Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
File: y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft (raw, json)
Hash identifier: g6tEkxPnVXXaDGLARs59cenn7c/p6UWrz7+wuueiPUI=
Subject key identifier: 64:85:16:7A:D1:D4:D7:30:4C:8E:61:6E:D1:BC:F5:4F:89:0A:15:B7
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial: 0196767A576D083F850572154E81EF2A5BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
Manifest number: 1229
Signing time: Sun 27 Apr 2025 09:00:51 +0000
Manifest this update: Sun 27 Apr 2025 09:00:51 +0000
Manifest next update: Mon 28 Apr 2025 09:00:51 +0000
Files and hashes: 1: 01CdWbGh7Iblu72TWh19DMuKsTg.roa (hash: UMhszvGboz7Q5LH0CKudFHnP8+S6bLFVIG5m3eTTe34=)
2: BRkboOx_3fEjuYhSpVsqCaav6Nw.roa (hash: mmNeus1/l5cYym/HIYOW1rRfvqENuE8CN24AevBAmxw=)
3: y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl (hash: TTtSP98Z2kq0puF0Imtj2yh0tgCg2170DhEm+aOFBgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:57:6d:08:3f:85:05:72:15:4e:81:ef:2a:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Validity
Not Before: Apr 27 09:00:51 2025 GMT
Not After : Apr 28 09:00:51 2025 GMT
Subject: CN=6485167ad1d4d7304c8e616ed1bcf54f890a15b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:a8:d3:ee:26:3f:dd:83:d8:6a:3e:29:43:
11:2e:da:55:9a:f5:8a:eb:4c:5e:85:6a:ae:6d:c4:
46:b8:bf:a5:4d:cf:ac:e5:f1:ec:b3:35:05:f7:a6:
2b:4a:34:48:cf:4f:41:0a:f5:24:1f:9d:fa:f0:da:
a5:c0:b9:9f:51:48:0f:6d:79:da:07:f0:87:d5:a8:
7c:dd:2e:a5:9f:7f:49:4c:84:37:d6:fe:f4:d3:d8:
bf:56:e3:2d:49:5a:eb:5a:0e:89:9b:d9:9d:3a:1f:
92:a1:01:6b:90:a0:07:f4:e6:df:d3:22:28:8f:1b:
9b:2a:a4:68:ba:cf:bd:9e:ac:18:ec:bd:32:82:e6:
26:f5:8c:2a:35:53:a1:82:30:10:cb:5b:31:8c:e5:
3c:ec:df:db:72:e0:a1:c4:ec:25:6c:67:c2:e8:12:
b7:33:ab:0c:b4:14:ac:54:18:0b:d2:54:f6:b7:25:
63:f1:a1:76:93:97:ed:19:ab:cf:45:38:37:3f:da:
67:6f:85:35:2d:e7:dc:7d:70:35:32:85:38:db:f5:
dd:12:7e:48:d3:17:42:62:bd:d2:d8:54:db:51:ac:
83:31:e0:6b:8e:7e:f1:de:eb:6b:08:73:26:7c:4c:
1b:ca:34:0a:34:85:25:48:77:5a:7c:73:88:4a:0b:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:85:16:7A:D1:D4:D7:30:4C:8E:61:6E:D1:BC:F5:4F:89:0A:15:B7
X509v3 Authority Key Identifier:
keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:59:5b:c8:a5:0d:2b:54:03:d6:e5:0d:3b:3f:84:f7:59:
5b:3b:96:26:8e:53:3f:9b:43:6d:29:75:6c:c9:7b:71:a6:6c:
ca:59:4f:68:1f:89:10:38:dd:56:af:95:6c:e4:a9:fa:f6:0e:
9b:55:c2:be:69:40:1e:e4:20:be:04:64:d6:9e:1b:e3:73:7d:
ae:b9:10:3e:22:34:f0:01:5f:4c:92:ce:87:5f:f8:c4:98:d9:
31:a6:38:eb:a9:79:7e:85:26:04:3f:4c:50:fb:13:c0:36:c5:
11:4d:0e:d7:49:b4:36:9a:f3:7c:38:12:a0:ac:ac:32:df:a2:
ee:32:7b:8e:9b:4b:a6:34:7c:3b:31:8c:33:d2:84:02:fb:34:
33:65:d5:84:b4:ee:bf:65:b7:45:88:a9:37:a0:02:2a:8b:ef:
2a:30:a3:5d:0f:c4:ea:fe:00:87:42:bf:eb:27:7b:a8:22:93:
1d:d8:37:d5:c1:09:cc:36:c8:67:c2:90:9a:92:78:a5:ca:c2:
9b:7d:5b:8b:e4:27:cd:f7:a9:0a:b8:6b:85:33:7b:ae:15:7a:
76:62:37:6c:4b:46:91:d4:0e:dc:bb:61:95:04:6d:ce:c0:31:
ce:f9:74:f3:ec:3c:12:44:4c:3f:63:ce:59:49:da:30:21:c3:
19:8f:18:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2eldtCD+FBXIVToHvKlvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmJmMmI4OTU4NGVjOTYwODAwNDhkYzNmZGMyZTM5ODNj
Mjc3ZjMwHhcNMjUwNDI3MDkwMDUxWhcNMjUwNDI4MDkwMDUxWjAzMTEwLwYDVQQD
Eyg2NDg1MTY3YWQxZDRkNzMwNGM4ZTYxNmVkMWJjZjU0Zjg5MGExNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F6o0+4mP92D2Go+KUMRLtpVmvWK
60xehWqubcRGuL+lTc+s5fHsszUF96YrSjRIz09BCvUkH5368NqlwLmfUUgPbXna
B/CH1ah83S6ln39JTIQ31v7009i/VuMtSVrrWg6Jm9mdOh+SoQFrkKAH9Obf0yIo
jxubKqRous+9nqwY7L0yguYm9YwqNVOhgjAQy1sxjOU87N/bcuChxOwlbGfC6BK3
M6sMtBSsVBgL0lT2tyVj8aF2k5ftGavPRTg3P9pnb4U1LefcfXA1MoU42/XdEn5I
0xdCYr3S2FTbUayDMeBrjn7x3utrCHMmfEwbyjQKNIUlSHdafHOISgsbowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSFFnrR1NcwTI5hbtG89U+JChW3MB8GA1UdIwQY
MBaAFMtr8riVhOyWCABI3D/cLjmDwnfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2Qt
MTBmZGZjZTk0NTEzLzEveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2QtMTBmZGZjZTk0NTEz
LzEveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb5ZW8il
DStUA9blDTs/hPdZWzuWJo5TP5tDbSl1bMl7caZsyllPaB+JEDjdVq+VbOSp+vYO
m1XCvmlAHuQgvgRk1p4b43N9rrkQPiI08AFfTJLOh1/4xJjZMaY466l5foUmBD9M
UPsTwDbFEU0O10m0NprzfDgSoKysMt+i7jJ7jptLpjR8OzGMM9KEAvs0M2XVhLTu
v2W3RYipN6ACKovvKjCjXQ/E6v4Ah0K/6yd7qCKTHdg31cEJzDbIZ8KQmpJ4pcrC
m31bi+QnzfepCrhrhTN7rhV6dmI3bEtGkdQO3LthlQRtzsAxzvl08+w8EkRMP2PO
WUnaMCHDGY8YCw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:04:52 2025 by rpki-client