Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: RLkzQNYjqw7HBfTVuAMizten3alY50Jn9LRF+Nvvjz0=
Subject key identifier: B8:11:F6:5C:3F:73:F7:52:C4:50:63:42:E6:AF:51:60:E3:17:06:46
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 01968623DC3F9F4FEE9F1643403797120894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 10:00:19 +0000
Manifest this update: Wed 30 Apr 2025 10:00:19 +0000
Manifest next update: Thu 01 May 2025 10:00:19 +0000
Files and hashes: 1: yEMlFNYIo_7PBG15hC66LWSw4E0.roa (hash: 0NF8QaEpF30c3qMJTec6Bga4N+I8Ns4AqntJ51k9D0k=)
2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: PvdeXxbIkQC1aVMrFOSg15hn/XxZ/18/5i1lHyauNlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:dc:3f:9f:4f:ee:9f:16:43:40:37:97:12:08:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Apr 30 10:00:19 2025 GMT
Not After : May 1 10:00:19 2025 GMT
Subject: CN=b811f65c3f73f752c4506342e6af5160e3170646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:8e:dd:70:a8:20:58:22:88:35:2e:41:df:
dd:dd:7c:31:0a:f8:b7:07:d7:ad:d6:00:a7:38:1d:
c1:ae:ee:a3:22:94:75:9f:e2:9d:36:6a:c1:fd:e8:
c0:cf:17:3a:e7:f6:e2:96:e1:b0:da:3a:ba:44:e9:
70:78:90:d5:52:57:02:67:15:bc:48:e6:68:e5:df:
1a:fc:22:0f:20:c0:b8:46:9f:63:59:53:58:f8:b0:
b3:2a:8b:c6:06:0a:47:e5:5b:d4:75:70:88:f1:d5:
19:af:4c:ef:07:a4:9e:e7:e7:30:da:5c:08:17:9f:
63:c0:31:78:eb:e7:e9:ce:6e:f5:98:06:53:9e:4a:
1e:13:c7:f7:04:9e:95:a4:72:73:cf:99:59:1c:7f:
76:7c:db:5b:fa:f4:cf:6e:a3:2e:ad:0c:e1:04:35:
11:4c:cf:1a:7b:94:f9:2e:e6:a4:58:6e:a5:81:5c:
0d:b3:21:23:0e:80:e9:9c:55:fa:dd:f0:c4:05:30:
4e:c2:d4:35:60:89:4c:a5:6c:76:52:18:6c:e8:a4:
06:25:09:b3:1d:fc:94:e6:53:2e:89:e6:9e:6d:64:
98:24:d4:bb:dc:eb:77:d7:9c:db:2e:d5:89:74:4f:
2f:be:80:50:2b:4d:49:bf:cb:ea:26:f3:4b:fa:fb:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:F6:5C:3F:73:F7:52:C4:50:63:42:E6:AF:51:60:E3:17:06:46
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:63:eb:44:2e:af:80:b8:e3:ef:ab:a7:a3:d4:a9:a7:4a:1c:
1e:3f:9e:2b:65:31:75:d4:56:9e:2c:e5:43:15:e0:c1:b2:ff:
e9:1f:97:3e:2a:4e:9b:b7:c2:aa:1d:c2:81:8f:38:fa:a2:65:
ed:26:a0:e6:66:d3:b5:53:6c:68:8c:32:06:22:a4:3e:74:75:
a3:8c:6c:38:94:85:10:5d:7b:db:e7:68:40:73:ec:51:f4:73:
eb:c7:e4:f8:5a:c7:97:78:32:97:a8:c7:e5:01:de:c6:82:4d:
29:d8:8b:e9:19:dd:f6:f3:68:cc:ed:98:bf:12:a7:e2:27:23:
a3:b7:02:b2:f0:6d:25:6d:c6:60:09:67:78:9a:37:4d:c1:9f:
fc:db:70:49:cb:18:48:21:d2:cb:42:0b:2e:67:8a:30:2a:67:
cf:04:d0:f5:6c:7b:38:64:96:2b:da:f0:75:e1:45:dd:eb:80:
c5:c4:36:9f:17:ff:f5:fd:3e:77:3e:47:38:3e:45:3a:7a:05:
b2:db:de:0c:7b:45:32:47:ff:05:ee:08:a7:5f:dd:d7:98:01:
d8:3a:f9:53:15:7c:f4:40:66:d0:d0:69:70:e4:ea:5b:d0:f6:
74:e1:92:de:d6:52:93:29:25:b4:e3:48:ec:69:e4:8a:a1:d7:
60:ca:e0:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGI9w/n0/unxZDQDeXEgiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZGYzMzdjZWE1NmEwODNmNDZiNzk5MDcyZTcwZGEzNDVj
YzIzNjQwHhcNMjUwNDMwMTAwMDE5WhcNMjUwNTAxMTAwMDE5WjAzMTEwLwYDVQQD
EyhiODExZjY1YzNmNzNmNzUyYzQ1MDYzNDJlNmFmNTE2MGUzMTcwNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W6O3XCoIFgiiDUuQd/d3XwxCvi3
B9et1gCnOB3Bru6jIpR1n+KdNmrB/ejAzxc65/biluGw2jq6ROlweJDVUlcCZxW8
SOZo5d8a/CIPIMC4Rp9jWVNY+LCzKovGBgpH5VvUdXCI8dUZr0zvB6Se5+cw2lwI
F59jwDF46+fpzm71mAZTnkoeE8f3BJ6VpHJzz5lZHH92fNtb+vTPbqMurQzhBDUR
TM8ae5T5LuakWG6lgVwNsyEjDoDpnFX63fDEBTBOwtQ1YIlMpWx2Uhhs6KQGJQmz
HfyU5lMuieaebWSYJNS73Ot315zbLtWJdE8vvoBQK01Jv8vqJvNL+vtOHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgR9lw/c/dSxFBjQuavUWDjFwZGMB8GA1UdIwQY
MBaAFMjfM3zqVqCD9Gt5kHLnDaNFzCNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yOTdkNTQtYmQ4Mi00MmUwLTljNDIt
NmZkYmNhNjAwZTAwLzEveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yOTdkNTQtYmQ4Mi00MmUwLTljNDItNmZkYmNhNjAwZTAw
LzEveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2PrRC6v
gLjj76uno9Spp0ocHj+eK2UxddRWnizlQxXgwbL/6R+XPipOm7fCqh3CgY84+qJl
7Sag5mbTtVNsaIwyBiKkPnR1o4xsOJSFEF172+doQHPsUfRz68fk+FrHl3gyl6jH
5QHexoJNKdiL6Rnd9vNozO2YvxKn4icjo7cCsvBtJW3GYAlneJo3TcGf/NtwScsY
SCHSy0ILLmeKMCpnzwTQ9Wx7OGSWK9rwdeFF3euAxcQ2nxf/9f0+dz5HOD5FOnoF
stveDHtFMkf/Be4Ip1/d15gB2Dr5UxV89EBm0NBpcOTqW9D2dOGS3tZSkykltONI
7GnkiqHXYMrgEw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:39:20 2025 by rpki-client