Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File: YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier: WXm6I0bnb/roAeXMpe3I0pK7sPr87yB5682xjati2Dw=
Subject key identifier: 39:E8:D5:A1:99:56:AD:9F:F1:8C:E8:E5:FF:F7:79:0C:A2:D5:6C:31
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 019675679BDB56A19302C2B9C94349D8C1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number: 0DBF
Signing time: Sun 27 Apr 2025 04:00:46 +0000
Manifest this update: Sun 27 Apr 2025 04:00:46 +0000
Manifest next update: Mon 28 Apr 2025 04:00:46 +0000
Files and hashes: 1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: 0Ex/ozms7EF/O66qiWGBJO+htjWX/6silO9iUxWD+wc=)
2: v4bbx4Tyrv4mjtMYql77jSIvfEA.roa (hash: A4gl29evMU8HAtsdqZFfkRY14UgWdfJ98W4DA9n97zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:9b:db:56:a1:93:02:c2:b9:c9:43:49:d8:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Apr 27 04:00:46 2025 GMT
Not After : Apr 28 04:00:46 2025 GMT
Subject: CN=39e8d5a19956ad9ff18ce8e5fff7790ca2d56c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:32:a4:6f:39:d9:86:25:12:44:b6:d5:c4:
93:f7:ce:18:93:18:ec:1d:62:34:f5:e2:dd:a6:9b:
83:d5:46:9d:46:96:9c:fb:8d:36:c5:c5:d5:3c:3a:
ab:e8:99:af:7b:1d:47:4c:f0:69:06:07:35:03:5c:
33:45:63:e1:89:ac:08:b4:2a:ca:c6:8b:cf:c3:d0:
ce:fd:86:7e:5b:f8:63:b1:38:29:1b:a9:b2:db:e2:
68:32:83:6c:8b:1e:1b:e4:06:76:17:7f:56:e2:af:
37:17:db:85:57:02:ef:cb:60:d3:0e:ae:f4:0c:81:
03:87:3d:53:b5:7e:2f:e4:f0:a4:f8:24:29:88:d5:
3d:9e:62:da:74:09:f9:a5:d6:7a:98:ca:54:ee:14:
7f:30:44:74:91:06:0b:08:62:9d:1f:ac:25:7a:97:
ce:78:8d:63:7f:b8:09:7c:de:24:7e:6b:b2:f2:03:
e9:cb:9f:36:f8:ab:16:21:b8:b6:cc:ce:c9:bb:d5:
3f:86:1b:59:1f:98:d3:db:40:32:ec:00:9b:2a:c5:
41:18:12:c7:0b:44:d6:c9:1b:4a:05:5e:43:b8:43:
22:48:0c:f0:52:43:a6:08:35:58:2b:d8:4f:3b:1e:
ed:0d:a0:86:6e:e6:67:4c:71:f5:a0:ed:dc:f4:55:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:D5:A1:99:56:AD:9F:F1:8C:E8:E5:FF:F7:79:0C:A2:D5:6C:31
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a7:67:0c:44:b4:bc:82:d6:01:1f:04:e3:40:5f:7e:f9:d0:
3f:57:2e:7a:2e:be:29:bd:a5:95:f4:52:fa:e6:ec:de:a9:40:
1f:46:e3:f2:ce:fd:43:67:25:b0:17:b1:f1:26:1f:76:5f:8c:
48:7a:74:93:a2:64:d7:a2:1a:35:55:f6:b7:a0:65:96:6b:45:
21:29:e7:e4:60:3f:8c:58:8e:aa:74:28:43:fd:aa:3b:c9:be:
4f:4c:da:35:19:e5:9a:3e:fa:5b:90:19:04:28:9b:c9:3d:da:
8d:46:d2:9b:64:f2:f9:0f:54:30:cc:ac:9d:fd:82:62:87:2b:
bb:a3:0b:20:76:fc:3b:a5:54:cf:e5:5e:52:6b:c5:ca:13:e1:
44:5a:c9:c4:fb:a4:e3:6c:a2:95:ff:66:19:8a:a6:f9:71:58:
50:0b:08:c5:17:4e:40:3e:c0:bb:c3:a5:e7:d6:c4:4f:aa:65:
0e:93:e5:75:51:cf:b5:fc:d3:e4:cd:c4:07:f1:14:3e:0d:bc:
11:ac:09:ef:96:78:12:7e:c0:c8:64:10:da:59:ba:4b:cf:6e:
7d:69:1b:e9:cf:b4:78:78:71:0d:b5:a7:ba:3a:35:43:92:0e:
ce:d7:e9:fb:cb:d4:02:fc:73:f2:f6:dd:c8:2e:5e:5a:68:ce:
90:90:a7:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Z5vbVqGTAsK5yUNJ2MHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTUyMmUzN2RlMjZiMGQ1Njg5NWFjMThhYjA3ZDdjNzg0
YWI5M2MwHhcNMjUwNDI3MDQwMDQ2WhcNMjUwNDI4MDQwMDQ2WjAzMTEwLwYDVQQD
EygzOWU4ZDVhMTk5NTZhZDlmZjE4Y2U4ZTVmZmY3NzkwY2EyZDU2YzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/0ypG852YYlEkS21cST984Ykxjs
HWI09eLdppuD1UadRpac+402xcXVPDqr6Jmvex1HTPBpBgc1A1wzRWPhiawItCrK
xovPw9DO/YZ+W/hjsTgpG6my2+JoMoNsix4b5AZ2F39W4q83F9uFVwLvy2DTDq70
DIEDhz1TtX4v5PCk+CQpiNU9nmLadAn5pdZ6mMpU7hR/MER0kQYLCGKdH6wlepfO
eI1jf7gJfN4kfmuy8gPpy582+KsWIbi2zM7Ju9U/hhtZH5jT20Ay7ACbKsVBGBLH
C0TWyRtKBV5DuEMiSAzwUkOmCDVYK9hPOx7tDaCGbuZnTHH1oO3c9FVI8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDno1aGZVq2f8Yzo5f/3eQyi1WwxMB8GA1UdIwQY
MBaAFGBVIuN94msNVolawYqwfXx4Srk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZVaTQzM2lhdzFXaVZyQmlyQjlmSGhLdVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8wOTYxZjktZDg1ZC00OTc2LWE0Y2Qt
YTE4ZWQxOWM0OWUzLzEvWUZVaTQzM2lhdzFXaVZyQmlyQjlmSGhLdVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8wOTYxZjktZDg1ZC00OTc2LWE0Y2QtYTE4ZWQxOWM0OWUz
LzEvWUZVaTQzM2lhdzFXaVZyQmlyQjlmSGhLdVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqdnDES0
vILWAR8E40BffvnQP1cuei6+Kb2llfRS+ubs3qlAH0bj8s79Q2clsBex8SYfdl+M
SHp0k6Jk16IaNVX2t6BllmtFISnn5GA/jFiOqnQoQ/2qO8m+T0zaNRnlmj76W5AZ
BCibyT3ajUbSm2Ty+Q9UMMysnf2CYocru6MLIHb8O6VUz+VeUmvFyhPhRFrJxPuk
42yilf9mGYqm+XFYUAsIxRdOQD7Au8Ol59bET6plDpPldVHPtfzT5M3EB/EUPg28
EawJ75Z4En7AyGQQ2lm6S89ufWkb6c+0eHhxDbWnujo1Q5IOztfp+8vUAvxz8vbd
yC5eWmjOkJCnEQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:52 2025 by rpki-client