Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
File: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft (raw, json)
Hash identifier: BB26TJzFhUKEla8tD83+fSA0JCeuBMZic+rlPipe3FE=
Subject key identifier: DD:76:CC:08:AF:C0:EB:35:51:42:51:42:48:6C:87:19:67:6E:6D:3E
Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
Certificate issuer: /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Certificate serial: 019678D6338024CB43E10884AB2F99EF9A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
Manifest number: FE
Signing time: Sun 27 Apr 2025 20:00:25 +0000
Manifest this update: Sun 27 Apr 2025 20:00:25 +0000
Manifest next update: Mon 28 Apr 2025 20:00:25 +0000
Files and hashes: 1: FRrrM4yAfnu6pnFh5wowlvqVDWA.roa (hash: Hv8/4ynB8VDf7OX62BWXwwqyCndg3mMaA+WdwhpJSlw=)
2: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl (hash: hu95Gfp+rrL8plIyI6YQM40+DC4XNP+5Aa0RNy7HTfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:33:80:24:cb:43:e1:08:84:ab:2f:99:ef:9a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Validity
Not Before: Apr 27 20:00:25 2025 GMT
Not After : Apr 28 20:00:25 2025 GMT
Subject: CN=dd76cc08afc0eb3551425142486c8719676e6d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:9b:2a:8b:78:53:57:b6:1e:a0:ee:db:4a:
59:d9:29:15:b5:44:14:44:49:d3:7d:a9:d2:64:3d:
07:98:02:63:98:e8:f0:bc:cc:ae:de:6a:6f:11:b5:
4d:32:4b:e8:5c:9d:c6:f6:bf:c3:24:37:9f:23:75:
b9:27:81:2a:bb:e7:b0:8c:24:22:5d:c1:61:a7:02:
b6:34:fb:cf:65:81:8f:33:aa:14:1d:ad:96:97:37:
0a:c2:bc:1e:f2:f6:29:26:b6:3f:00:82:92:42:2e:
f5:5f:2c:1f:1b:22:1f:ff:dc:8c:0a:11:77:73:cc:
eb:23:cd:95:ca:f3:7e:68:a2:a9:97:8e:82:2b:a2:
32:fa:d4:93:c1:c6:42:d9:6b:e9:69:23:9e:5d:f6:
91:f1:a1:0b:4a:c5:f7:5b:42:85:da:98:47:f1:81:
50:46:68:94:23:17:63:c9:b6:57:4f:48:54:8a:b4:
b2:af:ea:9d:23:9a:0c:0c:b2:4a:4d:b0:13:4b:8b:
86:e5:79:e6:f1:2d:86:98:b9:2e:51:1a:d0:7e:64:
ef:4b:03:d6:70:1e:4a:7d:73:5d:44:28:82:f4:48:
9e:22:ba:70:e9:4d:8b:44:2b:fa:fe:fa:0a:b6:d8:
ba:87:71:28:7e:c8:91:42:64:4e:51:2c:44:73:93:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:CC:08:AF:C0:EB:35:51:42:51:42:48:6C:87:19:67:6E:6D:3E
X509v3 Authority Key Identifier:
keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7a:74:ac:06:e7:4f:d2:03:bd:b8:9d:d9:aa:58:3d:b2:fa:
65:04:7b:d6:ee:99:c5:e3:ae:08:1a:8d:24:f1:d0:55:5c:29:
f1:2a:8e:d4:9f:55:d8:4f:0b:06:ff:f7:12:e0:8e:7b:b3:88:
37:e5:64:dc:b8:79:b0:31:f1:5d:e2:21:58:a3:69:a9:10:1a:
7b:77:fc:9b:e6:86:ac:40:59:8e:4a:c4:92:40:b9:89:3d:9a:
f1:8d:ad:23:0a:76:2e:5b:de:8f:ec:6c:5b:40:23:e3:75:94:
28:9c:2d:fd:83:ea:31:0e:da:40:7a:a1:a4:2c:14:cf:74:4f:
ae:0a:a0:df:40:3e:f9:e8:16:cd:41:5e:a5:f5:df:42:16:36:
fc:bb:18:17:99:a1:d5:97:b5:d0:91:75:00:4f:c2:45:f4:17:
96:5a:aa:71:d1:fb:2e:48:22:f2:7b:f6:93:8f:c8:77:28:ef:
c9:33:37:1b:20:cc:1b:ae:30:a9:ff:a0:bb:10:ff:e4:30:d2:
09:f4:f2:1e:6c:4e:06:10:52:96:d5:02:2d:02:5d:e7:44:a0:
b1:c1:3f:2c:db:52:4e:7c:bf:f8:ee:a2:ee:99:78:65:68:e0:
aa:63:a1:a5:05:d8:da:67:c0:c4:c6:4b:9e:60:2e:67:23:cc:
88:32:6d:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41jOAJMtD4QiEqy+Z75qEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyN2E5OTUwOWVkNTFkZjkzYTMzZjJhNGUyZmQ2NjJkMWM4
ZDY2MGIwHhcNMjUwNDI3MjAwMDI1WhcNMjUwNDI4MjAwMDI1WjAzMTEwLwYDVQQD
EyhkZDc2Y2MwOGFmYzBlYjM1NTE0MjUxNDI0ODZjODcxOTY3NmU2ZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr2bKot4U1e2HqDu20pZ2SkVtUQU
REnTfanSZD0HmAJjmOjwvMyu3mpvEbVNMkvoXJ3G9r/DJDefI3W5J4Equ+ewjCQi
XcFhpwK2NPvPZYGPM6oUHa2WlzcKwrwe8vYpJrY/AIKSQi71XywfGyIf/9yMChF3
c8zrI82VyvN+aKKpl46CK6Iy+tSTwcZC2WvpaSOeXfaR8aELSsX3W0KF2phH8YFQ
RmiUIxdjybZXT0hUirSyr+qdI5oMDLJKTbATS4uG5Xnm8S2GmLkuURrQfmTvSwPW
cB5KfXNdRCiC9EieIrpw6U2LRCv6/voKtti6h3EofsiRQmROUSxEc5MPWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN12zAivwOs1UUJRQkhshxlnbm0+MB8GA1UdIwQY
MBaAFGJ6mVCe1R35OjPypOL9Zi0cjWYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMt
MDEyOGQ5NzE3OWU4LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMtMDEyOGQ5NzE3OWU4
LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHp0rAbn
T9IDvbid2apYPbL6ZQR71u6ZxeOuCBqNJPHQVVwp8SqO1J9V2E8LBv/3EuCOe7OI
N+Vk3Lh5sDHxXeIhWKNpqRAae3f8m+aGrEBZjkrEkkC5iT2a8Y2tIwp2Llvej+xs
W0Aj43WUKJwt/YPqMQ7aQHqhpCwUz3RPrgqg30A++egWzUFepfXfQhY2/LsYF5mh
1Ze10JF1AE/CRfQXllqqcdH7Lkgi8nv2k4/IdyjvyTM3GyDMG64wqf+guxD/5DDS
CfTyHmxOBhBSltUCLQJd50SgscE/LNtSTny/+O6i7pl4ZWjgqmOhpQXY2mfAxMZL
nmAuZyPMiDJtfg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:01:14 2025 by rpki-client