Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
File: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json)
Hash identifier: JWTFbov/DKDLSBRthd2xRMIlqtoKtSaCfrqAYB6G2BY=
Subject key identifier: 27:47:D7:25:70:1A:DE:1D:5F:AB:E6:26:C9:CC:CF:44:36:B0:EC:79
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 019672302911A0B3DC65653D5B1CC4B6A54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 13:01:20 +0000
Manifest this update: Sat 26 Apr 2025 13:01:20 +0000
Manifest next update: Sun 27 Apr 2025 13:01:20 +0000
Files and hashes: 1: GsgBqUerkRLRUcbs_Ls-LQF-79g.roa (hash: o+byKU/lMI3gKI/hl2xDgwzjDY3NcVCYFP3p/RabszM=)
2: K6zGiisfyNDOI3oc313yAhjD4A0.roa (hash: 6AQQYPpSiTsTvRjFcFVlDWIfwUUDTzHtOyOPf+oYlEE=)
3: h9M-qa9tzN77x6y4M9oRvv0zAZo.roa (hash: Wom6OpKhUIS6gHUXQCwVqaaK67yLypV+CPblB+/oGcM=)
4: ozhROBFdVytrD3TpvGqAgnW-fDw.roa (hash: 4VtjPfNgZjp68d8isA/cFQEHicpTsWLTQUKQfDvxm2Y=)
5: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: hu4rm0VJ7OyyJNh1ky92i6dn5xXw3kuY8ebzNA3TzuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:30:29:11:a0:b3:dc:65:65:3d:5b:1c:c4:b6:a5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Apr 26 13:01:20 2025 GMT
Not After : Apr 27 13:01:20 2025 GMT
Subject: CN=2747d725701ade1d5fabe626c9cccf4436b0ec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:cb:c1:7f:59:d3:96:f7:4e:4d:b4:1b:41:
ea:a1:65:0e:fb:c2:ce:bf:22:d0:71:e4:47:99:54:
bc:7a:3b:b1:61:9f:15:55:e6:1e:e0:1b:33:23:1e:
76:22:fb:7b:ce:6e:50:53:cf:26:43:ac:72:0e:16:
4e:d5:97:72:0e:ad:aa:ab:8c:20:69:e2:7f:08:b3:
62:44:8b:c2:17:7e:11:41:7a:d0:83:5d:4f:53:47:
e5:01:ee:3b:a2:0a:2f:fc:34:24:d2:ec:af:6a:bd:
16:9e:41:fc:61:14:6a:d8:fc:e4:90:4e:98:9a:cc:
d9:ad:c5:ba:e3:9e:38:b4:83:08:e1:5c:f9:a8:92:
e5:ae:91:a4:6c:59:94:b7:64:57:ea:87:cc:8e:4e:
37:69:1a:38:87:93:a9:5a:22:ce:86:72:a5:5b:77:
e4:f9:73:60:94:05:2f:d1:c6:82:b6:29:5f:70:bf:
c6:f5:9c:e8:b3:03:53:f9:2b:85:c2:8e:9d:da:05:
cd:f4:ea:fc:85:4b:b7:81:6d:5d:2b:f1:8d:f6:b2:
45:01:81:ec:64:d8:f8:21:ee:a8:c0:85:0b:95:3e:
74:d4:28:d8:e3:2c:b0:68:61:74:75:13:83:ba:da:
a3:14:c6:2c:f2:f1:42:e8:49:06:fb:44:61:3a:19:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:47:D7:25:70:1A:DE:1D:5F:AB:E6:26:C9:CC:CF:44:36:B0:EC:79
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b0:a7:0d:35:fb:5c:e3:b5:bd:30:c2:ef:42:ce:f0:68:e0:
eb:41:9d:73:ef:1b:71:4a:62:0e:a1:f5:ac:93:c5:2b:8f:75:
4f:a1:ed:9a:b1:05:87:0b:64:ac:09:35:3e:aa:6a:16:b9:0f:
1c:fe:4c:0b:d6:a3:48:ac:08:24:18:e1:21:d6:79:c5:f9:5f:
fd:4b:cf:d7:84:c0:97:e9:89:3c:c2:b5:ba:48:2c:39:6f:71:
bc:62:f4:b4:55:36:c0:68:29:31:31:d7:15:2c:f1:d1:75:c3:
df:b0:9f:36:3b:51:ea:df:eb:4f:4e:af:7c:e7:03:f9:b9:9e:
1f:a4:b1:8e:e8:c7:ea:d0:a6:ce:5a:5a:fd:de:f0:5c:0d:89:
bb:f8:fd:5f:df:8c:c7:af:70:1c:4f:58:34:f9:d2:3f:8f:03:
9b:48:67:69:a8:49:51:01:8c:46:73:d8:06:3c:6e:df:fb:7e:
6b:a5:3f:d0:32:4f:36:68:3e:49:6f:5b:b5:b4:85:aa:2c:5a:
68:e0:ce:40:8b:e8:77:73:22:8b:52:2d:a8:ff:68:c6:a0:82:
a2:1a:5e:0c:9d:a2:d0:12:6f:15:32:8b:2e:27:8a:7b:5f:4c:
0e:51:7e:57:ae:89:bd:e3:74:ca:f0:7c:54:4c:0e:8e:25:b6:
f4:45:ed:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyMCkRoLPcZWU9WxzEtqVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw
MGM0YzIwHhcNMjUwNDI2MTMwMTIwWhcNMjUwNDI3MTMwMTIwWjAzMTEwLwYDVQQD
EygyNzQ3ZDcyNTcwMWFkZTFkNWZhYmU2MjZjOWNjY2Y0NDM2YjBlYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYjLwX9Z05b3Tk20G0HqoWUO+8LO
vyLQceRHmVS8ejuxYZ8VVeYe4BszIx52Ivt7zm5QU88mQ6xyDhZO1ZdyDq2qq4wg
aeJ/CLNiRIvCF34RQXrQg11PU0flAe47ogov/DQk0uyvar0WnkH8YRRq2PzkkE6Y
mszZrcW64544tIMI4Vz5qJLlrpGkbFmUt2RX6ofMjk43aRo4h5OpWiLOhnKlW3fk
+XNglAUv0caCtilfcL/G9ZzoswNT+SuFwo6d2gXN9Or8hUu3gW1dK/GN9rJFAYHs
ZNj4Ie6owIULlT501CjY4yywaGF0dRODutqjFMYs8vFC6EkG+0RhOhnpvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdH1yVwGt4dX6vmJsnMz0Q2sOx5MB8GA1UdIwQY
MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt
MDQwNTIzNGFiM2YxLzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx
LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbCnDTX7
XOO1vTDC70LO8Gjg60Gdc+8bcUpiDqH1rJPFK491T6HtmrEFhwtkrAk1PqpqFrkP
HP5MC9ajSKwIJBjhIdZ5xflf/UvP14TAl+mJPMK1ukgsOW9xvGL0tFU2wGgpMTHX
FSzx0XXD37CfNjtR6t/rT06vfOcD+bmeH6SxjujH6tCmzlpa/d7wXA2Ju/j9X9+M
x69wHE9YNPnSP48Dm0hnaahJUQGMRnPYBjxu3/t+a6U/0DJPNmg+SW9btbSFqixa
aODOQIvod3Mii1ItqP9oxqCCohpeDJ2i0BJvFTKLLieKe19MDlF+V66JveN0yvB8
VEwOjiW29EXt4A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:23:51 2025 by rpki-client