Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
File: Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json)
Hash identifier: /rFvgm25W/b21egSgBIIDRnMdOZP4DKx5QCLmvvXPmU=
Subject key identifier: A1:AE:42:3B:B2:47:30:82:16:20:72:63:04:E3:48:61:69:59:B9:FC
Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008
Certificate serial: 01967FB3D7FEE2FAAFEB13E4D67754BDBF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
Manifest number: 0977
Signing time: Tue 29 Apr 2025 04:00:14 +0000
Manifest this update: Tue 29 Apr 2025 04:00:14 +0000
Manifest next update: Wed 30 Apr 2025 04:00:14 +0000
Files and hashes: 1: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: 8C/V4/xqbGk/3mZSxj2/T2IOolZPcSdHvMPhueEDE3o=)
2: y9JMR_ZxLXrYLvgRShORqLwJidY.roa (hash: Uw28deLkoDLLwc6/RTXYzT+/L0LSFoqfWT5M5xI68aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:d7:fe:e2:fa:af:eb:13:e4:d6:77:54:bd:bf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008
Validity
Not Before: Apr 29 04:00:14 2025 GMT
Not After : Apr 30 04:00:14 2025 GMT
Subject: CN=a1ae423bb24730821620726304e348616959b9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:d0:9d:32:42:f8:2b:22:f4:4e:c0:fb:59:
bc:45:fd:8a:0f:c6:10:b0:86:e1:2c:48:9a:28:09:
d4:83:3f:76:a0:43:30:e3:22:fd:fb:d7:67:8d:86:
c1:66:26:95:52:97:f2:9c:bf:45:2c:97:55:1f:4f:
92:f9:fc:e4:ad:17:51:30:ee:78:a1:14:28:90:b4:
c6:35:fe:33:69:b9:5b:c0:eb:c8:15:54:2f:94:f3:
33:49:57:fc:1e:83:6c:2d:b0:49:c6:89:00:ce:ec:
d9:01:cd:2b:41:b5:68:c5:03:b3:2d:4a:29:f6:0b:
c8:17:fa:66:fe:fd:e8:9a:1a:47:d7:ef:62:75:a8:
05:e6:54:ff:07:d0:3c:2e:af:1c:55:6b:29:7a:a5:
ea:c2:5e:78:91:a2:39:bf:be:f9:ef:d1:8c:c4:70:
81:fe:9c:1c:e8:4d:c4:b9:9c:2d:de:14:df:59:93:
3c:99:d0:ed:99:b1:ee:78:8e:8b:fe:ee:d3:22:8a:
fb:2f:3f:8f:01:3a:23:35:93:6f:27:af:7d:4a:d1:
be:61:7b:b6:04:4d:19:73:a4:8a:fd:90:07:0d:1b:
0a:82:d2:de:18:8f:ba:d1:d0:1f:d8:53:c2:08:b8:
bd:5b:81:3d:82:7b:6b:42:0b:62:4c:b9:00:a3:f6:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AE:42:3B:B2:47:30:82:16:20:72:63:04:E3:48:61:69:59:B9:FC
X509v3 Authority Key Identifier:
keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:26:4b:6a:92:d1:41:21:e0:f0:5f:b6:49:60:6b:0e:1f:4f:
9c:17:d9:d2:f9:fa:25:e8:c8:ee:6d:37:28:22:6c:eb:3b:f1:
92:ce:78:2c:1f:77:56:e9:9a:b1:ef:92:52:eb:8a:91:73:c6:
35:8e:37:b8:8b:1b:86:e3:9c:81:7a:7e:7a:c1:5e:af:68:e0:
bc:cc:d3:7d:4d:00:62:6f:2e:48:31:52:20:31:39:16:8e:b5:
63:cb:79:80:c6:5a:99:c9:17:8a:33:fc:ae:30:64:14:c6:4a:
fa:f0:0b:0a:39:53:cc:df:b4:40:30:2f:8a:af:2e:a1:32:6e:
d0:b3:20:4b:13:26:ce:00:3a:7d:7c:14:16:0d:73:9d:ba:aa:
6c:93:ce:fb:59:23:e1:02:b0:f4:4a:11:e4:1e:de:c2:45:ed:
fc:0a:16:d6:9a:21:db:13:b2:6f:04:1e:3d:2b:9b:67:79:ba:
81:13:d0:47:c6:47:d3:0b:f3:5c:e9:3d:e1:06:08:cf:00:01:
3e:47:05:70:e5:45:d0:63:37:24:68:e7:81:9b:3e:36:10:64:
dd:ea:41:5e:0e:4a:b1:2d:1e:cf:56:5e:be:ed:0c:31:15:c2:
62:9e:9d:89:44:3a:69:23:c7:6b:f1:cc:65:60:38:4c:96:ae:
f9:0a:a4:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/s9f+4vqv6xPk1ndUvb8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYWYxZDdmMzZiMTg2NTgwMjUzNWU0OWE3MzMxZTAzNWFk
MDEwMDgwHhcNMjUwNDI5MDQwMDE0WhcNMjUwNDMwMDQwMDE0WjAzMTEwLwYDVQQD
EyhhMWFlNDIzYmIyNDczMDgyMTYyMDcyNjMwNGUzNDg2MTY5NTliOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ3QnTJC+Csi9E7A+1m8Rf2KD8YQ
sIbhLEiaKAnUgz92oEMw4yL9+9dnjYbBZiaVUpfynL9FLJdVH0+S+fzkrRdRMO54
oRQokLTGNf4zablbwOvIFVQvlPMzSVf8HoNsLbBJxokAzuzZAc0rQbVoxQOzLUop
9gvIF/pm/v3omhpH1+9idagF5lT/B9A8Lq8cVWspeqXqwl54kaI5v77579GMxHCB
/pwc6E3EuZwt3hTfWZM8mdDtmbHueI6L/u7TIor7Lz+PATojNZNvJ699StG+YXu2
BE0Zc6SK/ZAHDRsKgtLeGI+60dAf2FPCCLi9W4E9gntrQgtiTLkAo/bbJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGuQjuyRzCCFiByYwTjSGFpWbn8MB8GA1UdIwQY
MBaAFGKvHX82sYZYAlNeSaczHgNa0BAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXE4ZGZ6YXhobGdDVTE1SnB6TWVBMXJRRUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZDk2YzUtZDYzMy00MDJmLThlMDAt
MmIxZDY3NDU5NWI3LzEvWXE4ZGZ6YXhobGdDVTE1SnB6TWVBMXJRRUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lZDk2YzUtZDYzMy00MDJmLThlMDAtMmIxZDY3NDU5NWI3
LzEvWXE4ZGZ6YXhobGdDVTE1SnB6TWVBMXJRRUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCZLapLR
QSHg8F+2SWBrDh9PnBfZ0vn6JejI7m03KCJs6zvxks54LB93Vumase+SUuuKkXPG
NY43uIsbhuOcgXp+esFer2jgvMzTfU0AYm8uSDFSIDE5Fo61Y8t5gMZamckXijP8
rjBkFMZK+vALCjlTzN+0QDAviq8uoTJu0LMgSxMmzgA6fXwUFg1znbqqbJPO+1kj
4QKw9EoR5B7ewkXt/AoW1poh2xOybwQePSubZ3m6gRPQR8ZH0wvzXOk94QYIzwAB
PkcFcOVF0GM3JGjngZs+NhBk3epBXg5KsS0ez1Zevu0MMRXCYp6diUQ6aSPHa/HM
ZWA4TJau+Qqklw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:10:20 2025 by rpki-client