Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier: WCOIE+QjHF6rfMKFbzDkeDfLeaPW99l1y2kZLPOR2do=
Subject key identifier: D9:EB:DA:3A:EC:5F:30:33:C4:40:84:FD:31:86:8D:AD:4D:28:93:27
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 01967ED8E55AEBE5B7FA5296A20CC758369B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 00:01:05 +0000
Manifest this update: Tue 29 Apr 2025 00:01:05 +0000
Manifest next update: Wed 30 Apr 2025 00:01:05 +0000
Files and hashes: 1: dUXiZWgEMzgw5vFZ8qDaH6XmlYU.roa (hash: M6xcVpwF4WkFbvgKn4KRPQKsmRd0Zva6dQ1TxO+Djpg=)
2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: CTTwmaRMZmrRjCWXEWxtqmJA6Nii4Lc/2Vus8u2MO/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:e5:5a:eb:e5:b7:fa:52:96:a2:0c:c7:58:36:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Apr 29 00:01:05 2025 GMT
Not After : Apr 30 00:01:05 2025 GMT
Subject: CN=d9ebda3aec5f3033c44084fd31868dad4d289327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:40:4c:56:71:03:31:6e:29:38:b6:b8:98:
91:2b:59:db:79:03:29:71:2d:55:65:5d:65:2f:68:
76:a7:2b:16:b7:25:e4:cc:9c:f4:5e:fe:a2:15:39:
04:a7:5f:5a:d3:44:bd:25:31:03:54:0d:dc:1f:1a:
37:78:45:ab:64:98:6b:85:83:1a:d3:07:a1:f3:ec:
9a:82:53:ef:d8:e7:3a:b9:08:ab:23:b0:e9:d6:69:
2b:cd:a1:ac:8e:78:f6:09:6e:54:6a:c5:90:63:de:
7c:0a:c1:de:b6:db:47:46:88:9e:67:e8:0d:de:e7:
de:6d:e2:39:13:99:89:c0:80:61:a9:91:47:5f:2a:
cb:86:41:dd:71:0c:fb:ed:b4:5f:3f:91:f4:e8:ec:
a3:61:3f:8f:a9:f2:e3:a5:10:5c:d1:77:b9:4c:c6:
0c:64:ea:3c:ee:75:87:c3:18:b4:b3:c1:a8:28:10:
26:a1:bd:8b:48:48:76:c2:ac:b1:b0:e1:f7:05:b7:
85:f6:6b:cc:71:42:65:28:3d:d5:51:77:6c:ad:f6:
48:fd:5a:83:7e:f7:b8:01:7e:20:ac:0f:80:bd:66:
e6:13:09:a4:a6:8d:29:07:2b:24:90:a4:3a:e3:89:
6c:41:86:db:a7:82:2a:20:22:2d:47:69:48:6b:21:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EB:DA:3A:EC:5F:30:33:C4:40:84:FD:31:86:8D:AD:4D:28:93:27
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c4:ce:3c:b4:1b:4c:63:d5:bc:a5:fa:32:82:dc:a3:19:e4:
4d:4f:8e:c5:c4:4d:f3:ce:10:df:47:e0:43:47:bc:c8:ef:d9:
93:4a:ae:96:6e:51:66:b5:15:3b:71:59:29:45:2a:a3:a0:d6:
62:01:3a:bf:28:cb:5b:06:6e:70:e7:cf:c0:15:66:5b:d3:0c:
52:30:8a:19:6f:c6:dc:2d:83:03:8f:8a:e7:5f:03:1f:25:33:
cc:b9:ac:64:99:4c:50:2b:4f:e1:12:fb:41:30:76:1b:d9:74:
eb:82:70:71:38:c5:21:2c:b9:c3:11:d1:ea:d5:93:56:ed:a9:
bf:94:99:1e:a2:bd:3d:b7:7c:48:f9:61:74:39:0c:69:eb:00:
80:8e:7c:7f:ab:1c:86:46:56:1a:41:51:04:1b:b1:42:87:dc:
c8:fd:43:ae:22:f5:0a:04:62:d2:fd:ce:15:71:4c:43:80:1e:
d8:08:ba:5e:86:d9:ec:e7:d6:69:2f:5f:fa:a2:28:c2:1d:ae:
0e:5e:bb:3c:01:7f:a5:dc:55:bf:b8:88:74:75:5e:03:16:19:
19:73:0f:93:87:b0:34:26:7c:0a:63:39:36:0c:b3:e4:f1:8e:
cd:64:e3:23:db:88:55:14:18:11:04:98:a6:69:1b:cd:d6:4f:
7e:d5:7f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2OVa6+W3+lKWogzHWDabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDk0MmQ5NmVlOTRhN2E1YTY1MmVmN2FjODU1ZGM5NDAx
NDE1ZGYwHhcNMjUwNDI5MDAwMTA1WhcNMjUwNDMwMDAwMTA1WjAzMTEwLwYDVQQD
EyhkOWViZGEzYWVjNWYzMDMzYzQ0MDg0ZmQzMTg2OGRhZDRkMjg5MzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA109ATFZxAzFuKTi2uJiRK1nbeQMp
cS1VZV1lL2h2pysWtyXkzJz0Xv6iFTkEp19a00S9JTEDVA3cHxo3eEWrZJhrhYMa
0weh8+yaglPv2Oc6uQirI7Dp1mkrzaGsjnj2CW5UasWQY958CsHetttHRoieZ+gN
3ufebeI5E5mJwIBhqZFHXyrLhkHdcQz77bRfP5H06OyjYT+PqfLjpRBc0Xe5TMYM
ZOo87nWHwxi0s8GoKBAmob2LSEh2wqyxsOH3BbeF9mvMcUJlKD3VUXdsrfZI/VqD
fve4AX4grA+AvWbmEwmkpo0pByskkKQ644lsQYbbp4IqICItR2lIayGpVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnr2jrsXzAzxECE/TGGja1NKJMnMB8GA1UdIwQY
MBaAFMvZQtlu6Up6WmUu96yFXclAFBXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEt
YzZmNmQ0NDQ5MTVmLzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEtYzZmNmQ0NDQ5MTVm
LzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8TOPLQb
TGPVvKX6MoLcoxnkTU+OxcRN884Q30fgQ0e8yO/Zk0qulm5RZrUVO3FZKUUqo6DW
YgE6vyjLWwZucOfPwBVmW9MMUjCKGW/G3C2DA4+K518DHyUzzLmsZJlMUCtP4RL7
QTB2G9l064JwcTjFISy5wxHR6tWTVu2pv5SZHqK9Pbd8SPlhdDkMaesAgI58f6sc
hkZWGkFRBBuxQofcyP1DriL1CgRi0v3OFXFMQ4Ae2Ai6XobZ7OfWaS9f+qIowh2u
Dl67PAF/pdxVv7iIdHVeAxYZGXMPk4ewNCZ8CmM5Ngyz5PGOzWTjI9uIVRQYEQSY
pmkbzdZPftV/rQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:22:40 2025 by rpki-client