Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: 3rPzP2HNQ0GzDz9GPILNuwNmMPBTI32wXyCnKi81Vu0=
Subject key identifier: D4:3A:C4:60:6E:0F:3C:7A:B4:0C:38:28:94:50:CA:07:F7:7C:3B:EF
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 0196865B4DB2165210126C0B7161B5CCEB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1514
Signing time: Wed 30 Apr 2025 11:00:52 +0000
Manifest this update: Wed 30 Apr 2025 11:00:52 +0000
Manifest next update: Thu 01 May 2025 11:00:52 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: eHS75SnvFgosdimFL67fCRgRNT6WO9ddNKkVsp5mnCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:4d:b2:16:52:10:12:6c:0b:71:61:b5:cc:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Apr 30 11:00:52 2025 GMT
Not After : May 1 11:00:52 2025 GMT
Subject: CN=d43ac4606e0f3c7ab40c38289450ca07f77c3bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:91:70:e7:5d:bb:24:70:c8:db:9e:1a:73:
b7:d7:51:62:98:2a:9a:3e:85:e3:47:71:df:fa:2e:
e4:98:10:c5:40:21:9a:d1:63:b5:59:b8:6e:10:fa:
b5:23:a8:b3:68:22:e8:c6:10:4e:32:fc:66:d2:e5:
b0:f0:93:4a:87:1f:c2:45:47:9c:f8:6e:66:fe:f4:
22:5f:d9:42:8c:6f:25:65:05:e8:d1:b6:dc:5b:1b:
0f:52:8b:df:0a:c6:32:f0:18:64:e6:34:68:11:22:
aa:44:e3:d2:59:4f:94:25:4e:ef:16:9d:e2:51:31:
14:a7:fc:2f:a2:b3:5e:7d:da:56:44:55:85:a9:fa:
b4:18:b7:cc:8a:c5:2d:64:24:e1:03:3a:2d:9f:dd:
14:df:74:9f:f5:e8:b3:f1:0d:04:24:62:67:9b:e6:
bb:96:ba:07:1b:0b:16:1a:68:d9:e5:92:0d:3f:ec:
40:89:4c:51:89:a3:39:2a:45:16:ed:88:75:79:63:
12:03:88:8a:72:8e:62:6f:ef:47:9e:b2:12:e1:93:
8e:f4:7e:0c:79:8d:c1:95:91:e5:87:1c:a7:85:e4:
6e:03:22:49:a1:97:51:fa:d1:01:ce:17:e8:b7:98:
e7:b2:12:45:17:a3:15:b6:70:dd:21:02:18:d9:8b:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3A:C4:60:6E:0F:3C:7A:B4:0C:38:28:94:50:CA:07:F7:7C:3B:EF
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9b:92:17:61:b3:32:eb:c5:2b:18:6e:5a:58:5d:d0:fa:f5:
3a:e5:e5:06:2e:2a:63:6a:af:af:3e:87:4f:cf:fa:18:86:ea:
3a:75:5a:4c:a0:73:3e:3a:fc:ca:a5:fb:b1:c6:6c:61:c0:26:
00:53:29:e6:4d:c0:60:97:16:81:b5:5d:d8:a7:26:6a:f4:8b:
86:66:09:bf:3d:c0:fb:fd:fd:60:c2:49:66:62:c5:36:c6:e2:
f2:77:1c:b0:25:df:94:dd:dc:3e:4d:eb:9d:31:15:43:e9:7b:
8b:5c:0c:34:e2:a6:b1:7e:a6:44:ec:e8:c7:35:6c:81:3b:7d:
b7:4b:d1:91:29:58:b5:3b:05:36:ef:8b:01:ef:73:3a:3e:4d:
34:48:8c:33:c5:7d:be:9c:92:5e:94:7f:e8:07:84:fa:76:a8:
f6:ad:fd:7b:0d:f2:6b:22:17:27:9a:8e:57:f2:f1:0c:03:76:
df:d3:d9:a0:35:57:7e:96:35:f7:f7:b6:df:8c:69:50:b9:16:
f5:92:db:df:d0:a2:68:67:ba:e4:0e:a0:b8:21:5f:08:19:a5:
31:73:b1:1d:81:69:05:25:fd:8f:9c:37:f7:3b:d2:8d:9a:c3:
8e:31:8c:71:f7:1b:0f:3c:90:38:9e:3d:ee:b7:5a:9c:35:01:
61:bd:e6:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGW02yFlIQEmwLcWG1zOtwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODdkNGM5OGIzZWQ4YTcxN2M3ZDZlNDU1NTRkMzUzZWEz
ZTA1Y2EwHhcNMjUwNDMwMTEwMDUyWhcNMjUwNTAxMTEwMDUyWjAzMTEwLwYDVQQD
EyhkNDNhYzQ2MDZlMGYzYzdhYjQwYzM4Mjg5NDUwY2EwN2Y3N2MzYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyneRcOdduyRwyNueGnO311FimCqa
PoXjR3Hf+i7kmBDFQCGa0WO1WbhuEPq1I6izaCLoxhBOMvxm0uWw8JNKhx/CRUec
+G5m/vQiX9lCjG8lZQXo0bbcWxsPUovfCsYy8Bhk5jRoESKqROPSWU+UJU7vFp3i
UTEUp/wvorNefdpWRFWFqfq0GLfMisUtZCThAzotn90U33Sf9eiz8Q0EJGJnm+a7
lroHGwsWGmjZ5ZINP+xAiUxRiaM5KkUW7Yh1eWMSA4iKco5ib+9HnrIS4ZOO9H4M
eY3BlZHlhxynheRuAyJJoZdR+tEBzhfot5jnshJFF6MVtnDdIQIY2Yt2XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ6xGBuDzx6tAw4KJRQygf3fDvvMB8GA1UdIwQY
MBaAFNGH1MmLPtinF8fW5FVU01PqPgXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMt
NTAyOTY3ZGZjYzQ4LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMtNTAyOTY3ZGZjYzQ4
LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZuSF2Gz
MuvFKxhuWlhd0Pr1OuXlBi4qY2qvrz6HT8/6GIbqOnVaTKBzPjr8yqX7scZsYcAm
AFMp5k3AYJcWgbVd2KcmavSLhmYJvz3A+/39YMJJZmLFNsbi8nccsCXflN3cPk3r
nTEVQ+l7i1wMNOKmsX6mROzoxzVsgTt9t0vRkSlYtTsFNu+LAe9zOj5NNEiMM8V9
vpySXpR/6AeE+nao9q39ew3yayIXJ5qOV/LxDAN239PZoDVXfpY19/e234xpULkW
9ZLb39CiaGe65A6guCFfCBmlMXOxHYFpBSX9j5w39zvSjZrDjjGMcfcbDzyQOJ49
7rdanDUBYb3mHg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:50 2025 by rpki-client