Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
File: yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft (raw, json)
Hash identifier: x479seoDG/uKiq/b3ihvrSSkfwzv1Yv2kwmB/p5FF8I=
Subject key identifier: 45:97:30:A9:3D:9F:BA:62:FC:6D:62:07:E8:87:2D:5E:4A:CD:59:22
Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
Certificate issuer: /CN=c9633fa6fc66b43639c056d02174f80c2426614b
Certificate serial: 0196748C3D667E2932076552473CE020A091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 00:01:09 +0000
Manifest this update: Sun 27 Apr 2025 00:01:09 +0000
Manifest next update: Mon 28 Apr 2025 00:01:09 +0000
Files and hashes: 1: TV8bjX2iYLQ_K3xvyPQFBg8_5j4.roa (hash: igohX63jX8Cxe5hsEllsQKaFbZphTldJC29RHVnM4dA=)
2: XazQXG2c-n81kKei6aAEIGCzQkk.roa (hash: 6K6cajEwr6XzwV0jlcSWtfuziN2YH8eHzt+MUkWO3UI=)
3: Zuc4m_YvYo9dVBgn4_28tfeS3uA.roa (hash: XWJcWE1rzuIso5eYLs4HCvXrfuUzFJEzGlhgGDogzw8=)
4: yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl (hash: f72jrykmonAwLbbOkhVBT0Z1uXjzKp60EcLByiglGMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:3d:66:7e:29:32:07:65:52:47:3c:e0:20:a0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b
Validity
Not Before: Apr 27 00:01:09 2025 GMT
Not After : Apr 28 00:01:09 2025 GMT
Subject: CN=459730a93d9fba62fc6d6207e8872d5e4acd5922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:df:61:08:8f:bb:e6:72:5a:bc:7d:06:f3:
c9:ac:5e:ea:6d:0d:03:73:66:8e:4b:64:88:84:6a:
47:ec:09:ed:f3:5e:33:b8:ec:46:83:ba:d6:3b:7b:
7c:08:b3:5e:f7:0a:a0:06:fb:56:76:80:09:43:62:
ff:ce:4f:99:ca:d7:e1:46:48:02:c0:57:d8:51:3c:
76:f7:3d:3d:ed:0e:41:22:13:ef:d7:9d:7a:9f:2e:
de:0f:84:17:a0:1d:77:d9:56:a1:d4:a4:4c:e7:ab:
c9:b8:13:79:3e:31:c7:70:ff:95:d2:78:4d:02:98:
b4:3e:7d:c8:23:8b:e4:44:61:45:7f:40:d1:38:fa:
b1:b7:01:35:bc:66:56:c0:d9:49:bc:f9:7f:a6:00:
49:07:81:2d:5f:39:25:1e:8e:88:10:9f:cd:1c:64:
1c:af:e1:f3:fc:b0:14:e9:31:c7:46:81:57:2d:f4:
77:a8:f2:39:62:51:55:cc:4f:50:21:80:3a:25:46:
07:c7:10:ea:7e:15:00:bf:88:c5:bc:17:b8:5e:ec:
f6:9c:d2:a5:d9:62:31:c6:55:e1:03:d0:56:ea:3e:
7a:3b:d6:91:48:73:a7:44:e8:2e:ef:73:ff:1c:16:
9d:76:7e:8d:7b:8c:31:ad:e6:3a:3c:c9:ca:e4:1b:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:97:30:A9:3D:9F:BA:62:FC:6D:62:07:E8:87:2D:5E:4A:CD:59:22
X509v3 Authority Key Identifier:
keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:48:7a:2f:71:70:a2:6c:ae:72:da:13:d4:0e:cc:8d:c3:38:
ba:77:13:81:31:57:0b:66:67:2b:1e:9f:2e:22:3e:61:63:86:
be:c4:d7:98:8f:12:ff:68:a1:d5:0b:58:a6:2d:6c:d4:97:bf:
b1:67:02:79:91:42:ec:ef:41:ee:81:44:a8:84:74:55:6a:7c:
5d:11:76:af:20:7a:6f:1c:bb:7f:22:d2:e9:31:6a:6c:fa:88:
42:0f:28:62:6a:c8:43:60:34:31:41:27:4b:17:52:37:83:d7:
16:91:46:53:2b:75:b1:94:c8:5e:5d:17:71:0c:1b:e8:7d:ef:
0d:32:d7:6f:19:ce:18:84:2b:60:99:0d:cb:50:d7:be:87:08:
33:b2:d5:ba:70:5b:64:7e:8c:27:4f:5a:83:e2:f9:3e:8c:33:
06:db:9c:bf:19:7f:8d:d4:40:cb:9d:1f:76:98:7d:ba:0e:17:
95:43:07:aa:5a:99:53:66:db:4d:b8:17:77:23:c0:6e:ce:04:
ae:c3:ff:b0:91:eb:fe:9a:fb:ce:de:52:61:f3:fa:1e:ef:a8:
dc:50:68:fb:13:9e:0d:67:6e:86:00:12:64:d4:3d:d2:1f:66:
b9:c1:5d:f0:5c:0e:48:a0:19:d0:f0:79:b3:03:f7:34:aa:f0:
b0:69:61:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0jD1mfikyB2VSRzzgIKCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NjMzZmE2ZmM2NmI0MzYzOWMwNTZkMDIxNzRmODBjMjQy
NjYxNGIwHhcNMjUwNDI3MDAwMTA5WhcNMjUwNDI4MDAwMTA5WjAzMTEwLwYDVQQD
Eyg0NTk3MzBhOTNkOWZiYTYyZmM2ZDYyMDdlODg3MmQ1ZTRhY2Q1OTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXnfYQiPu+ZyWrx9BvPJrF7qbQ0D
c2aOS2SIhGpH7Ant814zuOxGg7rWO3t8CLNe9wqgBvtWdoAJQ2L/zk+ZytfhRkgC
wFfYUTx29z097Q5BIhPv1516ny7eD4QXoB132Vah1KRM56vJuBN5PjHHcP+V0nhN
Api0Pn3II4vkRGFFf0DROPqxtwE1vGZWwNlJvPl/pgBJB4EtXzklHo6IEJ/NHGQc
r+Hz/LAU6THHRoFXLfR3qPI5YlFVzE9QIYA6JUYHxxDqfhUAv4jFvBe4Xuz2nNKl
2WIxxlXhA9BW6j56O9aRSHOnROgu73P/HBaddn6Ne4wxreY6PMnK5BtGfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWXMKk9n7pi/G1iB+iHLV5KzVkiMB8GA1UdIwQY
MBaAFMljP6b8ZrQ2OcBW0CF0+AwkJmFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVdNX3B2eG10RFk1d0ZiUUlYVDREQ1FtWVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85Y2IzMjktMGZlOS00ZmZlLWJlNWYt
MDM4YTU0ZTM5MTJmLzEveVdNX3B2eG10RFk1d0ZiUUlYVDREQ1FtWVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi85Y2IzMjktMGZlOS00ZmZlLWJlNWYtMDM4YTU0ZTM5MTJm
LzEveVdNX3B2eG10RFk1d0ZiUUlYVDREQ1FtWVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEh6L3Fw
omyuctoT1A7MjcM4uncTgTFXC2ZnKx6fLiI+YWOGvsTXmI8S/2ih1QtYpi1s1Je/
sWcCeZFC7O9B7oFEqIR0VWp8XRF2ryB6bxy7fyLS6TFqbPqIQg8oYmrIQ2A0MUEn
SxdSN4PXFpFGUyt1sZTIXl0XcQwb6H3vDTLXbxnOGIQrYJkNy1DXvocIM7LVunBb
ZH6MJ09ag+L5PowzBtucvxl/jdRAy50fdph9ug4XlUMHqlqZU2bbTbgXdyPAbs4E
rsP/sJHr/pr7zt5SYfP6Hu+o3FBo+xOeDWduhgASZNQ90h9mucFd8FwOSKAZ0PB5
swP3NKrwsGlhww==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:51:36 2025 by rpki-client