91:0a:58:4e:d2:33:ae:
a7:bd:83:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzQeZMLJ977y4M2QgqbxbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzM0ODUwZGFmMzcxMjIwNTIwMTk5MjI5ZWJkZTkwZWYy
OGIwMTgwHhcNMjUwNDI2MTgwMDIwWhcNMjUwNDI3MTgwMDIwWjAzMTEwLwYDVQQD
Eyg3ZWI3M2Y4YjA2MTZlOTA0ZTAxNWUwODVjZTQyNWVkOTU4NGFjYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2dnmdEr2LXhH8ci8+fg8WL1LZK0
di9UwaHFohcVIVkQHw0LJrEKXjojkohHeZlLcc1PlvUxio+5LC+2yvY/tPvsncQ2
V8qxyjZ8UHfn8LmGE79GOlfbftDm16z6/SP40lINID69UrIBqJlE9VoQIwbQNhbU
7/ShIobQOg/rjNsRI5NmAId9lNvso2oFUtLzhmNUXnY3wiokSJQrMHMUQRImAfYX
CCD9ONIZ7Z+v/g/YL1LDfrFcLHQXJ3M8fFXapkObIu94+Yd6hifljpekUL1D9vc2
S1ikw7+u43uhM2xvhIPg8s1WvIc9JCdj67PRKn7WLk24klV1RMCukQ+nSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH63P4sGFukE4BXghc5CXtlYSsuoMB8GA1UdIwQY
MBaAFMozSFDa83EiBSAZkinr3pDvKLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjIt
MGUwMDQ2YzhhODdiLzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjItMGUwMDQ2YzhhODdi
LzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeTtrLhn
RemxX40IYAdCHGYEaJoID8MJEzeIK5WbwtWckGCiav0gyi0PX+QzSR1ojdBiYp5T
Goe1o7DGeQuKdLT9H0RyNKQ6SWaRPBid1TNlGsV/+052g3B2OHrYXTLjF4taVNFt
H0qMO6+cV1sSuOwFlbUP/AnpJDux23l3liv2s8Ok2oe5dnMdDuSZbHCGE2BwMlva
CDSP+55DNOy4EQ2UiHa/QLXJ5U4JTXutuHxQ1FMwkFDVIg6D26uiaAykamZ1Kq5w
SS2DnFfcEcmzWwGXS9nxRzt4eGAAqu2MHugE7y/ztfnBrNTxYmxJMuxpFUhVyHGR
ClhO0jOup72DqQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:21 2025 by rpki-client