Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: OSmgP28QSLLbMqvvrXx9oy1qoadQbVurDXt1hH9+8Ho=
Subject key identifier: 92:57:88:58:40:FD:8D:80:B1:5B:5B:D0:B7:6A:C7:46:CB:E6:C4:A1
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 01967567148A2F48DBE331BA253412E37A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0C7C
Signing time: Sun 27 Apr 2025 04:00:11 +0000
Manifest this update: Sun 27 Apr 2025 04:00:11 +0000
Manifest next update: Mon 28 Apr 2025 04:00:11 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: v7glXVm+Qygp613Zq3UQD3q6FTMsN4GPpQWWQzTWkTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:14:8a:2f:48:db:e3:31:ba:25:34:12:e3:7a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Apr 27 04:00:11 2025 GMT
Not After : Apr 28 04:00:11 2025 GMT
Subject: CN=9257885840fd8d80b15b5bd0b76ac746cbe6c4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:dc:f1:4f:4d:c2:ca:72:ce:1a:7e:60:05:
11:f8:96:af:e0:03:25:2e:d9:53:77:3b:4e:bc:f8:
9f:8d:97:d3:04:61:01:45:7d:bc:20:fb:16:34:d1:
14:5b:26:80:25:f6:f1:50:8b:43:2a:7c:47:02:4f:
70:0b:44:76:ce:fd:eb:bc:a0:44:07:14:58:9c:db:
d6:3a:d2:bc:a0:f1:70:b7:66:1a:d7:15:24:b6:91:
22:13:17:32:71:db:44:19:10:d5:1b:e6:3b:8a:76:
3c:90:b4:91:d8:dc:c2:6d:5c:cc:81:e3:db:9e:5a:
1b:e7:85:e4:3b:d4:c5:84:c0:ff:a6:32:57:61:7d:
ba:87:5c:2c:05:f8:44:4f:f3:45:a5:86:d3:c7:6c:
2f:73:a4:0c:a8:d6:b1:00:17:ea:cd:63:1f:c2:ff:
96:db:c7:ae:7c:e4:f6:3f:c6:31:aa:d7:6b:7a:9f:
c5:64:6a:6a:82:4e:24:ff:84:b3:47:47:17:87:cf:
30:59:e6:67:bc:b9:6c:6b:e2:33:f1:d8:e7:aa:c6:
f5:5f:fa:3f:97:e4:23:01:7e:2b:d1:b6:cd:e1:38:
b8:dc:72:2e:19:ad:a5:56:58:94:23:a3:d8:64:8d:
de:14:c4:dd:98:ba:dc:dc:98:00:d0:77:17:cf:87:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:57:88:58:40:FD:8D:80:B1:5B:5B:D0:B7:6A:C7:46:CB:E6:C4:A1
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c6:b9:ed:f8:14:43:9d:e5:91:9c:7b:c2:f5:33:e2:ed:bd:
db:a2:83:ae:7d:a0:d5:db:14:3b:f8:b2:3e:38:8c:f1:dd:55:
68:8f:33:f5:db:55:60:1d:8e:26:09:27:e2:e1:56:a0:5f:69:
96:06:b8:aa:90:64:d9:a5:7c:6f:d0:2a:22:f6:ab:fb:92:15:
ca:48:f1:0b:44:e2:57:8d:e0:77:d5:b1:4d:d4:d5:73:b2:6b:
ba:fa:5d:03:5e:f6:b1:b6:f5:66:eb:bb:ed:a1:ae:28:4d:79:
35:4d:08:de:ed:71:a4:73:0a:f0:ed:d2:7c:78:d1:dc:d8:22:
85:bc:69:9c:5b:c7:0c:84:04:d0:3a:37:bb:dd:6c:e7:6d:6b:
cc:ea:8c:c0:8f:58:a2:22:0b:ff:1e:39:fb:df:09:9a:d6:71:
10:ad:03:68:65:3a:e3:9a:18:0b:93:c7:82:b1:39:fd:14:d2:
c7:de:d3:e5:ad:93:9d:71:a2:dd:5d:45:46:fe:81:fd:3b:7c:
f7:ed:14:a4:3c:1c:ad:b5:06:fb:de:aa:69:83:2f:98:3e:47:
ee:2d:18:d5:2a:64:e3:ae:ae:74:0d:46:db:06:41:e9:6f:d5:
87:f8:b3:89:50:5c:5b:69:35:07:8c:68:f3:0e:5a:b6:18:24:
be:21:04:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1ZxSKL0jb4zG6JTQS43pEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGEyZmY1YTc3ZTc4ZWVjMzAzM2RkYTU3NDlhNGE4YzFl
NTUxNjQwHhcNMjUwNDI3MDQwMDExWhcNMjUwNDI4MDQwMDExWjAzMTEwLwYDVQQD
Eyg5MjU3ODg1ODQwZmQ4ZDgwYjE1YjViZDBiNzZhYzc0NmNiZTZjNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W3c8U9Nwspyzhp+YAUR+Jav4AMl
LtlTdztOvPifjZfTBGEBRX28IPsWNNEUWyaAJfbxUItDKnxHAk9wC0R2zv3rvKBE
BxRYnNvWOtK8oPFwt2Ya1xUktpEiExcycdtEGRDVG+Y7inY8kLSR2NzCbVzMgePb
nlob54XkO9TFhMD/pjJXYX26h1wsBfhET/NFpYbTx2wvc6QMqNaxABfqzWMfwv+W
28eufOT2P8Yxqtdrep/FZGpqgk4k/4SzR0cXh88wWeZnvLlsa+Iz8djnqsb1X/o/
l+QjAX4r0bbN4Ti43HIuGa2lVliUI6PYZI3eFMTdmLrc3JgA0HcXz4eFMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJXiFhA/Y2AsVtb0Ldqx0bL5sShMB8GA1UdIwQY
MBaAFMnaL/WnfnjuwwM92ldJpKjB5VFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMt
NmMwNGE2ZWQxM2M1LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMtNmMwNGE2ZWQxM2M1
LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMa57fgU
Q53lkZx7wvUz4u2926KDrn2g1dsUO/iyPjiM8d1VaI8z9dtVYB2OJgkn4uFWoF9p
lga4qpBk2aV8b9AqIvar+5IVykjxC0TiV43gd9WxTdTVc7JruvpdA172sbb1Zuu7
7aGuKE15NU0I3u1xpHMK8O3SfHjR3NgihbxpnFvHDIQE0Do3u91s521rzOqMwI9Y
oiIL/x45+98JmtZxEK0DaGU645oYC5PHgrE5/RTSx97T5a2TnXGi3V1FRv6B/Tt8
9+0UpDwcrbUG+96qaYMvmD5H7i0Y1Spk466udA1G2wZB6W/Vh/iziVBcW2k1B4xo
8w5athgkviEEZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:21:59 2025 by rpki-client