
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
File: r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json)
Hash identifier: WprOhYiaclHZRvJXA4JdzXb0Xm2TNwTJKO/N/x0UOYs=
Subject key identifier: 76:31:53:44:16:43:43:E3:8D:25:60:57:BB:BD:A1:6A:AF:33:69:55
Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
Certificate issuer: /CN=affca7f6da689cc545bbbb950398bac407979aa3
Certificate serial: 01968FCC2F5AA52F4263C3237488A44A7E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
Manifest number: 0286
Signing time: Fri 02 May 2025 07:00:45 +0000
Manifest this update: Fri 02 May 2025 07:00:45 +0000
Manifest next update: Sat 03 May 2025 07:00:45 +0000
Files and hashes: 1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: kQ5P1XylZ9wRjy2kkksOq1uWGc7xBHH+NLzoH/OHh0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:2f:5a:a5:2f:42:63:c3:23:74:88:a4:4a:7e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3
Validity
Not Before: May 2 07:00:45 2025 GMT
Not After : May 3 07:00:45 2025 GMT
Subject: CN=76315344164343e38d256057bbbda16aaf336955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:a7:c5:30:6f:ca:ef:13:2e:c8:9f:ea:ce:
3b:49:05:54:c0:11:f7:3a:df:99:ef:33:9d:6d:ce:
fa:41:e3:27:16:c3:e5:f3:88:9f:60:a5:ae:ff:e5:
8a:e6:a3:ea:68:47:2f:90:8f:20:5e:9f:88:2e:7b:
09:db:fb:bf:bf:10:90:06:43:0a:e6:81:ab:07:10:
64:21:f6:f2:71:d7:b8:96:75:77:8c:99:6a:6d:4b:
12:27:82:2a:ce:30:93:ce:49:24:5b:3b:cc:40:54:
13:fa:dd:89:89:0b:4e:96:fb:da:d6:c6:15:ba:6e:
f3:c6:80:c7:b7:2e:7b:5f:06:01:95:61:05:44:31:
21:c4:75:0e:9a:ce:ea:4d:48:45:1a:72:f9:50:1c:
b4:12:b2:01:eb:c3:13:24:13:40:81:d7:00:cf:7f:
59:33:0e:43:f4:d0:e5:10:e0:61:9d:08:1f:9e:8d:
73:b3:84:e4:bc:9e:fa:5e:f8:5b:1a:a6:89:94:f8:
64:b5:a0:c8:a2:9f:49:ff:28:b0:85:03:e3:f1:eb:
1a:32:1e:b7:2a:71:72:19:92:dd:aa:d5:aa:0b:ea:
df:97:ba:50:bd:f4:4d:c4:d0:9c:41:3a:21:d1:80:
f3:7c:ef:fa:77:52:ff:1f:2c:7c:20:3e:9e:eb:05:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:53:44:16:43:43:E3:8D:25:60:57:BB:BD:A1:6A:AF:33:69:55
X509v3 Authority Key Identifier:
keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4a:8e:be:59:dc:f7:dc:10:41:df:cc:04:62:a2:3d:eb:2d:
ca:81:51:34:33:a1:9c:98:bb:67:7d:19:26:96:61:70:4c:7c:
15:76:42:12:41:0b:b8:b1:66:24:0e:9e:0f:8f:24:1b:54:e8:
b1:72:0a:f6:03:a5:08:d7:de:a1:80:23:08:b6:ac:d7:09:d8:
85:0f:b3:6c:51:e3:78:37:bd:ca:8d:10:81:a3:71:95:09:3c:
49:90:7d:48:2b:56:ba:a1:52:a0:cf:e6:37:8c:8e:d2:d9:7a:
ae:2a:b0:d2:16:81:0a:5f:80:06:ac:ed:5b:ca:e8:33:58:f2:
bc:21:ce:9d:84:3d:3b:89:7b:a9:bf:f5:20:fa:69:67:67:89:
e7:13:e1:dd:ec:65:ca:7e:f8:37:b8:ea:2c:57:f2:6c:7a:df:
e0:1d:55:27:5d:f9:db:02:94:d0:eb:c0:e7:c6:1e:35:0b:1f:
2a:6c:17:d2:15:7e:6b:16:ba:fb:a9:4d:66:0a:77:fd:ad:53:
f2:8e:f8:d5:ff:bd:4e:cf:6e:52:66:6b:1b:eb:95:a9:36:70:
48:af:70:f6:fa:70:f3:66:c8:70:ee:b1:50:9c:62:c3:97:42:
8a:4c:7d:77:7e:27:7c:47:fd:b2:e7:9f:95:5f:e7:6a:4e:4b:
91:a5:83:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPzC9apS9CY8MjdIikSn5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmNhN2Y2ZGE2ODljYzU0NWJiYmI5NTAzOThiYWM0MDc5
NzlhYTMwHhcNMjUwNTAyMDcwMDQ1WhcNMjUwNTAzMDcwMDQ1WjAzMTEwLwYDVQQD
Eyg3NjMxNTM0NDE2NDM0M2UzOGQyNTYwNTdiYmJkYTE2YWFmMzM2OTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu6nxTBvyu8TLsif6s47SQVUwBH3
Ot+Z7zOdbc76QeMnFsPl84ifYKWu/+WK5qPqaEcvkI8gXp+ILnsJ2/u/vxCQBkMK
5oGrBxBkIfbycde4lnV3jJlqbUsSJ4IqzjCTzkkkWzvMQFQT+t2JiQtOlvva1sYV
um7zxoDHty57XwYBlWEFRDEhxHUOms7qTUhFGnL5UBy0ErIB68MTJBNAgdcAz39Z
Mw5D9NDlEOBhnQgfno1zs4TkvJ76XvhbGqaJlPhktaDIop9J/yiwhQPj8esaMh63
KnFyGZLdqtWqC+rfl7pQvfRNxNCcQToh0YDzfO/6d1L/Hyx8ID6e6wUjVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYxU0QWQ0PjjSVgV7u9oWqvM2lVMB8GA1UdIwQY
MBaAFK/8p/baaJzFRbu7lQOYusQHl5qjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xOWJhOTctMTlhZi00Zjg4LTk2YWEt
MTk4NWIwYjA4MjVlLzEvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xOWJhOTctMTlhZi00Zjg4LTk2YWEtMTk4NWIwYjA4MjVl
LzEvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEqOvlnc
99wQQd/MBGKiPestyoFRNDOhnJi7Z30ZJpZhcEx8FXZCEkELuLFmJA6eD48kG1To
sXIK9gOlCNfeoYAjCLas1wnYhQ+zbFHjeDe9yo0QgaNxlQk8SZB9SCtWuqFSoM/m
N4yO0tl6riqw0haBCl+ABqztW8roM1jyvCHOnYQ9O4l7qb/1IPppZ2eJ5xPh3exl
yn74N7jqLFfybHrf4B1VJ1352wKU0OvA58YeNQsfKmwX0hV+axa6+6lNZgp3/a1T
8o741f+9Ts9uUmZrG+uVqTZwSK9w9vpw82bIcO6xUJxiw5dCikx9d34nfEf9suef
lV/nak5LkaWDxw==
-----END CERTIFICATE-----
Generated at Fri May 2 11:44:50 2025 by rpki-client