Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: ctw7scj8tpqXJDAN25XD6yG4ViokkoVEcSCfj3khq8o=
Subject key identifier: 08:B1:A1:BE:F1:C3:75:0C:01:B4:33:F4:E2:6B:28:D9:A0:F1:8C:C1
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 01967BA0539A7F03652146C77375C54A9A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 094A
Signing time: Mon 28 Apr 2025 09:00:26 +0000
Manifest this update: Mon 28 Apr 2025 09:00:26 +0000
Manifest next update: Tue 29 Apr 2025 09:00:26 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: h36scHCtLGNSr+y06OTB+Z1jwsUv31jlA5RccpN/AvA=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:53:9a:7f:03:65:21:46:c7:73:75:c5:4a:9a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Apr 28 09:00:26 2025 GMT
Not After : Apr 29 09:00:26 2025 GMT
Subject: CN=08b1a1bef1c3750c01b433f4e26b28d9a0f18cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:ce:21:4b:21:39:0b:b3:4f:3d:57:38:3b:
1f:1a:14:0b:67:04:2f:8e:a7:db:3c:56:a7:d3:22:
94:09:77:42:93:dd:29:d5:f1:59:f7:9c:a0:19:ca:
36:34:af:b0:0c:a7:27:4b:20:c9:97:17:f3:7f:4e:
7f:59:ba:25:45:ab:e6:06:74:7a:e4:9d:18:4d:f8:
6d:35:1f:ba:f0:12:8d:83:e5:43:2c:72:72:0d:05:
c6:fc:2e:c2:92:81:5a:a2:5b:97:1c:32:5d:82:c1:
51:81:c4:28:88:d5:b7:42:ce:08:0b:53:1d:06:60:
d7:3a:5d:90:05:61:aa:0e:32:34:53:2b:ce:1b:e2:
c8:02:5a:64:60:82:a6:2f:d9:29:76:67:3a:1a:10:
c4:68:67:53:12:8c:8f:b6:c3:75:7e:62:55:cd:07:
91:16:fc:bf:cb:42:02:20:4a:c5:87:4c:58:f0:43:
14:46:e4:55:70:1b:67:86:a9:82:1e:c7:08:97:a4:
8f:09:ea:e7:6d:69:6c:ca:22:2f:91:17:dc:3f:9e:
ab:3a:3b:62:cd:d2:4f:ff:42:f4:37:24:6e:af:89:
28:24:87:31:2d:9c:d2:0a:11:ce:46:2b:18:06:42:
e1:20:f4:f3:e3:55:e9:ab:c8:97:6e:e4:df:15:41:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B1:A1:BE:F1:C3:75:0C:01:B4:33:F4:E2:6B:28:D9:A0:F1:8C:C1
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:05:8f:18:ea:c4:e7:78:06:31:45:9c:15:af:55:7a:5b:fc:
e7:ba:47:ad:61:53:c5:6f:3d:b9:d7:33:14:ff:0b:85:bd:a3:
31:cd:05:dc:26:a5:f0:9f:33:6a:ea:0d:e0:ec:fa:2a:c6:c0:
da:1a:20:94:9b:4f:f9:7f:55:49:ee:03:46:3b:62:ff:68:c3:
fa:87:a0:2c:2b:22:59:f1:ca:8d:71:54:0a:ff:10:71:bc:8a:
13:fb:eb:33:77:ae:5d:93:02:5c:e4:89:fb:6a:43:33:2f:43:
02:b3:70:12:38:24:24:ce:b5:59:83:99:5d:ca:97:b4:0b:99:
e1:93:0b:8f:d4:1c:b3:b7:f9:1e:54:ed:46:ae:8b:5b:d0:a6:
b9:9a:33:ed:d3:3b:19:8d:0d:a1:57:45:6f:1f:6a:06:45:4d:
1c:b7:46:f6:26:12:1c:27:c9:2c:84:d0:46:b9:ce:41:b8:37:
0e:d4:b8:13:43:05:8e:2e:48:3d:d9:73:0c:b5:65:9b:f1:b3:
87:64:53:c5:e0:91:c6:9f:2e:c1:11:4a:5b:3c:a0:c5:73:f9:
eb:9e:19:9e:4b:66:67:05:ea:98:26:02:f4:e6:65:9e:ba:b4:
b3:b1:03:5d:4f:81:c7:b5:2d:b2:50:7f:60:33:28:e1:84:65:
7f:7b:2a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oFOafwNlIUbHc3XFSpqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkODE4ZDkzZTY4NTcxZjk1YzQ1ZWJjMjgxNTk4YzdjOThm
MzI1NzcwHhcNMjUwNDI4MDkwMDI2WhcNMjUwNDI5MDkwMDI2WjAzMTEwLwYDVQQD
EygwOGIxYTFiZWYxYzM3NTBjMDFiNDMzZjRlMjZiMjhkOWEwZjE4Y2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpHOIUshOQuzTz1XODsfGhQLZwQv
jqfbPFan0yKUCXdCk90p1fFZ95ygGco2NK+wDKcnSyDJlxfzf05/WbolRavmBnR6
5J0YTfhtNR+68BKNg+VDLHJyDQXG/C7CkoFaoluXHDJdgsFRgcQoiNW3Qs4IC1Md
BmDXOl2QBWGqDjI0UyvOG+LIAlpkYIKmL9kpdmc6GhDEaGdTEoyPtsN1fmJVzQeR
Fvy/y0ICIErFh0xY8EMURuRVcBtnhqmCHscIl6SPCernbWlsyiIvkRfcP56rOjti
zdJP/0L0NyRur4koJIcxLZzSChHORisYBkLhIPTz41Xpq8iXbuTfFUF3owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAixob7xw3UMAbQz9OJrKNmg8YzBMB8GA1UdIwQY
MBaAFP2BjZPmhXH5XEXrwoFZjHyY8yV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zZDM3MGMtMzI5NS00MzA2LTk4ZGMt
ZjY5OGIwNWJhOTcxLzEvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8zZDM3MGMtMzI5NS00MzA2LTk4ZGMtZjY5OGIwNWJhOTcx
LzEvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAWPGOrE
53gGMUWcFa9Velv857pHrWFTxW89udczFP8Lhb2jMc0F3Cal8J8zauoN4Oz6KsbA
2hoglJtP+X9VSe4DRjti/2jD+oegLCsiWfHKjXFUCv8QcbyKE/vrM3euXZMCXOSJ
+2pDMy9DArNwEjgkJM61WYOZXcqXtAuZ4ZMLj9Qcs7f5HlTtRq6LW9CmuZoz7dM7
GY0NoVdFbx9qBkVNHLdG9iYSHCfJLITQRrnOQbg3DtS4E0MFji5IPdlzDLVlm/Gz
h2RTxeCRxp8uwRFKWzygxXP5654ZnktmZwXqmCYC9OZlnrq0s7EDXU+Bx7UtslB/
YDMo4YRlf3sqEw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:47:57 2025 by rpki-client