Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: 3IbjfqYTXa5ryra+y+xQ41fg+V8W8NC9w+MROrSlBkw=
Subject key identifier: 66:5A:EF:E8:80:D7:42:2F:2B:53:24:D7:92:52:76:25:AB:9C:22:B2
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 019679B21ACD122962538B9D1E96744909B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 00:00:37 +0000
Manifest this update: Mon 28 Apr 2025 00:00:37 +0000
Manifest next update: Tue 29 Apr 2025 00:00:37 +0000
Files and hashes: 1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
2: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: XxFv/w/uRpVG/yrzCY97Nxg/L9p9KaKpnCeNh5c3sNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:1a:cd:12:29:62:53:8b:9d:1e:96:74:49:09:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Apr 28 00:00:37 2025 GMT
Not After : Apr 29 00:00:37 2025 GMT
Subject: CN=665aefe880d7422f2b5324d792527625ab9c22b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:2d:8f:c1:c4:b2:40:94:85:4a:e1:5d:d4:
13:6f:68:42:aa:73:30:46:c1:83:9f:5d:b0:64:23:
ba:c5:50:63:5a:97:cb:c8:ca:9d:7a:35:c1:d9:bf:
6a:44:b9:41:a7:5f:74:b0:ce:6a:d5:ee:c8:9e:91:
73:4b:e8:5e:72:4b:08:d8:54:a0:74:78:bc:65:b6:
03:5f:d7:2d:16:81:be:67:1d:48:40:02:71:6e:e3:
46:07:2c:fd:9a:3c:8d:ff:d1:90:ec:b7:e3:96:44:
11:55:e7:90:7a:6b:b7:3f:d3:41:e1:48:f4:19:ef:
a2:e7:11:ab:8e:ff:ba:2d:30:04:35:0e:f1:f5:63:
01:86:4f:d2:cb:9a:0d:0d:c1:b7:bb:ed:04:9d:2c:
a0:07:e6:13:f7:00:ad:86:35:32:46:b8:e4:c1:37:
18:5b:6e:5f:c2:cb:ed:ab:81:8d:09:8f:09:0e:53:
87:24:5e:07:31:1f:18:b9:af:eb:9f:d4:99:a3:b6:
4d:26:61:69:05:bd:05:ec:8f:b6:3c:15:49:56:c3:
f1:fb:0b:85:43:c3:e5:47:f0:82:7f:66:f0:71:25:
28:6d:76:6b:1d:c6:1c:07:db:26:c5:e7:1f:ba:71:
45:95:5d:7b:e4:f2:cf:9f:f1:89:8f:7f:50:48:f9:
58:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5A:EF:E8:80:D7:42:2F:2B:53:24:D7:92:52:76:25:AB:9C:22:B2
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:36:82:c3:39:c6:03:a0:35:70:f2:91:80:9d:60:74:7b:f8:
ba:97:d7:fc:8e:48:ca:ca:e3:3d:c4:6d:bf:76:63:70:80:ec:
7f:42:ce:fd:15:28:24:51:73:b6:2a:f9:cd:bf:91:3f:16:46:
58:09:6b:cd:31:25:0b:e1:e2:80:ae:2a:f5:d4:5b:a7:23:2e:
1e:ea:7b:11:e0:c2:1c:37:ee:0e:d2:b2:b4:be:60:24:23:d1:
52:e2:e7:9c:7d:ea:07:53:11:04:7e:a4:75:eb:d8:b5:9b:ca:
2d:28:4f:dc:a3:37:8b:92:f3:ff:d6:8a:c3:3e:94:dc:58:3c:
79:1f:93:78:7d:38:51:3c:45:09:48:76:10:4d:9f:ba:93:8b:
4c:3e:be:f9:e5:05:73:27:62:32:df:1a:5a:70:1b:f8:70:6a:
97:07:48:8d:8e:8e:fc:58:68:a6:70:b4:fa:23:2f:46:3b:b5:
6b:45:52:26:71:02:12:34:d5:71:eb:06:81:a4:7c:3e:d3:5a:
98:53:ce:68:fd:ee:b1:ca:1e:ac:ba:22:53:a1:01:0d:97:81:
a6:e9:e7:fa:c1:bc:2a:85:cc:3a:d4:3d:73:2b:d4:c7:70:65:
cd:37:a4:e3:4b:64:3a:1e:b1:2d:52:7a:88:36:74:79:80:82:
5b:42:60:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5shrNEiliU4udHpZ0SQm3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNjYyY2VlYjcyNjc3NGIxYjQ0YzUxZmYxZmMwZGY5MDhi
ZGViYmMwHhcNMjUwNDI4MDAwMDM3WhcNMjUwNDI5MDAwMDM3WjAzMTEwLwYDVQQD
Eyg2NjVhZWZlODgwZDc0MjJmMmI1MzI0ZDc5MjUyNzYyNWFiOWMyMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uAtj8HEskCUhUrhXdQTb2hCqnMw
RsGDn12wZCO6xVBjWpfLyMqdejXB2b9qRLlBp190sM5q1e7InpFzS+hecksI2FSg
dHi8ZbYDX9ctFoG+Zx1IQAJxbuNGByz9mjyN/9GQ7LfjlkQRVeeQemu3P9NB4Uj0
Ge+i5xGrjv+6LTAENQ7x9WMBhk/Sy5oNDcG3u+0EnSygB+YT9wCthjUyRrjkwTcY
W25fwsvtq4GNCY8JDlOHJF4HMR8Yua/rn9SZo7ZNJmFpBb0F7I+2PBVJVsPx+wuF
Q8PlR/CCf2bwcSUobXZrHcYcB9smxecfunFFlV175PLPn/GJj39QSPlYxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZa7+iA10IvK1Mk15JSdiWrnCKyMB8GA1UdIwQY
MBaAFMtmLO63JndLG0TFH/H8DfkIveu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJZczdyY21kMHNiUk1VZjhmd04tUWk5Njd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9hOTYyYTktYWJmZi00NDk1LTg2Y2Mt
YjU2YzhjY2IyOTM1LzEveTJZczdyY21kMHNiUk1VZjhmd04tUWk5Njd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9hOTYyYTktYWJmZi00NDk1LTg2Y2MtYjU2YzhjY2IyOTM1
LzEveTJZczdyY21kMHNiUk1VZjhmd04tUWk5Njd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzaCwznG
A6A1cPKRgJ1gdHv4upfX/I5IysrjPcRtv3ZjcIDsf0LO/RUoJFFztir5zb+RPxZG
WAlrzTElC+HigK4q9dRbpyMuHup7EeDCHDfuDtKytL5gJCPRUuLnnH3qB1MRBH6k
devYtZvKLShP3KM3i5Lz/9aKwz6U3Fg8eR+TeH04UTxFCUh2EE2fupOLTD6++eUF
cydiMt8aWnAb+HBqlwdIjY6O/FhopnC0+iMvRju1a0VSJnECEjTVcesGgaR8PtNa
mFPOaP3uscoerLoiU6EBDZeBpunn+sG8KoXMOtQ9cyvUx3BlzTek40tkOh6xLVJ6
iDZ0eYCCW0JgIw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:36:12 2025 by rpki-client