Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier: mFq/Srw5tvbseViE6SxX06QE/vTeHR3HmpamlIFYz60=
Subject key identifier: BF:BA:98:CF:23:E1:42:75:16:F4:54:46:9D:BA:70:38:5C:E9:ED:79
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 01968849B6CC755FAB16B5F94A5ECC6FE31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number: 098A
Signing time: Wed 30 Apr 2025 20:00:54 +0000
Manifest this update: Wed 30 Apr 2025 20:00:54 +0000
Manifest next update: Thu 01 May 2025 20:00:54 +0000
Files and hashes: 1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: +vZLs+RouOY8uiePNFynU2C6Ia1JYWEwK+a+VmGJKQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:b6:cc:75:5f:ab:16:b5:f9:4a:5e:cc:6f:e3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: Apr 30 20:00:54 2025 GMT
Not After : May 1 20:00:54 2025 GMT
Subject: CN=bfba98cf23e1427516f454469dba70385ce9ed79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:ed:ef:dd:68:b6:ab:02:0e:48:59:8d:09:
47:a1:f9:58:a0:3d:d5:2a:51:01:30:70:fa:d7:cd:
0d:de:10:40:85:26:42:2d:8f:d1:78:99:f6:03:e4:
ea:e4:1d:2d:42:c1:48:cd:b0:60:c6:bc:bd:a1:d0:
37:99:9e:ba:5d:47:e3:fe:32:0a:24:bc:a8:2d:94:
f1:f8:53:8f:86:3b:17:ac:6c:05:eb:8c:1b:2e:18:
e6:ed:00:61:68:31:f9:a2:7e:81:d5:18:29:82:80:
5e:a1:12:17:44:df:b7:68:a9:e0:17:12:e0:6f:a2:
a2:47:2b:cc:07:42:a6:7f:23:07:3b:15:e3:19:7a:
90:c8:9c:c0:06:bf:f8:bd:39:cb:00:c8:78:3d:83:
6e:b0:68:5d:69:7f:c6:bb:2d:f3:a0:0b:09:fc:72:
c5:a5:c1:c0:67:dc:24:7a:9a:88:bf:bd:fe:a3:43:
29:9f:76:0b:2e:20:95:ed:5e:51:e3:e9:61:c9:e9:
5d:b2:d1:9c:8d:58:74:38:aa:f4:ed:eb:61:f3:a2:
c9:b8:cb:3f:0c:57:88:4e:c8:90:67:89:14:08:e1:
90:08:56:05:c2:e9:e6:b3:91:35:e2:39:48:7e:80:
49:6c:df:cf:1a:e2:ff:67:fb:9b:3f:20:a3:cb:52:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BA:98:CF:23:E1:42:75:16:F4:54:46:9D:BA:70:38:5C:E9:ED:79
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:55:1d:d0:45:ad:5a:ae:a1:5b:cf:1a:bb:dd:dc:45:f6:c2:
eb:01:2a:1f:c2:a7:31:ce:1e:90:c3:60:38:96:3a:d3:1c:ac:
be:cf:d2:03:b1:71:b0:67:76:a2:99:66:f2:bb:1c:cc:76:a3:
4c:65:b7:d7:eb:c9:dc:2c:18:55:21:77:bc:73:28:93:10:d8:
a3:1c:96:4a:df:12:95:de:c5:1c:95:e7:f4:6b:9c:f7:4f:1d:
4d:33:51:58:4d:94:84:fc:27:30:c6:7f:47:14:8c:51:86:51:
78:42:13:45:0e:63:64:90:b6:b9:e9:fb:7b:e2:ee:65:07:fd:
f4:df:dd:06:65:9a:9c:49:1c:31:21:84:7f:5e:0a:3d:94:29:
37:1e:1c:c3:50:de:16:b2:3c:15:e2:f7:45:f3:4a:83:5a:07:
99:b2:89:3e:5b:ea:0e:25:0f:8c:30:ef:09:d6:80:a3:d7:eb:
a3:39:dd:cf:b3:94:6d:3a:0e:bc:e6:61:0d:0c:36:06:ec:bf:
da:66:f3:46:7d:3d:dc:0b:c2:53:44:8d:8f:23:ed:dc:ca:ba:
25:9a:34:5c:14:a6:0d:79:8a:ee:c2:b0:98:16:45:6b:18:b9:
54:72:ba:92:cf:5b:b8:f3:b6:c5:2e:8e:8c:75:d1:c3:58:4f:
4c:b5:09:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaISbbMdV+rFrX5Sl7Mb+MdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWRmMmJiY2NjMDJlNGU3ZjQ2NGQ2OWZhYWYzZDZjMzcy
MzQ5NWUwHhcNMjUwNDMwMjAwMDU0WhcNMjUwNTAxMjAwMDU0WjAzMTEwLwYDVQQD
EyhiZmJhOThjZjIzZTE0Mjc1MTZmNDU0NDY5ZGJhNzAzODVjZTllZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ7t791otqsCDkhZjQlHoflYoD3V
KlEBMHD6180N3hBAhSZCLY/ReJn2A+Tq5B0tQsFIzbBgxry9odA3mZ66XUfj/jIK
JLyoLZTx+FOPhjsXrGwF64wbLhjm7QBhaDH5on6B1RgpgoBeoRIXRN+3aKngFxLg
b6KiRyvMB0KmfyMHOxXjGXqQyJzABr/4vTnLAMh4PYNusGhdaX/Guy3zoAsJ/HLF
pcHAZ9wkepqIv73+o0Mpn3YLLiCV7V5R4+lhyeldstGcjVh0OKr07eth86LJuMs/
DFeITsiQZ4kUCOGQCFYFwunms5E14jlIfoBJbN/PGuL/Z/ubPyCjy1LFawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+6mM8j4UJ1FvRURp26cDhc6e15MB8GA1UdIwQY
MBaAFMod8rvMwC5Of0ZNafqvPWw3I0leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTkt
ZGQ0OWVjYzI2MDk1LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTktZGQ0OWVjYzI2MDk1
LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1Ud0EWt
Wq6hW88au93cRfbC6wEqH8KnMc4ekMNgOJY60xysvs/SA7FxsGd2oplm8rsczHaj
TGW31+vJ3CwYVSF3vHMokxDYoxyWSt8Sld7FHJXn9Guc908dTTNRWE2UhPwnMMZ/
RxSMUYZReEITRQ5jZJC2uen7e+LuZQf99N/dBmWanEkcMSGEf14KPZQpNx4cw1De
FrI8FeL3RfNKg1oHmbKJPlvqDiUPjDDvCdaAo9frozndz7OUbToOvOZhDQw2Buy/
2mbzRn093AvCU0SNjyPt3Mq6JZo0XBSmDXmK7sKwmBZFaxi5VHK6ks9buPO2xS6O
jHXRw1hPTLUJig==
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:50:44 2025 by rpki-client