Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: ZFouyde1CMAPHR5zwKgHsDeTlZbmQ+0LyKdnMBxuitw=
Subject key identifier: 8C:C9:E5:EE:D1:E6:C9:A2:86:CA:4E:9B:0D:EF:96:B2:74:2F:17:75
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019683FF1E743703B69AA2B4D745F471B1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 0D0D
Signing time: Wed 30 Apr 2025 00:00:56 +0000
Manifest this update: Wed 30 Apr 2025 00:00:56 +0000
Manifest next update: Thu 01 May 2025 00:00:56 +0000
Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=)
2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: cUbyw1hO8mt3z1bLvqIXPERP9O1OIZgLecfRPNrv8Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:1e:74:37:03:b6:9a:a2:b4:d7:45:f4:71:b1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Apr 30 00:00:56 2025 GMT
Not After : May 1 00:00:56 2025 GMT
Subject: CN=8cc9e5eed1e6c9a286ca4e9b0def96b2742f1775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:4c:68:8d:07:c7:86:2d:25:e4:33:bb:da:
56:25:16:5b:05:30:87:38:a4:cf:bb:95:64:38:08:
95:fe:9a:36:81:bb:c3:c8:19:3c:d9:24:57:21:22:
6d:3e:b0:ad:f8:e6:c0:5a:31:ae:17:9b:5c:79:db:
19:4a:57:3b:6b:29:c1:d2:7f:3c:ed:8b:28:09:64:
72:c5:87:31:74:0c:c7:a0:5b:e6:3b:0d:d8:27:23:
9c:d2:cf:5b:83:67:cc:85:12:65:76:24:88:94:94:
e0:df:11:1c:ce:5f:d8:33:02:98:a1:64:68:2a:1f:
a8:13:65:ed:6c:a0:8d:b7:26:f4:2c:82:c4:e9:3a:
13:09:f9:1e:bb:82:ba:5c:94:0c:cb:18:2e:69:b7:
a8:5e:88:04:00:fb:12:af:69:41:41:b2:4e:be:ea:
d2:04:56:ad:1d:bd:32:a7:5d:b9:ef:27:ce:8d:f8:
91:8b:ee:ca:92:9f:b6:8b:b9:cc:d1:ef:ad:63:1d:
8a:87:30:b3:f2:03:31:eb:1b:13:a8:f0:43:83:ea:
29:99:9b:65:15:ea:eb:d1:14:13:df:2c:77:df:be:
aa:42:c2:57:b3:34:34:4a:f5:58:c5:8a:94:45:57:
e5:2a:e9:95:7d:f5:5a:ae:18:4d:66:1c:42:a8:7a:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C9:E5:EE:D1:E6:C9:A2:86:CA:4E:9B:0D:EF:96:B2:74:2F:17:75
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f3:bc:61:f2:f9:8a:07:5d:00:96:e8:1d:80:34:92:09:91:
b7:1d:b7:d6:1c:79:7b:56:60:15:51:01:2c:d4:c8:e7:1a:d8:
19:f6:c9:78:b7:c3:e1:cf:c3:48:f4:53:41:69:0a:8d:ba:92:
55:24:8c:f2:ce:f7:ca:e7:7f:fc:91:0f:37:a0:94:2a:8a:e7:
de:91:1a:40:fe:42:6b:5f:99:0a:8b:81:53:34:91:86:5d:77:
5c:6d:27:05:ad:5c:cd:c1:ab:d7:a0:95:fa:02:fc:b2:41:18:
f1:24:66:21:19:ad:25:63:e9:27:7e:2d:42:71:de:77:7d:82:
77:2c:d4:48:9a:58:4c:dd:3e:15:fe:8a:70:02:1c:b9:c2:a9:
4d:62:0f:e1:32:5f:4d:8c:6d:13:51:fa:d7:05:d6:c3:e3:62:
4b:ae:06:3a:71:84:a2:c3:bb:05:a1:57:46:7b:c4:6a:9e:e0:
2d:c8:cc:f9:fb:92:16:64:bd:68:5e:61:34:77:6c:7d:5c:24:
53:d4:91:53:f8:f1:dc:ad:18:25:41:1f:83:e5:52:ad:0c:62:
61:a2:57:05:10:93:55:6e:40:b7:41:50:4d:c0:de:64:bc:71:
92:3b:83:ae:7e:7a:3c:06:9f:ba:d9:09:0c:45:cc:00:ec:16:
c4:4f:27:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaD/x50NwO2mqK010X0cbHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjM1ZTA0YzM0YzJmNzgxZWU5ODBhMTY1MWZmNjZlNTEz
MmJjNDQwHhcNMjUwNDMwMDAwMDU2WhcNMjUwNTAxMDAwMDU2WjAzMTEwLwYDVQQD
Eyg4Y2M5ZTVlZWQxZTZjOWEyODZjYTRlOWIwZGVmOTZiMjc0MmYxNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRhMaI0Hx4YtJeQzu9pWJRZbBTCH
OKTPu5VkOAiV/po2gbvDyBk82SRXISJtPrCt+ObAWjGuF5tcedsZSlc7aynB0n88
7YsoCWRyxYcxdAzHoFvmOw3YJyOc0s9bg2fMhRJldiSIlJTg3xEczl/YMwKYoWRo
Kh+oE2XtbKCNtyb0LILE6ToTCfkeu4K6XJQMyxguabeoXogEAPsSr2lBQbJOvurS
BFatHb0yp1257yfOjfiRi+7Kkp+2i7nM0e+tYx2KhzCz8gMx6xsTqPBDg+opmZtl
Ferr0RQT3yx3376qQsJXszQ0SvVYxYqURVflKumVffVarhhNZhxCqHrtMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzJ5e7R5smihspOmw3vlrJ0Lxd1MB8GA1UdIwQY
MBaAFGBjXgTDTC94HumAoWUf9m5RMrxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUt
OTM3MDgxYTljZWZhLzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUtOTM3MDgxYTljZWZh
LzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfO8YfL5
igddAJboHYA0kgmRtx231hx5e1ZgFVEBLNTI5xrYGfbJeLfD4c/DSPRTQWkKjbqS
VSSM8s73yud//JEPN6CUKorn3pEaQP5Ca1+ZCouBUzSRhl13XG0nBa1czcGr16CV
+gL8skEY8SRmIRmtJWPpJ34tQnHed32CdyzUSJpYTN0+Ff6KcAIcucKpTWIP4TJf
TYxtE1H61wXWw+NiS64GOnGEosO7BaFXRnvEap7gLcjM+fuSFmS9aF5hNHdsfVwk
U9SRU/jx3K0YJUEfg+VSrQxiYaJXBRCTVW5At0FQTcDeZLxxkjuDrn56PAafutkJ
DEXMAOwWxE8nEA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:19:59 2025 by rpki-client